Re: Re: Why do ROV-ASes announce some invalid route?

2022-11-13 Thread Christopher Morrow
On Fri, Nov 11, 2022 at 8:49 AM Lukas Tribus wrote: > > On Fri, 11 Nov 2022 at 14:00, Christopher Morrow > wrote: > > Also, also, possibly the output path on the session(s) here is not > > filtering in an OV fashion. > > ROV belongs on the input path, let's not ROV on the output towards >

RE: Why do ROV-ASes announce some invalid route?

2022-11-12 Thread Zhuangshunwan via NANOG
anog@nanog.org > Subject: Re: Why do ROV-ASes announce some invalid route? > > > ROV belongs on the input path, let's not ROV on the output towards > > customers / route collectors. > > 8893 > > randy

Re: Why do ROV-ASes announce some invalid route?

2022-11-11 Thread Randy Bush
> ROV belongs on the input path, let's not ROV on the output towards > customers / route collectors. 8893 randy

Re: Re: Why do ROV-ASes announce some invalid route?

2022-11-11 Thread Lukas Tribus
On Fri, 11 Nov 2022 at 14:00, Christopher Morrow wrote: > Also, also, possibly the output path on the session(s) here is not > filtering in an OV fashion. ROV belongs on the input path, let's not ROV on the output towards customers / route collectors. Announcing bigger, ROV valid/unkown

Re: Re: Why do ROV-ASes announce some invalid route?

2022-11-11 Thread Christopher Morrow
There are 2 sides to the bgp conversation for any ASN, and then really 4 sides. customer -> RAS -> peer (settlement-free) peer(sfp) -> RAS -> customer customer -> ras -> transit transit -> ras -> customer Depending on the RAS's capabilities or status in their journey to 'fully RAS',

Re: Re: Why do ROV-ASes announce some invalid route?

2022-11-10 Thread 孙乐童
Hello Job, Thank you very much for your reply! I got that no AS can actually filter all the invalids. Yet I was trying to figure out why we couldn't see reasonable amount of withdrawals from AS6939 about invalid prefixes, as they explained how they implement ROV

Re: Why do ROV-ASes announce some invalid route?

2022-11-07 Thread Randy Bush
aside from technical reasons for an ROV-supporting AS (RAS) to announce an ROV invalid prefix, there is an administrative one. the RAS's customers *pay* RAS to announce the customers' prefixes. so RAS is configured to propagate their customers' announcements without dropping invalids. randy

Re: Why do ROV-ASes announce some invalid route?

2022-11-07 Thread Job Snijders via NANOG
Dear 孙乐童, On Mon, Nov 07, 2022 at 08:40:57PM +0800, 孙乐童 wrote: > We learned from Cloudflare's https://isbgpsafeyet.com/ that some ASes > have deployed RPKI Origin Validation (ROV). However, we downloaded BGP > collection data from RouteViews and RipeRis platforms and found that > some ROV-ASes