Re: [Sidrops] ARIN RPKI Repository issue

hey!
1) thanks for the info/update/transparency
2) it'd be cool to know: "hsm like FOO don't like getting packets over BAR
kb, be aware if you operate like this"
3) I'm glad we're finding these (and writing test code, and monitoring)
while we are still young in this process

Also, it's nice to occasionally see the sausage making.

On Thu, Oct 25, 2018 at 3:37 AM John Curran <jcurran@arin.net> wrote:

> <https://www.arin.net/announcements/2018/20181024_update.html>
>
> ARIN experienced an RPKI Repository issue yesterday afternoon (Wednesday
> 24 October 2018) which resulted in the number of objects in the repository
> dropping from its normal hundreds of objects to only 7 objects.  The root
> cause for the failure was too many ROAs for a resource cert that led to an
> untested situation whereby we exceeded the MTU for the HSM and an invalid
> manifest in repository..  It appeared that some validators stop processing
> after the invalid manifest, thus resulting in a greatly reduced count of
> objects published.
>
> This condition occurred for much of day, and was resolved via a workaround
> at approximately 22:00 ET.   The ARIN RPKI Repository appears normal on
> RPKI monitors at this time, and while we have some work to do to durably
> address the issue for long-term, we not expect any recurrence of this
> event.
>
> FYI,
> /John
>
> John Curran
> President and CEO
> American Registry for Internet Numbers
>
>
>
> _______________________________________________
> Sidrops mailing list
> Sidrops@ietf.org
> https://www.ietf.org/mailman/listinfo/sidrops
>

Re: [Sidrops] ARIN RPKI Repository issue - Wednesday 24 October 2018