possible rsync validation dos vuln

2021-10-28 Thread Randy Bush
received this vuln notice four days before these children intend to disclose. so you can guess how inclined to embargo. randy From: Koen van Hove Subject: CVD: Vulnerabilities in RPKI Validators To: ra...@psg.com, s...@hactrn.net Cc: c...@ncsc.nl Date: Wed, 27 Oct 2021 14:59:21 -0700 Dear

Need for historical prefix blacklist (`rogue' prefixes) information

2021-10-28 Thread Amir Herzberg
Hi NANOGers, for our research on ROV (and ROV++, our extension, NDSS'21), we need access to historical data of blacklisted prefixes (due to spam, DDoS, other), as well as suspect-hijacks list (beyond BGPstream which we already have). Basically we want to measure if the overlap (and non-overlap)

Re: What are best practices for RPKI ROV in transit networks....

2021-10-28 Thread Musa Stephen Honlue
Personally I recommend dropping them invalids. However, you could set local preferences as follows: - Valids routes get the highest local pref - unknown routes get a medium local pref - Invalids routes get the lowest local pref In this way, if you have competing routes, the one with the higher

Re: What are best practices for RPKI ROV in transit networks....

2021-10-28 Thread Lukas Tribus
Hello, On Thu, 28 Oct 2021 at 21:35, wrote: > Given that some routes may have mistaken ROAs that resolve to an > invalid state, is there a standard/best practice for processing exceptions? There is no point in ROV, unless you are dropping invalid routes. Not dropping invalid routes is

What are best practices for RPKI ROV in transit networks....

2021-10-28 Thread ssw
Greetings, We seek input on best practices for implementing RPKI ROV in a transit (partial transit) network. The Internet2 network provides partial transit for many of the K-12 and higher education institutions in the US. Our customer routes number just over 6,000. We work with our customers

Re: S.Korea broadband firm sues Netflix after traffic surge

2021-10-28 Thread Justin Streiner
On Wed, Oct 20, 2021 at 3:41 PM Matthew Walster wrote: The user initiates the connection to the CDN. The user is paying for a level of access to the internet via the BT network, with varying tiers of speed at particular costs. They are advertised as "Unlimited broadband: With no data caps or

Re: S.Korea broadband firm sues Netflix after traffic surge

2021-10-28 Thread Jared Brown
I don't know what they are putting in the water in Korea, but strange things are reported from there. In addition to the SK Telecom shenanigans, apparently KT can't tell the difference between a DDoS and a routing error. https://en.yna.co.kr/view/AEN20211025006253320 - Jared