Job Snijders @job@bsd.network
- Website
- https://sobornost.net/~job/
- Github
- https://github.com/job
RPKI/BGP subject matter expert, Internet routing security hacker-for-hire, OpenBSD developer
Joined Jan 2020
Pinned post
Job Snijders
boosted
Ooh a cat drawn out by making IP addresses ping!
https://bgp.tools/prefix/185.87.56.0/22
Job Snijders
boosted
For more background on the ultra long-lived root certificates, see https://mailarchive.ietf.org/arch/msg/sidrops/-Y5NfXnGfDbeGOCAFj5xHgU90Zo/
rpki-client 9.4 has been released! This release imposes restrictions on Trust Anchor certificate validity periods, includes ASPA support for BIRD2, protection against AS0 TALs, and various reliability improvements. Read the release notes here: https://cdn.openbsd.org/pub/OpenBSD/rpki-client/rpki-client-9.4.txt
Job Snijders
boosted
The key words "MUST", "MUST NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED BUT REPULSIVE", "WRONG BUT WROMANTIC", "FREQUENTLY MISUNDERSTOOD", "NOBODY BOTHERS WITH THIS BIT", "SHOULDN'T REALLY BUT WE WON'T JUDGE", "REQUIRED IN ORDER TO WORK AROUND EVERYONE ELSE'S BUGS", "YOU DO YOU", and "OBVIOUSLY ABSURD BUT VERY COMMON FOR SOME REASON" in this document are to be interpreted as described in RFC 2119.
New (short) RFC: Detecting RPKI Repository Delta Protocol (RRDP) Session Desynchronization https://www.rfc-editor.org/rfc/rfc9697.html Rpki-client was the first to implement Ties’s clever concept
Job Snijders
boosted
Juicht, allen, juicht! Dankzij de hemelmechanica gaat de zon *vanaf morgen* al iets later onder. Geniet ervan! 😎
(De nachten worden korter vanaf 21/12; 's ochtends is het nog wachten tot 31/12 eer de zon weer vroeger opkomt.)
Job Snijders
boosted
RFC 9674: Same-Origin Policy for the RPKI Repository Delta Protocol (RRDP), J. Snijders, https://www.rfc-editor.org/info/rfc9674 #RFC This document describes a Same-Origin Policy (SOP) requirement for Resource Public Key Infrastructure (RPKI) Repository Delta Protocol (RRDP) servers and clients. Application of a SOP in RRDP client/server communication isolates resources such as Delta and 1/2
Job Snijders
boosted
RFC 9687: Border Gateway Protocol 4 (BGP-4) Send Hold Timer, J. Snijders, et al., https://www.rfc-editor.org/info/rfc9687 #RFC This document defines the SendHoldTimer, along with the SendHoldTimer_Expires event, for the Border Gateway Protocol (BGP) Finite State Machine (FSM). Implementation of the SendHoldTimer helps overcome situations where a BGP connection is not terminated after the 1/2
Our favorite Internet routing protocol - BGP - just got an update!
The mechanism in this RFC should help a bit against zombie routes and other problems https://rfc-editor.org/rfc/rfc9687.html
hat tip to @benjojo and Yingzhen Qu for sticking it out with me
rpki-client 9.2 has just now been released! \o/ This is a bugfix release, it is recommended that all users upgrade to this version for improved reliability. Release notes are here https://marc.info/?l=openbsd-announce&m=172449237716591&w=2
OpenBSD rpki-client 9.1 has been released. This release contains novel replay attack & DoS countermeasures, bug fixes, and more. Read the full announcement here: https://marc.info/?l=openbsd-announce&m=171917608831201&w=2
Proudly made without AI 🙂
Job Snijders
boosted
The year is 2030.
Computers boot directly into the browser. IDEs are just a web app now, running in the GPU. No one knows why. Or how.
All programs run in 4 nested containers on top of a hypervisor abstracting over the 5 major computational clouds. The last time a branch was predicted correctly, in any CPU anywhere, was 4 years ago.
Cloud costs are withdrawn directly from your retirement fund.
Ext7 just came out, it's written in Javascript and uses AI to guess what the file may contain.
Expiration of ROAs - what is it and how does it work? What to monitor for @dougmadory
and I teamed up to analyze and visualize what's happening under the hood of the RPKI. https://www.fastly.com/blog/times-up-how-rpki-roas-perpetually-are-about-to-expire/
Job Snijders
boosted
Vreselijk nieuws, Erik Bais is eerder vandaag overleden plotseling. Beeld van een presentatie uit 2019 waar hij ons techneuten op NLNOG leerde hoe te werken onder moeilijke omstandigheden, op vervelende werkvloeren: https://www.youtube.com/watch?v=7areInUXbyo
My dear friend Erik Bais unexpectedly passed away this morning. This is an incredible loss
New RFC published, a thorough revision of the RPKI ROA specification: https://rfc-editor.org/rfc/rfc9582.html this update removes a number of ambiguities, while exploring the edges of what’s possible in ASN.1
Job Snijders
boosted
https://rpkiviews.dataplane.org
is archiving #RPKI AS0 TAL repository data. Brought to you in partnership with @job and rpkiviews.org.
Job Snijders
boosted
In today's blog post for @kentikinc, I team up with @jobsnijders of Fastly to review the latest RPKI ROV adoption metrics in light of a major milestone:
For the first time in the history of RPKI, the majority of IPv4 routes in the global routing table are now covered by ROAs. #BGP
https://www.kentik.com/blog/rpki-rov-deployment-reaches-major-milestone/
- Website
- https://sobornost.net/~job/
- Github
- https://github.com/job
RPKI/BGP subject matter expert, Internet routing security hacker-for-hire, OpenBSD developer
Joined Jan 2020
