nanog mailing list archives
Re: NTT->HE earlier today (~10am EDT)
From: Mark Tinka <mark.tinka () seacom mu>
Date: Wed, 1 Jul 2015 08:29:00 +0200
On 1/Jul/15 00:02, Tore Anderson wrote:
You're not mentioning RPKI here. Any particular reason why not? If I understand correctly, in today's leak the origin AS was changed/reset, so RPKI ought to have saved the day. (At least Grzegorz' day, considering that 33 of AS43996's prefixes are covered by ROAs.)
It certainly would have. BGPmon was awash with alarms about Origin Validation violations for our prefixes that were originated by the offending network yesterday. If HE implemented Origin Validation, they'd have dropped these routes assuming that was their policy. Mark.
Current thread:
- Re: NTT->HE earlier today (~10am EDT) Randy Bush (Jun 30)
- Re: NTT->HE earlier today (~10am EDT) Job Snijders (Jun 30)
- Re: NTT->HE earlier today (~10am EDT) Randy Bush (Jun 30)
- <Possible follow-ups>
- Re: NTT->HE earlier today (~10am EDT) Mark Tinka (Jun 30)
- Re: NTT->HE earlier today (~10am EDT) Job Snijders (Jun 30)