search

NLnetLabs / krill

RPKI Certificate Authority and Publication Server written in Rust
https://nlnetlabs.nl/projects/routing/krill/
Mozilla Public License 2.0
280 stars 37 forks source link

Refresh Parents and Repository manually #1223

Open patrickavi opened 4 days ago

patrickavi commented 4 days ago

Hello, I don't know if anyone has experienced the following problem: Krill is becoming outdated. I need to restart the "systemctl..." service, update Parents and Update Repository to get it back to normal.

I enabled log_level with "error" but it doesn't generate any information.

This behavior is strange, because I need to restart the Krill service via terminal and then refresh Parents and Repository via graphical interface. Just restarting Krill doesn't validate the routes.

I'm currently on version 0.14.5~rc1-1

partim commented 2 days ago

Thank you for your report!

Log level “error” is pretty strict – the level “debug” should provide you with much more information. Perhaps you can try and see if that produces anything suspicious?

How do you publish your data – via your own repository or via a third-party repository (such as RIPE’s)?

patrickavi commented 2 days ago

We publish for third parties, in our case for nic br

We left the log as debug until the 5th, but it did not return an error or any type of timeout.

partim commented 23 hours ago

Clarification question: When you say “Krill doesn't validate the routes” do you mean it doesn’t show the ROAs as validated agains the BGP announcements in the UI?