Some Internet Exchanges are going to start requiring RPKI validation to participate in 2019.
MIKROTIK NEEDS TO RELEASE A RELIABLE RPKI IMPLEMENTATION BY THE END OF THE YEAR!
If you have valid ROAs for all your routes, no need to worry with IXPs or routeservers for now, although ultimately we also need to increase ROV adoption among networks, therefore we need routing software like ROS to support it!I'm sure it's just a matter of time before we cannot even peer in the in exchange without it.
Any chance one can be a test pilot along-side Jan Z. on this one? Alpha testing ROS 7?We have plans for RPKI in RouteroS v7
I agree with J.Z. here. If you are willing to accept select community members into an Alpha stage ROSv7 testing program.Thank you very much for this information. Any idea when ROS 7 will be available for testing? I'm willing to test RPKI for you (IPv6 and IPv4 routes) if you send me the code as soon as it's available ;)
YYCIX in Calgary AB, Canada is starting to implement as well.Yes, SwissIX for example.
I'm sure it's just a matter of time before we cannot even peer in the in exchange without it.
A major PRO PLUS for implementing RPKI support directly into ROS!Hi! Still need an RPKI implementation. Here in Brazil, our RIR start to permit the use of RPKI. And here in Latin America a great number of ISP running they ASes on Mikrotik boxes.
Back in 2014 the RouterOS v7 project was still the holy grail that would fix all problems. All new routing, all new BGP, etc etc etc.
Then nothing happened for 5 years and now there is a v7 beta, but unfortunately it is "just" a build with a new Linux kernel and nothing of those exciting features is in sight.
(almost no changes in functionality between v6 and v7beta)
The only "positive" thing that could be said is that v7beta does not contain any BGP at all, so we can still hope this is because there is an entirely new BGP but it is not completed, but it could be in a v7 final version.
Of course there is still no ETA for that. So best is to put this on the backburner for a couple more years...
yesSo, as of now - with a STABLE version of ROS (April 23 2020)
RPKI is not supported / available on Mikrotik ROS.
Is this correct?
MikroTik never gives time estimates to implementation of new features.It would be nice to see a time line when this would be available.
But no rush - want it to be done correctly!
RouterOS implements RTR client. You connect to the server which will send route validity information.
This informaton can be used to validate routes in route filters against group with "rpki-validate".
ANd then further in filters "match-rpki" can be used to match exact state.