[lacnog] Fwd: [connect-wg] BCOP for the use of IRR DBs in IXP RS - Last call

[Rubens Kuhl]

For completion, only LACNIC allocations made by LACNIC itself and
NIC.mx can use the self-hosted RPKI by LACNIC and, in consequence,
LACNIC IRR.

Brazilian allocations can only use delegated RPKI, and there is no IRR
service either from NIC.br or LACNIC that they can use. But those
allocations can use TC IRR and have both IRR and RPKI, or only one of
them. TC IRR does not require RPKI for having IRR entries, but it uses
RPKI to invalidate entries that contradict RPKI ROAs.

In short:
LACNIC allocations outside Brazil: can have self-hosted RPKI, can't
have delegated RPKI, can have RIR IRR entries if RPKI is configured
NIC.br allocations: can only have delegated RPKI, can use TC IRR and
that doesn't require RPKI


Rubens




On Thu, Jun 6, 2024 at 4:52 PM Job Snijders <job en sobornost.net> wrote:
>
> Dear Tomas,
>
> Yes, RPKI ROA creation triggers automatic IRR route object creation in LACNIC’s IRR. I consider the synchronicity between RPKI and IRR a big advantage for the LACNIC region. Other regions lag behind in this regard.
>
> No, you cannot create IRR route objects for LACNIC IP space in the APNIC IRR system.
>
> Kind regards,
>
> Job
>
> On Thu, 6 Jun 2024 at 21:49, Tomas Lynch <tomas.lynch en gmail.com> wrote:
>>
>> Varias cosas sueltas sobre este tema:
>>
>> Sugerencia: Desde que RADb verifica RPKI creo que es una buena opción incluirlo en la lista.
>>
>> Pregunta para ti Carlos Marcelo:
>>
>> LACNIC me asigna 2001:db8:1000::/48, ¿el objeto route6, es creado automáticamente en LACNIC o yo debo crearlo?
>>
>> Si no es creado automáticamente y LACNIC le asigna 2001:db8:2000::/48 a Batman S.A., y Batman es mi cliente y no entiende nada de IRRs, incluso no entiende quién es LACNIC. ¿Puedo yo crear los objetos route6 para Batman con mi usuario LACNIC?
>>
>> Si no se crea automáticamente y yo no puedo crearlos por mis usuarios como sucede en RADb, este BCP es inútil. El otro día charlando con un gran amigo le dije que nosotros vivíamos en una burbuja, que pensamos que todo el mundo que maneja una red sabe de BGP, sabe de RPSL, RPKI, etc. Pero esto no es así, allá afuera de la burbuja de RIRs, IXPs, peering forums, etc. viven una cantidad de personas que nunca se van a enterar de que existen estas cosas y confían en que sus proveedores de Internet lo solucionen.
>>
>> Por supuesto borrar todo lo que dije anteriormente si esto es creado automáticamente.
>>
>> Otra pregunta con Batman y sus asignación, ¿puedo crear un objeto en APNIC si la asignación es de LACNIC?
>>
>> Saludos,
>>
>> Tomas Lynch
>>
>>
>>
>> On Tue, Jun 4, 2024 at 7:41 AM Carlos Martinez-Cagnazzo <carlosm3011 en gmail.com> wrote:
>>>
>>> Creo que puede ser de interés !
>>>
>>> --
>>> ==================
>>>
>>>
>>> ---------- Forwarded message ---------
>>> From: Stavros Konstantaras <stavros.konstantaras en ams-ix.net>
>>> Date: Tue, 4 Jun 2024 at 8:16 AM
>>> Subject: [connect-wg] BCOP for the use of IRR DBs in IXP RS - Last call
>>> To: Connect-WG <connect-wg en ripe.net>
>>> CC: Andrei Dinu <andrei.dinu en digitalit.ro>, Marco d'Itri <md en linux.it>, Will van Gulik <will en van.gulik.ch>
>>>
>>>
>>> Hi folks,
>>>
>>>
>>>
>>> We are discussing this subject since RIPE86 and we have presented our progress in both RIPE87 and RIPE88. Every time we bring this subject, we receive strong support from the community, both during the presentations and in personal discussions. We thank you all for that as it provides us fuel and motivation to continue our work.
>>>
>>>
>>>
>>> I have discussed the process with RIPE NCC employees and they are happy to adopt it as an official RIPE BCP/document, as long as the support is documented in this mailing list.
>>>
>>>
>>>
>>> Thus, we would like to make a call for adoption for this working item. Please find attached the latest version of the draft and feel free to submit your comments in case you find mistakes (e.g. typos, grammar, etc etc).
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> Kind Regards
>>>
>>>
>>>
>>> Stavros, Marco, Will, Andrei
>>>
>>> _______________________________________________
>>> connect-wg mailing list
>>> connect-wg en ripe.net
>>> https://lists.ripe.net/mailman/listinfo/connect-wg
>>>
>>> To unsubscribe from this mailing list, get a password reminder, or change your subscription options, please visit: https://lists.ripe.net/mailman/listinfo/connect-wg
>>> _______________________________________________
>>> LACNOG mailing list
>>> LACNOG en lacnic.net
>>> https://mail.lacnic.net/mailman/listinfo/lacnog
>>> Cancelar suscripcion: https://mail.lacnic.net/mailman/options/lacnog
>>
>> _______________________________________________
>> LACNOG mailing list
>> LACNOG en lacnic.net
>> https://mail.lacnic.net/mailman/listinfo/lacnog
>> Cancelar suscripcion: https://mail.lacnic.net/mailman/options/lacnog
>
> _______________________________________________
> LACNOG mailing list
> LACNOG en lacnic.net
> https://mail.lacnic.net/mailman/listinfo/lacnog
> Cancelar suscripcion: https://mail.lacnic.net/mailman/options/lacnog