Celebration: RADB appears to now filter RPKI-invalid IRR route/route6 objects

2023-11-14 Thread Job Snijders via NANOG
ltered out the RPKI-invalid IRR objects! This is great :-) In doing so, RADB actively helps safeguard the interests of resource holders: it no longer is possible for adversaries to create IRR route objects which are in conflict with RPKI ROAs via the RADB service, and RADB also filters out RPKI-

Fwd: RADb will migrate to IRRdv4 on October 30, 2023

2023-09-28 Thread Job Snijders via NANOG
Dear all, Please see the below announcement, I think this is really good news! RPKI-based filtering at large databases and mirror services like RADB really helps take the sting out of potentially harmful RPKI-invalid IRR route objects. This will positively impact operators who use bgpq3, irrpt

Re: Websit of RADB stucked on Cloudflare

2023-01-27 Thread Bryton Herdes via NANOG
Hey folks -If the issue comes back up feel free to shoot me an email offline.Cheers, BrytonSent from my iPhoneOn Jan 27, 2023, at 10:52 AM, Douglas Fischer wrote:I just did a new test.It's working again.Thanks!Em sex., 27 de jan. de 2023 às 08:49, Douglas Fischer escrev

Re: Websit of RADB stucked on Cloudflare

2023-01-27 Thread Douglas Fischer
I just did a new test. It's working again. Thanks! Em sex., 27 de jan. de 2023 às 08:49, Douglas Fischer < fischerdoug...@gmail.com> escreveu: > At least when accessing here from Brazil, it gets stuck in the cloudflare > tool. > Anyone else with this problem? > > [image: image.png] > > -- > Dougl

Re: Websit of RADB stucked on Cloudflare

2023-01-27 Thread Tarko Tikan
hey, whois.radb.net Ipv4 is down Not fully, sometimes queries via v4 succeed, sometimes terminated by "connection reset by peer". -- tarko

Re: Websit of RADB stucked on Cloudflare

2023-01-27 Thread Daniel Schroder
whois.radb.net Ipv4 is down. whois.radb.net Ipv6 is up. On Fri, 27 Jan 2023, 15:29 Tarko Tikan, wrote: > hey, > > > At least when accessing here from Brazil, it gets stuck in the > > cloudflare tool. > > Anyone else with this problem? > > +1 > > We also see intermittent issues with whois.radb

Re: Websit of RADB stucked on Cloudflare

2023-01-27 Thread Tarko Tikan
hey, At least when accessing here from Brazil, it gets stuck in the cloudflare tool. > Anyone else with this problem? +1 We also see intermittent issues with whois.radb.net connections. -- tarko

Websit of RADB stucked on Cloudflare

2023-01-27 Thread Douglas Fischer
At least when accessing here from Brazil, it gets stuck in the cloudflare tool. Anyone else with this problem? [image: image.png] -- Douglas Fernando Fischer Engº de Controle e Automação

Re: RADb

2021-05-10 Thread Jay R. Ashworth
- Original Message - > From: "Stephane Bortzmeyer" > To: "Marco Paesani" > Cc: "nanog" > Sent: Monday, May 10, 2021 3:45:11 AM > On Mon, May 10, 2021 at 09:25:36AM +0200, > Marco Paesani wrote > a message of 51 lines which s

Re: RADb

2021-05-10 Thread Stephane Bortzmeyer
On Mon, May 10, 2021 at 09:25:36AM +0200, Marco Paesani wrote a message of 51 lines which said: > do you have news about the issue on RADb ? Note that it is discussed on the outages mailing list. No specific news, just that it is down.

RADb

2021-05-10 Thread Marco Paesani
Hi Guys, do you have news about the issue on RADb ? Please let me know, thank you. Kind regards, - Marco Paesani Skype: mpaesani Mobile: +39 348 6019349 Success depends on the right choice ! Email: ma...@paesani.it

Re: Pinging Lumen and RADB (was: Notice to IRRd operators)

2021-04-14 Thread Rubens Kuhl
Just to inform you that both RADB and Lumen are now in sync with TC again. Thanks to those who either contacted me or silently resolved the issue. Rubens On Mon, Apr 12, 2021 at 7:06 PM Rubens Kuhl wrote: > > After the change, NTT IRR is correctly mirroring the new IP address > (t

Pinging Lumen and RADB (was: Notice to IRRd operators)

2021-04-12 Thread Rubens Kuhl
After the change, NTT IRR is correctly mirroring the new IP address (thanks for that), but rr.level3.net and radb.net seem to be stuck with the old IP, and since the old IP address is non-authoritative (flag N), replication to those IRRs has in effect stopped. So, if those two IRR operators could

Re: Historic IRR/RADB snapshots?

2021-02-24 Thread Chriztoffer Hansen
On Wed, 24 Feb 2021 at 09:00, Lars Prehn wrote: > Does anybody have (somewhat frequent, e.g., monthly) snapshots of the > various IRR databases lying around? Any snapshot since 2010 would be > helpful! For any specific use-case whowas cannot solve? ¯(°_o)/¯ -- Chriztoffer

Re: Historic IRR/RADB snapshots?

2021-02-24 Thread Douglas Fischer
I'm not sure if it Covers IRR. But considering IRR is an extension of Whois... Arin keeps the service of "whowas" https://www.arin.net/reference/research/whowas/ I suggest you take a look there. And also, some IRRs keeps an archive folder on the FTP. ftp://ftp.radb.net/radb/dba

Historic IRR/RADB snapshots?

2021-02-24 Thread Lars Prehn
Does anybody have (somewhat frequent, e.g., monthly) snapshots of the various IRR databases lying around? Any snapshot since 2010 would be helpful! Best regards, Lars

Re: RADB contact needed

2021-01-20 Thread Ostap Efremov
Hi, I posted my initial e-mail 24 hours ago to NANOG but the moderation took a while and RADB has since removed all entries for this now unallocated /14. They deleted an incredible 408 records. Thanks a lot for this action RADB! However, seems like isp's are already making new RADB entrie

Re: RADB contact needed

2021-01-20 Thread Matt Harris
in small chunks to legitimate-but-gullible companies? The first /24 out of it and another latter /24 are advertised by a rural Nebraska WISP with a single-homed upstream to a company that I know to be legitimate who had added their entry to RADB for their customer. Most of the other chunks lo

Re: RADB contact needed

2021-01-20 Thread Mel Beckman
ote: > > Hello, > > I'm in need off a RADB contact. > I have reached out to them multiple times the past 72 hours requesting urgent > removal of all IRR records for a recently revoked afrinic /14 > However they did not reply and did not remove any records which belong to

RADB contact needed

2021-01-20 Thread Ostap Efremov
Hello, I'm in need off a RADB contact. I have reached out to them multiple times the past 72 hours requesting urgent removal of all IRR records for a recently revoked afrinic /14 However they did not reply and did not remove any records which belong to this unallocated ip space. This con

Re: RADB account deletions

2020-03-04 Thread Christopher Munz-Michielin
I actually ended up writing a python script to send ARIN's robot IRR updates because I got tired of dealing with the email templates.  An API would be a fantastic improvement. On 2020-03-04 11:32 a.m., Clinton Work wrote: The ARIN IRR doesn't support an API interface like the RAD

Re: RADB account deletions

2020-03-04 Thread Clinton Work
The ARIN IRR doesn't support an API interface like the RADB IRR. I hear that ARIN is working on an API, but I don't know the timeline. I don't want to go back to email templates. https://www.arin.net/resources/manage/irr/userguide/ -- Clinton Work On Wed, Mar 4, 20

Re: RADB account deletions

2020-03-04 Thread Jared Mauch
> On Mar 4, 2020, at 12:27 PM, Clinton Work wrote: > > RADB MAINT-AS15290 was restored this morning along with all the original > route objects. The proxy route objects I added Tuesday were replaced by the > original MAINT-AS15290 objects. I’m curious if there’s a reas

Re: RADB account deletions

2020-03-04 Thread Eric Kuhnke
mer Allstream RADB account (MAINT-AS15290) and all > associated route objects were removed from RADB today. The deletion > mainly impacts Canadian route objects registered by the former Allstream > (now Zayo). Q9 Networks MAINT-AS12188 was deleted at the same time. > > -- > Clinton Work >

Re: RADB account deletions

2020-03-04 Thread Clinton Work
RADB MAINT-AS15290 was restored this morning along with all the original route objects. The proxy route objects I added Tuesday were replaced by the original MAINT-AS15290 objects. -- Clinton Work On Tue, Mar 3, 2020, at 11:39 AM, Job Snijders wrote: > On Tue, Mar 03, 2020 at 11:22:3

Re: RADB account deletions

2020-03-03 Thread Jared Mauch
> On Mar 3, 2020, at 1:39 PM, Job Snijders wrote: > > On Tue, Mar 03, 2020 at 11:22:35AM -0700, Clinton Work wrote: >> It looks like the former Allstream RADB account (MAINT-AS15290) and >> all associated route objects were removed from RADB today. The >> delet

Re: RADB account deletions

2020-03-03 Thread Job Snijders
On Tue, Mar 03, 2020 at 11:22:35AM -0700, Clinton Work wrote: > It looks like the former Allstream RADB account (MAINT-AS15290) and > all associated route objects were removed from RADB today. The > deletion mainly impacts Canadian route objects registered by the > former Allstre

RADB account deletions

2020-03-03 Thread Clinton Work
It looks like the former Allstream RADB account (MAINT-AS15290) and all associated route objects were removed from RADB today. The deletion mainly impacts Canadian route objects registered by the former Allstream (now Zayo). Q9 Networks MAINT-AS12188 was deleted at the same time

Re: Merit radb https interface, TLS1.0 only?

2018-02-13 Thread Mitchell Kuch
if you have any questions or concerns: db-ad...@radb.net - - Mitchell On Fri, Feb 2, 2018 at 9:15 PM, Eric Kuhnke wrote: > Is the radb login page supposed to be TLS1.0 only?

RADB - aut-num policy question

2018-02-05 Thread Ryan, Spencer
Hello all, I'm a bit out of my element on this one and hoping someone can help. I'm putting together an aut-num entry for RADB and have a question about our Comcast peerings. We peer with AS7922 in several sites, but if you look at the actual pathing via bgp.he.net or just

Re: Merit radb https interface, TLS1.0 only?

2018-02-02 Thread Andy Brezinsky
It's not just you: https://www.ssllabs.com/ssltest/analyze.html?d=radb.net&s=207.75.117.71 On 02/02/2018 08:15 PM, Eric Kuhnke wrote: Is the radb login page supposed to be TLS1.0 only? This is with the latest version of Firefox. Screenshot: https://imgur.com/nnlFmLZ I also noticed

RE: Merit radb https interface, TLS1.0 only?

2018-02-02 Thread Edwin Pers
18 9:16 PM To: nanog@nanog.org list Subject: Merit radb https interface, TLS1.0 only? >Is the radb login page supposed to be TLS1.0 only?

Merit radb https interface, TLS1.0 only?

2018-02-02 Thread Eric Kuhnke
Is the radb login page supposed to be TLS1.0 only? This is with the latest version of Firefox. Screenshot: https://imgur.com/nnlFmLZ I also noticed that the registration page is plain http/non TLS. for reference: https://www.google.com/search?client=ubuntu&channel=fs&q=tls+1.0+depre

Re: Getting an RADB entry removed that was added by a previous peer

2017-09-14 Thread João Butzke
changed: *j...@relianceglobalcom.com* 20091117 source: RADB Best Regards, João Butzke. Em 13/09/2017 08:05, Matthew Huff escreveu: It appears that Reliance Globalcom (AS6157) added an RADB entry for our prefix (129.77.0.0/16) when we were a peer of theirs years ago, and it was never

Re: Getting an RADB entry removed that was added by a previous peer

2017-09-13 Thread Sandra Murphy
2017, at 7:10 AM, Job Snijders wrote: > > On Wed, 13 Sep 2017 at 13:08, Matthew Huff wrote: > >> It appears that Reliance Globalcom (AS6157) added an RADB entry for our >> prefix (129.77.0.0/16) when we were a peer of theirs years ago, and it >> was never removed wh

Re: Getting an RADB entry removed that was added by a previous peer

2017-09-13 Thread Job Snijders
On Wed, 13 Sep 2017 at 13:08, Matthew Huff wrote: > It appears that Reliance Globalcom (AS6157) added an RADB entry for our > prefix (129.77.0.0/16) when we were a peer of theirs years ago, and it > was never removed when we ended the relationship. We are ASN 14607. > > I&#x

Getting an RADB entry removed that was added by a previous peer

2017-09-13 Thread Matthew Huff
It appears that Reliance Globalcom (AS6157) added an RADB entry for our prefix (129.77.0.0/16) when we were a peer of theirs years ago, and it was never removed when we ended the relationship. We are ASN 14607. I've reached out to their support, but does anyone have a suggestion on

Re: Merit RADB support

2017-06-07 Thread Andree Toonk
Hi Chuck, My secret spy satellite informs me that Chuck Anderson wrote On 2017-06-07, 5:21 PM: > Apologies to Merit RADB, it was BGPmon that never responds. Merit > RADB actually does respond--my frustration is more about the > difficulty in getting them to delete stale objects th

RE: Merit RADB support

2017-06-07 Thread Eric Krichbaum
ubject: Re: Merit RADB support On Wed, Jun 07, 2017 at 12:08:50PM -0400, Chuck Anderson wrote: > On Wed, Jun 07, 2017 at 10:41:16AM -0500, Kaiser, Erich wrote: > > Anyone gonna email me back from RADB support? > > In my experience, no. Apologies to Merit RADB, it was BGPmon that ne

RE: Merit RADB support

2017-06-07 Thread Erik Sundberg
For RADB, I was able to get them to delete a stale object 2 weeks ago. Only had to copy them on an email to the original source and wait 24 hours. I wish it was less because we are the netblock owner of the stale route object in question. Erik Sundberg Sr. Network Engineering Network

Re: Merit RADB support

2017-06-07 Thread Chuck Anderson
On Wed, Jun 07, 2017 at 12:08:50PM -0400, Chuck Anderson wrote: > On Wed, Jun 07, 2017 at 10:41:16AM -0500, Kaiser, Erich wrote: > > Anyone gonna email me back from RADB support? > > In my experience, no. Apologies to Merit RADB, it was BGPmon that never responds. Merit RAD

Re: [SPF:Probably_Forged] Merit RADB support

2017-06-07 Thread Chuck Anderson
On Wed, Jun 07, 2017 at 10:41:16AM -0500, Kaiser, Erich wrote: > Anyone gonna email me back from RADB support? In my experience, no.

Merit RADB support

2017-06-07 Thread Kaiser, Erich
Anyone gonna email me back from RADB support? Erich Kaiser The Fusion Network er...@gotfusion.net Office: 630-621-4804 Cell: 630-777-9291

Re: radb mirroring

2017-01-26 Thread Randy Bush
> Merit maintains an updated list on the web. > http://irr.net/docs/list.html and thank you for helping me update RGNET's entry randy

Re: radb mirroring

2017-01-25 Thread Mitchell Kuch
Randy - Merit maintains an updated list on the web. http://irr.net/docs/list.html - - Mitchell Mitchell Kuch mdk...@merit.edu RADb Analyst Merit Network Inc. - Original Message - From: "Randy Bush" To: "Chuck Anderson" Cc: "North American Network Operators

Re: radb mirroring

2017-01-25 Thread Nick Hilliard
Randy Bush wrote: > do we have a central, updatable, registry of IRR instances and their > mirrorable URLs? there's a list here, which ticks at least one of your multiple requirements: http://www.irr.net/docs/list.html Nick

Re: radb mirroring

2017-01-25 Thread Randy Bush
do we have a central, updatable, registry of IRR instances and their mirrorable URLs? randy

Re: radb mirroring

2017-01-25 Thread Randy Bush
> This is a clear case of broken mirroring. Unfortunately this is not > immediately apparent (for the operator) through the IRRd > software. Usually this is resolved by directly contacting the other > side. this is the IRR, there are potentially many other sides. the helpful folk at merit and i a

Re: radb mirroring

2017-01-25 Thread Chuck Anderson
mport: from AS209 accept ANY import: from AS7018 accept ANY [...] notify: dlnocipti...@charter.com mnt-by: MAINT-CHTR-WD changed:denny.de...@chartercom.com 20141028 #19:19:01Z ssource: RADB On Wed, Jan 25, 2017 at 09:27:40PM +0100, Job Snijders wrote: > This is a cl

Re: radb mirroring

2017-01-25 Thread Job Snijders
This is a clear case of broken mirroring. Unfortunately this is not immediately apparent (for the operator) through the IRRd software. Usually this is resolved by directly contacting the other side. I've found RADB support staff to be responsive and courteous. radb-supp...@meri

radb mirroring

2017-01-25 Thread Randy Bush
[ where does one discuss IRR issues these days? ] ryuu.psg.com:/Users/randy> whois -h whois.radb.net 98.128.244.0/24 route: 98.128.244.0/24 descr: RGNET-98-244 origin: AS3130 notify: r...@rg.net mnt-by: MAINT-RGNET changed:ra...@psg.com 20090411 source: RGNET but ry

Re: RADb Outage?

2016-01-24 Thread Jared Mauch
> On Jan 23, 2016, at 1:50 PM, Max Tulyev wrote: > > People do prefix filtering based on *DB may think twice... Ideally you would have your own local mirror or similar. Since there is the near realtime mirroring that occurs, other servers get the data within 5-30 minutes. This means you can

Re: RADb Outage?

2016-01-23 Thread Randy Bush
>> How come? What situations would you run into that are so urgent >> about updating prefix lists that the task can’t be put off >> for a few hours? > Those of you who have cron jobs doing an automatic pull can be quite > surprised by scenarios like this. doing it from cron, smart. installing re

Re: RADb Outage?

2016-01-23 Thread Valdis . Kletnieks
On Sat, 23 Jan 2016 14:02:52 -0500, Daniel Corbe said: > How come? What situations would you run into that are so urgent about > updating > prefix lists that the task can’t be put off for a few hours? Those of you who have cron jobs doing an automatic pull can be quite surprised by scenarios l

Re: RADb Outage?

2016-01-23 Thread Job Snijders
On Sat, Jan 23, 2016 at 12:42:07AM -0500, Larry J. Blunk wrote: > Service for the RADb whois protocol has now been restored. We were > experiencing extensive DDOS activity directed at the whois service > host(s). The whois.radb.net IPv4 address changed earlier today, the new IP is 129.2

Re: RADb Outage?

2016-01-23 Thread Daniel Corbe
Larry J. Blunk wrote: >> >> Service for the RADb whois protocol has now been restored. We were >> experiencing >> extensive DDOS activity directed at the whois service host(s). >> >> Regards, >> Larry Blunk >> Merit >> >> >

Re: RADb Outage?

2016-01-23 Thread Max Tulyev
People do prefix filtering based on *DB may think twice... On 23.01.16 07:42, Larry J. Blunk wrote: > >Service for the RADb whois protocol has now been restored. We were > experiencing > extensive DDOS activity directed at the whois service host(s). > > Regards

Re: RADb Outage?

2016-01-23 Thread Rubens Kuhl
NTT also seemed to suffer, I wonder if it's the same issue there... Rubens On Sat, Jan 23, 2016 at 3:42 AM, Larry J. Blunk wrote: > >Service for the RADb whois protocol has now been restored. We were > experiencing > extensive DDOS activity directed at the who

Re: RADb Outage?

2016-01-22 Thread Larry J. Blunk
Service for the RADb whois protocol has now been restored. We were experiencing extensive DDOS activity directed at the whois service host(s). Regards, Larry Blunk Merit

Re: RADb Outage?

2016-01-22 Thread Venkee
Same here, could not contact when I tried earlier today On Fri 22 Jan 2016 at 23:44 Stephen Fulton wrote: > Same here, whois.radb.net still appears down as of this message. > > -- Stephen > > > On 2016-01-22 5:27 PM, Brian Rak wrote: > > whois.radb.net seems to have been down since sometime last

Re: RADb Outage?

2016-01-22 Thread Nick Hilliard
Brian Rak wrote: > whois.radb.net seems to have been down since sometime last night, has > anyone else seen problems with this? since at least 2016-01-21, 20:30 UTC. It would be great if someone from RADB could give an update on what's happening because this downtime is causing

Re: RADb Outage?

2016-01-22 Thread Stephen Fulton
Same here, whois.radb.net still appears down as of this message. -- Stephen On 2016-01-22 5:27 PM, Brian Rak wrote: whois.radb.net seems to have been down since sometime last night, has anyone else seen problems with this? It seems the web interface still works, but that's not very useful for

RADb Outage?

2016-01-22 Thread Brian Rak
whois.radb.net seems to have been down since sometime last night, has anyone else seen problems with this? It seems the web interface still works, but that's not very useful for scripts.

Re: RADB

2015-01-08 Thread Nick Hilliard
On 08/01/2015 01:39, John East wrote: > Is there anyone from RADB or MerIt on this list that could contact me off > the list? radb-supp...@merit.edu is responsive when it comes to RADB IRRDB issues. Nick

RADB

2015-01-07 Thread John East
Is there anyone from RADB or MerIt on this list that could contact me off the list? John

Re: ARIN / RIR Pragmatism (WAS: Re: RADB)

2014-10-27 Thread John Curran
On Oct 27, 2014, at 12:58 AM, Randy Bush wrote: > >> LACNIC numbers (as a percent) are quite good, but my question >> was why only RIPE has the very impressive total count of ROAs. > > < conjecture follows > > > of course one can never know. but i conject > o the are the largest registry act

Re: ARIN / RIR Pragmatism (WAS: Re: RADB)

2014-10-26 Thread Randy Bush
> LACNIC numbers (as a percent) are quite good, but my question > was why only RIPE has the very impressive total count of ROAs. < conjecture follows > of course one can never know. but i conject o the are the largest registry actively promotin registration o the ncc, particularly alex, tim

Re: ARIN / RIR Pragmatism (WAS: Re: RADB)

2014-10-26 Thread Dmitry Burkov
John - it is not about RPK I - our initial goal was to deploy some kind of certification to resources allocated to our members Dmitry If we use for it some SIDR developments - may be - it is a mistake or misentrepration - but what's true that we never thougy On 26 Oct 2014, at 14:40, John Curr

Re: ARIN / RIR Pragmatism (WAS: Re: RADB)

2014-10-26 Thread Dmitry Burkov
it's just a consequence that our initial idea was just about to protect allocations of our members - not about secure routing at all On 26 Oct 2014, at 14:40, John Curran wrote: > On Oct 26, 2014, at 6:46 AM, Randy Bush wrote: >> >> 20% coverage in lacnic low? how do ipv6 and dnssec compare

Re: ARIN / RIR Pragmatism (WAS: Re: RADB)

2014-10-26 Thread John Curran
On Oct 26, 2014, at 6:46 AM, Randy Bush wrote: > > 20% coverage in lacnic low? how do ipv6 and dnssec compare (which is > damned sad)? over 2,000 in ripe and over 8%? how does that compare to > ipv6? > > arin, 388 and 0.7%, a joke. LACNIC numbers (as a percent) are quite good, but my quest

Re: ARIN / RIR Pragmatism (WAS: Re: RADB)

2014-10-26 Thread Randy Bush
john > To what extent is the ROA growth rate in the RIPE region (on page 5 of > the NANOG slides) enabled by the IRR practices of that region? check out slide 3, lacnic has a 20% adoption rate. both ripe and lacnic have put energy into their own systems, educating users, ... ripe's curve would

Re: ARIN / RIR Pragmatism (WAS: Re: RADB)

2014-10-25 Thread John Curran
On Oct 25, 2014, at 8:00 PM, Randy Bush wrote: > > you just happen to have the view from a third world country > look at. >http://archive.psg.com/141006.rpki-nanog.pdf slides 4 & 5 > or > http://certification-stats.ripe.net/?type=roa-v4 Randy - To what extent is the ROA growth rate in

Re: ARIN / RIR Pragmatism (WAS: Re: RADB)

2014-10-25 Thread Ca By
On Sat, Oct 25, 2014 at 5:00 PM, Randy Bush wrote: > you just happen to have the view from a third world country > look at. > http://archive.psg.com/141006.rpki-nanog.pdf slides 4 & 5 > or > http://certification-stats.ripe.net/?type=roa-v4 > > randy > I agree with Randy. RPKI is achievab

Re: ARIN / RIR Pragmatism (WAS: Re: RADB)

2014-10-25 Thread Randy Bush
you just happen to have the view from a third world country look at. http://archive.psg.com/141006.rpki-nanog.pdf slides 4 & 5 or http://certification-stats.ripe.net/?type=roa-v4 randy

Re: ARIN / RIR Pragmatism (WAS: Re: RADB)

2014-10-25 Thread Danny McPherson
On 2014-10-25 06:57, Sandra Murphy wrote: Other RIR based RIRs have the same ability to protect prefixes in their realm of control. (See RFC 2725 RPSS)(*) (I think that APNIC is doing pretty much as RIPE is.) Even RIPE is not secure for prefixes outside their region. (There's one maintainer t

Re: ARIN / RIR Pragmatism (WAS: Re: RADB)

2014-10-25 Thread Danny McPherson
On 2014-10-25 08:25, John Curran wrote: With respect to IRR support, the same answer applies. If the community is clear on direction, ARIN can strengthen the current IRR offerings, phase them out and redirect folks to existing solutions, or any other direction as desired. The hardest part is

Re: ARIN / RIR Pragmatism (WAS: Re: RADB)

2014-10-25 Thread John Curran
On Oct 23, 2014, at 4:18 PM, Danny McPherson wrote: > > On 2014-10-23 12:33, Christopher Morrow wrote: > >> Sounds like you want to see the rirs make sure they get rpki work >> dine and widely available with the least encumbrances on the network >> operator community as possible. > > Or focus o

Re: ARIN / RIR Pragmatism (WAS: Re: RADB)

2014-10-25 Thread Bill Woodcock
On Oct 25, 2014, at 9:38 PM, Danny McPherson wrote: > On 2014-10-24 15:24, Christopher Morrow wrote: > >> it seems to me that there are a couple simple issues with IRR data >> (historically): >> 1) no authority for it (really, at least in the ARIN region) >> 2) no common practice of keeping i

Re: ARIN / RIR Pragmatism (WAS: Re: RADB)

2014-10-25 Thread Sandra Murphy
Other RIR based RIRs have the same ability to protect prefixes in their realm of control. (See RFC 2725 RPSS)(*) (I think that APNIC is doing pretty much as RIPE is.) Even RIPE is not secure for prefixes outside their region. (There's one maintainer that anyone can use to register anything

Re: ARIN / RIR Pragmatism (WAS: Re: RADB)

2014-10-25 Thread Danny McPherson
On 2014-10-24 15:24, Christopher Morrow wrote: it seems to me that there are a couple simple issues with IRR data (historically): 1) no authority for it (really, at least in the ARIN region) 2) no common practice of keeping it updated 3) proxy-registration issues (probably part of cleanup

Re: ARIN / RIR Pragmatism (WAS: Re: RADB)

2014-10-24 Thread Baldur Norddahl
The RIPE IRR is secure. Why not just copy that for the other regions? Baldur

Re: ARIN / RIR Pragmatism (WAS: Re: RADB)

2014-10-24 Thread Christopher Morrow
On Fri, Oct 24, 2014 at 8:23 AM, John Sweeting wrote: > > > On Thu, Oct 23, 2014 at 4:18 PM, Danny McPherson wrote: >> >> On 2014-10-23 12:33, Christopher Morrow wrote: >> >>> Sounds like you want to see the rirs make sure they get rpki work >>> dine and widely available with the least encumbranc

Re: ARIN / RIR Pragmatism (WAS: Re: RADB)

2014-10-24 Thread John Sweeting
On Thu, Oct 23, 2014 at 4:18 PM, Danny McPherson wrote: > On 2014-10-23 12:33, Christopher Morrow wrote: > > Sounds like you want to see the rirs make sure they get rpki work >> dine and widely available with the least encumbrances on the network >> operator community as possible. >> > > Or focu

Re: ARIN / RIR Pragmatism (WAS: Re: RADB)

2014-10-23 Thread Danny McPherson
On 2014-10-23 15:02, Sandra Murphy wrote: IRR usage, training, tools, and better hygiene, perhaps expressly validated from resource certification from either RPKI You might be interested in the draft-ietf-sidr-rpsl-sig-05.txt, which suggests using RPKI to protect RPSL objects. Yep, I'm aware

Re: ARIN / RIR Pragmatism (WAS: Re: RADB)

2014-10-23 Thread Sandra Murphy
> IRR usage, training, tools, and better hygiene, perhaps expressly validated > from resource certification from either RPKI You might be interested in the draft-ietf-sidr-rpsl-sig-05.txt, which suggests using RPKI to protect RPSL objects. That would help solve the trust problem in the current

Re: ARIN / RIR Pragmatism (WAS: Re: RADB)

2014-10-23 Thread Danny McPherson
On 2014-10-23 12:33, Christopher Morrow wrote: Sounds like you want to see the rirs make sure they get rpki work dine and widely available with the least encumbrances on the network operator community as possible. Or focus on more short/intermediate term returns like fortifying all the existi

Re: ARIN / RIR Pragmatism (WAS: Re: RADB)

2014-10-23 Thread Christopher Morrow
On Oct 23, 2014 2:27 PM, "Danny McPherson" wrote: > > > > I think the routing system would be in a much happier [less bad] place if only had a minor amount of the energy and resources that USG (and RIRs) have been put towards RPKI and BGPSEC (i.e., IETF SIDR work) would have been redirected to lo

ARIN / RIR Pragmatism (WAS: Re: RADB)

2014-10-23 Thread Danny McPherson
I think the routing system would be in a much happier [less bad] place if only had a minor amount of the energy and resources that USG (and RIRs) have been put towards RPKI and BGPSEC (i.e., IETF SIDR work) would have been redirected to lower hanging fruit and better recognizing / leveraging

Re: RADB

2014-10-08 Thread Charles Gucker
about learning the basic's of IRRd. > > Speaking for myself, if there is a good answer, I would welcome it. > > Here is what I had to do... > > 1. Used Radb lookup on different AS-Set and ASN to get a feel on how others > were using this resource. > >2. Went t

Re: RADB

2014-10-08 Thread joel jaeggli
ence fairly > recently in using IRRd.. > > So the real question Brandon is asking.. > > For a newbie, how does one go about learning the basic's of IRRd. > > Speaking for myself, if there is a good answer, I would welcome it. > > Here is what I had to do... > &

Re: RADB

2014-10-08 Thread Brandon Wade
So the real question Brandon is asking.. For a newbie, how does one go about learning the basic's of IRRd. Speaking for myself, if there is a good answer, I would welcome it. Here is what I had to do... 1. Used Radb lookup on different AS-Set and ASN to get a feel on how others were us

Re: RADB

2014-10-08 Thread Faisal Imtiaz
hat I had to do... 1. Used Radb lookup on different AS-Set and ASN to get a feel on how others were using this resource. 2. Went thru the ARIN IRRd Tutorial / info pages on how to create records etc. 3. Did Google searches on finding some of the older NANOG presentations about

Re: RADB

2014-10-08 Thread Charles Gucker
You can also verify the object configurations from another IRRd, such as Level(3) whois -h filtergen.level3.net "RADB::YOUR-AS-SET -searchpath=RIPE;ARIN;RADB -recurseok -warnonly" You can limit the searchpath to just include RADB if you wish, but it's good to know what el

Re: RADB

2014-10-08 Thread Nick Hilliard
On 08/10/2014 21:44, Brandon Wade wrote: > My next question is, why would RADB offer zero support for confirming > this? And lastly, why should my organization pay $500 per year to a > service that is unwilling to assist in making sure their subscriber is > using their service properl

RADB

2014-10-08 Thread Brandon Wade
Hi, I really don't know where else to post this. I recently subscribed to RADB and added route objects and route6 objects for our prefixes we announce. Of course an aut-num object was created and I created a list of ASN's that are downstream customers in an as-set list. But, since

Re: Internet Routing Registries - RADb, etc

2014-01-17 Thread Joe Abley
On 2014-01-16, at 18:21, Jeroen Massar wrote: > On 2014-01-16 23:11, Nick Hilliard wrote: >> On 16/01/2014 21:22, Jon Lewis wrote: >>> Also, at least of the ones I've dealt with, there is no verification of >>> records as they're entered. >> >> on the RIPE IRRDB, there is validation, so you can

Re: Internet Routing Registries - RADb, etc

2014-01-16 Thread Jeroen Massar
On 2014-01-16 23:11, Nick Hilliard wrote: > On 16/01/2014 21:22, Jon Lewis wrote: >> Also, at least of the ones I've dealt with, there is no verification of >> records as they're entered. > > on the RIPE IRRDB, there is validation, so you can't just go in and > register route: objects for someone

Re: Internet Routing Registries - RADb, etc

2014-01-16 Thread Nick Hilliard
On 16/01/2014 21:22, Jon Lewis wrote: > Also, at least of the ones I've dealt with, there is no verification of > records as they're entered. on the RIPE IRRDB, there is validation, so you can't just go in and register route: objects for someone else's allocations or assignments. Not sure about t

RE: Internet Routing Registries - RADb, etc

2014-01-16 Thread Jon Lewis
urned the ultimately responsible individual a few times which makes it tough to get someone knowledgeable. Larry and team however at RADB will respond to remove your entries from someone else's stale records without much hassle. Cogent will use your IRR data to generate a list the first tim

Re: Internet Routing Registries - RADb, etc

2014-01-16 Thread Blake Hudson
courtneysm...@comcast.net wrote the following on 1/16/2014 12:26 PM: On 16/01/2014 14:32, Blake Hudson wrote: Thanks for the responses, these objects are all older. However, none of them are stale or from previous owners, allocations, etc. Each of these objects were posted to their respective I

  1   2   >