Re: IRRD & exceptions to RPKI-filtering

2024-02-12 Thread Job Snijders via NANOG
On Mon, Feb 12, 2024 at 05:01:35PM -0600, Richard Laager wrote: > On 2024-02-12 15:18, Job Snijders via NANOG wrote: > > On Mon, Feb 12, 2024 at 04:07:52PM -0500, Geoff Huston wrote: > > > I was making an observation that the presentation material was > > > referring to

Re: BGP Monitoring

2024-02-26 Thread Job Snijders via NANOG
On Mon, Feb 26, 2024 at 05:41:12PM +, Ray Orsini via NANOG wrote: > What tools are you using to monitor BGP announcements and route changes? The wonderful BGP.tools already has been mentioned a few times. Another excellent option is https://Packetvis.com, I find their RPKI monitoring approach

Re: Upcoming LACNIC RPKI Migration

2024-04-08 Thread Job Snijders via NANOG
Dear Carlos, LACNIC, and wider community, I very much appreciate how LACNIC worked with various stakeholders before publicly commiting to the schedule outlined in Carlos' email. >From what I can see, LACNIC pro-actively and properly tested their purported post-migration environment with very broa

FCC proposes Internet Routing Security Reporting Requirements

2024-05-15 Thread Job Snijders via NANOG
Dear all, FYI: https://docs.fcc.gov/public/attachments/DOC-402579A1.pdf Kind regards, Job

Re: Meet NANOG's New Executive Director! N91 Agenda is LIVE! + More

2024-05-16 Thread Job Snijders via NANOG
On Thu, May 16, 2024 at 02:23:52PM -0400, Nanog News wrote: > *Jonathan Black has been appointed NANOG Executive Director* > > In his new role, Jonathan will be responsible for the organization's > operational management and will collaborate with the NANOG Board to > refine, articulate, and implem

Re: Should FCC look at SS7 vulnerabilities or BGP vulnerabilities

2024-05-16 Thread Job Snijders via NANOG
On Thu, May 16, 2024 at 04:05:21PM -0400, Josh Luthman wrote: > Now do you think they're going to properly understand what an SS7 or > vulnerability is? The FCC organised several sessions (private and public) where they invited knowledgeable people from this community to help edifice them on what

Re: FCC proposes Internet Routing Security Reporting Requirements

2024-05-16 Thread Job Snijders via NANOG
Dear all, A fact sheet has now been published, with much more detail and considerations: https://docs.fcc.gov/public/attachments/DOC-402609A1.pdf This is a VERY interesting read! Kind regards, Job

Re: Should FCC look at SS7 vulnerabilities or BGP vulnerabilities

2024-05-16 Thread Job Snijders via NANOG
On Thu, May 16, 2024 at 07:17:37PM -0400, Brandon Martin wrote: > I suspect that's why we've had some success with getting BGP security > not just addressed in guidance but actually practically improved. Ben Cartwright-Cox's axiom (paraphrased): "The real reason the Internet works is that we want

Re: HE.net problem

2024-07-04 Thread Job Snijders via NANOG
On Fri, 5 Jul 2024 at 06:59, Randy Bush wrote: > not to distract from everyone diagnosing someone else's problem, but ... > > what foss dns monitoring tools do folk use to alert of > - iminent delegation expiry > - inconsistent service (lame, soa mismatches, ...) > - dnssec signing and time

Re: IRR mirrors de-sync from ARIN or irrd4 bug or ARIN streaming is broken?

2024-07-10 Thread Job Snijders via NANOG
Rubens, ARIN-NONAUTH was deprecated two years ago: https://www.arin.net/vault/announcements/20220404-irr/ Aliaksei, Indeed, it appears both NTT’s and RADB’s mirror instances are desynchronized in relationship to ARIN’s IRR. Both NTT and RADB should do a database reload to rectify the issue. Des

Re: IRR mirrors de-sync from ARIN or irrd4 bug or ARIN streaming is broken?

2024-07-10 Thread Job Snijders via NANOG
On Wed, Jul 10, 2024 at 09:37:22PM -0400, Aliaksei Sheshka wrote: > On Wed, Jul 10, 2024 at 9:26 PM Job Snijders via NANOG > wrote: > > > Indeed, it appears both NTT’s and RADB’s mirror instances are > > desynchronized in relationship to ARIN’s IRR. Both NTT and RADB >

Re: IRR mirrors de-sync from ARIN or irrd4 bug or ARIN streaming is broken?

2024-07-10 Thread Job Snijders via NANOG
On Wed, Jul 10, 2024 at 07:10:48PM -0400, Aliaksei Sheshka wrote: > nothing! I suspect the mirror is out of sync. > > Now NTT mirror: Seems reloading helped: $ date Thu Jul 11 03:50:22 UTC 2024 $ whois -h rr.ntt.net 199.52.73.0/24 route: 199.52.73.0/24 origin: AS132055 descr:

Re: A single place for information relating to the deployment and usage of RPKI

2024-07-29 Thread Job Snijders via NANOG
On Mon, Jul 29, 2024 at 04:32:40AM +, Christopher Hawker wrote: > When it comes to RPKI, its deployment and usage, there is a fair bit > of information available on the Internet. Each RIR has their own > guides for creating ROAs, each router vendor and developer has their > own guides for deplo

RFC 9234 route leak prevention in the wild!

2024-09-02 Thread Job Snijders via NANOG
Dear all, I'd like to share an update on RFC 9234 deployment. RFC 9234 titled "BGP Open Policy" aka the "Only-To-Customer" (OTC) BGP Path Attribute is an anti-route-leak mechanism which is *NOT* based on RPKI! (yes ... routing security is more than just RPKI! :-) The basic idea of 9234 is that BG

Re: Question about the use of NO_EXPORT in BGP route announcements

2024-09-24 Thread Job Snijders via NANOG
On Tue, Sep 24, 2024 at 02:57:21PM +0200, Ben Cartwright-Cox via NANOG wrote: > One example is if the customer is doing ROKI ROV validation (and their > upstream isn't) having a default would defeat ROV validation Ben, Perhaps I am misunderstanding you ... but I am not sure default routes 'defeat'

Re: Cloudflare's rpki.json file is missing IPv4 ROAs longer than /24

2024-09-18 Thread Job Snijders via NANOG
On Wed, Sep 18, 2024 at 07:33:37AM -0400, Steven Wallace wrote: > Internet2 uses Cloudflare’s https://rpki.cloudflare.com/rpki.json as > an alternate source for RPKI-ROA information. We recently discovered > that this file omits IPv4 ROAs longer than /24. It would be helpful if > it included all RO

Re: Implementing Decentralized RPKI with Blockchain Technology

2024-11-29 Thread Job Snijders via NANOG
On Mon, 18 Nov 2024 at 14:29, Matt Corallo wrote: > On 11/18/24 5:11 AM, Niels Bakker wrote: > > * na...@as397444.net (Matt Corallo) [Sun 17 Nov 2024, 20:44 CET]: > >> Apologies if it came across as insulting, indeed I wasn't spending my > time reading IETF mailing > >> lists in the early 2010s :

Re: Route optimization using GPUs?

2024-12-07 Thread Job Snijders via NANOG
On Fri, Dec 06, 2024 at 10:55:30PM +, Ryan Hamel wrote: > That means (at least for Noction) the operator has to go out of their > way to disable safety, so those that claim it has bad defaults, may > want to RTFM. While I appreciate various business drivers and motivations exist to deploy sof

<    1   2   3   4   5   6