<div><div><div dir="auto">Dear Ivan,</div></div><div dir="auto"><br></div><div dir="auto">Why do you leave it up to ISPs to do additional work to get rid of invalid BGP announcements? That is not the best practice for route servers.</div><div dir="auto"><br></div><div dir="auto">An analogy I like to use is that I give you a glass of water (with poison), then afterwards you ask me “why did you give me poison?!”, to which I reply “well it was clearly labeled ‘poison’ on the bottom of the glass!”.</div><div dir="auto"><br></div><div dir="auto">Propagating RPKI invalid announcements does not help anyone, and goes against the explicitly stated wishes of those who created RPKI ROAs for their prefixes.</div><div dir="auto"><br></div><div dir="auto">Kind regards,</div><div dir="auto"><br></div><div dir="auto">Job</div></div><div><div><br><div class="gmail_quote"><div dir="ltr">On Fri, Dec 14, 2018 at 14:08 Ivan Žilić Schmidt <<a href="mailto:ivan@zilic.net" target="_blank">ivan@zilic.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div lang="ES-CL" link="#0563C1" vlink="#954F72"><div class="m_-8435118070749289299m_-6735032164164859902WordSection1"><p class="MsoNormal"><span style="font-family:"Times New Roman",serif">Estimados Miembros de LACNOG,<u></u><u></u></span></p><p class="MsoNormal"><span style="font-family:"Times New Roman",serif"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-family:"Times New Roman",serif">Junto con saludarlos, quisiera comentarles que desde el mes de septiembre de este año hemos implementado validación RPKI tanto para IPv4 como para IPv6 en nuestros route servers.<u></u><u></u></span></p><p class="MsoNormal"><span style="font-family:"Times New Roman",serif"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-family:"Times New Roman",serif">Hemos definido que sólo realizaremos tagging con comunidades según los resultados de la validación y dejaremos a los ISPs la opción de filtrar de acuerdo con sus propias políticas.<u></u><u></u></span></p><p class="MsoNormal"><span style="font-family:"Times New Roman",serif"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-family:"Times New Roman",serif">Nuestra implementación incluye un set de gráficos estadísticos públicos, en tiempo real y con históricos que pueden ver en <a href="https://www.pitchile.cl/wp/graficos-con-indicadores/" target="_blank">https://www.pitchile.cl/wp/graficos-con-indicadores/</a> <u></u><u></u></span></p><p class="MsoNormal"><span style="font-family:"Times New Roman",serif"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-family:"Times New Roman",serif">Aproximadamente el 87% de los prefijos IPv4 no tiene certificación RPKI y en el caso de IPv6, el 76% se mantiene como unknown.<u></u><u></u></span></p><p class="MsoNormal"><span style="font-family:"Times New Roman",serif"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-family:"Helvetica",sans-serif;color:#666666">Saludos,</span><span> </span><span style="font-family:"Helvetica",sans-serif;color:#666666"><u></u><u></u></span></p><table class="m_-8435118070749289299m_-6735032164164859902MsoNormalTable" border="0" cellspacing="1" cellpadding="0" width="452" style="width:339.0pt"><tbody><tr style="height:95.15pt"><td width="254" style="width:190.6pt;padding:.75pt .75pt .75pt .75pt;height:95.15pt"><p class="MsoNormal"><span style="font-size:10.0pt;color:#1f497d"> </span><a href="http://www.pitchile.cl/" target="_blank"><span style="font-size:10.0pt;color:#1f497d;text-decoration:none"><img border="0" width="221" height="79" style="width:2.3055in;height:.8263in" id="m_-8435118070749289299m_-6735032164164859902_x0000_i1027" src="http://www.pitchile.cl/images/logo_pitchile_web.png" alt="http://www.pitchile.cl/images/logo_pitchile_web.png"></span></a><span><u></u><u></u></span></p></td><td width="195" style="width:146.3pt;padding:.75pt .75pt .75pt .75pt;height:95.15pt"><p class="MsoNormal"><i><span style="font-family:"Helvetica",sans-serif;color:#666666">Ivan Žilić Schmidt</span></i><i><span style="font-family:"Courier New";color:#1f497d"><br></span></i><i><span style="font-family:"Courier New";color:#1f497d"><img border="0" src="cid:167acd9e9db3e91e9171" alt="We_Love_IPv6-185x55" style="width:185px;max-width:100%"><br></span></i><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif;color:#666666">Badajoz 45, piso 17 <br>Las Condes | Santiago | CHILE<br></span><b><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif;color:#ff6600">T</span></b><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif;color:#666666"> </span><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif;color:#ff6600">56 22840 9984</span><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif;color:#666666"> (</span><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif;color:#ff6600">Ext 140</span><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif;color:#666666">) </span><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif;color:#666666">| </span><b><span style="font-size:10.0pt;color:#ff6600">ASNs</span></b><span style="font-size:10.0pt;color:#ff6600"> 61522 </span><span style="font-size:10.0pt;color:#595959">/</span><span style="font-size:10.0pt;color:#7f7f7f"> </span><span style="font-size:10.0pt;color:#ff6600">61524 </span><span style="font-size:10.0pt;color:#595959">/</span><span style="font-size:10.0pt;color:#ff6600"> 61525 </span><span style="font-size:10.0pt;color:#595959">/</span><span style="font-size:10.0pt;color:#ff6600"> 61526 </span><span style="font-size:10.0pt;color:#595959">/</span><span style="font-size:10.0pt;color:#ff6600"> 61527 </span><span style="font-size:10.0pt;color:#595959">/</span><span style="font-size:10.0pt;color:#ff6600"> 64112<u></u><u></u></span></p></td></tr></tbody></table><p class="MsoNormal"><span><u></u> <u></u></span></p><p class="MsoNormal"><a href="https://www.pitchile.cl/wp/evento-santiago-2019/" target="_blank"><span style="text-decoration:none"><img border="0" src="cid:167acd9e9db4231b3142" style="width:700px;max-width:100%"></span></a><span><u></u><u></u></span></p><p class="MsoNormal"><span><u></u> <u></u></span></p><p class="MsoNormal"><u></u> <u></u></p></div></div>_______________________________________________<br>
LACNOG mailing list<br>
<a href="mailto:LACNOG@lacnic.net" target="_blank">LACNOG@lacnic.net</a><br>
<a href="https://mail.lacnic.net/mailman/listinfo/lacnog" rel="noreferrer" target="_blank">https://mail.lacnic.net/mailman/listinfo/lacnog</a><br>
Cancelar suscripcion: <a href="https://mail.lacnic.net/mailman/options/lacnog" rel="noreferrer" target="_blank">https://mail.lacnic.net/mailman/options/lacnog</a><br>
</blockquote></div></div>
</div>