Re: [proj-bgp] adding graphs for actually unreachable RPKI INVALID prefixes to RPKI Monitor?

Unfortunately, we have a > bit of a bureaucracy to deploying public facing systems. So I would > guess it will take ~end of March to get it on-line. I'm curious, are there any updates on this topic? thanks! nusenu -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu sign

Re: [proj-bgp] adding graphs for actually unreachable RPKI INVALID prefixes to RPKI Monitor?

Unfortunately, we have a > bit of a bureaucracy to deploying public facing systems. So I would > guess it will take ~end of March to get it on-line. thanks for the status update! -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu signature.asc Description: OpenPGP digital signature

Re: [proj-bgp] adding graphs for actually unreachable RPKI INVALID prefixes to RPKI Monitor?

to publish the new version of the NIST Monitor? thanks, nusenu -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu signature.asc Description: OpenPGP digital signature

US based networks suffering from RPKI misconfigurations

ROV) than you can ignore this email (and maybe drop me an email). some more context: https://medium.com/@nusenu/where-are-rpki-unreachable-networks-located-65c7a0bae0f8 kind regards, nusenu amount of RPKI INVALID and unreachable /24 blocks per ASN in US: (data as of 2018-09-26 19:42 UTC

the prefixes that wont be able to reach Cloudflare by the end of the year (unless RPKI ROAs are fixed)

100) https://bgp.he.net/net/66.85.45.0/24 (AS8100) https://bgp.he.net/net/206.53.202.0/24 (AS11492) that is probably supposed to be invalid (DE-CIX Dallas peering LAN? :) [1] https://twitter.com/Jerome_UZ/status/1042433414371205120 -- https://twitter.com/nusenu_ https://mastodon.soci

Re: Reaching out to ARIN members about their RPKI INVALID prefixes

overwhelming the help desk, these ~30 organizations could be notified one at a time (i.e. notify 5 organizations per week and be done in a ~month), I assume that is a manageable amount of tickets per day. -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu signature.asc Description: OpenPGP digital signature

Re: Reaching out to ARIN members about their RPKI INVALID prefixes

g it would certainly be more efficient ;) -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu signature.asc Description: OpenPGP digital signature

Re: Reaching out to ARIN members about their RPKI INVALID prefixes

fer from stale ROAs. Even if one dislikes RPKI entirely the opinion could still be "yes notifying those parties makes sense to restore reachability". -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu signature.asc Description: OpenPGP digital signature

Re: Reaching out to ARIN members about their RPKI INVALID prefixes

geable amount of organizations to > notify in the ARIN region. correction: in the ARIN region there are just about 30 organizations to contact (~80 was for APNIC) -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu signature.asc Description: OpenPGP digital signature

Re: Reaching out to ARIN members about their RPKI INVALID prefixes

e ARIN region. -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu signature.asc Description: OpenPGP digital signature

Re: Reaching out to ARIN members about their RPKI INVALID prefixes

er since > every RIR would only have to take care of their own members. [...] [1] https://medium.com/@nusenu/towards-cleaning-up-rpki-invalids-d69b03ab8a8c > Why can't (or why isn't) this something that 'many' > monitoring/alerting companies/orgs are offering? There are companies offeri

Reaching out to ARIN members about their RPKI INVALID prefixes

. looking forward to receiving your feedback! kind regards, nusenu [1] https://medium.com/@nusenu/towards-cleaning-up-rpki-invalids-d69b03ab8a8c John Curran wrote: > Subject: Reaching out to ARIN members about their RPKI INVALID prefixes > > Nusenu - > > Thank you for wri

adding graphs for actually unreachable RPKI INVALID prefixes to RPKI Monitor?

the RPKI validator screenshots): https://medium.com/@nusenu/towards-cleaning-up-rpki-invalids-d69b03ab8a8c kind regards, nusenu -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu signature.asc Description: OpenPGP digital signature

RIR outreach program about INVALIDs (was: deploying RPKI based Origin Validation)

efficient way I was wondering if you proceeded with this and if so what reaction you got from the RIRs. thanks! nusenu [1] https://mailman.nanog.org/pipermail/nanog/2018-July/096202.html [2] https://medium.com/@nusenu/towards-cleaning-up-rpki-invalids-d69b03ab8a8c -- https://twitter.co

Re: Best practices on logical separation of abuse@ vs dmca@ role inboxes

o account when they send their automated emails? Does creating a record there actually result in a substantial fraction of DMCA emails being routed to the email address given there? -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu signature.asc Description: OpenPGP digital signature