<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<p>FYI, interesante.<br>
</p>
<div class="moz-forward-container"><br>
<br>
-------- Forwarded Message --------
<table class="moz-email-headers-table" cellspacing="0"
cellpadding="0" border="0">
<tbody>
<tr>
<th valign="BASELINE" nowrap="nowrap" align="RIGHT">Subject:
</th>
<td>Calgary Internet Exchange (YYCIX) deploys world's first
ASPA-filtering Route Servers</td>
</tr>
<tr>
<th valign="BASELINE" nowrap="nowrap" align="RIGHT">Date: </th>
<td>Thu, 2 Feb 2023 18:57:09 +0000</td>
</tr>
<tr>
<th valign="BASELINE" nowrap="nowrap" align="RIGHT">From: </th>
<td>Job Snijders <a class="moz-txt-link-rfc2396E" href="mailto:job@sobornost.net"><job@sobornost.net></a></td>
</tr>
<tr>
<th valign="BASELINE" nowrap="nowrap" align="RIGHT">To: </th>
<td><a class="moz-txt-link-abbreviated" href="mailto:nanog@nanog.org">nanog@nanog.org</a></td>
</tr>
</tbody>
</table>
<br>
<br>
CALGARY, CA-AB, Feb. 2, 2023 - The Calgary Internet Exchange
(YYCIX) is<br>
thrilled to announce the deployment of the world's first
ASPA-filtering<br>
Route Servers on a public peering fabric. The YYCIX Route Servers
drop<br>
ASPA-invalid BGP routes in order to protect multilateral peers.<br>
<br>
ASPA (Autonomous System Provider Authorization) is a free
RPKI-based<br>
technology for detection and mitigation of BGP route leaks. ASPA
enables<br>
holders of Autonomous System identifiers to securely authorize one
or<br>
more other Autonomous Systems as their upstream providers, in turn<br>
enabling Relying Parties (ISPs and IXPs) to use this
cryptographically<br>
verifiable information to automatically stop improbable BGP paths
from<br>
spreading through the global Internet routing system.<br>
<br>
ASPA complements other routing safety & security mechanisms:
RPKI-ROV<br>
helps guard against fat-finger keyboard input errors, BGPsec helps<br>
establish strong assurances about BGP message authenticity &
integrity,<br>
and finally ASPA helps stop route leaks. The key to worry-free
routing<br>
operations will be to use all three in tandem.<br>
<br>
The ASPA specification is in active development as a freely
accessible<br>
open standard through the collaborative Internet Engineering Task
Force<br>
(IETF) process. YYCIX volunteers took on a leading role as early<br>
adopters (or 'lighthouse customer') to foster an environment in
which<br>
real-world feedback can be contributed to the OpenBGPD developers
and<br>
ASPA specification authors in the SIDROPS working group. Our hope
is<br>
that many vendors and operators will embrace ASPA in the years to
come.<br>
<br>
About YYCIX Internet Exchange Community Ltd<br>
===========================================<br>
YYCIX is incorporated as a volunteer-driven tax-exempt non-profit<br>
corporation in Canada's third-largest municipality. YYCIX provides<br>
Alberta residents with direct access to local Internet content and
helps<br>
increase the transfer speed of Internet communications between
Alberta<br>
companies, friends, neighbors and family members.
<a class="moz-txt-link-freetext" href="https://www.yycix.ca/">https://www.yycix.ca/</a><br>
<br>
About OpenBGPD & Rpki-client<br>
============================<br>
Rpki-client is an freely usable and secure implementation of the
RPKI<br>
for Relying Parties to facilitate validation of BGP announcements.
The<br>
program queries the global RPKI repository system, verifies all<br>
cryptographic signatures, and outputs validated data in
configuration<br>
formats suitable for OpenBGPD and StayRTR.
<a class="moz-txt-link-freetext" href="https://www.rpki-client.org/">https://www.rpki-client.org/</a><br>
<br>
OpenBGPD is a free implementation of the IETF's Border Gateway
Protocol<br>
suitable for ISPs and IXPs. OpenBGPD allows ordinary machines to
be used<br>
as routers or route servers exchanging routes with other systems.<br>
ASPA-filtering in OpenBGPD was developed with support from the
German<br>
Ministry for Economic Affairs & Climate Action's Sovereign
Tech Fund,<br>
and the Route Server Support Foundation (RSSF -
<a class="moz-txt-link-freetext" href="https://www.rssf.nl/">https://www.rssf.nl/</a>)<br>
<a class="moz-txt-link-freetext" href="https://www.openbgpd.org/">https://www.openbgpd.org/</a><br>
<br>
OpenBGPD and rpki-client are part of the OpenBSD Project; and run
on a<br>
wide variety of operating systems such as Debian, Ubuntu, Alpine,<br>
CentOS, Fedora, FreeBSD, Red Hat, and of course OpenBSD!<br>
</div>
</body>
</html>