IETF 81 Proceedings
Introduction | Area, Working Goup & BoF Reports | Plenaries | Training | Internet Research Task Force
Secure Inter-Domain Routing (sidr) (WG)
Minutes | Audio Archives | Jabber Logs | Mailing List Archives
Additional information is available at tools.ietf.org/wg/sidr
Chair(s):Routing Area Director(s):Routing Area Advisor:Technical Advisor(s): |
Meeting Slides
- Agenda and Draft Status
- Algorithm Agility
- RPKI Publication Protocol
- Use Cases and Interpretation of RPKI Objects
- BGPSEC Protocol
- Beaconing and Replay
- RPKI MIB modules
- Route Servers and BGPSEC
- Prepend and Transparency
- RPKI RTR Client C Lib
- RIB Size Estimation for BGPSEC
- History of Design Considerations
- Transfer of resources and the RPKI
- Secure Extension of BGP by Decoupling
- Efficient Secure BGP
Internet-Drafts:
- A Profile for X.509 PKIX Resource Certificates (0 bytes) Failed to copy /a/www/ietf-ftp/internet-drafts/draft-ietf-sidr-res-certs-22.txt
- Certificate Policy (CP) for the Resource PKI (RPKI (0 bytes) Failed to copy /a/www/ietf-ftp/internet-drafts/draft-ietf-sidr-cp-17.txt
- A Profile for Route Origin Authorizations (ROAs) (0 bytes) Failed to copy /a/www/ietf-ftp/internet-drafts/draft-ietf-sidr-roa-format-12.txt
- An Infrastructure to Support Secure Internet Routing (0 bytes) Failed to copy /a/www/ietf-ftp/internet-drafts/draft-ietf-sidr-arch-13.txt
- A Protocol for Provisioning Resource Certificates (0 bytes) Failed to copy /a/www/ietf-ftp/internet-drafts/draft-ietf-sidr-rescerts-provisioning-11.txt
- Manifests for the Resource Public Key Infrastructure (0 bytes) Failed to copy /a/www/ietf-ftp/internet-drafts/draft-ietf-sidr-rpki-manifests-16.txt
- Validation of Route Origination using the Resource Certificate PKI and ROAs (0 bytes) Failed to copy /a/www/ietf-ftp/internet-drafts/draft-ietf-sidr-roa-validation-10.txt
- A Profile for Resource Certificate Repository Structure (0 bytes) Failed to copy /a/www/ietf-ftp/internet-drafts/draft-ietf-sidr-repos-struct-09.txt
- Resource Certificate PKI (RPKI) Trust Anchor Locator (0 bytes) Failed to copy /a/www/ietf-ftp/internet-drafts/draft-ietf-sidr-ta-07.txt
- The Profile for Algorithms and Key Sizes for use in the Resource Public Key Infrastructure (0 bytes) Failed to copy /a/www/ietf-ftp/internet-drafts/draft-ietf-sidr-rpki-algs-05.txt
- Use Cases and Interpretation of RPKI Objects for Issuers and Relying Parties (0 bytes) Failed to copy /a/www/ietf-ftp/internet-drafts/draft-ietf-sidr-usecases-02.txt
- BGP Prefix Origin Validation (0 bytes) Failed to copy /a/www/ietf-ftp/internet-drafts/draft-ietf-sidr-pfx-validate-02.txt
- The RPKI/Router Protocol (0 bytes) Failed to copy /a/www/ietf-ftp/internet-drafts/draft-ietf-sidr-rpki-rtr-18.txt
- Signed Object Template for the Resource Public Key Infrastructure (0 bytes) Failed to copy /a/www/ietf-ftp/internet-drafts/draft-ietf-sidr-signed-object-04.txt
- CA Key Rollover in the RPKI (0 bytes) Failed to copy /a/www/ietf-ftp/internet-drafts/draft-ietf-sidr-keyroll-08.txt
- A Publication Protocol for the Resource Public Key Infrastructure (RPKI) (0 bytes) Failed to copy /a/www/ietf-ftp/internet-drafts/draft-ietf-sidr-publication-01.txt
- Local Trust Anchor Management for the Resource Public Key Infrastructure (0 bytes) Failed to copy /a/www/ietf-ftp/internet-drafts/draft-ietf-sidr-ltamgmt-02.txt
- BGP Prefix Origin Validation State Extended Community (0 bytes) Failed to copy /a/www/ietf-ftp/internet-drafts/draft-ietf-sidr-origin-validation-signaling-01.txt
- RPKI-Based Origin Validation Operation (0 bytes) Failed to copy /a/www/ietf-ftp/internet-drafts/draft-ietf-sidr-origin-ops-11.txt
- The RPKI Ghostbusters Record (0 bytes) Failed to copy /a/www/ietf-ftp/internet-drafts/draft-ietf-sidr-ghostbusters-15.txt
- RPKI Objects issued by IANA (0 bytes) Failed to copy /a/www/ietf-ftp/internet-drafts/draft-ietf-sidr-iana-objects-03.txt
- Algorithm Agility Procedure for RPKI. (0 bytes) Failed to copy /a/www/ietf-ftp/internet-drafts/draft-ietf-sidr-algorithm-agility-03.txt
- BGPSEC Protocol Specification (0 bytes) Failed to copy /a/www/ietf-ftp/internet-drafts/draft-ietf-sidr-bgpsec-protocol-00.txt
- An Overview of BGPSEC (0 bytes) Failed to copy /a/www/ietf-ftp/internet-drafts/draft-ietf-sidr-bgpsec-overview-00.txt
- Threat Model for BGP Path Security (0 bytes) Failed to copy /a/www/ietf-ftp/internet-drafts/draft-ietf-sidr-bgpsec-threats-00.txt
- BGPsec Operational Considerations (0 bytes) Failed to copy /a/www/ietf-ftp/internet-drafts/draft-ietf-sidr-bgpsec-ops-01.txt
- Security Requirements for BGP Path Validation (0 bytes) Failed to copy /a/www/ietf-ftp/internet-drafts/draft-ietf-sidr-bgpsec-reqs-01.txt
- A Profile for BGPSEC Router Certificates, Certificate Revocation Lists, and Certification Requests (0 bytes) Failed to copy /a/www/ietf-ftp/internet-drafts/draft-ietf-sidr-bgpsec-pki-profiles-00.txt
- BGP Algorithms, Key Formats, & Signature Formats (0 bytes) Failed to copy /a/www/ietf-ftp/internet-drafts/draft-ietf-sidr-bgpsec-algs-00.txt
No Request For Comments
Charter (as of 2011-08-18)
The purpose of the SIDR working group is to reduce vulnerabilities in
the inter-domain routing system. The two vulnerabilities that will be
addressed are:
* Is an Autonomous System (AS) authorized to originate an IP prefix
* Is the AS-Path represented in the route the same as the path through
which the NLRI traveled
The SIDR working group will take practical deployability into consideration.
Building upon the already completed and implemented framework:
* Resource Public Key Infrastructure (RPKI)
* Distribution of RPKI data to routing devices and its use in
operational networks
* Document the use of certification objects within the secure
routing architecture
This working group will specify security enhancements for inter-domain
routing protocols.
Goals and Milestones:
| Done | Submit initial draft on inter-domain routing security within this architecture | |
| Done | Submit initial draft on certificate objects to be used within this architecture | |
| Done | Submit initial draft on securing origination of routing information | |
| Jan 2010 | I-D: draft-ietf-sidr-publication | |
| Jan 2010 | I-D: draft-ietf-sidr-keyroll | |
| Jan 2010 | I-D: draft-ietf-sidr-arch | |
| Jan 2010 | I-D: draft-ietf-sidr-cp | |
| Jan 2010 | I-D: draft-ietf-sidr-res-certs | |
| Jan 2010 | I-D: draft-ietf-sidr-roa-validation | |
| Jan 2010 | I-D: draft-ietf-sidr-signed-object | |
| Jan 2010 | I-D: draft-ietf-sidr-rpki-manifests | |
| Jan 2010 | I-D: draft-ietf-sidr-rpki-algs | |
| Jan 2010 | I-D: draft-ietf-sidr-rescerts-provisioning | |
| Jan 2010 | I-D: draft-ietf-sidr-ta | |
| Mar 2010 | I-D: draft-ietf-sidr-cps-irs | |
| Mar 2010 | I-D: draft-ietf-sidr-cps-isp | |
| Nov 2010 | I-D: draft-ietf-sidr-origin-ops | |
| Nov 2010 | I-D: draft-ietf-sidr-pfx-validate | |
| Nov 2010 | I-D: draft-ietf-sidr-repos-struct | |
| Nov 2010 | I-D: draft-ietf-sidr-roa-format | |
| Nov 2010 | I-D: draft-ietf-sidr-ltamgmt | |
| Dec 2010 | I-D: draft-rgaglian-sidr-algorithm-agility | |
| Jan 2011 | I-D: draft-ietf-sidr-ghostbusters | |
| Feb 2011 | I-D: draft-ietf-sidr-rpki-rtr | |
| Mar 2011 | I-D: Document the BGP protocol enhancements that meet the security requirements | |
| Mar 2011 | I-D: A requirements document that addresses these threats | |
| Mar 2011 | I-D: A document describing threats to the routing system | |
| Mar 2011 | I-D: An overview of the RPKI and BGP Protocol changes required for origin and path validation | |
| Mar 2011 | I-D: Operational deployment guidance for network operators | |
| May 2011 | I-D: draft-ietf-sidr-usecases | |
| May 2011 | Publication: draft-ietf-sidr-arch | |
| May 2011 | Publication: draft-ietf-sidr-cp | |
| May 2011 | Publication: draft-ietf-sidr-res-certs | |
| Jun 2011 | I-D: System and architecture design choices made in the protocol and RPKI | |
| Jun 2011 | Publication: draft-ietf-sidr-publication | |
| Jun 2011 | Publication: draft-ietf-sidr-repos-struct | |
| Jun 2011 | Publication: draft-ietf-sidr-roa-format | |
| Jun 2011 | Publication: draft-ietf-sidr-rpki-rtr | |
| Jun 2011 | Publication: draft-ietf-sidr-roa-validation | |
| Jun 2011 | Publication: draft-ietf-sidr-signed-object | |
| Jun 2011 | Publication: draft-ietf-sidr-rpki-manifests | |
| Jul 2011 | Publication: draft-ietf-sidr-origin-ops | |
| Jul 2011 | Publication: draft-ietf-sidr-rpki-algs | |
| Jul 2011 | Publication: draft-ietf-sidr-rescerts-provisioning | |
| Aug 2011 | Publication: draft-ietf-sidr-ta | |
| Oct 2011 | Publication: draft-rgaglian-sidr-algorithm-agility | |
| Oct 2011 | Publication: draft-ietf-sidr-ghostbusters | |
| Nov 2011 | Publication: draft-ietf-sidr-ltamgmt | |
| Dec 2011 | Publication: System and architecture design choices made in the protocol and RPKI | |
| Dec 2011 | Publication: draft-ietf-sidr-usecases | |
| Dec 2011 | Publication: draft-ietf-sidr-keyroll | |
| Jan 2012 | Publication: An overview of the RPKI and BGP Protocol changes required for origin and path validation | |
| Jan 2012 | Publication: Document the BGP protocol enhancements that meet the security requirements | |
| Jan 2012 | Publication: draft-ietf-sidr-pfx-validate | |
| Mar 2012 | Publication: draft-ietf-sidr-cps-irs | |
| Mar 2012 | Publication: draft-ietf-sidr-cps-isp | |
| Jun 2012 | Publication: A document describing threats to the routing system | |
| Jun 2012 | Publication: A requirements document that addresses these threats | |
| Jul 2012 | Publication: Operational deployment guidance for network operators |
Home - Tools
Team - Datatracker - Web Site Usage Statistics - IASA - IAB - RFC Editor - IANA - IRTF - IETF Trust - ISOC - Store - Contact Us
Secretariat services provided by Association Management Solutions, LLC (AMS).
Please send problem reports to: ietf-action@ietf.org.