No argument there at all. Just felt like there was enough FUD in that link it was worth calling out that specific.
On Wed, May 3, 2023 at 2:39 PM Glenn Kelley <glenn@connectivity.engineer> wrote:
Tom - you are correct
Of course - who keeps things like BGP Route Servers and FRR up to date -
cough cough
Glenn S. Kelley,
I am a Connectivity.Engineer
Text and Voice Direct: 740-206-9624
a Division of CreatingNet.Works
IMPORTANT: The contents of this email and any attachments are
confidential. They are intended for the named recipient(s) only. If
you have received this email by mistake, please notify Glenn Kelley,
the sender, immediately and do not disclose the contents to anyone or
make copies thereof.
On Wed, May 3, 2023 at 10:34 AM Tom Beecher <beecher@beecher.cc> wrote:
>>
>> For those that like FRR:
>> https://thehackernews.com/2023/05/researchers-uncover-new-bgp-flaws-in.html
>
>
> All 3 of those CVEs look like they were fixed and backported into 8.2 through 8.4 at least 6 months ago.
>
> On Wed, May 3, 2023 at 5:54 AM Hank Nussbacher <hank@efes.iucc.ac.il> wrote:
>>
>> On 02/05/2023 17:56, Warren Kumari wrote:
>>
>> For those that like FRR:
>> https://thehackernews.com/2023/05/researchers-uncover-new-bgp-flaws-in.html
>>
>> Regards,
>> Hank
>>
>> > +lots.
>> >
>> > I've used a number of Linux routing thingies (BIRD, Quagga,
>> > VyOS/Ubiquiti, OpenBGPd, ExBGP), and FRR is (for me at least) by far
>> > the friendliest. It's trivial to spin this up on a cloud VM and start
>> > announcing a prefix.
>> >
>> > For doing something like Anycast though (where you are mostly just
>> > announcing a route on demand), ExaBGP is great.
>> >
>> > W
>> >
>> >
>> > On Mon, May 01, 2023 at 2:03 PM, Jean Franco <jfranco@maila.inf.br> wrote:
>> >
>> > https://frrouting.org/ <https://frrouting.org/>
>> >
>>