[afnog] RPKI

Saul saul at enetworks.co.za
Fri Jul 31 07:50:38 UTC 2015


Hi All,

Turns out AFRINICs RPKI old engine had died and they kept it quiet... (but 
that's another issue)

So ultimately, how stable/reliable is the RPKI system/policy implementation? 
Or is the system fine, but AFRNICs systems aren't?

Cheers
Saul


-----Original Message-----
From: Mark Tinka [mailto:mark.tinka at seacom.mu]
Sent: 28 July 2015 02:06 PM
To: Nishal Goburdhan <nishal at controlfreak.co.za>; Saul 
<saul at enetworks.co.za>
Cc: afnog at afnog.org
Subject: Re: [afnog] RPKI



On 28/Jul/15 13:34, Nishal Goburdhan wrote:
>
>
> what you see in the “bgp preview” is a view of what the RIPE NCC route
> collector information has.  that might be delayed (and most likely is,
> since lots of random people who run their software, like me, querying
> their collector constantly is suboptimal)

Perhaps.

We are running the RPKI.net project (I keep forgetting the new project name 
Randy and Rob came up with for it).

We have an rcynic-cron Cron job running every 5x minutes against the various 
TA's. This executes the various RP modules.

Keeps our servers busy, but nothing they can't afford. Of course, that means 
the routers running RTR with the servers have current data, but of course, 
there is burden against the TA's.

Mark.



More information about the afnog mailing list