[RPKI-Discuss] AfriNIC RPKI woes (March 30th, 2020)

[Amreesh Phokeer]

Hi all,

This is to inform you that our RPKI services have now been fully restored. We were in process of deploying our RRDP compliant codebase which was successfully completed. However, during the deployment process, our repository was inconsistent for about 2 hours.

We apologize for any inconvenience caused. We will send a more detailed report in the course of this week.

Regards,
Amreesh Phokeer



> On 30 Mar 2020, at 16:59, Ben Maddison <benm at workonline.africa> wrote:

> 

> Hi Amreesh,

> 

> On Mon, 2020-03-30 at 16:45 +0400, Amreesh Phokeer wrote:

>> Dear Job,

>> 

>> We are currently doing a deployment and the RPKI repository is

>> currently under maintenance.

>> 

>> Please check our status page for updates:

>> https://status.afrinic.net/

>> 

> Can you explain a little about the nature of the maintenance in

> progress?

> 

> I would expect that the safer option would be to kill access to the

> publication points in advance of this type of work. Especially if the

> repo was expected to get into a transiently inconsistent state.

> 

> We do not, as a community, understand the operational corner cases of

> RPKI well enough yet to be able to assume that everyone will handle

> this type of issue gracefully.

> 

> On that note, we currently run the RIPE validator (v3.1). It sees

> *nothing wrong* with the current state of the repo, due to the way it

> "handles" CRLs.

> 

> We'll be moving away to alternative RP software as soon as we have the

> cycles. I'd recommend everyone to do the same.

> 

> Cheers,

> 

> Ben

>