nanog mailing list archives
Re: "Is BGP safe yet?" test
From: Baldur Norddahl <baldur.norddahl () gmail com>
Date: Tue, 21 Apr 2020 00:13:39 +0200
On Mon, Apr 20, 2020 at 5:08 PM Andrey Kostin <ankost () podolsk ru> wrote:
Hi Nanog list, Would be interesting to hear your opinion on this: https://isbgpsafeyet.com/
It did push me to implement RPKI filtering. Turned out to be quite easy. Took me all of 1-2 hours to do. Just went straight to dropping invalids and tested on one transit and one IX routing server. When that did look just fine, I could proceed with the remaining sessions. As a bonus at least one of our transits now also implements RPKI filtering. That greatly increases the chance that we will retain a valid route during a prefix hijack attempt. Regards, Baldur
Current thread:
- Re: "Is BGP safe yet?" test, (continued)
- Re: "Is BGP safe yet?" test Mark Tinka (Apr 21)
- Re: "Is BGP safe yet?" test Andrey Kostin (Apr 20)
- Re: "Is BGP safe yet?" test Mark Tinka (Apr 20)
- Re: "Is BGP safe yet?" test Christopher Morrow (Apr 20)
- Re: "Is BGP safe yet?" test Alex Band (Apr 20)
- Re: "Is BGP safe yet?" test Christopher Morrow (Apr 20)
- Re: "Is BGP safe yet?" test jim deleskie (Apr 20)
- Re: "Is BGP safe yet?" test Denys Fedoryshchenko (Apr 20)
- Re: "Is BGP safe yet?" test Baldur Norddahl (Apr 20)
- Re: "Is BGP safe yet?" test Alex Band (Apr 21)
- Re: "Is BGP safe yet?" test Sander Steffann (Apr 21)
- Re: "Is BGP safe yet?" test Baldur Norddahl (Apr 21)
- Re: "Is BGP safe yet?" test Alex Band (Apr 21)
- Re: "Is BGP safe yet?" test Matt Corallo via NANOG (Apr 21)
- Re: "Is BGP safe yet?" test Christopher Morrow (Apr 21)