[c-nsp] RPKI extended-community RFC8097

Nick Hilliard nick at foobar.org
Wed Apr 22 07:05:36 EDT 2020


Radu-Adrian FEURDEAN wrote on 22/04/2020 00:15:
> Take it like "RPKI As A Service". People ready to take/use pretty
> much everything "aaS" (whether it makes sense or not) are not
> difficult to find. You have several kinds of "security as a service",
> including "managed security", so RPKIaaS isn't much worse than that.
really, for ebgp it is much worse than that.  There was some discussion 
about this on the IETF sidrops mailing list a couple of years ago which 
unearthed several fundamental difficulties with the ebgp equivalent, 
none of which were (or can be) resolved.

Nick


More information about the cisco-nsp mailing list