Re: [manrs-community] Implementing Decentralized RPKI with Blockchain Technology

2024-11-13 Thread Brandon Z.
that was blockchain last year is now AI. Decentralization can address this issue; it's not just a hype concept. Best, *Brandon Z.* HUIZE LTD www.huize.asia <https://huize.asia/>| www.ixp.su | Twitter This e-mail and any attachments or any reproduction of this e-mail in whatever manner a

Re: Implementing Decentralized RPKI with Blockchain Technology

2024-11-13 Thread Brandon Z.
wo lists. It's against the rules for NANOG and I presume it's against the rules for MANRS as well. Noticed that; sorry for posting twice as well. Best, *Brandon Z.* HUIZE LTD www.huize.asia <https://huize.asia/>| www.ixp.su | Twitter This e-mail and any attachments or any reproduct

Implementing Decentralized RPKI with Blockchain Technology

2024-11-13 Thread Brandon Z.
ownership, BGP could use peer count. If an IP resource is marked as valid by a majority of high-influence networks (with many peers), it could be trusted by the entire internet. Could this approach work? Perhaps there’s existing research on similar methods? *Brandon Z.* HUIZE LTD www.huize.asia <ht

Re: Hurricane Electric ISP custom routing via BGP communities

2024-11-13 Thread Brandon Z.
mentioned that their Layer 2 transport seems to be software-based, similar to using protocols like GRE. I believe they’re one of the few ISPs that support MTU 9000? *Brandon Z.* HUIZE LTD www.huize.asia <https://huize.asia/>| www.ixp.su | Twitter This e-mail and any attachments or any reproduct

Implementing Decentralized RPKI with Blockchain Technology

2024-11-13 Thread Brandon Z.
ownership, BGP could use peer count. If an IP resource is marked as valid by a majority of high-influence networks (with many peers), it could be trusted by the entire internet. Could this approach work? Perhaps there’s existing research on similar methods? *Brandon Z.* HUIZE LTD www.huize.asia <ht

Re: Implementing Decentralized RPKI with Blockchain Technology

2024-11-14 Thread Brandon Z.
Yeah ,that's what I meant. They can remove the certificate for the resource holder and sign a new certificate for these resources and set ROA for as0 only. Technically speaking. *Brandon Z.* HUIZE LTD www.huize.asia <https://huize.asia/>| www.ixp.su | Twitter This e-mail and any att

Re: Reliable GeoIP database

2025-02-05 Thread Brandon Z.
22 or 443 they would category as hosting. And maybe they have a node in different regions, and they use icmp to detect the location. But I think it is based on the BGP route mostly. *Brandon Z.* HUIZE LTD www.huize.asia <https://huize.asia/>| www.ixp.su | Twitter This e-mail and any attachm

Re: Implementing Decentralized RPKI with Blockchain Technology

2025-01-18 Thread Brandon Z.
I believe the simplest solution is to allow cross-regional issuance of trust certificates between RIRs. This way, as long as at least one of the ROA is marked as valid, even if one RIR sets a country's IPs as invalid due to political reasons, other RIRs can still maintain their IPs are with vaild R