RPKI drop invalids - one year later (denog11)
Chaos Computer Club - archive feed · Sebastian Wiesinger
November 11, 201933m 55s
Audio is streamed directly from the publisher (cdn.media.ccc.de) as published in their RSS feed. Play Podcasts does not host this file. Rights-holders can request removal through the copyright & takedown page.
Show Notes
Roughly one year ago we started to drop RPKI invalid routes from our peers. What happened afterwards?
In October 2018 we armed our RPKI filters to drop RPKI invalid prefixes. Now a year has passed and it is time to take a look back and see what happened (or didn't happen) after we flipped the switch.
Questions that will be answered include:
* How much lamentation and hand-wringing was there?
* What problems did we face when communicating with the "other side"?
* How were the problems fixed?
* Do we still filter RPKI invalids or did we go back to the dark ages?
about this event: https://pretalx.denog.de/denog11/talk/R3PXYZ/
Topics
denog11242019