Re: IRRD & exceptions to RPKI-filtering

2024-02-13 Thread Geoff Huston
> On 12 Feb 2024, at 6:01 pm, Richard Laager wrote: > > On 2024-02-12 15:18, Job Snijders via NANOG wrote: >> On Mon, Feb 12, 2024 at 04:07:52PM -0500, Geoff Huston wrote: >>> I was making an observation that the presentation material was >>> referring to "RPKI-Invalid" while their

Re: IRRD & exceptions to RPKI-filtering

2024-02-12 Thread Geoff Huston
> On 12 Feb 2024, at 3:14 pm, Job Snijders via NANOG wrote: > > Dear all, > > At NANOG 90, Merit presented on their IRRd v4 deployment. At the > microphone Geoff Huston raised a comment which I interpreted as: > >"Can an exception be made for my res

Re: IRRD & exceptions to RPKI-filtering

2024-02-12 Thread Richard Laager
On 2024-02-12 18:12, Job Snijders wrote: On Mon, Feb 12, 2024 at 05:01:35PM -0600, Richard Laager wrote: On 2024-02-12 15:18, Job Snijders via NANOG wrote: On Mon, Feb 12, 2024 at 04:07:52PM -0500, Geoff Huston wrote: I was making an observation that the presentation material was referring to

Re: IRRD & exceptions to RPKI-filtering

2024-02-12 Thread Job Snijders via NANOG
has been transposed to IRR data as well. For example, in 2018 RIPE NCC started using RPKI data to untangle and cleanup the "RIPE-NONAUTH" IRR database, as per policy https://www.ripe.net/publications/docs/ripe-731/ And the NTT Global IP Network (GIN/AS2914) used the same methodology on its IR

Re: IRRD & exceptions to RPKI-filtering

2024-02-12 Thread Richard Laager
On 2024-02-12 15:18, Job Snijders via NANOG wrote: On Mon, Feb 12, 2024 at 04:07:52PM -0500, Geoff Huston wrote: I was making an observation that the presentation material was referring to "RPKI-Invalid" while their implementation was using "ROA-Invalid" There is a difference between these two

Re: IRRD & exceptions to RPKI-filtering

2024-02-12 Thread Job Snijders via NANOG
On Mon, Feb 12, 2024 at 04:07:52PM -0500, Geoff Huston wrote: > > On 12 Feb 2024, at 3:14 pm, Job Snijders via NANOG wrote: > > At NANOG 90, Merit presented on their IRRd v4 deployment. At the > > microphone Geoff Huston raised a comment which I interpreted as: > >

IRRD & exceptions to RPKI-filtering

2024-02-12 Thread Job Snijders via NANOG
Dear all, At NANOG 90, Merit presented on their IRRd v4 deployment. At the microphone Geoff Huston raised a comment which I interpreted as: "Can an exception be made for my research prefixes?" There are two sides to this: INSERTING RPKI-invalid route/rout

Re: irrd or ...?

2022-06-20 Thread Job Snijders via NANOG
o be clearer, i now run a 4GB VM with irrd2, rancid, nfsen, and a wiki. > so i will stick with irrd2. Are you looking for to set up just an “authoritative IRR source” (RGNET?), or to set up an instance which mirrors all the world’s IRRs? The latter option is quite memory heavy. If mirrorin

Re: irrd or ...?

2022-06-20 Thread Forrest Christian (List Account)
I've seen recently a trend where code is optimized for run time and memory consumption is a distant second consideration. I think this is a side-effect of the growth of big data, where you really do have to worry about your run time. Unfortunately this seems to have creeped into a lot of other

Re: irrd or ...?

2022-06-19 Thread Rubens Kuhl
; to be clearer, i now run a 4GB VM with irrd2, rancid, nfsen, and a wiki. > so i will stick with irrd2. Yeap, we tried installing IRRd 4 in a similar VM that used to run TC and it was a catastrophic failure. Although it was 4.0beta2 and some changes we are made since (IRRd4 is now at 4.2.4), I don't think they were enough to change the outcome. Rubens

Re: irrd or ...?

2022-06-19 Thread Randy Bush
>> It will also take much less RAM if you turn RPKI validation off. > > oh dear ghod. do i need to turn the dancing donkeys off too? > > "Make each program do one thing well. To do a new job, build afresh > rather than complicate old programs by adding new "features"." > -- ken thompson - unix

Re: irrd or ...?

2022-06-18 Thread Randy Bush
> It will also take much less RAM if you turn RPKI validation off. oh dear ghod. do i need to turn the dancing donkeys off too? "Make each program do one thing well. To do a new job, build afresh rather than complicate old programs by adding new "features"." -- ken thompson - unix philosophy a

Re: irrd or ...?

2022-06-18 Thread Rubens Kuhl
On Sat, Jun 18, 2022 at 3:22 PM Randy Bush wrote: > > > At least 32GB RAM It runs fine now with 16GB RAM, after a code change. It will also take much less RAM if you turn RPKI validation off. This is from TC at this moment, which mirrors 5.5 million records from other IRRs and do RPKI

Re: irrd or ...?

2022-06-18 Thread Randy Bush
> At least 32GB RAM > At least 4 CPU cores > At least 150GB of disk space (SSD recommended) h

Re: irrd or ...?

2022-06-18 Thread Niels Bakker
* ra...@psg.com (Randy Bush) [Sat 18 Jun 2022, 19:39 CEST]: i have been running irrd for some years. am about to dump that (virtual) server and move from freebsd to bullseye. is there anything more modern, and _simpler_, than irrd at which i should take a look? What are you running irrd

Re: irrd or ...?

2022-06-18 Thread Rubens Kuhl
On Sat, Jun 18, 2022 at 2:37 PM Randy Bush wrote: > > i have been running irrd for some years. am about to dump that > (virtual) server and move from freebsd to bullseye. is there > anything more modern, and _simpler_, than irrd at which i should > take a look? While IRRd4 fa

irrd or ...?

2022-06-18 Thread Randy Bush
i have been running irrd for some years. am about to dump that (virtual) server and move from freebsd to bullseye. is there anything more modern, and _simpler_, than irrd at which i should take a look? randy

Re: irrd 4.1.2 deployed at NTT

2021-06-11 Thread Randy Bush
>> i am sure there are more things to do; and hope that wiser folk will >> expand, comment, and correct. > > Stay far away from AS0... one of 42 ways, invented by clever people, to shoot yourself in the foot randy

Re: irrd 4.1.2 deployed at NTT

2021-06-11 Thread Mark Tinka
On 6/10/21 20:08, Randy Bush wrote: i am sure there are more things to do; and hope that wiser folk will expand, comment, and correct. Stay far away from AS0... Mark.

Re: irrd 4.1.2 deployed at NTT

2021-06-10 Thread Randy Bush
cts. Existing RPKI ROAs help > prevent future creation of unauthorized IRR objects. cool! what stands between my current world and when i can remove my irrd instance and when i can remove (which) objects from the ripe whois? < psa > 15-20 years back, when designing early rpki depl

irrd 4.1.2 deployed at NTT

2021-06-09 Thread Troy Boudreau
Dear all, I am Troy from NTT's Global IP Network IRR team. Today we upgraded rr.ntt.net to IRRd 4.1.2! This marks the completion of a multi-year initiative to seamlessly integrate IRR and RPKI. While this version might not seem remarkable, this change means that NTT's IRR mirror service

Re: [nanog] TC x IRRd 4.2

2021-04-28 Thread Job Snijders via NANOG
Dear Ruben, all, On Tue, Apr 27, 2021 at 10:18:32PM -0300, Rubens Kuhl wrote: > TC IRR, an IRR operator focused on Brazilian networks, just changed to > IRRd 4.2. The new version allowed TC to deploy RPKI validation > (thanks NTT for sponsoring that development) and expose HTTPS &g

TC x IRRd 4.2

2021-04-27 Thread Rubens Kuhl
Hi all. TC IRR, an IRR operator focused on Brazilian networks, just changed to IRRd 4.2. The new version allowed TC to deploy RPKI validation (thanks NTT for sponsoring that development) and expose HTTPS endpoints for WHOIS and submission that we hope will foster innovation around the database

Re: Pinging Lumen and RADB (was: Notice to IRRd operators)

2021-04-14 Thread Rubens Kuhl
, > Rubens (on behalf of TC) > > > On Sat, Apr 10, 2021 at 4:27 PM Rubens Kuhl wrote: > >> >> Hi there. >> TC, a large IRR database focused on Brazilian networks, just changed its >> IP addresses. In most IRRd implementations it's necessary to sighup the >>

Pinging Lumen and RADB (was: Notice to IRRd operators)

2021-04-12 Thread Rubens Kuhl
act on it, it would be nice. Thanks, Rubens (on behalf of TC) On Sat, Apr 10, 2021 at 4:27 PM Rubens Kuhl wrote: > > Hi there. > TC, a large IRR database focused on Brazilian networks, just changed its > IP addresses. In most IRRd implementations it's necessary to sighup the >

Notice to IRRd operators

2021-04-10 Thread Rubens Kuhl
Hi there. TC, a large IRR database focused on Brazilian networks, just changed its IP addresses. In most IRRd implementations it's necessary to sighup the daemon to move to the new IP addresses, so we kindly ask those running public and private IRR instances to sighup in order to move to the new

Re: IRRd Add New Maintainer (irr_rpsl_submit ?)

2011-05-18 Thread Eduardo Meyer
On Wed, May 18, 2011 at 2:23 AM, Eduardo Meyer dudu.me...@gmail.com wrote: Hello, I have installed IRRd and I am trying to set it up, just for study purposes. I have successfully mirrored some DBs but I cant handle to make my very first maintainer creation. irrd-user.pdf seems to be the only

IRRd Add New Maintainer (irr_rpsl_submit ?)

2011-05-17 Thread Eduardo Meyer
Hello, I have installed IRRd and I am trying to set it up, just for study purposes. I have successfully mirrored some DBs but I cant handle to make my very first maintainer creation. irrd-user.pdf seems to be the only documentation around and it says nothing about How the admin creates