We’re launching Lyria 3.5 in Google Flow Music, with advances across musicality, lyrics, vocals, and creative control
deepmind.google·6d ago
AI Engineering
Hacker News·21d ago·5 min read
Who's running all those tiny RPKI servers?
TL;DR
BGP's lack of built-in trust exposes the Internet to routing incidents, which RPKI aims to mitigate. RPKI allows IP address holders to cryptographically authorize which Autonomous Systems can announce their prefixes.
✦ Why It Matters
Consider deploying or supporting an independent RPKI server to strengthen Internet routing security.
Key Takeaways
- Evaluate your RPKI configuration for compliance with RFC 9319.
- Consider using RPKIaaS for simplified management across multiple RIRs.
- Monitor the validity of your ROAs to prevent routing incidents.
- Explore educational opportunities by experimenting with RPKI server setups.
How It Works
RPKI allows IP address holders to create Route Origin Authorizations (ROAs) that cryptographically validate which AS can announce their IP prefixes. This validation helps routers drop invalid announcements, enhancing routing security.
⚠ The Catch
Over half of the ROAs in the dataset used a maxLength parameter that could potentially allow sub-prefix hijacks, exposing certain configurations to risk.