Re: Router ID on IPv6-Only

2022-09-09 Thread Saku Ytti
On Fri, 9 Sept 2022 at 09:31, Crist Clark wrote: > As I said in the original email, I realize router IDs just need to be > unique in > an AS. We could have done random ones with IPv4, but using a well chosen In some far future this will be true. We meet eBGP speakers across the world, and not ev

ROA Will Expire Soon - ARIN

2022-09-09 Thread Terrance Devor
Can someone from ARIN please reach out to me. We don't want the ROA to expire... Kind Regards, Terrance

Re: ROA Will Expire Soon - ARIN

2022-09-09 Thread John Sweeting
You can contact the ARIN Helpdesk at +1-703-227-0660. Someone will also be sending you an email off list. Sent from my iPhone > On Sep 9, 2022, at 8:01 AM, Terrance Devor wrote: > >  > Can someone from ARIN please reach out to me. We don't want the ROA to > expire... > > Kind Regards, > Te

Re: ROA Will Expire Soon - ARIN

2022-09-09 Thread Ca By
On Fri, Sep 9, 2022 at 5:21 AM John Sweeting wrote: > You can contact the ARIN Helpdesk at +1-703-227-0660. Someone will also be > sending you an email off list. > John Where is ARIN’s documented procedure for how hosted ROAs handle renewal prior to expiration ? > Sent from my iPhone > > > O

Re: ROA Will Expire Soon - ARIN

2022-09-09 Thread Peter Potvin via NANOG
I have been wondering the same thing when it comes to how ARIN's hosted RPKI ROAs handle renewal. Do they automatically renew by default, do we need to delete and re-create the ROA or do we have to reach out to the helpdesk every time one is due to expire? ~ Peter On Fri., Sep. 9, 2022, 10:12 a.m

Re: ROA Will Expire Soon - ARIN

2022-09-09 Thread TJ Trout
Just make a new roa for the same prefixes, you don't even need to delete the old one. On Fri, Sep 9, 2022, 7:18 AM Peter Potvin via NANOG wrote: > I have been wondering the same thing when it comes to how ARIN's hosted > RPKI ROAs handle renewal. Do they automatically renew by default, do we > n

Re: ROA Will Expire Soon - ARIN

2022-09-09 Thread TJ Trout
And create the new roa for ten or whatever the max time is On Fri, Sep 9, 2022, 7:28 AM TJ Trout wrote: > Just make a new roa for the same prefixes, you don't even need to delete > the old one. > > On Fri, Sep 9, 2022, 7:18 AM Peter Potvin via NANOG > wrote: > >> I have been wondering the same

Re: ROA Will Expire Soon - ARIN

2022-09-09 Thread Brad Gorman
A message is sent to points of contact of an Org one month before expiration of a ROA in the ARIN repository. At any time prior to the ROA expiry, a new (duplicate) ROA can be created for the same resources with a new expiry date in the future. The soon to expire ROA can be deleted once the new

Re: ROA Will Expire Soon - ARIN

2022-09-09 Thread Brad Gorman
Peter, ROAs created using ARIN’s Hosted RPKI service do not auto-renew. A point of contact (admin,tech,routing) linked to the organization can create and delete ROAs. This does not require contacting the ARIN Help Desk. Best regards, Brad Gorman Sr Product Owner, Routing Security American Re

Re: ROA Will Expire Soon - ARIN

2022-09-09 Thread Ca By
On Fri, Sep 9, 2022 at 9:04 AM Brad Gorman wrote: > A message is sent to points of contact of an Org one month before > expiration of a ROA in the ARIN repository. At any time prior to the ROA > expiry, a new (duplicate) ROA can be created for the same resources with a > new expiry date in the f

Re: rsync CVE-2022-29154 and RPKI Validation

2022-09-09 Thread Matt Corallo
On 9/9/22 2:36 AM, Vincent Bernat wrote: The attacker is still limited to the target directory. The attacker can send files that were excluded or not requested, but they still end up in the target directory. RPKI validators download stuff in a dedicated download directory Ah, okay, thanks,

Re: rsync CVE-2022-29154 and RPKI Validation

2022-09-09 Thread Vincent Bernat
On 2022-09-09 19:36, Matt Corallo wrote: The attacker is still limited to the target directory. The attacker can send files that were excluded or not requested, but they still end up in the target directory. RPKI validators download stuff in a dedicated download directory Ah, okay, thanks, i

Weekly Global IPv4 Routing Table Report

2022-09-09 Thread Routing Table Analysis Role Account
This is an automated weekly mailing describing the state of the Global IPv4 Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-st...

Re: rsync CVE-2022-29154 and RPKI Validation

2022-09-09 Thread Matt Corallo
On 9/9/22 1:58 PM, Vincent Bernat wrote: On 2022-09-09 19:36, Matt Corallo wrote: The attacker is still limited to the target directory. The attacker can send files that were excluded or not requested, but they still end up in the target directory. RPKI validators download stuff in a dedica

Re: ROA Will Expire Soon - ARIN

2022-09-09 Thread Paul Emmons
In our experience, I think, we do a 24 month rpki cert tied the key shared with ARIN. You simply create a new rpki cert in the ARIN hosted service. Due operational reasons we will delete an old cert a month after publishing the new cert just to keep things clean. We don't have a lot of space turno

Re: rsync and RPKI Validation

2022-09-09 Thread Geoff Huston
> On 9 Sep 2022, at 4:36 pm, Vincent Bernat wrote: > > On 2022-09-09 04:56, Matt Corallo wrote: >> Has anyone done an analysis of the rsync CVE-2022-29154 (which "allows >> malicious remote servers to write arbitrary files inside the directories of >> connecting peers") and its potential impact