NTT->HE earlier today (~10am EDT)

Mark Tinka mark.tinka at seacom.mu
Wed Jul 1 06:29:00 UTC 2015



On 1/Jul/15 00:02, Tore Anderson wrote:
>
> You're not mentioning RPKI here. Any particular reason why not?
>
> If I understand correctly, in today's leak the origin AS was
> changed/reset, so RPKI ought to have saved the day. (At least Grzegorz'
> day, considering that 33 of AS43996's prefixes are covered by ROAs.)

It certainly would have.

BGPmon was awash with alarms about Origin Validation violations for our
prefixes that were originated by the offending network yesterday.

If HE implemented Origin Validation, they'd have dropped these routes
assuming that was their policy.

Mark.



More information about the NANOG mailing list