Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Sonic (AS46375) as unsafe but signed #767

Merged
merged 1 commit into from
Oct 2, 2024

Conversation

s-crypt
Copy link
Contributor

@s-crypt s-crypt commented Oct 2, 2024

Sonic (An ISP in the Bay Area, California) has most of their prefixes signed, but not all have a valid ROA.

Copy link
Collaborator

@digizeph digizeph left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the PR! Can confirm it's signed and not filtering at the time of checking.

@digizeph digizeph added verified: signed AS has signed all their prefixes verified: not filtering Tests showing the AS does not filter RPKI invalid routes labels Oct 2, 2024
@digizeph digizeph merged commit e6d1b28 into cloudflare:master Oct 2, 2024
3 checks passed
@s-crypt
Copy link
Contributor Author

s-crypt commented Oct 2, 2024

Thank you! If you don't mind me asking, besides checking the in network itself (which is what I did), is there a quick tool to check if a network is filtering invalid BGP routes?

@s-crypt s-crypt deleted the sonicnet branch October 2, 2024 21:55
@digizeph
Copy link
Collaborator

digizeph commented Oct 3, 2024

Hi, @s-crypt. For the publicly available toolings, here are my go to choices:

  1. for ROAs registration rate: Cloudflare Radar and its APIs
  2. for route validation rate: APNIC's RPKI ROV stats

I also built a site that displays RPKI information relevant to a given ASN in one place, available at https://bgp-inspector.pages.dev/ (source code)

@s-crypt
Copy link
Contributor Author

s-crypt commented Oct 3, 2024

Thank you so much for this! That site you made is extremely helpful! I will do my best to add more networks as I come across them now that I can be more sure about the signing and filtering status.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
verified: not filtering Tests showing the AS does not filter RPKI invalid routes verified: signed AS has signed all their prefixes
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants