3 ms·
So what’s happening with the deployment of RPKI[0]? It would seem that owners of IP address space would have the incentive to use it - but perhaps routers don’t
by vertex-four 9y ago
So what’s happening with the deployment of RPKI[0]? It would seem that owners of IP address space would have the incentive to use it - but perhaps routers don’t implement BGPSec widely enough?
[0] https://en.wikipedia.org/wiki/Resource_Public_Key_Infrastructure https://en.wikipedia.org/wiki/Resource_Public_Key_Infrastruc...
- vbernat 9y agoRPKI doesn't really solve the problem as it is a proof of origin. You can still inject routes, just ensure you add the original AS as origin of these routes. BGPsec would solve this issue, but is currently not deployed at all (and won't be before a long time).