nanog mailing list archives

Re: deploying RPKI based Origin Validation


From: George Michaelson <ggm () algebras org>
Date: Tue, 17 Jul 2018 14:11:37 -0400

I don't want to over-state it, but 'number of prefices' slways feels
to me like a potential mis-measure. Not that you don't want to know
it, but % of announced space for a given origin-as feels like it might
be closer to the story, because there can be so many different ways to
announce it as dis- and super aggregates.

-G

On Tue, Jul 17, 2018 at 1:55 PM, Job Snijders <job () ntt net> wrote:
On Tue, Jul 17, 2018 at 01:27:09PM +0200, Mark Tinka wrote:
Markus Weber from KPN is generating a daily report here and drew
similar conclusions: https://as286.net/data/ana-invalids.txt Markus
scrapes all routes from the AS 286 PEs and marks the routes for
which no valid or unknown alternative exists as "altpfx=NONE".

Thanks. Protein.

So the numbers are not that far off from when I last checked this back
in 2016, i.e., less than 1% of the total IPv4 routing table.

Do you have numbers for IPv6, out of interest?

There are ~ 330 IPv6 invalids in the DFZ, and for 70 of those no
alternative covering prefix exists.

Kind regards,

Job


Current thread: