nanog mailing list archives

Re: NTT/AS2914 enabled RPKI OV 'invalid = reject' EBGP policies


From: Dorian Kim <dorian () blackrose org>
Date: Tue, 31 Mar 2020 09:21:02 -0400


On Mar 31, 2020, at 7:19 AM, Mark Tinka <mark.tinka () seacom mu> wrote:



On 26/Mar/20 02:50, Job Snijders wrote:
Dear group,

Exciting news! Today NTT's Global IP Network (AS 2914) enabled RPKI
based BGP Origin Validation on virtually all EBGP sessions, both
customer and peering edge. This change positively impacts the Internet
routing system.

Good man. The club is growing :-).

Quick one - do you have ROV on any IOS or IOS XE-based boxes? We've had
to walk back the few we did in recent weeks; the thing is just totally
broken there.

Mark,

Unfortunately we don’t have any testing done or experience with RPKI on XE or Classic boxes as we don’t have any 
deployed outside of OOB infrastructure.

-dorian

Current thread: