nanog mailing list archives

Re: ARIN and the RPKI (was Re: AltDB?)


From: "Dobbins, Roland" <rdobbins () arbor net>
Date: Thu, 6 Jan 2011 04:30:45 +0000


On Jan 6, 2011, at 11:16 AM, Randy Bush wrote:

actually, the formal rpki-based origin-validation stuff is measured to take *less* cpu, a lot less, than ACLs

On the platforms which really matter in terms of rPKI, ACLs are handled in hardware, so this is pretty much a wash. 

Concur on all the other points, however.

------------------------------------------------------------------------
Roland Dobbins <rdobbins () arbor net> // <http://www.arbornetworks.com>

Most software today is very much like an Egyptian pyramid, with millions
of bricks piled on top of each other, with no structural integrity, but
just done by brute force and thousands of slaves.

                          -- Alan Kay



Current thread: