Lightning Talk: RPKI Trust Anchor Usage and Cache Consistency
![Lightning Talk: RPKI Trust Anchor Usage and Cache Consistency](/2020/images/all/nanog_huad6c144cc3d1b196ed58324af1d404de_19026_900x500_fit_q75_box.jpg)
RPKI ROAs are created and published into a handful of top-level trust anchors. Relying Party software periodically retrieves ROAs from the RPKI, validates them, an …
Talk Title | Lightning Talk: RPKI Trust Anchor Usage and Cache Consistency |
Speakers | John Kristoff (DePaul University) |
Conference | NANOG78 |
Conf Tag | |
Location | San Francisco, CA |
Date | Feb 10 2020 - Feb 12 2020 |
URL | Talk Page |
Slides | Talk Slides |
Video | Talk Video |
RPKI ROAs are created and published into a handful of top-level trust anchors. Relying Party software periodically retrieves ROAs from the RPKI, validates them, and makes them available in a local cache for routers. ROA measurement studies and monitors have helped us to understand the data being put into the RPKI. Recent studies have also tried to measure the extent to which ROV is actively being deployed toinfluence routing tables based on these ROAs.
However, little is known about the population of RPKI cache servers including synchronization patterns to the trust anchors and whether they have a reasonably consistent and complete set of valid ROAs. We aim to help fill this knowledge gap through our research. We are analyzing trust anchor access logs, measuring cache server consistency, and conducting route announcement experiments to better understand how the cache server infrastructure behaves in the real world.
This talk will summarize our current progress to date, highlighting insights and challenges, as well as future directions. Most importantly, we are seeking network operator feedback and insight to help inform and improve our research.
John Kristoff: