Hello, It's worth having a read of this post from NANOG from just a couple weeks ago: https://mailman.nanog.org/pipermail/nanog/2021-April/213346.html
Here is the TL;DR snippet for those who want a summary without having to click links: RPKI Route Origin Validation (ROV) is incrementally deployed inside networks, and incrementally across the Default-Free Zone. This means right now (and for years to come), operators will see RPKI invalid routes spill through the cracks of the global routing system. This is expected and unavoidable. Regards, Philip From: AusNOG <[email protected]> On Behalf Of Aftab Siddiqui Sent: Thursday, 6 May 2021 3:34 PM To: [email protected] Subject: [AusNOG] RPKI ROV Inconsistencies Hi, Looking at the data by APNIC Labs, it shows that Telstra, Vocus, Superloop etc are not 100% dropping RPKI Invalid Routes. https://stats.labs.apnic.net/rpki/AU?o=cQPw7v1p1x0l1<https://aus01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fstats.labs.apnic.net%2Frpki%2FAU%3Fo%3DcQPw7v1p1x0l1&data=04%7C01%7Cphilip.loenneker%40tasmanet.com.au%7Cdf2c59f3e23c41d3b3b508d91050c165%7Cb53dc580ab7847208b30536f36d398ac%7C0%7C0%7C637558761298896369%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=H85VCxSyRofaSMylzmQIwC14ignMKWXaOq5%2BAPbaChc%3D&reserved=0> I don't receive any invalids transiting AS1221 (I have only 1 transit feed though) I don't think operators are selectively dropping invalids on some edges. Please correct me if I'm wrong. Regards, Aftab A. Siddiqui
_______________________________________________ AusNOG mailing list [email protected] http://lists.ausnog.net/mailman/listinfo/ausnog
