Enforcing RPKI-Based Routing Policy on the Data Plane at an Internet Exchange

@poster{Bailey2014a,
	title        = {Enforcing RPKI-Based Routing Policy on the Data Plane at an Internet Exchange},
	author       = {Josh Bailey and Dean Pemberton and Andy Linton and Cristel Pelsser and Randy Bush},
	year         = 2014,
	month        = aug,
	booktitle    = {{HotSDN} 2014 (Poster session)},
	address      = {Chicago, IL, USA},
	doi          = {10.1145/2620728.2620769},
	url          = {https://conferences.sigcomm.org/sigcomm/2014/hotsdn.php},
	abstract     = {Over a decade of work has gone into securing the BGP rout- ing control plane. Through all this, there has been an oft repeated refrain, ”It is acknowledged that rigorous control plane verification does not in any way guarantee that packets follow the control plane.” We describe what may be the first deployment of data plane enforcement of RPKI-based con- trol plane validation. OpenFlow switches providing an ex- change fabric and controlled by a Quagga BGP route server drop traffic for prefixes which have invalid origins without requiring any RPKI support by connected BGP peers.},
	groups       = {Posters},
	keywords     = {BGP, RPKI, Routing Security, OpenFlow, security}
}