Community discussions

 
asturmas
just joined
Topic Author
Posts: 14
Joined: Mon Jan 27, 2014 8:50 pm

RPKI

Fri Jan 31, 2014 10:33 am

Someone'm already use RPKI in CCR? How to do it? http://www.ripe.net/lir-services/resour ... tification

For example ripe only have configuration for cisco and juniper http://www.ripe.net/lir-services/resour ... figuration
 
asturmas
just joined
Topic Author
Posts: 14
Joined: Mon Jan 27, 2014 8:50 pm

Re: RPKI

Sun Feb 09, 2014 12:53 pm

Any help?
 
JanZorz
just joined
Posts: 15
Joined: Fri Jan 07, 2011 1:42 pm

Re: RPKI

Tue Jul 08, 2014 2:36 pm

I'm eagerly waiting for Mikrotik to deploy RPKI route origin validation. Currently I'm doing it on ASR1k router but would gladly move this function to CCR1036 as it seems to be powerfull enough to take care of this stuff. Mikrotik staff, any information when can we expect RPKI in RouterOS?

Cheers, Jan Zorz
 
User avatar
mrz
MikroTik Support
MikroTik Support
Posts: 5934
Joined: Wed Feb 07, 2007 12:45 pm
Location: Latvia
Contact:

Re: RPKI

Tue Jul 08, 2014 2:39 pm

We have plans for RPKI in RouteroS v7
 
JanZorz
just joined
Posts: 15
Joined: Fri Jan 07, 2011 1:42 pm

Re: RPKI

Tue Jul 08, 2014 5:40 pm

Thank you very much for this information. Any idea when ROS 7 will be available for testing? I'm willing to test RPKI for you (IPv6 and IPv4 routes) if you send me the code as soon as it's available ;)

Cheers, Jan Zorz
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 2946
Joined: Tue Feb 25, 2014 12:49 pm
Location: Capalbio, Tuscany, Italy

Re: RPKI

Tue Jul 08, 2014 7:16 pm

First wait the fix of all bug on ROS 6.x or you have 7.x full of bug...
I'm Italian, not English. Sorry for my imperfect grammar.
 
asturmas
just joined
Topic Author
Posts: 14
Joined: Mon Jan 27, 2014 8:50 pm

Re: RPKI

Sat Jul 12, 2014 3:32 am

Any ETA for ROS 7?
 
asturmas
just joined
Topic Author
Posts: 14
Joined: Mon Jan 27, 2014 8:50 pm

Re: RPKI

Fri Jun 10, 2016 4:38 am

Two years later... Still no plans to RPKI or Router OS 7?
 
User avatar
Hammy
Forum Veteran
Forum Veteran
Posts: 735
Joined: Fri May 28, 2004 5:53 pm
Location: DeKalb, IL
Contact:

Re: RPKI

Tue May 02, 2017 4:00 pm

Still waiting...
-----
Mike Hammett

The Brothers WISP
 
User avatar
nz_monkey
Forum Guru
Forum Guru
Posts: 1819
Joined: Mon Jan 14, 2008 1:53 pm
Location: Straya
Contact:

Re: RPKI

Wed May 03, 2017 5:18 am

Still waiting on the long over due RouterOS v7

:(
http://thebrotherswisp.com/ | Mikrotik MTCNA, MTCRE, MTCINE | Fortinet FTCNA, FCNSP, FCT | Extreme Networks ENA
 
helectro
newbie
Posts: 43
Joined: Mon Jun 28, 2010 1:09 am

Re: RPKI

Fri May 19, 2017 1:49 pm

+1 me too still
 
JimmyNyholm
Member Candidate
Member Candidate
Posts: 249
Joined: Mon Apr 25, 2016 2:16 am
Location: Sweden

Re: RPKI

Fri Aug 04, 2017 12:22 am

+1 Any day now....
 
kcdyer
just joined
Posts: 6
Joined: Wed Nov 08, 2017 4:29 pm

Re: RPKI

Wed Nov 08, 2017 4:38 pm

RPKI would be great right about now...
 
watigre
just joined
Posts: 3
Joined: Mon May 21, 2018 5:48 pm

Re: RPKI

Tue Sep 18, 2018 8:53 am

novedades sobre ros 7 con rpki?
 
ab130kd
newbie
Posts: 32
Joined: Thu Mar 02, 2006 8:11 pm
Location: Italy

Re: RPKI

Tue Oct 02, 2018 1:56 pm

ANY SOLUTION FOR ??? https://www.ripe.net/manage-ips-and-asn ... figuration
RIPE need certification....
 
chubbs596
Frequent Visitor
Frequent Visitor
Posts: 51
Joined: Fri Dec 06, 2013 6:07 pm

Re: RPKI

Tue Oct 02, 2018 8:48 pm

RPKI is becoming a requirement more and more,

When can we expect this?
 
schadom
Member Candidate
Member Candidate
Posts: 139
Joined: Sun Jun 25, 2017 2:47 am
Location: Austria

Re: RPKI

Thu Oct 11, 2018 7:45 pm

+1

We have plans for RPKI in RouteroS v7
MT might consider backporting RPKI from ROSv7 to 6.x :-)
 
User avatar
Hammy
Forum Veteran
Forum Veteran
Posts: 735
Joined: Fri May 28, 2004 5:53 pm
Location: DeKalb, IL
Contact:

Re: RPKI

Fri Oct 19, 2018 10:02 pm

Some Internet Exchanges are going to start requiring RPKI validation to participate in 2019.

MIKROTIK NEEDS TO RELEASE A RELIABLE RPKI IMPLEMENTATION BY THE END OF THE YEAR!
-----
Mike Hammett

The Brothers WISP
 
patrick7
Member Candidate
Member Candidate
Posts: 298
Joined: Sat Jul 20, 2013 2:40 pm

Re: RPKI

Fri Oct 19, 2018 10:38 pm

dream on :lol:
 
mutinsa
just joined
Posts: 21
Joined: Tue Feb 06, 2018 4:55 am
Location: Moscow, Russia
Contact:

Re: RPKI

Sat Oct 20, 2018 3:16 pm

+1.
Sergey Mutin
Certified Mikrotik Consultant
MikroTik: MTCNA, MTCRE, MTCIPv6E, MTCTCE, MTCUME, MTCINE, MTCWE | Cisco: CCNA R&S | Juniper: JNCIA-Junos | Zabbix: ZCU | Asterisk: dCAA | IPv6 Forum Certified Network Engineer (Silver) | HE.net IPv6: Sage
 
schadom
Member Candidate
Member Candidate
Posts: 139
Joined: Sun Jun 25, 2017 2:47 am
Location: Austria

Re: RPKI

Mon Oct 22, 2018 4:19 pm

Some Internet Exchanges are going to start requiring RPKI validation to participate in 2019.

MIKROTIK NEEDS TO RELEASE A RELIABLE RPKI IMPLEMENTATION BY THE END OF THE YEAR!

Yes, SwissIX for example.

MT please really consider to implement RPKI in ROS. Most other vendors already have it and the trend is clearly going in that direction. ROS would need to be able to query an external RPKI server (like https://github.com/RIPE-NCC/rpki-validator-3) and allow for filtering (ROA valid, invalid, not-found) via route filters.
 
kcdyer
just joined
Posts: 6
Joined: Wed Nov 08, 2017 4:29 pm

Re: RPKI

Tue Oct 23, 2018 6:38 pm

Yes, SwissIX for example.
YYCIX in Calgary AB, Canada is starting to implement as well.
https://yycix.ca/communities.html

I'm sure it's just a matter of time before we cannot even peer in the in exchange without it.
 
schadom
Member Candidate
Member Candidate
Posts: 139
Joined: Sun Jun 25, 2017 2:47 am
Location: Austria

Re: RPKI

Wed Oct 31, 2018 9:07 pm

I'm sure it's just a matter of time before we cannot even peer in the in exchange without it.
If you have valid ROAs for all your routes, no need to worry with IXPs or routeservers for now, although ultimately we also need to increase ROV adoption among networks, therefore we need routing software like ROS to support it!
 
chubbs596
Frequent Visitor
Frequent Visitor
Posts: 51
Joined: Fri Dec 06, 2013 6:07 pm

Re: RPKI

Thu Nov 01, 2018 7:19 am

+10000 for RPKI
 
User avatar
netravnen
just joined
Posts: 8
Joined: Sun Dec 31, 2017 2:48 am
Location: Capital Region, DK
Contact:

Re: RPKI

Mon Dec 17, 2018 11:54 pm

We have plans for RPKI in RouteroS v7
Any chance one can be a test pilot along-side Jan Z. on this one? Alpha testing ROS 7?

2014 was around first time RPKI was asked about. Not we hit 2018.... Still ways to go for ROS 7 being available with RPKI and Large BGP Communities support (I assume?).

--
have you enabled IPv6 on something today...?

Cheers,
Netravnen
 
coelliale
just joined
Posts: 12
Joined: Fri Jun 09, 2017 7:47 pm

Re: RPKI

Wed Jun 26, 2019 8:06 am

2019 up up up
 
mmc
newbie
Posts: 28
Joined: Wed Dec 29, 2004 1:44 am

Re: RPKI

Wed Jun 26, 2019 9:59 am

rpki is an urgent must - and because it's a long path from beta to stable production (which is necessary for bgp), we need the beta asap...

rpki would have prevented this worldwide issue:
https://blog.cloudflare.com/how-verizon ... ine-today/
 
mutinsa
just joined
Posts: 21
Joined: Tue Feb 06, 2018 4:55 am
Location: Moscow, Russia
Contact:

Re: RPKI

Fri Jun 28, 2019 3:21 pm

up
+1.
Sergey Mutin
Certified Mikrotik Consultant
MikroTik: MTCNA, MTCRE, MTCIPv6E, MTCTCE, MTCUME, MTCINE, MTCWE | Cisco: CCNA R&S | Juniper: JNCIA-Junos | Zabbix: ZCU | Asterisk: dCAA | IPv6 Forum Certified Network Engineer (Silver) | HE.net IPv6: Sage
 
helectro
newbie
Posts: 43
Joined: Mon Jun 28, 2010 1:09 am

Re: RPKI

Fri Jun 28, 2019 7:57 pm

+1 again
 
TigerHuang
just joined
Posts: 2
Joined: Sun May 06, 2018 6:19 am

Re: RPKI

Sat Jun 29, 2019 8:05 am

+1 push it
 
User avatar
netravnen
just joined
Posts: 8
Joined: Sun Dec 31, 2017 2:48 am
Location: Capital Region, DK
Contact:

Re: RPKI

Sat Jun 29, 2019 5:48 pm

Thank you very much for this information. Any idea when ROS 7 will be available for testing? I'm willing to test RPKI for you (IPv6 and IPv4 routes) if you send me the code as soon as it's available ;)
I agree with J.Z. here. If you are willing to accept select community members into an Alpha stage ROSv7 testing program.

--
have you enabled IPv6 on something today...?

Cheers,
Netravnen
 
User avatar
netravnen
just joined
Posts: 8
Joined: Sun Dec 31, 2017 2:48 am
Location: Capital Region, DK
Contact:

Re: RPKI

Sat Jun 29, 2019 5:58 pm

Yes, SwissIX for example.
YYCIX in Calgary AB, Canada is starting to implement as well.
https://yycix.ca/communities.html

I'm sure it's just a matter of time before we cannot even peer in the in exchange without it.

Validity state Standard Extended Large
Prefix is included in client's AS-SET None None 53339:11:1
Prefix is NOT included in client's AS-SET None None 53339:11:2
Origin ASN is included in client's AS-SET None None 53339:11:3
Origin ASN is NOT included in client's AS-SET None None 53339:11:4
Prefix matched by a RPKI ROA for the authorized origin ASN None None 53339:11:5
Prefix matched by an entry of the ARIN Whois DB dump None None 53339:11:6

Hurts a bit you cannot do indirect discard of RPKI invalid routes there based upon the only current supported standard/extended bgp communities in ROSv6. :| When they only have deployed the functionality with bgp large communities at YYCIX.

--
have you enabled IPv6 on something today...?

Cheers,
Netravnen

Who is online

Users browsing this forum: No registered users and 31 guests