If you have ARIN blocks, the RPKI registration is generally straightforward. You can get quite a bit of the benefit of RPKI by just registering your blocks which locks them to your OriginASN. Even if not all providers support the filtering yet it should dramatically improve the situation if you were to get hijacked. We're filtering at QCIX and occasionally see invalid networks get filtered. It's been dropping off as the larger networks have started enforcement. On Wed, Mar 2, 2022 at 8:08 AM Frank Bulk <fbulk@mypremieronline.com> wrote:
This was also brought to the NTCA’s CyberSecurity’s Working Group as well, so if you have feedback on this NOI, please share.
Frank
*From:* MICE Discuss <MICE-DISCUSS@LISTS.IPHOUSE.NET> * On Behalf Of *Richard Laager *Sent:* Tuesday, March 1, 2022 3:38 PM *To:* MICE-DISCUSS@LISTS.IPHOUSE.NET *Subject:* [MICE-DISCUSS] FCC 22-18A1 Secure Internet Routing Notice of Inquiry
The FCC is looking into BGP security.
In general, I'm certainly for BGP security, but I haven't seriously analyzed the questions in this Notice of Inquiry.
I'm not sure whether this is something MICE would want to comment on or not.
Is anyone else looking into this? I've made an inquiry with MTA, since I'm on the CyberSecurity committee there.
--
Richard
------------------------------
To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1
------------------------------
To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1
-- Jay Hanke, President South Front Networks jayhanke@southfront.io Phone 612-204-0000