DNS OARC 40 - Call for Contribitions

2022-11-03 Thread John Todd
OARC 40 will be a two-day hybrid meeting held on 16 & 17 February in Atlanta (GA), USA at 10:00 AMĀ  (Local time - EST (UTC-05:00)). The onsite part of the meeting will be colocated with NANOG 87. The Programme Committee is seeking contributions from the community. All DNS-related subjects an

WATCH NOW | NANOG 86 Talks, NANOG U + "Internet Innovators"

2022-11-03 Thread Nanog News
*NANOG 86 Talks are LIVE! * Have you subscribed to our Youtube channel? Subscribe now and be the first to know when new videos are uploaded. The full webcast is available in the "NANOG 86" playlist. *WATCH NOW *

RE: Understanding impact of RPKI and ROA on existing advertisements

2022-11-03 Thread Jakob Heitz (jheitz) via NANOG
There are a lot of ROAs out there that make it EASIER to hijack a route rather than harder. If you register an ROA for a route and also advertise that route in BGP, then an attacker who prepends your ASN has to at least compete with your route with an AS_PATH length and will lose in most of the In

Re: Understanding impact of RPKI and ROA on existing advertisements

2022-11-03 Thread Randy Bush
for the 312th time. origin validation was never designed to stop attacks. it was designed to ameliorate mistakes. if you want to use the rpki to reduce attacks, use bgpsec. randy