search

cloudflare / isbgpsafeyet.com

Is BGP safe yet?
https://isbgpsafeyet.com
MIT License
272 stars 312 forks source link

Expand valid/invalid tests to check ARIN TAL installation #91

Open mahtin opened 4 years ago

mahtin commented 4 years ago

Presently the v4 address for invalid testing us from APNIC and the v6 address is from ARIN. A second invalid test should be added to test v4/v6 from ARIN space and test v4/v6 from non-ARIN space. This will mark networks as safe/unsafe plus mark their ARIN region coverage.

A second invalid url is needed. Additional space and announcements are needed.

This issue exists because some networks outside of ARINs region refuse to accept the ARIN RPA, even with its new language.

[1] ARIN is the Regional Internet Registry for North America and some of the Caribbean region.

[2] ARIN updates it’s RPA October 2019.

benmaddison commented 4 years ago

We (AS37271) are one such network. We are unable to agree to the ARIN RPA because of the indemnification that it contains. We were one of the first major networks to begin dropping ROV invalids, and the first in Africa. To publically suggest that we do not take routing security seriously, just because we cannot accept the unreasonable legal risks that ARIN seeks to impose on RPs, would be irresponsible and counter productive.

jfuruness commented 3 years ago

Can we add then as a separate column what the ASes do with prefixes listed on ARIN? This would be highly valuable for research.