Arin taking down raking

Mailman List Mirror (Read Only)
1

This looks special?

https://www.bleepingcomputer.com/news/security/arin-will-take-down-its-rpki-for-30-minutes-to-test-your-bgp-routes/

2

what is raking?

3

Damn autocorrect. Rpki not raking.

4

raking=rpki+spell check

5

raking=rpki+spell check

:slight_smile:

I think, since we don’t realy know what arin’s doing … we could speculate :slight_smile:
but:

  1. unreachable publication point / CA == ‘ok, see you in 30 mins on my next cycle through the world’ (no real changes)
    b) revoking some portion of their claimed resources in various forms of CA == ‘ideally a bunch of routes suddenly go unknown’ == ‘ok’
    iii) making a bunch of validatable changes to ROA/certs/content == ‘worse possible outcome, likely to make a bunch of routes invalid’

In case of b or iii I’d expect we’ll see some fun times in BGP, either ‘a bunch of re-announcement’ or ‘a bunch of withdrawals and disasters’ :slight_smile:

I’m sure we’ll learn something though?

6

  1) unreachable publication point / CA == 'ok, see you in 30 mins on my
next cycle through the world' (no real changes)

yup. much ado about nothing

  b) revoking some portion of their claimed resources in various forms of
CA == 'ideally a bunch of routes suddenly go unknown' == 'ok'
iii) making a bunch of validatable changes to ROA/certs/content == 'worse
possible outcome, likely to make a bunch of routes invalid'

if the CA's pub point is available and the data have been modified,
which includes removal, then all sorts of wild things can happen.

but there is no need for arin to formally test that last as each of
the RIRs has untentionally done so at least once; sometimes for over
a day.

randy