rpki deployment panel

Copyright © 2015 Japan Network Information Center

RPKI deployment panel


People

• Geoff Huston (chair)

• Fakrul Alam, bdHUB• A week with analysing RPKI status

• Tomoya Yoshida, Internet Multifeed• Deployment factors and current status

• Yoshinobu Matsuzaki, Internet Initiative Japan• RPKI deployment at ISP

• Taiji Kimura, Japan Network Information Center• About JPNIC’s RPKI

1


RPKI Deployment Panel

• Purpose

• Gathering experienced operators voice

• Discuss further RPKI deployment for useful mechanism

2


Discussions


Deployment model

Public cache server

/

local cache server

4


Deployment model

RPKI in IXP

and

Route reflector

5


Deployment model

RPKI and IRR

6


HOWTO

Configuring RPKI cache

and

Building own RPKI CA

7


What do you do when…


(Customer AS)

• Customer claims their prefix has been announced from other AS!

9


(Own prefix)

• You found your prefix has no reachability from other region.What do you do?

10


(Customer AS)

• Customer claims their prefix has been announced from other AS!What do you do?

11


(DDoS mitigation)

• DDoS packets are coming!You found if other AS announces specific announce.

12


JPNIC’s RPKI

Taiji Kimura


Issues on RPKI deployment in Japan

• Deployment for operators• How RPKI is use for people - BGP operators

• Language

14


Developing items and technical specifications

• Internationalization

• Database

• Authentication

• Redundancy and easy maintenance

• Server security

• Key management and PKI operation

15


Internationalization

16


Further step

• Multi-language support

• Feedbacks for developer

17


It is time to release.

RPKI pilot service

rpki deployment panel

Internet

japan deployment

rpki cache

rpki pilot service

isp taiji kimura

experienced operators

pki operation

route reflector

useful mechanism