Re: Financial services BGP hijack last week?

2017-05-03 Thread Christopher Morrow
On Wed, May 3, 2017 at 1:39 PM, Compton, Rich A wrote: > The servers where the RPKI data is published (the Trust Anchor and the > CAs) are referred to using a single URI, meaning that any > sure, but even with rrdp there's just one URI you'd follow, which translates

Re: Financial services BGP hijack last week?

2017-05-03 Thread Compton, Rich A
to:nikosi...@gmail.com>>, NANOG list <nanog@nanog.org<mailto:nanog@nanog.org>> Subject: Re: Financial services BGP hijack last week? On Tue, May 2, 2017 at 11:21 AM, Compton, Rich A <rich.comp...@charter.com<mailto:rich.comp...@charter.com>> wrote: That¹s the million d

Re: Financial services BGP hijack last week?

2017-05-02 Thread Randy Bush
> the use of rsync in RPKI is preventing a lot of large ISPs from > implementing it (too difficult to provide redundancy with > rsync). uh, at least the DRL implementation supports caches feeding off of caches in (if you are silly enough) an arbitrarily complex graph. some years back, our

Re: Financial services BGP hijack last week?

2017-05-02 Thread Christopher Morrow
On Tue, May 2, 2017 at 11:21 AM, Compton, Rich A wrote: > That¹s the million dollar question. I think that there will be more > adoption from the Internet at large when some big players adopt it. Right > now the use of rsync in RPKI is preventing a lot of large ISPs

Re: Financial services BGP hijack last week?

2017-05-02 Thread Randy Bush
>> it only proves the need for wider RPKI adoption > How can we actually encourage RPKI adoption? http://certification-stats.ripe.net/ tim, oleg, alex, ..., the ripe/ncc team, and the ripe community have worked very hard to make it easy, and the numbers show their success. lacnic even more

Re: Financial services BGP hijack last week?

2017-05-02 Thread Mike Hammett
-il.com Midwest-IX http://www.midwest-ix.com - Original Message - From: "Job Snijders" <j...@ntt.net> To: "Nikos Leontsinis" <nikosi...@gmail.com> Cc: nanog@nanog.org Sent: Tuesday, May 2, 2017 7:27:29 AM Subject: Re: Financial services BGP hijack last we

Re: Financial services BGP hijack last week?

2017-05-02 Thread Compton, Rich A
That¹s the million dollar question. I think that there will be more adoption from the Internet at large when some big players adopt it. Right now the use of rsync in RPKI is preventing a lot of large ISPs from implementing it (too difficult to provide redundancy with rsync). There is a protocol

Re: Financial services BGP hijack last week?

2017-05-02 Thread Job Snijders
On Tue, May 02, 2017 at 08:29:32AM +0100, Nikos Leontsinis wrote: > it only proves the need for wider RPKI adoption How can we actually encourage RPKI adoption? Kind regards, Job

Re: Financial services BGP hijack last week?

2017-05-02 Thread Stephane Bortzmeyer
On Tue, May 02, 2017 at 01:49:04AM -0400, valdis.kletni...@vt.edu wrote a message of 29 lines which said: > I didn't see any mention of this here. You should susbcribe to @bgpstream on Twitter, and read BGPmon blog :-) https://twitter.com/bgpstream

Re: Financial services BGP hijack last week?

2017-05-02 Thread Scott Christopher
On Mon, May 1, 2017, at 10:49 PM, valdis.kletni...@vt.edu wrote: > I didn't see any mention of this here. Any comments? > > [...] > > https://arstechnica.com/security/2017/04/russian-controlled-telecom-hijacks-financial-services-internet-traffic/ Governments mopping up signals and data isn't

Re: Financial services BGP hijack last week?

2017-05-02 Thread Nikos Leontsinis
it only proves the need for wider RPKI adoption On 2 May 2017 at 06:49, wrote: > I didn't see any mention of this here. Any comments? > > "On Wednesday, large chunks of network traffic belonging to MasterCard, Visa, > and more than two dozen other financial

Re: Financial services BGP hijack last week?

2017-05-02 Thread Max Tulyev
All know. Nobody care. On 02.05.17 08:49, valdis.kletni...@vt.edu wrote: > I didn't see any mention of this here. Any comments? > > "On Wednesday, large chunks of network traffic belonging to MasterCard, Visa, > and more than two dozen other financial services companies were briefly routed >

Financial services BGP hijack last week?

2017-05-01 Thread valdis . kletnieks
I didn't see any mention of this here. Any comments? "On Wednesday, large chunks of network traffic belonging to MasterCard, Visa, and more than two dozen other financial services companies were briefly routed through a Russian government-controlled telecom under unexplained circumstances that