We have released OpenBGPD 9.3, which will be arriving in the OpenBGPD directory of your local OpenBSD mirror soon. This release includes the following changes to the previous release: Add shorthand for well-known "DOWNGRADE" BGP community. Remove support old aspa-set table format that included per-provider AFI. Rpki-client stopped issuing those with the 8.5 release in July 2023. Use getexecpath in the fork-and-execute privilege separation setup and implement portable shims fo

rpki-client 9.9 has just been released and will be available in the rpki-client directory of any OpenBSD mirror soon. It is recommended that all users upgrade to this version for improved reliability. rpki-client is a FREE, easy-to-use implementation of the Resource Public Key Infrastructure (RPKI) for Relying Parties to facilitate validation of BGP announcements. The program queries the global RPKI repository system and validates untrusted network inputs. The program outputs

We have released OpenBGPD 9.2, which will be arriving in the OpenBGPD directory of your local OpenBSD mirror soon. This release includes the following changes to the previous release: Require negotiation of the 'as-4byte' capability by default. Sessions with legacy speakers unable to handle this capability can still be downgraded through explicit configuration, but our long term goal is to drop support for old 2-byte only clients. Rework fast reconnect and the IdleHold timer