[routing-wg] RIS dumps, 0.0.0.0/0 routes and RPKI validator 3
- Previous message (by thread): [routing-wg] RIS dumps, 0.0.0.0/0 routes and RPKI validator 3
- Next message (by thread): [routing-wg] RIS dumps, 0.0.0.0/0 routes and RPKI validator 3
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
nusenu
nusenu-lists at riseup.net
Sun Mar 17 09:23:00 CET 2019
Randy Bush: >> Are 0.0.0.0/0 routes filtered by RIPEstat but >> included in RIS dumps? >> Should rpki-validator filter them out? > > as the rirs each have a cert for 0/0, shouldn't the validator should be > prepared to evaluate 0/0? just to clarify: I didn't mean to say that validtor 3 isn't prepared to evaluate 0/0. The strange results originated from my tools that did not expect 0/0 routes in validator's BGP preview - but I will fix my side. And to clarify "strange results": I'm regularly looking at how we are doing with RPKI misconfigurations (RPKI Observatory) and the last output suggested that we are down to 0 unreachable RPKI IP address space because _every_ INVALID announcement had an alternative path via 0/0 from AS15576 which is obviously not correct. kind regards, nusenu -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 833 bytes Desc: OpenPGP digital signature URL: <https://lists.ripe.net/ripe/mail/archives/routing-wg/attachments/20190317/286c9ee5/attachment.sig>
- Previous message (by thread): [routing-wg] RIS dumps, 0.0.0.0/0 routes and RPKI validator 3
- Next message (by thread): [routing-wg] RIS dumps, 0.0.0.0/0 routes and RPKI validator 3
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]