rpki-20210331-online


Dates: 31 March 2021
Location: Online

Target Audience

  • Anyone who works with BGP in their daily role, and are interested to understand the RPKI framework and how it can help secure the global Internet Routing.

Synopsis

  • Why do we keep seeing news headlines about major networks not being reachable because traffic got rerouted to somewhere else? BGP mishaps are very common and frighteningly very easy. Examples are malicious route hijacking, mis-origination (fat fingers), and bad filters (route leaks). We need better mechanism(s) to ensure no one can inject false information into the global routing system that easily.
  • This tutorial will look at current route filtering tools/techniques, how RPKI is just a piece in the puzzle, and what we should do to secure the Internet routing.

Pre-requisites

For those who manage IP resources for your organisations (technical or corporate contacts), please do come with MFA (OTP) enabled for your MyAPNIC (or CNNIC) account, as well as ensure you have permission from your Corporate Contacts to certify your resources - let us create ROAs for your prefixes!

This workshop is not an introduction. It is assumed that the workshop participants have a working knowledge of:

  • IP Routing (BGP working knowledge is a must!)
  • How to use a router command line interface (This lab will use Cisco IOS configuration syntax).
  • Network operations, Internet technologies, OSI reference model and TCP/IP.
  • Basic Linux command line (CLI) skills.

We recommend the following Academy courses be completed before the start of the tutorial:

Other requirements

  • Participants are advised to bring their own laptop computers and have a good internet connection since the labs will be remote.
  • Software: SSH Client
  • Confirm Secure Shell (SSH) is allowed from the office or home network to access the lab infrastructure

Workshop topics

  • Recent Routing Incidents
  • Current BGP Filtering techniques
  • Resource PKI fundamentals
  • Installation and configuration of RPKI Validators
  • BGP Filtering with ROA (Route Origin Validation)
  • BGPsec and ASPA overview

Workshop Items

  • Agenda (includes links to presentations and schedule)
  • Instructors: Warren Finch (APNIC), Huan Zhang (APNIC Community Trainer/CNNIC)
  • rpki-20210331-online.txt
  • Last modified: 2021/06/17 14:32
  • (external edit)