RIPE Labs article on the Duke/RIPE NCC BGP experiment

2010-08-31 Thread Andrei Robachevsky
or comments regarding this incident, please contact n...@ripe.net. Regards, Andrei Robachevsky Chief Technical Officer, RIPE NCC

Routing Resilience Survey (a project coordinated by ISOC)

2013-11-18 Thread Andrei Robachevsky
anonymized. This is a 6-month effort. After the project is successfully completed we will publish a report presenting the findings, statistical data and trends. We'll also be happy to present the results at one of NANOG meetings. We hope you will join this effort. Thanks, Andrei Robachevsky Internet

Re: BCP38.info

2014-01-29 Thread Andrei Robachevsky
Jared Mauch wrote on 1/28/14 10:11 PM: 192.168.0.1 has a rule that says send UDP/53 packets I process to 172.16.0.1. Since i'm outside it's NAT, the rule ends up taking the source IP, which isn't part of it's NAT set, and ends up copying my source IP into the packet, then forwards it to

Re: BCP38.info

2014-01-29 Thread Andrei Robachevsky
Hi, Jared Mauch wrote on 1/28/14 9:03 PM: I'd rather share some data and how others can observe this to determine how we can approach a fix. Someone spoofing your IP address out some other carrier is something you may be interested to know about, even if you have a non-spoofing network.

Feedback Requested: Routing Resilience Manifesto

2014-07-02 Thread Andrei Robachevsky
, and now we open it for a more detailed review. Please note that this is very much a work in progress. Please review the document and provide your feedback and text suggestions online or via routingmanife...@isoc.org by 31 August 2014. Regards, Andrei Robachevsky Internet Society

Re: large BCP38 compliance testing

2014-10-02 Thread Andrei Robachevsky
Nick Hilliard wrote on 02/10/14 12:28: This shouldn't stop us from finding, then naming and shaming operators who don't use bcp38, but we also need to maintain realistic expectations about how successful it's going to be. This feels indeed like boiling the ocean, but what are the alternatives,

Re: large BCP38 compliance testing

2014-10-03 Thread Andrei Robachevsky
Rich Kulawiec wrote on 03/10/14 00:47: We've been down this road before. Unless there is prompt, concerted, collective action (as there was AGIS) then there is zero reason for those behind such operations to do anything but keep collecting dirty money. There is, please join:

How can CDN and Cloud providers effectively contribute to routing security?

2019-11-12 Thread Andrei Robachevsky
Hello, Following up on my lightning talk at NANOG77 (https://pc.nanog.org/static/published/meetings/NANOG77/2147/20191030_Robachevsky_Lightning_Talk_Next_v1.pdf), here is the draft MANRS action set for CDN and Cloud operators: https://www.manrs.org/cdn-cloud-providers/cfc-draft-action-set/ Your

Call for Working Group Participation: MANRS+

2022-09-13 Thread Andrei Robachevsky via NANOG
Hi, MANRS is looking for volunteers to join a new working group to explore the idea of creating a second, elevated tier of MANRS participation for organizations that comply with more stringent requirements and auditing. We’re calling this MANRS+ at the moment, though that’s only a working