nanog mailing list archives

Re: Reactive RPKI ROV (Was: Hurricane Electric has reached 0 RPKI INVALIDs)


From: Baldur Norddahl <baldur.norddahl () gmail com>
Date: Wed, 17 Jun 2020 13:42:36 +0200

Lets say someone makes an announcement that creates a RPKI invalid and it is determined to be a mistake. They then go back and add ROA objects to fix the problem. With this reactive RPKI approach then continue to block the route because filters where already generated and pushed out to routers? Or in other words, if the system can insert the filter in less than 60 seconds, how long does it take to get rid of the filter again when someone publish valid a ROA ?

Regards,

Baldur


Current thread: