sarahjey
Member
- Joined:
- Jul 2024
- Posts:
- 149
- From:
- Ottawa, Canada
For RPKI validation, avoid librpki unless you want to build it yourself.
Okay so I looked up RPKI and I think I get it now? It's like SSL for BGP but not really but kind of? The certificate says this ASN owns this prefix?
My RackNerd VPS is in LA I think. I can run whatever script but I should probably not set it to every minute or they'll boot me right?
learning on $5 VPS and prayers
Zurich1984
Member
OP
- Joined:
- Jun 2024
- Posts:
- 118
- From:
- Zurich, CH
Jittered intervals, 15-45 minutes
This is the kind of operational detail I was hoping for. Added to the draft spec.
Re: frequency, my thinking is probe targets should be well-known anycast prefixes—Cloudflare, Google, Quad9, plus a few dozen user-nominated destinations. Not random scanning. That plus jitter should keep us off abuse lists.
I'll publish a strawman doc this week, Google Docs link, comment access for all.
/24 for sale. No lowballs.
JokoNord
Member
- Joined:
- Jun 2024
- Posts:
- 190
- From:
- Jakarta, ID
Salam kenal all. From Jakarta I can contribute node but my upstream is mostly Telkom and Biznet. Not very diverse, but maybe that is the point? Indonesia routing to Singapore sometimes goes direct, sometimes via Hong Kong, sometimes... Australia? Very unpredictable.
Also I want to ask: this data will be open license? CC0 or similar? I don't want to contribute then somebody sells API access later.
traffic worse than my packet loss
GeorgeNmp
Member
AS64512
- Joined:
- May 2024
- Posts:
- 218
- From:
- Ashburn, US
It's like SSL for BGP but not really but kind of?
Close enough for forum purposes. ROA says "AS64496 is allowed to originate 192.0.2.0/24." RPKI validators check that against what BGP actually advertises. Invalid means either misconfiguration or hijack.
This data will be open license?
Strongly second this. ODbL or CC BY-SA at minimum. The value is in aggregation; individual traceroutes are basically worthless. Locking the aggregate behind paywall defeats the purpose.
iBGP, eBGP, don't care, just peer
Zurich1984
Member
OP
- Joined:
- Jun 2024
- Posts:
- 118
- From:
- Zurich, CH
What do people actually pay for a 1G commit
I'll seed with my own numbers: CHF 380/month for 1G at a Zurich carrier hotel, blended but not IP transit (they buy from NTT, Telia, Cogent, mix themselves). That's roughly USD 430 at today's rate. For comparison, same building, pure IP transit quotes were CHF 520-680 depending on commit and SLA.
No names because the building has three competing resellers and I like not being blacklisted.
This is exactly why we need aggregation. One data point is gossip. Fifty is a market.
/24 for sale. No lowballs.