Re: NTT/AS2914 enabled RPKI OV 'invalid = reject' EBGP policies

2020-03-31 Thread Mark Tinka
On 31/Mar/20 15:21, Dorian Kim wrote: > Mark, > > Unfortunately we don’t have any testing done or experience with RPKI on XE or > Classic boxes as we don’t have any deployed outside of OOB infrastructure. Cherish your blessings, and for the time being, keep them that way :-). Mark.

Re: NTT/AS2914 enabled RPKI OV 'invalid = reject' EBGP policies

2020-03-31 Thread Mark Tinka
On 31/Mar/20 15:21, Dorian Kim wrote: > Mark, > > Unfortunately we don’t have any testing done or experience with RPKI on XE or > Classic boxes as we don’t have any deployed outside of OOB infrastructure. Cherish your blessing, and for the time being, keep them that way :-). Mark.

Re: NTT/AS2914 enabled RPKI OV 'invalid = reject' EBGP policies

2020-03-31 Thread Dorian Kim
> On Mar 31, 2020, at 7:19 AM, Mark Tinka wrote: > >  > >> On 26/Mar/20 02:50, Job Snijders wrote: >> Dear group, >> >> Exciting news! Today NTT's Global IP Network (AS 2914) enabled RPKI >> based BGP Origin Validation on virtually all EBGP sessions, both >> customer and peering edge. This

Re: NTT/AS2914 enabled RPKI OV 'invalid = reject' EBGP policies

2020-03-31 Thread Mark Tinka
On 31/Mar/20 14:46, Ben Maddison wrote: > Tomorrow is our first ROV invalid = reject anniversary, Ah yes - April 1 :-). Had actually forgotten about that. Fun times :-). Congrats - we are 4 days behind you. > and for most of > that time I have been in communications at various levels with

Re: NTT/AS2914 enabled RPKI OV 'invalid = reject' EBGP policies

2020-03-31 Thread Ben Maddison via NANOG
On Tue, 2020-03-31 at 13:18 +0200, Mark Tinka wrote: > > On 26/Mar/20 02:50, Job Snijders wrote: > > Dear group, > > > > Exciting news! Today NTT's Global IP Network (AS 2914) enabled RPKI > > based BGP Origin Validation on virtually all EBGP sessions, both > > customer and peering edge. This

Re: NTT/AS2914 enabled RPKI OV 'invalid = reject' EBGP policies

2020-03-31 Thread Mark Tinka
On 26/Mar/20 02:50, Job Snijders wrote: > Dear group, > > Exciting news! Today NTT's Global IP Network (AS 2914) enabled RPKI > based BGP Origin Validation on virtually all EBGP sessions, both > customer and peering edge. This change positively impacts the Internet > routing system. Good man.

Re: NTT/AS2914 enabled RPKI OV 'invalid = reject' EBGP policies

2020-03-26 Thread Alex Band
Many congratulations for getting this deployed, Job! Now that so many networks are dropping RPKI invalid announcements, for this to really have a practical effect operators should put in the effort to create and maintain ROAs for their route announcements. Over the last 10 years, the trend in

Re: NTT/AS2914 enabled RPKI OV 'invalid = reject' EBGP policies

2020-03-26 Thread L Sean Kennedy
Job, Congratulations to NTT, AT, and others in our community who have deployed validation on their network edge. What is really exciting is all the activity in this and other operator regions that has come together to promote securing the routing system by combining multiple strategies. This

Re: NTT/AS2914 enabled RPKI OV 'invalid = reject' EBGP policies

2020-03-26 Thread Tom Hill
On 26/03/2020 10:39, Brandon Butterworth wrote: > What are you waiting for, someone to say make it so? I knew someone would come back with the smartarse response ;) I'm certainly not the authority on this, and I'm not tracking the deployments with any great detail. I'm happy to suggest where

Re: NTT/AS2914 enabled RPKI OV 'invalid = reject' EBGP policies

2020-03-26 Thread Brandon Butterworth
On Thu Mar 26, 2020 at 10:12:55AM +, Tom Hill wrote: > I am deeply upset that there isn't yet a Wikipedia article entitled, > "List of BGP networks implementing RPKI"... :) What are you waiting for, someone to say make it so? Plus a little graph showing the approaching RPKI event horizon

Re: NTT/AS2914 enabled RPKI OV 'invalid = reject' EBGP policies

2020-03-26 Thread Jared Mauch
> On Mar 25, 2020, at 10:05 PM, JASON BOTHE via NANOG wrote: > > Excellent work. I’m curious to know how many of the big ASs are participating > to date. If you or anyone on the list knows if this is published please let > me know. Quite a number have done this. I expect we are getting

Re: NTT/AS2914 enabled RPKI OV 'invalid = reject' EBGP policies

2020-03-26 Thread Tom Hill
On 26/03/2020 02:05, JASON BOTHE via NANOG wrote: > Excellent work. I’m curious to know how many of the big ASs are > participating to date. If you or anyone on the list knows if this is > published please let me know. I am deeply upset that there isn't yet a Wikipedia article entitled, "List of

Re: NTT/AS2914 enabled RPKI OV 'invalid = reject' EBGP policies

2020-03-25 Thread JASON BOTHE via NANOG
Excellent work. I’m curious to know how many of the big ASs are participating to date. If you or anyone on the list knows if this is published please let me know. Thanks J~ > On Mar 25, 2020, at 21:03, Michel Py wrote: > > Hi Job, > >> Job Snijders wrote : >> Exciting news! Today NTT's

Re: NTT/AS2914 enabled RPKI OV 'invalid = reject' EBGP policies

2020-03-25 Thread Michel Py
Hi Job, > Job Snijders wrote : > Exciting news! Today NTT's Global IP Network (AS 2914) enabled RPKI based BGP > Origin Validation on virtually all > EBGP sessions, both customer and peering edge. This change positively impacts > the Internet routing system. Great, and thanks ! I do have a