Re: [routing-wg] European cable cut may impact transoceanic routes

2022-10-20 Thread Hank Nussbacher
On 20/10/2022 16:40, Nick Hilliard wrote: Hank Nussbacher wrote on 20/10/2022 14:36: https://trust.zscaler.com/zscloud.net/posts/12256 "We are aware of a major cable cut in the South of France that has impacted major subsea cables with connectivity to Asia, Europe, US and potentially

[routing-wg] European cable cut may impact transoceanic routes

2022-10-20 Thread Hank Nussbacher
https://trust.zscaler.com/zscloud.net/posts/12256 "We are aware of a major cable cut in the South of France that has impacted major subsea cables with connectivity to Asia, Europe, US and potentially other parts of the world. As a result of the cable cut, customers may see packet loss and or

[routing-wg] Notice of Inquiry into Secure Internet Routing

2022-02-28 Thread Hank Nussbacher
Notice of Inquiry into Secure Internet Routing (i.e. what is wrong with BGP :-)) https://docs.fcc.gov/public/attachments/FCC-22-18A1.pdf -Hank -- To unsubscribe from this mailing list, get a password reminder, or change your subscription options, please visit:

Re: [routing-wg] RPKI vulnerable?

2022-02-18 Thread Hank Nussbacher
On 18/02/2022 10:54, Nathalie Trenaman wrote: Hi Nick, On 18 Feb 2022, at 09:53, Nick Hilliard wrote: Hank Nussbacher wrote on 18/02/2022 07:39: We are working with large network providers and registrars on mitigating the vulnerabilities in RPKI deployments. Has anyone from the RIPE NCC

[routing-wg] RPKI vulnerable?

2022-02-17 Thread Hank Nussbacher
https://www.linkedin.com/posts/shulman_inter-domain-routing-connects-the-different-activity-6899635463775145984-BaQe "We found that the current RPKI deployments are vulnerable - cyber criminals can disable RPKI in any network in the Internet. We evaluated such RPKI disabling attacks in the

Re: [routing-wg] RFO for RIPE NCC RPKI outage 16 February 2022

2022-02-16 Thread Hank Nussbacher
On 16/02/2022 19:46, Gert Doering wrote: Hi, On Wed, Feb 16, 2022 at 05:01:25PM +0100, Ties de Kock wrote: This afternoon, between 13:00 UTC and 14:10 UTC rrdp.ripe.net was unavailable. [..] Thanks for this great postmortem writeup, and for being open about what happened, and how things

Re: [routing-wg] RPKI Quarterly Planning

2021-07-13 Thread Hank Nussbacher
On 13/07/2021 16:33, Nathalie Trenaman wrote: Hi Hank, Op 13 jul. 2021, om 14:46 heeft Hank Nussbacher <mailto:h...@interall.co.il>> het volgende geschreven: On 13/07/2021 14:08, Job Snijders via routing-wg wrote: On Tue, Jul 13, 2021 at 05:25:11AM +0200, Daniel Karrenberg wrote:

Re: [routing-wg] RPKI Quarterly Planning

2021-07-13 Thread Hank Nussbacher
On 13/07/2021 14:08, Job Snijders via routing-wg wrote: On Tue, Jul 13, 2021 at 05:25:11AM +0200, Daniel Karrenberg wrote: It might also be that the operational community has chosen other fora to discuss because this working group is not working. What a strange thing to say. Of course there

Re: [routing-wg] Looking for 1-2 peer MRT RIB file?

2021-07-05 Thread Hank Nussbacher
RIS table dumps, together with origin AS and number of peers that passed the routes to RIS. You could filter on the latter to restrict the view to "widely seen" routes. There's an equivalent one for IPv6. -- Rene On 7/5/21 1:41 PM, Hank Nussbacher wrote: On 04/07/2021 17:49, Clemens M

Re: [routing-wg] Looking for 1-2 peer MRT RIB file?

2021-07-05 Thread Hank Nussbacher
for one peer though (e.g. using bgpreader). Cheers, Clemens On 04.07.21 16:41, Hank Nussbacher wrote: > Apologies for previous HTML email: > > > I am aware of the MRT files available from RIPE: > > https://www.ripe.net/analyse/internet-measurements/routing-information-servic

[routing-wg] Looking for 1-2 peer MRT RIB file?

2021-07-04 Thread Hank Nussbacher
Apologies for previous HTML email: I am aware of the MRT files available from RIPE: https://www.ripe.net/analyse/internet-measurements/routing-information-service-ris/ris-raw-data I am aware of the MRT files available from routeviews: http://archive.routeviews.org/ What I am looking for is an

[routing-wg] Looking for 1-2 peer MRT RIB file?

2021-07-04 Thread Hank Nussbacher
I am aware of the MRT files available from RIPE: https://www.ripe.net/analyse/internet-measurements/routing-information-service-ris/ris-raw-data I am aware of the MRT files available from routeviews: http://archive.routeviews.org/ What I am looking for is an

Re: [routing-wg] RPKI Route Origin Validation and AS3333

2021-03-21 Thread Hank Nussbacher
On 21/03/2021 13:43, Lukas Tribus wrote: Hello, On Sat, 20 Mar 2021 at 20:06, Hank Nussbacher wrote: I am not sure it is possible, but I would love to see some centralized site where all dropped ROV invalids would appear. This way I can see if I have a problem as well as if someone tried

Re: [routing-wg] RPKI Route Origin Validation and AS3333

2021-03-20 Thread Hank Nussbacher
On 19/03/2021 10:06, Ben Maddison via routing-wg wrote: Hi Nathalie, On 03/18, Nathalie Trenaman wrote: Dear Colleagues, Working Group, As discussed previously in this mailing list, some community members expressed that they would like to see the RIPE NCC perform Route Origin Validation on

Re: [routing-wg] Improving operations at RIPE NCC TA (Was: Delay in publishing RPKI objects)

2021-02-17 Thread Hank Nussbacher
On 17/02/2021 17:58, Job Snijders via routing-wg wrote: +1. -Hank Dear RIPE NCC, On Wed, Feb 17, 2021 at 11:28:32AM +0100, Nathalie Trenaman wrote: The multitude of RPKI service impacting events as a

Re: [routing-wg] 2019-08 Review Phase (RPKI ROAs for Unallocated and Unassigned RIPE NCC Address Space)

2020-02-23 Thread Hank Nussbacher
On 20/02/2020 16:39, Petrit Hasani wrote: I support this proposal.  Should have been done a long time ago. Regards, Hank Dear colleagues, Policy proposal 2019-08, "RPKI ROAs for Unallocated and Unassigned RIPE NCC Address Space", is now in the Review Phase. The goal of the proposal is to

Re: [routing-wg] [anti-abuse-wg] An arrest in Russia

2019-12-28 Thread Hank Nussbacher
On 28/12/2019 21:09, Randy Bush wrote: How these things slip through is when paperwork gets submitted that is incorrect and falsified with fake signatures. and the ncc has a job advert out to hire even more lawyers (no blame; it's a mess). can ripe keep from becoming arin? randy  It would

Re: [routing-wg] 2019-08 New Policy Proposal (RPKI ROAs for Unallocated and Unassigned RIPE NCC Address Space)

2019-11-01 Thread Hank Nussbacher
On 31/10/2019 16:28, Petrit Hasani wrote: Totally support this proposal. -Hank Dear colleagues, A new RIPE Policy proposal, 2019-08, "RPKI ROAs for Unallocated and Unassigned RIPE NCC Address Space" is now available for discussion. This proposal aims to instructs the RIPE NCC to create

Re: [routing-wg] Fwd: [bcop] Abstract of the MANRS BCOP

2018-05-29 Thread Hank Nussbacher
On 28/05/2018 14:53, Job Snijders wrote: > On Thu, May 17, 2018 at 07:16:34PM +0300, Hank Nussbacher wrote: >> On 17/05/2018 17:02, Benno Overeinder wrote: >> >> Maybe I'm missing it when reading the website and the BCOP but where >> does it state to *not *allow /25 or m

Re: [routing-wg] Fwd: [bcop] Abstract of the MANRS BCOP

2018-05-17 Thread Hank Nussbacher
On 17/05/2018 17:02, Benno Overeinder wrote: Maybe I'm missing it when reading the website and the BCOP but where does it state to *not *allow /25 or more specifics? The entire reason for MANRS is to prevent route hijacking.  An ISP that allows /25s or /26s to be leaked will easily circumvent all

[routing-wg] Historical routing question

2018-04-10 Thread Hank Nussbacher
While giving a routing lecture today someone asked me "Why was eBGP assigned an administrative distance of 20 which is better than OSPF's administrative distance of 110.  What was the logic behind that decision?" I was unable to think of an answer. Ideas? Thanks, Hank

[routing-wg] Comparison of open source switch software?

2018-01-06 Thread Hank Nussbacher
I know this is *routing* WG but I figured I would try anyway. I have seen numerous comparisons and RIPE presentations on performance issues of BIRD vs Quagga vs FRR. I am looking for the same thing of switch software.  Has anyone done a feature comparison between: http://openvswitch.org/

Re: [routing-wg] Bogon ASN Filter Policy

2016-06-02 Thread Hank Nussbacher
On 02/06/2016 22:43, Job Snijders wrote: > Dear fellow network operators, > > In July 2016, NTT Communications' Global IP Network AS2914 will deploy a > new routing policy to block Bogon ASNs from its view of the default-free > zone. This notification is provided as a courtesy to the network >

[routing-wg] Looking for a pgm to CIDRize

2014-12-31 Thread Hank Nussbacher
Dear revelers, I am looking for a program or website that can take a list of sorted, overlapping prefixes and can reduce it to the most CIDRized format. Example: 5.28.128.0/18 5.28.128.0/20 5.28.128.0/21 5.28.128.0/22 5.28.132.0/23 5.28.136.0/21 5.28.136.0/22 5.29.64.0/18 5.29.64.0/20