ARIN's RPKI Relying agreement
Randy Bush
randy at psg.com
Fri Dec 5 18:27:48 UTC 2014
>>> rpki might work at scale.
>> ohhh noooooooooo!
>
> rtconfig + prefix lists were never going to work at scale, so rpsl based
> filters were mostly only ever deployed on asn edges rather than dfz core
> inter-as bgp sessions. This meant that the damage that a bad update might
> cause would be relatively limited in scope. RPSL's scaling limitations do
> not apply to rpki, so in theory the scope for causing connectivity problems
> is a good deal greater. So if e.g. ARIN went offline or signed some broken
> data which caused Joe's Basement ISP in Lawyerville to go offline globally,
> you can probably see why ARIN would want to limit its liability.
if it works, it is scary and must be stopped! and arin is doing such a
great job of that.
-------------- next part --------------
randy
More information about the NANOG
mailing list