Re: [j-nsp] Q. Is anyone deploying TCP Authentication Option (TCP-AO) on their BGP peering Sessions?

2023-09-27 Thread Andrew Gallo via juniper-nsp
I only know of one production eBGP deployment (prove me wrong!) https://labs.ripe.net/author/andrew-gallo/production-deployment-of-tcp-authentication-option/ Happens to be between two routers that I control (but it's still eBGP) I'd love to hear about more deployments There is a github repo

Re: [j-nsp] Q. Is anyone deploying TCP Authentication Option (TCP-AO) on their BGP peering Sessions?

2023-09-27 Thread Michael Hare via juniper-nsp
FWIW, I deployed it for iBGP on MX gear in 20.4 with no concerns for an ASN I manage. No issues in our lab with a mix of 20.4, 21.2 and 22.4, all classic JunOS. I haven't tried it any other scenario. -Michael > -Original Message- > From: juniper-nsp On Behalf Of Barry > Greene via

Re: [j-nsp] Q. Is anyone deploying TCP Authentication Option (TCP-AO) on their BGP peering Sessions?

2023-09-27 Thread Jeff Haas via juniper-nsp
[Warning: vendor anecdata follows] In bgp-land where we're a primary motivator, but only a client of tcp-ao, we've seen a few minor bugs from the field primarily dealing with keychain configuration or rollover issues in the last few years. Basically enough activity to suggest people are

Re: [j-nsp] QFX CRB

2023-09-27 Thread Cristian Cardoso via juniper-nsp
Reviewing my old emails, I noticed that I didn't give the final overview of the case. The problem was resolved in 2021 by the team that takes care of server virtualization. The root of the problem was updating a package relating to the XCP-NG system network. After they isolated the update, the IRQ