tonusoo

tonusoo

irrd:

    # For performance reasons, use an Unix domain socket
    # for communicating with both the PostgreSQL (socket
    # is /run/postgresql/.s.PGSQL.5432) and Redis.
    # For PostgreSQL only the peer authentication is
    # allowed.
    database_url: 'postgresql:///irrd'
    redis_url: 'unix:///run/redis/redis-server.sock'
    # In Filesystem Hierarchy Standard 3.0, /var/run

tonusoo

tonusoo

#!/usr/bin/env python3
"""
Fetches valid route and route6 objects from the IRRd PostgreSQL
database and atomically generates a JSON file formatted for RTRTR.

Expected to be run by systemd-timer under the 'irrd' user.
"""

import ipaddress
import json

tonusoo

#!/usr/bin/env python3

"""RPKI ASPA objects for ASes registered in a country.

Script finds all the AS numbers from RIR statistics files
for a country in which the AS number holder is legally based.
AS numbers are checked against the RPKI ASPA dataset and ASNs
are categorized into two groups: ones with an ASPA object and
ones without it.

tonusoo

#!/usr/bin/env python3

"""RPKI ASPA objects for ASes associated with a country.

Script finds all the v4 and v6 address ranges geolocated to a user-
specified country. For each address range possible exact and more-
specific prefixes from DFZ are found. If the exact prefix was not
found and more-specifics do not fully cover the geolocated address
range, then also less-specific prefixes are checked. Finally, all
the unique origin ASNs for the found prefixes are checked against

tonusoo

#!/usr/bin/env python3

"""RPKI ROA analysis of BGP prefixes covering country's address space.

Script finds all the v4 or v6 address ranges geolocated to a user-
specified country. For each address range possible exact and more-
specific prefixes from DFZ are found. If the exact prefix was not
found and more-specifics do not cover the geolocated address range,
then also less-specific prefixes are checked. Finally, all the unique
prefix and ASN tuples from DFZ are checked against the RPKI ROA dataset.

tonusoo

tonusoo

root@lab-mx960> show configuration services
service-set pat-service-set {
    nat-rules rule-napt-44;
    interface-service {
        /* first PIC of MS-DPC in slot 9; Multiservices MIC should use "ms" interface instead of "sp" interface  */
        service-interface sp-9/0/0;
    }
}
nat {
    pool napt-pool {

tonusoo

#!/usr/bin/env python3

# https://github.com/QratorLabs/ASPA
# https://github.com/ksriram25/IETF/blob/main/ASPA_path_verification_examples.pdf

import sys
import logging

DEBUG_MODE = True