We are happy to announce the latest release of Routinator, version 0.9.0 ‘Raptor Bash for Life.’
Routinator is an RPKI relying party software that collects and validates statements in the Resource Public Key Infrastructure (RPKI) about allowed route origins and makes them available to the BGP workflow.
This release fundamentally changes how Routinator maintains the local copy of the RPKI cache. It now separately keeps track of the raw data retrieved from the RPKI repositories and the last known set of correctly published files. This allows Routinator to deal more robustly with partial or erroneous updates – it can now just keep using the previously published set until the repository is fixed (or the objects expire). The price for this greater robustness is increased storage size and RAM usage. At time of writing, about 1.3 GB of disk space is used. If you were running Routinator on an very barebones system, e.g. 1GB total RAM, you should now give it 2GB.
For RRDP and this known good data set we switched from storing data directly in the file system to using a key-value database.
Routinator now keeps track of many more metrics. Detailed numbers are available for each object type both on a per-TAL and – new – per-repository basis. If you’re using Prometheus, it should pick up these new metrics right away. They are also shown in the bundled UI.
Two important things require an action from you:
- The previously available per-trust anchor metrics have been renamed to fit with the new naming scheme. They can now be found under the prefix routinator_ta and use the label name (instead of the previously used tal) for the individual trust anchors.
- LACNIC has published a new Trust Anchor Locator (TAL). We recommend to reinitialise your TALs after upgrading to Routinator 0.9.0 with the routinator init --force command. We also bundle additional TALs for various test setups that are only installed on request. A list of these is available through routinator init --list-tals.
And finally, good new for users running Centos 7 and 8. Starting with this release, we are publishing binary packages for these distributions in addition to the already available Debian packages via our package repository. More details can be found in the installation instructions.