<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Times New Roman \(Body CS\)";
panose-1:2 2 6 3 5 4 5 2 3 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:12.0pt">Hi Shawn, we have 4 instances of routinator. I think having two different validators is a good idea buy I couldn’t convince my Ops guys to do this. Two instances are in one data center in the west of the
US and two in east. We have RTR sessions from over 1000 routers to each one. If any one of the sessions goes down, we have 3 others. Ops did modify “/etc/security/limits.conf” and added:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt">* soft nofile 524820<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt">* hard nofile 524820<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt">because we were getting an error about too many open files from the OS. The throughput on the instances is less than 15 Mbps with an RTR refresh time of 10 mins configured on our routers.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt">-Rich<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:12.0pt;color:black">From: </span></b><span style="font-size:12.0pt;color:black">RPKI <rpki-bounces@lists.nlnetlabs.nl> on behalf of Shawn Kleinart via RPKI <rpki@lists.nlnetlabs.nl><br>
<b>Reply-To: </b>Shawn Kleinart <skleinart@llnw.com><br>
<b>Date: </b>Thursday, November 11, 2021 at 2:34 PM<br>
<b>To: </b>"rpki@lists.nlnetlabs.nl" <rpki@lists.nlnetlabs.nl><br>
<b>Subject: </b>[EXTERNAL] [RPKI] validation scalability considerations<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div style="border:solid #5A5A5A 1.0pt;padding:2.0pt 2.0pt 2.0pt 2.0pt">
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:12.0pt;background:#235C70">
<strong><span style="font-size:10.0pt;font-family:"Calibri",sans-serif;color:white">CAUTION:</span></strong><span style="font-size:10.0pt;color:white"> The e-mail below is from an external source. Please exercise caution before opening attachments, clicking
links, or following guidance. </span><o:p></o:p></p>
</div>
<div>
<div>
<p class="MsoNormal">Moving into production validation and testing Routinator and RTRTR (and other vendors in lab), about how many router sessions can be maintained on each install?<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">And what other considerations should be made around a global network and general scalability?<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Aside from the obvious resiliency considerations, including platform (two validators) -- Routinator/RTRTR: reasonable to support sessions with 250 routers? 500 sessions?<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Any good (ROV) lessons to share on things NOT to do?<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Many thanks,<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"> Shawn Kleinart, Limelight Networks, Inc, AS22822 (+ 9 others)<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</div>
The contents of this e-mail message and <br>any attachments are intended solely for the <br>addressee(s) and may contain confidential <br>and/or legally privileged information. If you<br>are not the intended recipient of this message<br>or if this message has been addressed to you <br>in error, please immediately alert the sender<br>by reply e-mail and then delete this message <br>and any attachments. If you are not the <br>intended recipient, you are notified that <br>any use, dissemination, distribution, copying,<br>or storage of this message or any attachment <br>is strictly prohibited.</body>
</html>