summaryrefslogtreecommitdiffhomepage
path: root/docs/sources/rpki.md
diff options
context:
space:
mode:
Diffstat (limited to 'docs/sources/rpki.md')
-rw-r--r--docs/sources/rpki.md30
1 files changed, 28 insertions, 2 deletions
diff --git a/docs/sources/rpki.md b/docs/sources/rpki.md
index eb53fb78..4f75e0b3 100644
--- a/docs/sources/rpki.md
+++ b/docs/sources/rpki.md
@@ -12,6 +12,8 @@ Assume you finished [Getting Started](https://github.com/osrg/gobgp/blob/master/
- [Configuration](#section0)
- [Validation](#section1)
- [Policy with validation results](#section2)
+- [Force Re-validation](#section3)
+- [Monitoring validation](#section4)
## <a name="section0"> Configuration
@@ -52,8 +54,8 @@ following way:
```bash
$ gobgp rpki server
-Session State Uptime #IPv4/IPv6 records
-210.173.170.254 Up 00:03:06 14823/2168
+Session State Uptime #IPv4/IPv6 records
+210.173.170.254:323 Up 00:03:06 14823/2168
```
```bash
@@ -172,3 +174,27 @@ $ gobgp neighbor 10.0.255.2 local
V*> 2.0.0.0/12 10.0.255.1 3215 00:00:21 [{Origin: i}]
N*> 192.168.1.0/24 10.0.255.1 65001 00:00:21 [{Origin: i}]
```
+
+## <a name="section3"> Force Re-validation
+
+Validation is executed every time bgp update messages arrive. The
+changes of ROAs doesn't trigger off validation. The following command
+enables you to validate all the routes.
+
+```bash
+$ gobgp rpki validate
+```
+
+## <a name="section4"> Monitoring validation
+
+You can monitor the validation results in real-time.
+
+```bash
+$ gobgp monitor rpki
+[VALIDATION] Reason: Update, Peer: 10.0.255.1, Timestamp: 2016-01-18 06:47:33 -0800 PST, Prefix:217.196.16.0/20, OriginAS:24651, ASPath:24651, Old:NONE, New:INVALID, ROAs: [Source: 210.173.170.254:323, AS: 6453, Prefix: 217.196.16.0, Prefixlen: 20, Maxlen: 20], [Source: 210.173.170.254:323, AS: 6854, Prefix: 217.196.16.0, Prefixlen: 20, Maxlen: 20], [Source: 210.173.170.254:323, AS: 41798, Prefix: 217.196.16.0, Prefixlen: 20, Maxlen: 20], [Source: 210.173.170.254:323, AS: 43994, Prefix: 217.196.16.0, Prefixlen: 20, Maxlen: 20]
+[VALIDATION] Reason: PeerDown, Peer: 10.0.255.3, Timestamp: 2016-01-18 06:47:33 -0800 PST, Prefix:223.27.80.0/24, OriginAS:65003, ASPath:65003, Old:INVALID, New:INVALID
+```
+
+Notification is sent when the validation result of a route changes to
+invalid or non-invalid. Notification is also sent when an invalid
+route is withdrawn.