Hi Rob

If the command of load_roa_requests works like as you described, I have one
other question.

It would have problems with the load_roa_requests command in the case as
below : 
We have issued ROA1 for AS1-> IP Prefix1 five minutes ago. Then we want to
issue ROA2 for AS1-> IP Prefix2. As you described below, we need to include
ROA1 in the new set when we are issuing the ROA2. But AS1 has not been
authorized to announce IP prefix2. So we are failed to issue the ROA2. And
the ROA1 are also failed for issuing as together with the ROA2. This will be
a mistake for this use case.

BR
Yu

-----Original Message-----
From: Rob Austein [mailto:s...@hactrn.net] 
Sent: Thursday, September 24, 2015 11:59 AM
To: Yu Fu
Cc: r...@rpki.net
Subject: Re: [rpki] [sidr] Some test results of ROA issuing for sharing

I think you misunderstood how the load_roa_requests command works.  It
REPLACES the set of ROA requests with a new set.  If you want to keep an
existing ROA in the set, you have to include it in the new set.

Putting it another way: the way you would tell rpkic that you want to delete
all your roas would be to load_roa_requests /dev/null.

So, as I can tell from your report, the code is working as designed.


_______________________________________________
sidr mailing list
sidr@ietf.org
https://www.ietf.org/mailman/listinfo/sidr

Reply via email to