[170671] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: BGPMON Alert Questions

daemon@ATHENA.MIT.EDU (Mark Tinka)
Thu Apr 3 08:32:27 2014

From: Mark Tinka <mark.tinka@seacom.mu>
To: nanog@nanog.org
Date: Thu, 3 Apr 2014 14:31:51 +0200
In-Reply-To: <m261mrz2gb.wl%randy@psg.com>
Reply-To: mark.tinka@seacom.mu
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

--nextPart2895931.3eKGu2Xzju
Content-Type: Text/Plain;
  charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

On Thursday, April 03, 2014 02:22:44 AM Randy Bush wrote:

> and, btw, how many of those whose prefixes were
> mis-originated had registered those prefixes in the
> rpki?

It is probably a bit of a hammer at this stage, but we are=20
in limited deployment of dropping all Invalids using RPKI.

We shall be rolling out, network-wide, in 2014, where all=20
Invalids are dropped. At this stage, short of a mis-
origination, it's mostly longer prefixes of an aggregate=20
that are not ROA'd.

I was asleep when Indosat was mis-originating, but it'd have=20
been nice to see what our test-bed was doing to any Indosat-
injected prefixes that have ROA's.

Mark.

--nextPart2895931.3eKGu2Xzju
Content-Type: application/pgp-signature; name=signature.asc 
Content-Description: This is a digitally signed message part.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)
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=jApI
-----END PGP SIGNATURE-----

--nextPart2895931.3eKGu2Xzju--


home help back first fref pref prev next nref lref last post