Re: [Sidrops] WG ADOPTION - draft-madi-sidrops-rush

Hi,

> On 18 Nov 2020, at 08:02, Di Ma <madi@rpstir.net> wrote:
> 
> Jared,
> 
> Thanks for your suggestion.
> 
>> 2020年11月18日 14:54，Jared Mauch <jared@puck.nether.net> 写道：
>> 
>> 
>> 
>>> On Nov 18, 2020, at 1:48 AM, Di Ma <madi@rpstir.net> wrote:
>>> 
>>> We don’t make decision for operators but offer them a choice that they can outsource valiation if they have no problem with this fashion.
>> 
>> Is it perhaps better to think about offering validation as a service to people who can’t or are unable to run their own validators?
>> 
>> (Thinking of how people may decide to use an off-network DNS resolver so they don’t need to operate one themselves).
>> 
>> Perhaps this is something larger networks may want to offer to their customers, similar to how they may offer NTP, DNS and other services?
> 
> I think this is a reasonable usecase which can be added into RUSH document.
> 
> And RUSH can also be used within a large ISP to distribute cache to RTR servers deployed in different ASes.

I believe that for this use case it would be better to standardise the (signed) json emitted by validators so that it can be used by rpki-rtr implementations (go-rtr, and the one we are building rtrtr).

That way people can have interchangeable validators and RTR implementations. With signing one can distribute the data safely even over public internet which can help centralised *own* management.

I believe that outsourcing the validation and using someone else's RP feed for their RTR is ill advised, yet it may be something that people choose to do regardless.

As far as RUSH is concerned I am still on the fence about it, but I see a possible use case in having an API to push updated SLURM settings in a local RP, more finegrained, e.g. allow listing things, adding/removing one or more exceptions as a delta, rather than just giving the RP a complete new file. But.. that would be a different thing altogether, and I don't really want to invent this for the sake of it - I would ask operators here if they have that use case first.

As written the document seems to say: there are SLURM files and you can transport them over HTTPS, possibly implying that RP software will actively fetch these files. I lean towards not standardising this, as it's something that people can already do today. A simple script that fetches a file and feeds it to an RP would already work, if that's the way one chooses to operate.

Tim

> 
> Di
> 
> _______________________________________________
> Sidrops mailing list
> Sidrops@ietf.org
> https://www.ietf.org/mailman/listinfo/sidrops

Re: [Sidrops] WG ADOPTION - draft-madi-sidrops-rush - ENDS 10/12/2020 (Oct 12th)