Job Snijders @job@bsd.network
A few hours ago rpkiviews.org saw the global RPKI cross the magical milestone of ONE MILLION unique ROA payloads. 💪 🔐
This is a graph of IP NETWORK TRAFFIC towards China, correlating netflow/BGP/RPKI data. You can see that the vast majority of traffic now is protected by RPKI ROAs.
Looking at merely prefix count or IP address count doesn’t always tell the full story, this Kentik data provides a third view, corroborating that China really went all-in on RPKI.
China jumps - in the span of just 3 months - from 4% to a whopping 80% RPKI ROA coverage. Absolutely impressive. #RPKI #RoutingSecurity
The rpki-client implementation will never download ".xml" or "*.log" files via rsync. And this archive instance will never serve anything BUT "*.log" and "*.log"via Rsync, see this filter.
Filing this away in my “very specific signs” folder (Futian, Shenzhen)
This tree has TWO trunks?! How does that happen? (Spotted along the Dutch “kustpad” trail)
OpenBSD 7.8 is out! This release includes a little project of mine, a new implementation of the "watch" utility! This one has a real time display, can pause on error, highlight words & lines.
Animation of RPKI manifest issuances throughout the day. Reissuance makes the thingies ploink to the right
Twenty-six OpenBSD developers have gathered in Dublin, Ireland for the p2k23 hackathon (September 1st - 7th) with the support of the OpenBSD Foundation, NCSC IE, and Tom Smyth.
rpki-client 8.3 has been released! The gold standard for validating and debugging RPKI objects. The utility now can show the full signature path towards the root, when the path will expire, and more! Read the release notes here https://marc.info/?l=openbsd-announce&m=167923016400361&w=2
It took three days of walking to see what the route is like without motorised vehicle or public transportation. The Dutch “trekvogelpad” hiking trail is gorgeous!
I escaped Dutch winter and went to Mauritius to learn how to scuba dive
ASPA objects have started to appear in the global RPKI! Here is mine - where I attest who the authorized upstreams are for AS 15562 https://console.rpki-client.org/chloe.sobornost.net/rpki/RIPE-nljobsnijders/VCIb3NxttGlL0VzKekHcAGpU9Ls.asa.html
