figgmeister, 1 month ago to ipv6

My colleague Ilke has done a nice Roslingesque visualisation of #RPKI and #IPv6 progress in south-east Europe over the past few years.

https://forum.ripe.net/t/rpki-ipv6-progress-in-southeast-europe/932

alexband, 3 months ago to rust

Routinator by @nlnetlabs is now packaged upstream in @fedora (and EPEL); thanks @michelin! 🚀 #RPKI #Rust #rustlang https://src.fedoraproject.org/rpms/rust-routinator

jtk, 4 months ago to random

Deutsche Telekom, #AS3320 will be dropping prefixes that do not validate with #RPKI ROV.
https://www.ripe.net/ripe/mail/archives/ripe-list/2024-February/003147.html

jtk, 4 months ago to random

CableLabs Cybersecurity Framework Profile for Internet Routing V01 https://www.cablelabs.com/specifications/CL-GL-RS-Profile
#BGP #RPKI

jtk, 4 months ago to random

JDR was a nice #RPKI debugging and analysis tool. Sorry to see it go, but on a positive note source code will be available Thanks for making it in the first place @nlnetlabs!
https://lists.nlnetlabs.nl/pipermail/rpki/2024-January/000509.html

jtk, 4 months ago to meta

#NANOG90 subset talk abstracts posted. Some highlight topics:

• #RPKI ROV measurements
• Geoff Huston on #BGP
• #PTP at #Meta
• #Golang, #Python, and automation
• #AI and #ML in networking

Details at https://nanog.org/events/nanog-90/

jtk, 5 months ago (edited 5 months ago) to random

@dougmadory's analysis of the Orange España Hack https://www.kentik.com/blog/digging-into-the-orange-espana-hack/ #RPKI #RIPE

jtk, 5 months ago to random

@job's RPKI 2023 year in review - growth, governments, and innovation https://mailman.nanog.org/pipermail/nanog/2024-January/224318.html

#RPKI #Routing #IETF

jtk, 5 months ago to random

Is the LoA DoA for routing? https://www.first.org/blog/20231222-Is-the-LoA-DoA-for-Routing by Carlos Friaças, Michael Smith, and the FIRST.org NETSEC SIG. #BGP #RPKI

jtk, 6 months ago to random

Weekend Reads:

• Routing zones of trust https://arxiv.org/abs/2312.03305
• RBL evaluation methodology https://www.icann.org/en/system/files/files/octo-037-04dec23-en.pdf
• Cloud storage honey buckets https://arxiv.org/abs/2312.00580
• Proxy-based DDoS on PH news site https://www.qurium.org/weaponizing-proxy-and-vpn-providers/fineproxy-rayobyte/
• Detecting RPKI flaws with fuzzing https://arxiv.org/abs/2312.01872

#BGP #Blocklists #Honeypots #DDoS #RPKI

dataplane, 6 months ago to random

The Internet Last Week

• IETF 118
  https://www.ietf.org/how/meetings/118/
• Optus service disruption
  https://cloudflare.social/@radar/a7a89de1-e8d0-4ccf-b8d3-d3f04812838f
  https://www.theregister.com/2023/11/08/internet_phone_train_and_payments/
  https://mastodon.social/@netblocks/111376025251798310
• Cloudflare service disruption
  https://www.cloudflarestatus.com/incidents/hm7491k53ppg
  https://blog.cloudflare.com/post-mortem-on-cloudflare-control-plane-and-analytics-outage/
• AFRINIC RPKI RRDP service disruption
  https://status.afrinic.net/notices/l1xlimpwnjxvqn3v-rrdp-service-degradation

#IETF118 #Optus #Cloudflare #AFRINIC #RPKI

nlnetlabs, 7 months ago to random

We're putting the finishing touches on #ASPA v1 support in Krill, removing the afiLimit that was in v0. Routinator already supports the latest ASPA draft, so we'll be right on the bleeding edge again. #RPKI #RoutingSecurity #OpenStandards https://github.com/NLnetLabs/krill/pull/1141

becha, 7 months ago (edited 7 months ago) to Amsterdam

My employer is hiring! If you wish to deliver technical training courses, webinars and presentations on topics such as IPv6, #BGP, routing security #RPKI and the #RIPE Database… while working mostly from #Amsterdam … apply here … and mention me in the referral :) https://www.ripe.net/about-us/staff/careers-at-the-ripe-ncc/vacancy/290087 especially if you will also bring with you the aspects of #environmental #justice, #diversity & #inclusion, and an #activist attitude! Https://Ripe.net/jobs

forumstandaardisatie, 8 months ago to random Dutch

Together with OECD-OCDE, JPNAP and RIPE NCC we have the honour to join 'Increasing routing security globally through cooperation' at IGF Kyoto 2023. Please feel free to join us online. Mind the UTC time 🕗, 8:15 am in A'dam.

Forum Standaardisation and Platform Internet Standards inform you how the Dutch government tackle the adoption of (internet safety) standards and more specific in relation to #RPKI. Meet you there 👉:

https://www.intgovforum.org/en/content/igf-2023-ws-339-increasing-routing-security-globally-through-cooperation

@ministerieezk @internet_nl #inkoop #procurement

jtk, 8 months ago to random

Weekend Reads:

• Measuring RPKI ROV https://taejoong.github.io/pubs/publications/li-2023-rov.pdf
• Attacks on cloud hosts https://arxiv.org/abs/2309.13471
• DPI-triggered web risks https://www.sysnet.ucsd.edu/~voelker/pubs/fireeye-cset23.pdf
• Marvin RSA timing attack https://people.redhat.com/~hkario/marvin/
• Fuzzing DNS resolvers https://arxiv.org/abs/2310.03202

#BGP #RPKI #Cloud #DPI #RSA #DNS

jtk, 8 months ago to random

To my .edu friends in particular:

"#ARIN strongly encourages organizations with legacy resources that are not currently under agreement to consider signing the LRSA before 1 January 2024 to secure the fee cap."

I was motivated awhile back to do this for depaul.edu to gain access to #RPKI services. Still glad I did.

https://lists.arin.net/pipermail/arin-announce/2023-September/002796.html

nlnetlabs, 8 months ago to random

We are pleased to announce the latest release of our #RPKI validator Routinator, version 0.13.0 ‘Should Have Started This in a Screen.’ It features lots of smaller changes and updated #ASPA support. https://github.com/NLnetLabs/routinator/releases/tag/v0.13.0

jtk, 9 months ago to random

Weekend Reads:

• Pigeon vs. Internet https://www.jeffgeerling.com/blog/2023/pigeon-still-faster-internet
• BGP RPKI threat analysis https://dl.acm.org/doi/abs/10.1145/3617182
• Mishandling BGP attributes https://blog.benjojo.co.uk/post/bgp-path-attributes-grave-error-handling
• Remote QUIC library scanning https://arxiv.org/abs/2308.15841
• Subsea cabling landscape https://www.enisa.europa.eu/publications/undersea-cables/@@download/fullReport

#CarrierPigeon #BGP #RPKI #QUIC #SubseaCable

dougmadory, 9 months ago to random

Second major #BGP leak in two days.

This time the leak was an IPv6-only origination leak by a provider from Brazil. Because of the type of leak, #RPKI helped to limit the propagation and reduce the disruption for networks with ROAs.
https://twitter.com/Qrator_Radar/status/1696415719330615410

vincentbiret, 9 months ago to ipv6

@noipv6 your account prompted me to check whether my ISP (#fizz child company of #videotron) was planning to add #ipv6 support... But the answer is still no in 2023...🤦‍♂️

https://forum.fizz.ca/en/discussion/2625070/what-is-the-eta-for-ipv6-deploy

coco, 9 months ago to random French

Est-ce que le filtrage par IP dans un pare-feu est fiable ? Dans quels scénarios un attaquant pourrait usurper une IP ?

danyork, 10 months ago to internet

2023 Routing Security Summit Starts July 17 - Participate Virtually

• https://circleid.com/posts/20230714-2023-routing-security-summit-starts-july-17-participate-virtually

#Internet #RoutingSecurity #Routing #MANRS #InternetSecurity #Security #RPKI #BGP

nlnetlabs, 11 months ago to random

With #IETF117 approaching, time to update some existing work and propose new drafts.

Tim is working on updating RFC 8416 (SLURM) with support for ASPA in #RPKI (https://github.com/NLnetLabs/draft-sidrops-slurm-aspa). Philip continues his work on control options for #DNS client proxies (https://github.com/NLnetLabs/draft-homburg-dnsop-codc), and Willem contributes to DNS out-of-protocol signalling (https://datatracker.ietf.org/doc/draft-grubto-dnsop-dns-out-of-protocol-signalling/).

#IETF #OpenStandards

alexband, 1 year ago to opensource

Really loving the user contributed translations for Krill. #OpenSource #RPKI

nlnetlabs, 1 year ago to opensource

Simplified and Traditional Chinese translations coming to Krill #RPKI CA, adding to English, Dutch, Greek, Spanish, Portugese, German and French. Want to contribute more languages? Please submit a PR. #OpenSource https://github.com/NLnetLabs/krill-ui/pull/47