Secure Inter-Domain Routing (sidr)
| WG | Name | Secure Inter-Domain Routing |
|---|---|---|
| Acronym | sidr | |
| Area | Routing Area (rtg) | State | Active |
| Charter | charter-ietf-sidr-04 Approved | |
| Dependencies | Document dependency graph (SVG) | |
| Personnel | Chairs |
Chris Morrow
Sandra Murphy |
| Area Director |
Alvaro Retana
|
|
| Tech Advisor |
Steven Bellovin
|
|
| Mailing list | Address | sidr@ietf.org |
| To subscribe | https://www.ietf.org/mailman/listinfo/sidr | |
| Archive | https://mailarchive.ietf.org/arch/browse/sidr/ | |
| Jabber chat | Room address | xmpp:sidr@jabber.ietf.org?join |
| Logs | https://jabber.ietf.org/logs/sidr/ | |
Charter for Working Group
The purpose of the SIDR working group is to reduce vulnerabilities in
the inter-domain routing system. The two vulnerabilities that will be
addressed are:
* Is an Autonomous System (AS) authorized to originate an IP prefix
* Is the AS-Path represented in the route the same as the path through
which the NLRI traveled
The SIDR working group will take practical deployability into consideration.
Building upon the already completed and implemented framework:
* Resource Public Key Infrastructure (RPKI)
* Distribution of RPKI data to routing devices and its use in
operational networks
* Document the use of certification objects within the secure
routing architecture
This working group will specify security enhancements for inter-domain
routing protocols.
Milestones
| Date | Milestone |
|---|---|
| Jul 2012 | Publication: Operational deployment guidance for network operators |
| Jun 2012 | Publication: A requirements document that addresses these threats |
| Jun 2012 | Publication: A document describing threats to the routing system |
| Mar 2012 | Publication: draft-ietf-sidr-cps-isp |
| Mar 2012 | Publication: draft-ietf-sidr-cps-irs |
| Jan 2012 | Publication: draft-ietf-sidr-pfx-validate |
| Jan 2012 | Publication: Document the BGP protocol enhancements that meet the security requirements |
| Jan 2012 | Publication: An overview of the RPKI and BGP Protocol changes required for origin and path validation |
| Dec 2011 | Publication: draft-ietf-sidr-keyroll |
| Dec 2011 | Publication: draft-ietf-sidr-usecases |
| Dec 2011 | Publication: System and architecture design choices made in the protocol and RPKI |
| Nov 2011 | Publication: draft-ietf-sidr-ltamgmt |
| Oct 2011 | Publication: draft-ietf-sidr-ghostbusters |
| Oct 2011 | Publication: draft-rgaglian-sidr-algorithm-agility |
| Aug 2011 | Publication: draft-ietf-sidr-ta |
| Jul 2011 | Publication: draft-ietf-sidr-rescerts-provisioning |
| Jul 2011 | Publication: draft-ietf-sidr-rpki-algs |
| Jul 2011 | Publication: draft-ietf-sidr-origin-ops |
| Jun 2011 | Publication: draft-ietf-sidr-rpki-manifests |
| Jun 2011 | Publication: draft-ietf-sidr-signed-object |
| Jun 2011 | Publication: draft-ietf-sidr-roa-validation |
| Jun 2011 | Publication: draft-ietf-sidr-rpki-rtr |
| Jun 2011 | Publication: draft-ietf-sidr-roa-format |
| Jun 2011 | Publication: draft-ietf-sidr-repos-struct |
| Jun 2011 | Publication: draft-ietf-sidr-publication |
| Jun 2011 | I-D: System and architecture design choices made in the protocol and RPKI |
| May 2011 | Publication: draft-ietf-sidr-res-certs |
| May 2011 | Publication: draft-ietf-sidr-cp |
| May 2011 | Publication: draft-ietf-sidr-arch |
| May 2011 | I-D: draft-ietf-sidr-usecases |
| Mar 2011 | I-D: Operational deployment guidance for network operators |
| Mar 2011 | I-D: An overview of the RPKI and BGP Protocol changes required for origin and path validation |
| Mar 2011 | I-D: A document describing threats to the routing system |
| Mar 2011 | I-D: A requirements document that addresses these threats |
| Mar 2011 | I-D: Document the BGP protocol enhancements that meet the security requirements |
| Feb 2011 | I-D: draft-ietf-sidr-rpki-rtr |
| Jan 2011 | I-D: draft-ietf-sidr-ghostbusters |
| Dec 2010 | I-D: draft-rgaglian-sidr-algorithm-agility |
| Nov 2010 | I-D: draft-ietf-sidr-ltamgmt |
| Nov 2010 | I-D: draft-ietf-sidr-roa-format |
| Nov 2010 | I-D: draft-ietf-sidr-repos-struct |
| Nov 2010 | I-D: draft-ietf-sidr-pfx-validate |
| Nov 2010 | I-D: draft-ietf-sidr-origin-ops |
| Mar 2010 | I-D: draft-ietf-sidr-cps-isp |
| Mar 2010 | I-D: draft-ietf-sidr-cps-irs |
| Jan 2010 | I-D: draft-ietf-sidr-ta |
| Jan 2010 | I-D: draft-ietf-sidr-rescerts-provisioning |
| Jan 2010 | I-D: draft-ietf-sidr-rpki-algs |
| Jan 2010 | I-D: draft-ietf-sidr-rpki-manifests |
| Jan 2010 | I-D: draft-ietf-sidr-signed-object |
| Jan 2010 | I-D: draft-ietf-sidr-roa-validation |
| Jan 2010 | I-D: draft-ietf-sidr-res-certs |
| Jan 2010 | I-D: draft-ietf-sidr-cp |
| Jan 2010 | I-D: draft-ietf-sidr-arch |
| Jan 2010 | I-D: draft-ietf-sidr-keyroll |
| Jan 2010 | I-D: draft-ietf-sidr-publication |
| Done | Submit initial draft on securing origination of routing information |
| Done | Submit initial draft on certificate objects to be used within this architecture |
| Done | Submit initial draft on inter-domain routing security within this architecture |