RPKI is not a good solution for all networks, especially those that are non-transit in nature and take reasonable mitigation actions like IRR prefix lists.
Some of the largest , most impactful route leaks have come from non-transit networks reliant on IRR managed prefix lists. On Fri, May 17, 2024 at 5:21 PM Ca By <cb.list6@gmail.com> wrote:
On Fri, May 17, 2024 at 2:02 PM Sean Donelan <sean@donelan.com> wrote:
Sigh, industry hasn't solved spoofing and routing insecurity in two decades. If it was easy, everyone would have fixed it by now.
Industry has been saying 'don't regulate us' for decades.
I hope the regulations are more outcome focused.
RPKI is not a good solution for all networks, especially those that are non-transit in nature and take reasonable mitigation actions like IRR prefix lists.