Re: BGPMON Alert Questions

[Jac Kloots <Jac.Kloots () surfnet nl>]

Hi Mark,

On Thu, 3 Apr 2014, Mark Tinka wrote:

> On Thursday, April 03, 2014 02:22:44 AM Randy Bush wrote:
>
> > and, btw, how many of those whose prefixes were
> > mis-originated had registered those prefixes in the
> > rpki?
>
> It is probably a bit of a hammer at this stage, but we are
> in limited deployment of dropping all Invalids using RPKI.
>
> We shall be rolling out, network-wide, in 2014, where all
> Invalids are dropped. At this stage, short of a mis-
> origination, it's mostly longer prefixes of an aggregate
> that are not ROA'd.

Great to hear more people are planning on dropping all Invalids.

We (SURFnet, AS1103) are in the same position and I wrote an article about 
the evaluation we did before deciding on dropping invalids 
(https://blog.surfnet.nl/?p=3159)

I would encourage more people to do a similar analysis and start using a 
RPKI routing policy and start dropping invalids.

Only when people start using RPKI the way it is proposted to 
(http://tools.ietf.org/html/rfc7115)  we _all_ can benefit from this.

Regards,

Jac

--
Jac Kloots
Network Services
SURFnet bv