dokucama

User Tools

Site Tools

Trace: • pxeboot • evpnvxlan • netapp • eveng
network_stuff:irr

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
network_stuff:irr [2020/07/07 08:00] – jotasandokunetwork_stuff:irr [2023/11/02 14:38] (current) – external edit 127.0.0.1
Line 1: Line 1:
 __**IRR SANITATION**__ SEE THIS ABOUT[[https://www.manrs.org/isps/guide/global-validation/|MANRS]]\\ __**IRR SANITATION**__ SEE THIS ABOUT[[https://www.manrs.org/isps/guide/global-validation/|MANRS]]\\
-\\ +\\https://panda314159.duckdns.org/doku.php?id=network_stuff:irr&do=edit 
-This is a [[http://example.com|hands-on guide]]\\+This is a [[http://example.com|hands-on guide]] and this is the HE algorithm explained step by step [[https://routing.he.net/algorithm.html|Link]]
   * IRR fields (from ripe):    * IRR fields (from ripe): 
     * THESE ARE OBJECTS (big blocks) AND HAVE FIELDS:  as-block, as-set, aut-num, domain, filter-set, inet6num, inetnum, inet-rtr, irt, key-cert, mntner, organisation, peering-set, person, poem, poetic-form, role, route, route6, route-set, rtr-set     * THESE ARE OBJECTS (big blocks) AND HAVE FIELDS:  as-block, as-set, aut-num, domain, filter-set, inet6num, inetnum, inet-rtr, irt, key-cert, mntner, organisation, peering-set, person, poem, poetic-form, role, route, route6, route-set, rtr-set
Line 15: Line 15:
       * [[https://fcix.net/whitepaper/2018/07/14/intro-to-irr-rpsl.html]]       * [[https://fcix.net/whitepaper/2018/07/14/intro-to-irr-rpsl.html]]
     * Be sure the IRR "aut-num **contain** a valid AS-SET     * Be sure the IRR "aut-num **contain** a valid AS-SET
 +\\ 
  
 +RPKI NOTES ( RFC6481 )
 +  * ROA is the set  of : prefixes,  ASN and digital certificates.
 +  * The 'resource certificate' is linked to RIPE NCC registration. [[https://www.ripe.net/manage-ips-and-asns/resource-management/certification/using-the-rpki-system|External Link]]
 +    * we can have hosted solution: the private key of your resource certificate resides on a server hosted by the RIPE NCC and is not retrievable from the secured system.
 +    * or non-hosted solution: open source implementations that allow operators to run Certificate Authority (CA) software that securely interfaces with the RIPE NCC parent system.
 +  * Each  association prefix-ASN is  linked  to  a  Digital  Certificate  which  allows  anyone  consulting  the repositoryto  check  that  this  association  is  correct.
 +  * Records of the organisations act as Certification Authorities (CAs) in this PKI.
  
 ---- ----
network_stuff/irr.1594108834.txt.gz · Last modified: (external edit)

Page Tools

Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
CC Attribution-Share Alike 4.0 International Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki