<div dir="auto"><div dir="ltr"><div>Hi Job,</div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Jun 14, 2021 at 2:12 PM Job Snijders <<a href="mailto:job@fastly.com" target="_blank" rel="noreferrer">job@fastly.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">On Sat, Jun 12, 2021 at 09:01:03PM +0300, Noah wrote:<br>
> While this was resolved within 10mins, were there measures put in place by<br>
> the NCC as mitigation process to curb a repeat of the incident?<br>
<br>
This problem lasted more than 70 minutes!<br>
<br>
The point I am trying to make: once an RIR automatically creates AS0<br>
ROAs for unallocated/unassigned space, any database incidents where the<br>
registration status of a resource accidentally (and temporarily) lapses,<br>
can result in blocklisting via AS0.<br>
<br>
The risk of things going wrong at a future point in time versus the<br>
perceived benefits of such ROAs don't align well.<br>
<br>
The best measure to put in place to curb incidents is to not implement<br>
this type of policy.<br></blockquote><div><br></div>





<p style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:"Helvetica Neue"">There are several of us who support this policy for valid reasons, some of which are founded on the premise [1] that you shared with the APNIC region back in 2019.</p>
<p style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:"Helvetica Neue";min-height:15px"><br></p><p style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:"Helvetica Neue";min-height:15px">[1] <a href="https://mailman.apnic.net/mailing-lists/sig-policy/archive/2019/08/msg00065.html" target="_blank" rel="noreferrer">https://mailman.apnic.net/mailing-lists/sig-policy/archive/2019/08/msg00065.html</a></p>
<p style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:"Helvetica Neue";min-height:15px"><br></p>
<p style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:"Helvetica Neue"">And if you look at the bogons [2] currently seen in the global routing table, one can easily find the prefixes from AFRINIC pool, some being advertised by unassigned ASNs.</p>
<p style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:"Helvetica Neue";min-height:15px"><br></p><p style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:"Helvetica Neue";min-height:15px">[2] <a href="http://thyme.rand.apnic.net/current/data-add-IANA" target="_blank" rel="noreferrer">http://thyme.rand.apnic.net/current/data-add-IANA</a></p>
<p style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:"Helvetica Neue";min-height:15px"><br></p>
<p style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:"Helvetica Neue"">It is<span>  </span>unfortunate that the problem statement of the proposal is not well defined to allow a better understanding of the problem being addressed and<span>  </span>the assessment of the benefits vs risks.</p>
<p style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:"Helvetica Neue";min-height:15px"><br></p>
<p style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:"Helvetica Neue"">Yes.....Things<span>  </span>can go wrong at many layers and at different levels, however, <span>t</span>he entitled parties shall play their role<span>  </span>and we all learn from incidents and keep improving.</p>
<p style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:"Helvetica Neue";min-height:15px"><br></p>
<p style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:"Helvetica Neue"">The issuance of AS0 ROAs should follow the conservative approach RIRs use in managing changes in number ressources status, the addition of INRs to bogon list, subject to AS0 ROAs.</p>
<p style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:"Helvetica Neue";min-height:15px"><br></p><p style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:"Helvetica Neue";min-height:15px">In my humble opinion.</p><p style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:"Helvetica Neue";min-height:15px"><br></p><p style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:"Helvetica Neue";min-height:15px">Cheers,</p><p style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:"Helvetica Neue";min-height:15px">Noah</p><div> </div></div></div></div>