nanog mailing list archives
Re: Illegal usage of AS51888 (and PI 91.220.85.0/24) from AS42989 and AS57954 (in ukraine)
From: Nick Hilliard <nick () foobar org>
Date: Mon, 06 May 2013 21:41:58 +0100
On 06/05/2013 08:31, Adam Vitkovsky wrote:
Well you can always jus lower the preference for a particular prefix based on the roa state or roa missing. Than it is solely up to your customers whether they bother to register their prefixes to avoid hijacks or not, as you'll be ready on your part.
yep, you can depref stuff but it won't necessarily do what you want. E.g. if someone in Iran decides to announce a more-specific for some prefix in germany: https://twitter.com/bgpmon/status/330777020395040768 then the roa validation process would return "invalid". If you depref this, the more-specific will still provide the best path, so it's pretty useless. The only way to handle this is to drop roa-invalid paths completely, but it's not going to be possible to implement that as a general routing policy until the rpki data is pretty good quality overall. Nick
Current thread:
- Re: Illegal usage of AS51888 (and PI 91.220.85.0/24) from AS42989 and AS57954 (in ukraine), (continued)
- Re: Illegal usage of AS51888 (and PI 91.220.85.0/24) from AS42989 and AS57954 (in ukraine) Christopher Morrow (May 03)
- RE: Illegal usage of AS51888 (and PI 91.220.85.0/24) from AS42989 and AS57954 (in ukraine) Adam Vitkovsky (May 06)
- RE: Illegal usage of AS51888 (and PI 91.220.85.0/24) from AS42989 and AS57954 (in ukraine) Warren Bailey (May 06)
- Re: Illegal usage of AS51888 (and PI 91.220.85.0/24) from AS42989 and AS57954 (in ukraine) Valdis . Kletnieks (May 06)
- Re: Illegal usage of AS51888 (and PI 91.220.85.0/24) from AS42989 and AS57954 (in ukraine) Christopher Morrow (May 06)
- Re: Illegal usage of AS51888 (and PI 91.220.85.0/24) from AS42989 and AS57954 (in ukraine) Warren Bailey (May 06)
- Re: Illegal usage of AS51888 (and PI 91.220.85.0/24) from AS42989 and AS57954 (in ukraine) goemon (May 06)
- Re: Illegal usage of AS51888 (and PI 91.220.85.0/24) from AS42989 and AS57954 (in ukraine) Warren Bailey (May 06)
- Re: Illegal usage of AS51888 (and PI 91.220.85.0/24) from AS42989 and AS57954 (in ukraine) Christopher Morrow (May 06)
- Re: Illegal usage of AS51888 (and PI 91.220.85.0/24) from AS42989 and AS57954 (in ukraine) goemon (May 06)
- Re: Illegal usage of AS51888 (and PI 91.220.85.0/24) from AS42989 and AS57954 (in ukraine) Nick Hilliard (May 06)
- Re: Illegal usage of AS51888 (and PI 91.220.85.0/24) from AS42989 and AS57954 (in ukraine) Randy Bush (May 07)