Rethinking BGP Path Validation

BGP Route Origin Authentication is getting traction – but while origin authentication solves a number of problems, it doesn't resolve path insertion attacks, and …

BGP Route Origin Authentication is getting traction – but while origin authentication solves a number of problems, it doesn’t resolve path insertion attacks, and it doesn’t allow AS' to express policy about specific peering relationships when it makes sense. This presentation covers a new set of efforts in the space of path validation; while it builds on old work, it is updated and rethought to address the lessons learned from the years of experimental and research work put into securing BGP in a more significant way. The effort described is broad based, including multiple vendors and providers.