Re: Arin taking down raking

2021-06-04 Thread Randy Bush
>   1) unreachable publication point / CA == 'ok, see you in 30 mins on my
> next cycle through the world' (no real changes)

yup.  much ado about nothing

>   b) revoking some portion of their claimed resources in various forms of
> CA == 'ideally a bunch of routes suddenly go unknown' == 'ok'
>  iii) making a bunch of validatable changes to ROA/certs/content == 'worse
> possible outcome, likely to make a bunch of routes invalid'

if the CA's pub point is available and the data have been modified,
which includes removal, then all sorts of wild things can happen.

but there is no need for arin to formally test that last as each of
the RIRs has untentionally done so at least once; sometimes for over
a day.

randy


Re: Arin taking down raking

2021-06-03 Thread Christopher Morrow
On Thu, Jun 3, 2021 at 4:53 PM TJ Trout  wrote:

> raking=rpki+spell check
>
>
:)

I think, since we don't realy know what arin's doing ...   we could
speculate :)
but:
  1) unreachable publication point / CA == 'ok, see you in 30 mins on my
next cycle through the world' (no real changes)
  b) revoking some portion of their claimed resources in various forms of
CA == 'ideally a bunch of routes suddenly go unknown' == 'ok'
 iii) making a bunch of validatable changes to ROA/certs/content == 'worse
possible outcome, likely to make a bunch of routes invalid'

In case of b or iii I'd expect we'll see some fun times in BGP, either 'a
bunch of re-announcement' or 'a bunch of withdrawals and disasters' :)

I'm sure we'll learn something though?


> On Thu, Jun 3, 2021, 1:32 PM Christopher Morrow 
> wrote:
>
>> what is raking?
>>
>> On Thu, Jun 3, 2021 at 3:29 PM John Alcock  wrote:
>>
>>> This looks special?
>>>
>>>
>>> https://www.bleepingcomputer.com/news/security/arin-will-take-down-its-rpki-for-30-minutes-to-test-your-bgp-routes/
>>>
>>


Re: Arin taking down raking

2021-06-03 Thread TJ Trout
raking=rpki+spell check

On Thu, Jun 3, 2021, 1:32 PM Christopher Morrow 
wrote:

> what is raking?
>
> On Thu, Jun 3, 2021 at 3:29 PM John Alcock  wrote:
>
>> This looks special?
>>
>>
>> https://www.bleepingcomputer.com/news/security/arin-will-take-down-its-rpki-for-30-minutes-to-test-your-bgp-routes/
>>
>


Re: Arin taking down raking

2021-06-03 Thread John Alcock
Damn autocorrect.  Rpki not raking.

On Thu, Jun 3, 2021 at 3:29 PM John Alcock  wrote:

> This looks special?
>
>
> https://www.bleepingcomputer.com/news/security/arin-will-take-down-its-rpki-for-30-minutes-to-test-your-bgp-routes/
>


Re: Arin taking down raking

2021-06-03 Thread Christopher Morrow
what is raking?

On Thu, Jun 3, 2021 at 3:29 PM John Alcock  wrote:

> This looks special?
>
>
> https://www.bleepingcomputer.com/news/security/arin-will-take-down-its-rpki-for-30-minutes-to-test-your-bgp-routes/
>


Arin taking down raking

2021-06-03 Thread John Alcock
This looks special?

https://www.bleepingcomputer.com/news/security/arin-will-take-down-its-rpki-for-30-minutes-to-test-your-bgp-routes/