Internet2 Network Security SIG

[gcbrowni <>]

Interesting you mention this.

I2 has been cleaning things up, based on our MANRS project. We’ve found lots of discrepancies between what were’ve registered and what we’re announcing. 

If nothing else, it’s been great from a housekeeping standpoint. 

On Oct 8, 2018, at 12:53 PM, David Farmer <> wrote:

There was a good presentation about a study on RPKI legal barriers at NANOG, there should be a video for the session but the Monday afternoon video seems to be missing and the videos for the individual session aren't up yet. 

https://pc.nanog.org/static/published/meetings/NANOG74/1767/20181001_Yoo_Overcoming_Legal_Barriers_v1.pdf

ARIN has committed to review the final report which is due in December and there was already a good discussion started at the meeting, I think progress is or will be made, but I doubt it will go far enough to make everyone happy.

The RPKI legal barriers presentation was repeated along with a bunch of other good content in the Tuesday Morning Security Track on BGP Security, however, there was no video of this track.

https://pc.nanog.org/static/published/meetings/NANOG74/1760/20181003_Tzvetanov_Security_Track_Bgp_v1.pdf

Lots of good stuff, the biggest news is Google plans to begin filtering based on IRR objects early next year, slide 114 in the deck. More generally, there is a big push across the Internet industry to clean up routing, to eliminate route leaks and hijacking, with filtering based on IRR objects and filtering of RPKI invalid routes. 

So, If you don't already have IRR objects or they are not up to date you might want to fix that soon. This is a handy tool to check the consistency of your IRR objects.

http://irrexplorer.nlnog.net/

See you all in Orlando for TechEx

--

===============================================
David Farmer              
Networking & Telecommunication Services
Office of Information Technology
University of Minnesota  
2218 University Ave SE        Phone: 612-626-0815
Minneapolis, MN 55414-3029   Cell: 612-812-9952
===============================================

Attachment: smime.p7s
Description: S/MIME cryptographic signature