February 2023 - Test - lists.nanog.org

Calgary Internet Exchange (YYCIX) deploys world's first ASPA-filtering Route Servers
by Job Snijders 02 Feb '23

02 Feb '23

CALGARY, CA-AB, Feb. 2, 2023 - The Calgary Internet Exchange (YYCIX) is thrilled to announce the deployment of the world's first ASPA-filtering Route Servers on a public peering fabric. The YYCIX Route Servers drop ASPA-invalid BGP routes in order to protect multilateral peers. ASPA (Autonomous System Provider Authorization) is a free RPKI-based technology for detection and mitigation of BGP route leaks. ASPA enables holders of Autonomous System identifiers to securely authorize one or more other Autonomous Systems as their upstream providers, in turn enabling Relying Parties (ISPs and IXPs) to use this cryptographically verifiable information to automatically stop improbable BGP paths from spreading through the global Internet routing system. ASPA complements other routing safety & security mechanisms: RPKI-ROV helps guard against fat-finger keyboard input errors, BGPsec helps establish strong assurances about BGP message authenticity & integrity, and finally ASPA helps stop route leaks. The key to worry-free routing operations will be to use all three in tandem. The ASPA specification is in active development as a freely accessible open standard through the collaborative Internet Engineering Task Force (IETF) process. YYCIX volunteers took on a leading role as early adopters (or 'lighthouse customer') to foster an environment in which real-world feedback can be contributed to the OpenBGPD developers and ASPA specification authors in the SIDROPS working group. Our hope is that many vendors and operators will embrace ASPA in the years to come. About YYCIX Internet Exchange Community Ltd =========================================== YYCIX is incorporated as a volunteer-driven tax-exempt non-profit corporation in Canada's third-largest municipality. YYCIX provides Alberta residents with direct access to local Internet content and helps increase the transfer speed of Internet communications between Alberta companies, friends, neighbors and family members. https://www.yycix.ca/ About OpenBGPD & Rpki-client ============================ Rpki-client is an freely usable and secure implementation of the RPKI for Relying Parties to facilitate validation of BGP announcements. The program queries the global RPKI repository system, verifies all cryptographic signatures, and outputs validated data in configuration formats suitable for OpenBGPD and StayRTR. https://www.rpki-client.org/ OpenBGPD is a free implementation of the IETF's Border Gateway Protocol suitable for ISPs and IXPs. OpenBGPD allows ordinary machines to be used as routers or route servers exchanging routes with other systems. ASPA-filtering in OpenBGPD was developed with support from the German Ministry for Economic Affairs & Climate Action's Sovereign Tech Fund, and the Route Server Support Foundation (RSSF - https://www.rssf.nl/) https://www.openbgpd.org/ OpenBGPD and rpki-client are part of the OpenBSD Project; and run on a wide variety of operating systems such as Debian, Ubuntu, Alpine, CentOS, Fedora, FreeBSD, Red Hat, and of course OpenBSD!

1 0

N87 Agenda, Keynote, Hackathon + More!
by Nanog News 02 Feb '23

02 Feb '23

*Download NANOG 87 Agenda Now! * *Save Your Favorite Talks + Sync up Your Calendars * Don't miss any of your favorite talks. Check out our NANOG 87 agenda and download the full event calendar. *VIEW AGENDA <https://www.nanog.org/events/nanog-87/agenda/> * *Micheal Bailey to be a N87 Keynote Speaker* *Presenting "A Security Practitioner’s Guide to Internet Measurement"* Over the last 20 years, Bailey and his colleagues have been engaged in understanding and improving the Internet through large-scale measurement and data. *MORE INFO * <https://www.nanog.org/events/nanog-87/> *Committee Nominations will be Closing Soon! * *Nomination Form will Close 14 February 2023* Time is running out for nominations for six open NANOG Committees. If you are passionate about NANOG and/or know a strong candidate, please consider running or nominating another community member! *MORE INFO* <https://www.nanog.org/members/elections/2023-committee-nominations/> *Hackathon will Kick Off Tomorrow! * *Intro/Tutorial/Team Formation will Begin Virtually Friday, 03 Feb. * *Full Hackathon Schedule:* Friday, 03 Feb. - Hackathon welcome, introduction, infrastructure tutorial, idea-pitching, and the team-forming session will take place over Zoom. Saturday, 11 Feb. - Start of the hackathon; this day will be a hybrid day between virtual support hours and an on-site conference venue tutorial in the evening. Sunday, 12 Feb. - True hybrid day with people continuing to work virtually and with dedicated facilities (workspace, wifi, etc.) for those at the conference venue. *REGISTER NOW <https://www.nanog.org/events/nanog-87-hackathon/>* *Sponsorships Still Available for NANOG 87* *Invest in the Strength of the Community we Have Built* - Sponsorship Benefits: - Showcase your newest technologies + solutions - Increase your brand’s visibility + reach - Amplify your organization’s message - Connect with industry influencers + decision-makers - Empower people + inspire change *MORE INFO* <https://www.nanog.org/participate/nanog-sponsorship-opportunities-working/>

1 0

2FA Is Now Required on Your ARIN Online Account
by John Curran 01 Feb '23

01 Feb '23

NANOGers - Important reminder - As of today, access to ARIN Online now requires two-factor authentication on all ARIN Online accounts. See below for additional details. FYI, /John John Curran President and CEO American Registry for Internet Numbers Begin forwarded message: From: ARIN <info(a)arin.net> Subject: [arin-announce] 2FA Is Now Required on Your ARIN Online Account Date: February 1, 2023 at 11:10:47 AM EST To: "arin-announce(a)arin.net" <arin-announce(a)arin.net> As of today, 1 February 2023, ARIN now requires two-factor authentication (2FA) on all ARIN Online accounts. If you have yet to set up 2FA on your account, the next time you attempt to log in to your ARIN Online account, you will be redirected to the 2FA setup process and required to complete it before accessing your account. Customers can choose between Time-Based One-Time password (TOTP), SMS-based, and FIDO2/Passkey-enabled security key authentication methods. You can learn more about ARIN’s 2FA options, as well as guides to enabling these methods in your account, by visiting https://www.arin.net/2FA. Following a community consultation held in May 2022 (https://www.arin.net/participate/community/acsp/consultations/2022/2022-4/) ARIN chose to delay enforcement until February 2023 in order to provide our customers with a variety of options for authentication. By requiring 2FA for ARIN Online accounts, the ARIN community will have the benefit of stronger security for the registry, reduced risk of account fraud attempts, and increased confidence in the integrity of their ARIN resources. If you need assistance with the implementation of 2FA to your ARIN Online account, please contact our Registration Services Department from 7:00 AM – 7:00 PM ET, Monday through Friday, at +1.703.227.0660. Regards, John Curran President and CEO American Registry for Internet Numbers (ARIN) ------------- Helpful Resources: Need help setting up your 2FA? Visit https://www.arin.net/2fa to get started. You’ll find guides on enabling 2FA via an authenticator application, SMS, and security key hardware. We also provide information on how to receive and save your 2FA recovery codes, as well as what to do if you’ve lost access to your authenticator app, SMS phone number, or security key.

1 0