[routing-wg] RPKI: Forthnet drops invalids

Hi to everyone,

I would like to inform you that it's been almost one month since
Forthnet started dropping invalid prefixes on all peering/transit links,
either national or international. It's important to note that during
this month we haven't received any complaints.

Having monitored the invalid prefixes for more than a year and
experimenting with routing them across different links, we decided that
it was time to move to the next phase and start dropping prefixes that
are declared as invalid in the RPKI ecosystem.

Two were the main reasons that helped us take the drop decision: a)
during the last year our volume of invalid prefixes traffic decreased
from ~1% of total traffic to less than 0,2%, b) we updated our prefix
validation policy by including a whitelist (until we evaluate SLURM) in
order to bypass issues quickly if/when they arise.

Note #1: in the context of the above actions we have noticed that
invalid prefixes used for testing purposes have recently begun to grow
(each large provider creates one?). This may lead to incorrect
conclusions in the future (at least in terms of prefixes, since i don't
expect traffic from those). Maybe these invalid prefixes should have
some extra "attributes" in order to be recognized more easily while
troubleshooting.

Note #2: In order to increase adoption of a similar policy, maybe MANRS
should be updated to promote dropping invalids. If i'm not mistaken,
their current action is about creating ROAs only.

--
Tassos

-------------- next part --------------
An HTML attachment was scrubbed...
URL: </ripe/mail/archives/routing-wg/attachments/20200210/719edec3/attachment.html>