AFRINIC TA malfunctions

[massimocandela]

Are you receiving TA malfunctions for AFRINIC? Those alerts are correct.

See https://lists.afrinic.net/pipermail/dbwg/2023-November/000493.html

[Ferine2016]

How can we filter those alerts?

[discostur]

Yes, we are seeing the malfunctions ROA from AFRINIC since weeks:

Possible TA malfunction or incomplete VRP file: 29.27% of the ROAs disappeared from afrinic

I think it startet around october 26 ...

[job]

We've made a number of changes to rpki-client to change the response to detection of issues with inconsistent publications. This means that the issues still are happening, but that the "Possible TA Malfunction" alert will fire less often.

For a full description of the code change see this commit openbsd/src@102443c

Note: the TA still is malfunctioning, but a TA would have to malfunction for multiple consecutive hours before this fires. The rpki-client code changes do not solve the underlaying problems at the TA side.

[massimocandela]

BGPalerter v1.33.0 has been released a few days ago. It includes the possibility to specify a tolerance threshold for each TA (see toleranceDeletedRoasTA and toleranceExpiredRoasTA here).
However, to benefit from this new feature you need to generate a new config.yml file, or manually add the tolerance values.

Suggested tolerance values are:

      toleranceDeletedRoasTA:
        ripe: 20
        apnic: 20
        arin: 20
        lacnic: 20
        afrinic: 50
      toleranceExpiredRoasTA:
        ripe: 20
        apnic: 20
        arin: 20
        lacnic: 20
        afrinic: 50

The short format toleranceDeletedRoasTA: 20 (previously supported) is also accepted to retain back compatibility. However, this will apply the same tolerance to all TAs (instead of a higher one for AFRINIC).