4 Jul
2019
4 Jul
'19
1:14 p.m.
On 4/Jul/19 17:33, Job Snijders wrote:
At this point in time I think the ideal deployment model is to perform the validation within your administrative domain and run your own validators.
In essence, this is also my thought process. I think Cloudflare are very well-intentioned in making it as painless as possible to support other operators to get RPKI deployed (and more power to them to going to such lengths to do so), but you have to determine whether you are willing to let a service such as this run outside of our domain. Every year, someone asks me whether I'd be willing to outsource my route reflector VNF's to AWS/Azure/e.t.c. My answer to that falls within the realms of handling RPKI for your network :-). Mark.