the most promising replacement is the SCION[1] project. See section "Authentication and PKI"[2]. It's already used by SwissCom and another CH based ISP. It can

the most promising replacement is the SCION[1] project. See section "Authentication and PKI"[2]. It's already used by SwissCom and another CH based ISP. It can do path selection, geo-fencing, and traffic shaping. Really cool DDoS mitigation[3] as well. It has been previously discussed on HN[4]. [1] https://www.scion-architecture.net/ https://www.scion-architecture.net/ [2] https://www.scion-architecture.net/pages/publications/ https://www.scion-architecture.net/pages/publications/ [3] https://news.ycombinator.com/item?id=21546214 https://news.ycombinator.com/item?id=21546214 [4] https://hn.algolia.com/?dateRange=all&page=0&prefix=false&query=SCION%20project&sort=byPopularity&type=all https://hn.algolia.com/?dateRange=all&page=0&prefix=false&qu...