1 Jul
2015
1 Jul
'15
2:29 a.m.
On 1/Jul/15 00:02, Tore Anderson wrote:
You're not mentioning RPKI here. Any particular reason why not?
If I understand correctly, in today's leak the origin AS was changed/reset, so RPKI ought to have saved the day. (At least Grzegorz' day, considering that 33 of AS43996's prefixes are covered by ROAs.)
It certainly would have. BGPmon was awash with alarms about Origin Validation violations for our prefixes that were originated by the offending network yesterday. If HE implemented Origin Validation, they'd have dropped these routes assuming that was their policy. Mark.