ARIN and the RPKI (was Re: AltDB?)
Randy Bush
randy at psg.com
Thu Jan 6 05:15:38 UTC 2011
>> actually, the formal rpki-based origin-validation stuff is measured
>> to take *less* cpu, a lot less, than ACLs
> On the platforms which really matter in terms of rPKI, ACLs are
> handled in hardware, so this is pretty much a wash.
really? it was measured on a GSR. full check on a prefix, 10usec.
that's microseconds.
as chris pointed out, though, one pays for having the data in the trie,
i.e. in ram. but not a lot.
randy
More information about the NANOG
mailing list