Zobrazit příspěvky
1
Sítě / Transfer IPv4 mezi LIR a dopady na RPKI
« kdy: 20. 05. 2025, 22:26:38 »
Dobry vecer,
Mate nekdo zkusenost s transferem produkcnich IPv4 subnet z jednoho LIRu na druhy LIR account?
Po M&A sjednocujeme LIR accounts a dostalo se ke me prave tady toto. Mam obavy z RPKI ROA, jelikoz pri transferu se tyto objekty bohuzel neprenesou kvuli ruznym klicum pro ruzne LIR accounts. Pri novem announcementu to prave nekteri provideri vyzaduji. Jen uz netusim, zda-li to nekteri doopravdy enforcuji nebo ne. Pokud se nepletu tak byvaly Level3 (dneska Lumen?) zpracovaval route-objects v RIPE database (ne ROA!) a zahazoval BGP announcements pokud route-object neexistoval dynamicky.
Mate nekdo zkusenosti s RPKI ROA, zda-li maji produkcni impact pri migraci nebo ne?
Odpoved or RIPE supportu je nasledujici, "In most cases" me uplne neutesuje:
In most cases transfers should not cause disruptions as many globally routed prefixes are without any RPKI ROAs. Some providers may require their customers to have ROAs present in order to advertise their routes in BGP. When a ROA is removed, the prefix will become 'RPKI UNKNOWN' - normally providers will still route such prefixes whereas they might reject prefixes with status 'RPKI INVALID' (ROA present but not matching). Unfortunately though we cannot give you any guarantees as each provider may have their own unique setup and in how they make routing decisions. We therefore advise you to consult with your upstream provider(s) and/or other partners to check.
Mate nekdo zkusenost s transferem produkcnich IPv4 subnet z jednoho LIRu na druhy LIR account?
Po M&A sjednocujeme LIR accounts a dostalo se ke me prave tady toto. Mam obavy z RPKI ROA, jelikoz pri transferu se tyto objekty bohuzel neprenesou kvuli ruznym klicum pro ruzne LIR accounts. Pri novem announcementu to prave nekteri provideri vyzaduji. Jen uz netusim, zda-li to nekteri doopravdy enforcuji nebo ne. Pokud se nepletu tak byvaly Level3 (dneska Lumen?) zpracovaval route-objects v RIPE database (ne ROA!) a zahazoval BGP announcements pokud route-object neexistoval dynamicky.
Mate nekdo zkusenosti s RPKI ROA, zda-li maji produkcni impact pri migraci nebo ne?
Odpoved or RIPE supportu je nasledujici, "In most cases" me uplne neutesuje:
In most cases transfers should not cause disruptions as many globally routed prefixes are without any RPKI ROAs. Some providers may require their customers to have ROAs present in order to advertise their routes in BGP. When a ROA is removed, the prefix will become 'RPKI UNKNOWN' - normally providers will still route such prefixes whereas they might reject prefixes with status 'RPKI INVALID' (ROA present but not matching). Unfortunately though we cannot give you any guarantees as each provider may have their own unique setup and in how they make routing decisions. We therefore advise you to consult with your upstream provider(s) and/or other partners to check.
Vzdycky me pekne rozcilil kdyz me kvuli chybam posouval o par cviceni nazpet.
