nanog mailing list archives

RE: Hurricane Electric has reached 0 RPKI INVALIDs in our routing table


From: Tim Warnock <timoid () timoid org>
Date: Wed, 17 Jun 2020 19:16:23 +0000

On 17/Jun/20 16:25, Jon Lewis wrote:
The flip side of this though is that every time an IP space owner
publishes an ROA for an aggregate IP block and overlooks the fact that
they have customers BGP originating a subnet of the aggregate with an
ASN not permitted by an ROA, HE has "less than a full table".  :(

This is a known business use-case and it's incumbent upon the address
and AS holders to co-ordinate this.

We dropped some prefixes due to this in October of last year. Once we
raised the issue with the remote network, it was fixed in 30 minutes.

Mark.

How did you know? Is there some monitoring system available to let you know or do you have your own?
-Tim

Current thread: