The purpose of the SIDR working group is to reduce vulnerabilities in the inter-domain routing system. The two vulnerabilities that will be addressed are:
* Is an Autonomous System (AS) authorized to originate an IP prefix * Is the AS-Path represented in the route the same as the path through which the NLRI traveled
The SIDR working group will take practical deployability into consideration.
Building upon the already completed and implemented framework:
* Resource Public Key Infrastructure (RPKI) * Distribution of RPKI data to routing devices and its use in operational networks * Document the use of certification objects within the secure routing architecture
This working group will specify security enhancements for inter-domain routing protocols.
Milestones
Done
Submit initial draft on inter-domain routing security within this architecture
Done
Submit initial draft on certificate objects to be used within this architecture
Done
Submit initial draft on securing origination of routing information
Jan 2010
I-D: draft-ietf-sidr-publication
Jan 2010
I-D: draft-ietf-sidr-keyroll
Jan 2010
I-D: draft-ietf-sidr-arch
Jan 2010
I-D: draft-ietf-sidr-cp
Jan 2010
I-D: draft-ietf-sidr-res-certs
Jan 2010
I-D: draft-ietf-sidr-roa-validation
Jan 2010
I-D: draft-ietf-sidr-signed-object
Jan 2010
I-D: draft-ietf-sidr-rpki-manifests
Jan 2010
I-D: draft-ietf-sidr-rpki-algs
Jan 2010
I-D: draft-ietf-sidr-rescerts-provisioning
Jan 2010
I-D: draft-ietf-sidr-ta
Mar 2010
I-D: draft-ietf-sidr-cps-irs
Mar 2010
I-D: draft-ietf-sidr-cps-isp
Nov 2010
I-D: draft-ietf-sidr-origin-ops
Nov 2010
I-D: draft-ietf-sidr-pfx-validate
Nov 2010
I-D: draft-ietf-sidr-repos-struct
Nov 2010
I-D: draft-ietf-sidr-roa-format
Nov 2010
I-D: draft-ietf-sidr-ltamgmt
Dec 2010
I-D: draft-rgaglian-sidr-algorithm-agility
Jan 2011
I-D: draft-ietf-sidr-ghostbusters
Feb 2011
I-D: draft-ietf-sidr-rpki-rtr
Mar 2011
I-D: Document the BGP protocol enhancements that meet the security requirements
Mar 2011
I-D: A requirements document that addresses these threats
Mar 2011
I-D: A document describing threats to the routing system
Mar 2011
I-D: An overview of the RPKI and BGP Protocol changes required for origin and path validation
Mar 2011
I-D: Operational deployment guidance for network operators
May 2011
I-D: draft-ietf-sidr-usecases
May 2011
Publication: draft-ietf-sidr-arch
May 2011
Publication: draft-ietf-sidr-cp
May 2011
Publication: draft-ietf-sidr-res-certs
Jun 2011
I-D: System and architecture design choices made in the protocol and RPKI
datatracker.ietf.org