On Fri, Jul 31, 2020 at 03:34:47PM +0200, Mark Tinka wrote:
On 31/Jul/20 03:57, Aftab Siddiqui wrote:
Not a single prefix was signed, what I saw. May be good reason for Rogers, Charter, TWC etc to do that now. It would have stopped the propagation at Telia.
If none of the prefixes had a ROA, no amount of Telia's shiny new "we drop invalids" machine would have helped, as we saw with this incident.
Could it be ... we didn't see any RPKI Invalids through Telia *because* they are rejecting RPKI invalids? As far as I know the BGP Polluter software does not have a configuration setting to only ruin the day of operators without ROAs. :-) I think the system worked as designed: without RPKI ROV @ Telia the damage might have been worse. Kind regards, Job