[194489] in North American Network Operators' Group
Re: Financial services BGP hijack last week?
daemon@ATHENA.MIT.EDU (Randy Bush)
Tue May 2 20:47:13 2017
X-Original-To: nanog@nanog.org
Date: Wed, 03 May 2017 09:47:06 +0900
From: Randy Bush <randy@psg.com>
To: "Compton, Rich A" <Rich.Compton@charter.com>
In-Reply-To: <D52DFE59.A821D%rich.compton@charter.com>
Cc: North American Network Operators' Group <nanog@nanog.org>
Errors-To: nanog-bounces@nanog.org
> the use of rsync in RPKI is preventing a lot of large ISPs from
> implementing it (too difficult to provide redundancy with
> rsync).
uh, at least the DRL implementation supports caches feeding off of
caches in (if you are silly enough) an arbitrarily complex graph.
some years back, our research group actually used large clusters to
emulate large deployments with multi-level caching and found it quite
efficient. see
Olaf Maennel, Iain Phillips, Debbie Perouli, Randy Bush, Rob Austein,
and Askar Jaboldinov, "Towards a Framework for Evaluating BGP
Security," CSET'12, 5th Workshop on Cyber Security Experimentation
and Test.
https://www.usenix.org/system/files/conference/cset12/cset12-final19.pdf
randy