IETF 79 Proceedings

Introduction  |  Area, Working Goup & BoF Reports  |  Plenaries  |  Training  |  Internet Research Task Force

Secure Inter-Domain Routing (sidr) (WG)

Minutes  | Audio Archives  |  Jabber Logs  |  Mailing List Archives

Additional information is available at tools.ietf.org/wg/sidr

Chair(s): Sandra Murphy Chris Morrow Routing Area Director(s): Stewart Bryant Adrian Farrel Routing Area Advisor: Stewart Bryant Technical Advisor(s): Steven Bellovin

Meeting Slides

• SIDR Working Group Agenda
• SIDR Draft Status
• Certificate Policy
• Key Rollover plus Many Document Updates
• Local Management of Trust Anchors
• Algorithm Agility
• Secure Extension of BGP by Decoupling Path Propagation and Adoption

Internet-Drafts:

• A Profile for X.509 PKIX Resource Certificates (60942 bytes)
• Certificate Policy (CP) for the Resource PKI (RPKI (81091 bytes)
• A Profile for Route Origin Authorizations (ROAs) (16609 bytes)
• An Infrastructure to Support Secure Internet Routing (64716 bytes)
• A Protocol for Provisioning Resource Certificates (62068 bytes)
• Manifests for the Resource Public Key Infrastructure (43119 bytes)
• Validation of Route Origination using the Resource Certificate PKI and ROAs (20797 bytes)
• A Profile for Resource Certificate Repository Structure (32090 bytes)
• Resource Certificate PKI (RPKI) Trust Anchor Locator (15811 bytes)
• The Profile for Algorithms and Key Sizes for use in the Resource Public Key Infrastructure (11739 bytes)
• Use Cases and interpretation of RPKI objects for issuers and relying parties (49413 bytes)
• BGP Prefix Origin Validation (21230 bytes)
• The RPKI/Router Protocol (48549 bytes)
• Signed Object Template for the Resource Public Key Infrastructure (25618 bytes)
• CA Key Rollover in the RPKI (24141 bytes)
• Local Trust Anchor Management for the Resource Public Key Infrastructure (70635 bytes)
• BGP Prefix Origin Validation State Extended Community (11211 bytes)
• RPKI-Based Origin Validation Operation (15545 bytes)
• The RPKI Ghostbusters Record (12770 bytes)
• RPKI Objects issued by IANA (27156 bytes)
• Algorithm Agility Procedure for RPKI. (36423 bytes)

No Request For Comments

Charter (as of 2010-03-12)

The purpose of the SIDR working group is to reduce vulnerabilities in
the inter-domain routing system. The two vulnerabilities that will be
addressed are:

* Is an Autonomous System (AS) authorized to originate an IP prefix
* Is the AS-Path represented in the route the same as the path through
which the NLRI traveled

The SIDR working group will take practical deployability into consideration.

Building upon the already completed and implemented framework:

* Resource Public Key Infrastructure (RPKI)
* Distribution of RPKI data to routing devices and its use in
operational networks
* Document the use of certification objects within the secure
routing architecture

This working group will specify security enhancements for inter-domain
routing protocols.

Goals and Milestones:

Done		Submit initial draft on inter-domain routing security within this architecture
Done		Submit initial draft on certificate objects to be used within this architecture
Done		Submit initial draft on securing origination of routing information
Jan 2010		I-D: draft-ietf-sidr-publication
Jan 2010		I-D: draft-ietf-sidr-keyroll
Jan 2010		I-D: draft-ietf-sidr-arch
Jan 2010		I-D: draft-ietf-sidr-cp
Jan 2010		I-D: draft-ietf-sidr-res-certs
Jan 2010		I-D: draft-ietf-sidr-roa-validation
Jan 2010		I-D: draft-ietf-sidr-signed-object
Jan 2010		I-D: draft-ietf-sidr-rpki-manifests
Jan 2010		I-D: draft-ietf-sidr-rpki-algs
Jan 2010		I-D: draft-ietf-sidr-rescerts-provisioning
Jan 2010		I-D: draft-ietf-sidr-ta
Mar 2010		I-D: draft-ietf-sidr-cps-irs
Mar 2010		I-D: draft-ietf-sidr-cps-isp
Nov 2010		I-D: draft-ietf-sidr-origin-ops
Nov 2010		I-D: draft-ietf-sidr-pfx-validate
Nov 2010		I-D: draft-ietf-sidr-repos-struct
Nov 2010		I-D: draft-ietf-sidr-roa-format
Nov 2010		I-D: draft-ietf-sidr-ltamgmt
Dec 2010		I-D: draft-rgaglian-sidr-algorithm-agility
Jan 2011		I-D: draft-ietf-sidr-ghostbusters
Feb 2011		I-D: draft-ietf-sidr-rpki-rtr
Mar 2011		I-D: Document the BGP protocol enhancements that meet the security requirements
Mar 2011		I-D: A requirements document that addresses these threats
Mar 2011		I-D: A document describing threats to the routing system
Mar 2011		I-D: An overview of the RPKI and BGP Protocol changes required for origin and path validation
Mar 2011		I-D: Operational deployment guidance for network operators
May 2011		I-D: draft-ietf-sidr-usecases
May 2011		Publication: draft-ietf-sidr-arch
May 2011		Publication: draft-ietf-sidr-cp
May 2011		Publication: draft-ietf-sidr-res-certs
Jun 2011		I-D: System and architecture design choices made in the protocol and RPKI
Jun 2011		Publication: draft-ietf-sidr-publication
Jun 2011		Publication: draft-ietf-sidr-repos-struct
Jun 2011		Publication: draft-ietf-sidr-roa-format
Jun 2011		Publication: draft-ietf-sidr-rpki-rtr
Jun 2011		Publication: draft-ietf-sidr-roa-validation
Jun 2011		Publication: draft-ietf-sidr-signed-object
Jun 2011		Publication: draft-ietf-sidr-rpki-manifests
Jul 2011		Publication: draft-ietf-sidr-origin-ops
Jul 2011		Publication: draft-ietf-sidr-rpki-algs
Jul 2011		Publication: draft-ietf-sidr-rescerts-provisioning
Aug 2011		Publication: draft-ietf-sidr-ta
Oct 2011		Publication: draft-rgaglian-sidr-algorithm-agility
Oct 2011		Publication: draft-ietf-sidr-ghostbusters
Nov 2011		Publication: draft-ietf-sidr-ltamgmt
Dec 2011		Publication: System and architecture design choices made in the protocol and RPKI
Dec 2011		Publication: draft-ietf-sidr-usecases
Dec 2011		Publication: draft-ietf-sidr-keyroll
Jan 2012		Publication: An overview of the RPKI and BGP Protocol changes required for origin and path validation
Jan 2012		Publication: Document the BGP protocol enhancements that meet the security requirements
Jan 2012		Publication: draft-ietf-sidr-pfx-validate
Mar 2012		Publication: draft-ietf-sidr-cps-irs
Mar 2012		Publication: draft-ietf-sidr-cps-isp
Jun 2012		Publication: A document describing threats to the routing system
Jun 2012		Publication: A requirements document that addresses these threats
Jul 2012		Publication: Operational deployment guidance for network operators