On Wed, 27 Oct 2021 at 08:47, Mark Tinka <mark@tinka.africa> wrote:
On 10/27/21 01:58, Randy Bush wrote:
my old DRL RP instances produce MRTG graphs etc of the CA fetching side, though nothing on the rpki-rtr side.
Randy, I actually have an ongoing discussion with the Fort developers about this after a BGPSec bug left me with stale VRP's for several days, with no clear indication that Fort had "kind of" crashed and "not fully" crashed (fair point, I need to work on better internal monitoring of Fort, as well).
That's the reason I preached about stale RTR servers before: https://labs.ripe.net/author/lukas_tribus/rpki-rov-about-stale-rtr-servers-a... https://github.com/lukastribus/rtrcheck https://gist.github.com/lukastribus/695c9e780d118755271519d4d3cb54f3 (the latter is a check against IOS XR devices via NETCONF which makes some sanity checks, absolute and relative) However judging by the absolute zero feedback and support requests from anyone (other than likes/thumbs up), I'm pretty sure no one actually does this - other than where I set it up directly. Fort is also working on a prometheus endpoint, which probably would allow easier monitoring/integration: https://github.com/NICMx/FORT-validator/issues/50 Lukas