4 ms·
I would argue that for BGP to be safe, all ~68,000 autonomous systems will need to embrace RPKI, not just a handful of ISPs/telcos/CDNs. Akamai is announcing ~2
by Bluecobra 7y ago
I would argue that for BGP to be safe, all ~68,000 autonomous systems will need to embrace RPKI, not just a handful of ISPs/telcos/CDNs. Akamai is announcing ~2,300 prefixes, shouldn’t they use RPKI?
- eastdakota 7y agoYes, though it’s a bit like if every airline implemented an accurate COVID-19 health check. You’d still have local problems, but the infection would keep from spreading worldwide. In the case of BGP, if the major transit providers properly filter routes, hijacks do much less damage to the broad network.
- dsl 7y agoHow are you verifying compliance? It looks like to pass the test all I need to do is implement filtering on my interconnects with Cloudflare (or just drop 103.21.244.0/24 entirely). To your example, airlines could screen passengers flying out of Eastdakota Regional Airport but nowhere else.
- eastdakota 7y agoWe can always change up the bad IP range announced. But, more generally, I think the network engineers at ISPs want to implement RPKI. It’s the managers who haven’t prioritized. Hopefully this helps escalate it as a priority.
- bifrost 7y agoVery few people want to implement RPKI, those that are doing it either are really hot for it or are being forced to do it.