<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hi Tim,<br class=""><br class="">Well done for the good work and nice to see you using routinator for this job. I have two questions though: <br class=""><br class="">- Shall I assume that you use the RTR protocol between your MX routers and routinator? <br class="">- (Speaking as an XS4ALL customer) will you notify your customers for the invalid/dropped prefixes <br class=""> when you apply the policy to customer connections?<br class=""><br class=""><br class="">Best regards,<br class=""><br class="">Stavros Konstantaras | NOC Engineer | AMS-IX <br class="">M +31 (0) 620 89 51 04 | T +31 20 305 8999<br class=""><a href="http://ams-ix.net" class="">ams-ix.net</a><div class=""><br class=""></div><div class=""><br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On 21 May 2019, at 13:08, Tim Reinders <<a href="mailto:timr@xs4all.net" class="">timr@xs4all.net</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">Hello all,<br class=""><br class="">AS3265 is now dropping all RPKI invalid prefixes received from (transit) peers.<br class=""><br class="">We run two geographically spread instances of Routinator.<br class="">Our peering-edge consists of two MX960 routers running "JUNOS 17.4R2-S3.2”<br class=""><br class="">As of yet no real (customer) impact, this is reflected in the volume of traffic in <br class="">netflow data containing RPKI invalid prefixes (pre/post reject)<br class=""><br class="">Remaining work is rejecting invalids on customer BGP sessions (handful) and writing<br class="">meaningful alerts for our monitoring-stack (prometheus/alertmanager)<br class=""><br class="">Regards,<br class="">Tim Reinders<br class="">XS4ALL<br class="">timr on #nlnog<br class="">_______________________________________________<br class="">NLNOG mailing list<br class=""><a href="mailto:NLNOG@nlnog.net" class="">NLNOG@nlnog.net</a><br class="">http://mailman.nlnog.net/listinfo/nlnog<br class=""></div></div></blockquote></div><br class=""></div></body></html>