ARIN and the RPKI (was Re: AltDB?)

[rdobbins at arbor.net (Dobbins, Roland)]

On Jan 6, 2011, at 11:16 AM, Randy Bush wrote:

> actually, the formal rpki-based origin-validation stuff is measured to take *less* cpu, a lot less, than ACLs

On the platforms which really matter in terms of rPKI, ACLs are handled in hardware, so this is pretty much a wash. 

Concur on all the other points, however.

------------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

Most software today is very much like an Egyptian pyramid, with millions
of bricks piled on top of each other, with no structural integrity, but
just done by brute force and thousands of slaves.

			  -- Alan Kay