Re: Information for ASPA creation

> I don't think they provide any "hints"

I'd strongly discourage providing any upstream provider "hints" in the ASPA
UI. "Intent" and "observable state" of BGP relationships must not be
confused. The "hint" feature merely opens the door for operators to
accidentally allow the route leaks ASPA is meant to prevent. People should
understand their business relationships well enough to not need a hint from
the UI.

> Show the likely AS name when you enter an AS number, to prevent
simple typos (8283 instead of 8382, etc.)

This, on the other hand, would be helpful in all ASPA UI's (not just
yours); otherwise, we'll definitely have the typos you refer to that break
routing.

Thanks,
--
Bryton Herdes
Principal Network Engineer
AS13335 - Cloudflare


On Tue, Mar 3, 2026 at 10:31 AM Koen van Hove via NANOG <
[email protected]> wrote:

> Hello all!
>
> I am currently working on a better ASPA UI in Krill. The goal is to
> provide a bit more confidence when creating an ASPA record that what was
> entered is correct, and, more importantly, does not accidentally break
> things once networks start validating and rejecting routes based on ASPA
> records. The last iteration of that UI can be found here:
> https://github.com/NLnetLabs/krill-ui/pull/58
>
> I believe ARIN supports creating ASPA records, but from what I could
> gather from screenshot I don't think they provide any "hints". I know
> the RIPE NCC does not (currently) do this because there are a lot of
> asterisks; this topic was also discussed during the last RIPE Routing WG
> in Romania
> (https://ripe91.ripe.net/programme/meeting-plan/sessions/30/transcript/).
>
> But just because ARIN and the RIPE NCC don't do it, doesn't mean I
> cannot give it a shot anyway :-)
>
> Currently I do two things:
>
> 1. Show the likely AS name when you enter an AS number, to prevent
> simple typos (8283 instead of 8382, etc.);
> 2. Show which AS numbers appear "to the left" in RIPE RIS (without
> making a claim that they are missing per se, just that they were
> observed) along with their names.
>
> Don't press the button and nothing happens. The button also only appears
> when you have typed something in the providers field to prevent just
> copy pasting whatever it shows as "to the left" in RIS (and
> consequentially forgetting your DDoS providers, or upstreams that RIS
> didn't see, etc.)
>
> But as I am not an operator (apart from AS211321), I want your input as
> well. What is the kind of information you would want (or not want) to
> see before clicking the "Create ASPA" button?
>
> Cordially,
> Koen van Hove
>
> PS: This does not affect the CLI and API for Krill at all, it's only the
> web interface.
>
>
>
> _______________________________________________
> NANOG mailing list
>
> https://lists.nanog.org/archives/list/[email protected]/message/GEQLUMRL4M2JXWJQLXFFPKRC426FVXMW/
>
_______________________________________________
NANOG mailing list 
https://lists.nanog.org/archives/list/[email protected]/message/GGSZWNK2HCU7QERBVDRGACNJ5P37JLX3/