UKNOF is being closed down during 2024, and this site is now only active as an archive of previous events and presentations.

10–11 Sept 2019
Assembly Buildings, Belfast
Europe/London timezone
UKNOF44 Surveys at http://uknof.uk/ratetalks44 ; http://uknof.uk/survey44

IXP Route Servers with RPKI

10 Sept 2019, 16:25
30m
Assembly Hall (Assembly Buildings, Belfast)

Assembly Hall

Assembly Buildings, Belfast

2 - 10 Fisherwick Place Belfast BT1 6DW
Standard Presentation Main Session

Speaker

Mr Barry O'Donovan (INEX)

Description

Most route server instances at internet exchanges (IXPs) perform prefix filtering based on route/route6 objects published by internet routing registries. The data quality of these IRRDB objects is often poor, with problems relating to missing, stale and incorrectly duplicated information. Resource holders often have difficulty correcting this information due to the object sets being decoupled from the RIR resource assignments.

RPKI is a public key infrastructure framework designed to secure the internet's routing infrastructure in a way that replaces IRRs with a database where trust is assigned by the resource holder. There are still issues: the database has only a fraction of the prefix coverage as IRR databases do and there is no implemented support for features such as AS-SETs. We are now in a multi-year transition from IRR to RPKI while these issues are solved. In the presentation, we propose a best-practice integration of RPKI into the current IX route server context which still includes IRR support.

We will present the development work we have completed with IXP Manager to support RPKI and discuss our experiences at putting this live at INEX.

Primary author

Presentation materials