wobscale has now published RPKI ROAs through ARIN

thank you for listening to this alphabet soup post

I finally did this because a senior principal network engineer at messaged me on internal IRC saying I should do the thing, which is so far the best way anyone has reached the wobscale NOC (me)

Show thread

also for the longest time I had this impression that RPKI was implemented by stapling signatures onto route announcements, which is why I was completely uninterested in getting it to work with my setup?

I now understand that the BGP side of things is meant to passively sync down ROA changes and apply routing rules based on them (which I'm still not doing but am adding as a requirement for the new network setup)

Show thread

@iliana wait... i thought the same. i have some reading to do!

Sign in to participate in the conversation

Cybrespace is an instance of Mastodon, a social network based on open web protocols and free, open-source software. It is decentralized like e-mail.