Meeting Home

Meeting Intro

Attendees List

BoF RIPE NCC
Services

Connectivity

Dinner Venue

EOF

Event Sponsorship

General Info

Hostmaster Centre

Hotel Information

Meeting Plan

Meeting Venue

Minutes

Plenary Agenda

Presentations

Registration

Tutorials & Courses

Webcasting

WG Agendas

Contact Meeting

RIPE 45 Meeting

EOF

The EOF session RIPE 45 will have its emphasis on inter-domain routing in general and BGP in particular. A number of interesting presentations is scheduled for Monday, including subjects outside the routing area. There will be a discussion on how we want to develop the EOF from its current state.

Two proposals to increase BGP security will be presented on Tuesday morning by persons doing this work. Discussion about the operational deployment of these security measures will happen in the Routing WG session immediately after lunch.

All presentations are available here

About the EOF

Preliminary Program

Discussion about the two proposals to secure BGP and possible deployment steps will take place in the Routing WG session after Lunch.

Abstracts of presentations

Title: Components of Routing Table Growth
Speaker: Harsha Narayan
Abstract: The rapid growth in the size of the routing table in recent years challenges the scalability of the Internet. This presentation is on modeling routing tables. More specifically, the problem addressed is the generation of a routing table of a given size with the same structure as current and past routing tables. This is done by modeling address allocation and routing practices. The model has been validated against 20 snapshots of routing tables over the last 5 years. It has been found to capture the structure of routing tables with a high degree of accuracy. The model also sheds light on the processes which lead to routing table growth.

Title: JunOS BGP overview
Speaker: Pedro Roque Marques
Abstract: JunOS uses a design that has different approaches than other routing software implementations. As with any other engineering process this includes a set of tradeoffs with advantages and drawbacks. This presentation attempts to give an overview of the design used in the BGP implementation and provide the rationale for some of those choices. Differences in external behaviour when compared to other implementations will be highlighted in an effort to provide more information to SPs regarding the expected behaviour of their networks.

Subject: Influence of Root & TLD Servers on DNS System Performance
Speaker: Rickard Dahlstrand
Abstract: During fall/winter 2002 The Swedish National Post and Telecom Agency started a project to investigate the robustness of the Swedish Internet. As a part of this project a number of tests where designed to investigate how different problems in the root and tld level affected the end-users internet experience. Tests where made with Bind 8, Bind 9, Microsoft and Cisco resolvers and they ranged from packet-loss to corrupted or missing root-servers. This presentation describes the project and conclusions made from these tests.

Subject: DNS RTT Measurements: TLDs and ccTLDs
Speaker: Nevil Brownlee
Abstract: Since mid-2000 CAIDA been observing DNS request/response data, producing 'strip charts' on our root/gTLD performance web page. The strip charts show RTT variations which are mostly caused by changes in the network path; such variations can be useful as an early warning of network degradation.

This presentation will describe the root/gTLD strip charts, describe their normal and abnormal appearance, and comment on what they realate to network behaviour.

It will also cover the behaviour of ccTLD servers, whose behaviour is qualitatively different from root and gTLD servers.

Title: Atomised Routing
Speaker: Patrick Verkaik
Abstract: We are researching and implementing modifications to BGP routing that aggregate prefixes into equivalence classes (policy atoms) based on common AS path from a given topological location. The motivation behind development of BGP atomization mechanisms is to achieve potential savings in computation and communication costs (by absorbing routing dynamics of prefixes into coarser grained atoms), as well as reduction in BGP table size (there will be far fewer atoms than prefixes). This presentation will cover the current status of the project.

Subject: Routing Impact of Changes at Major Exchange Point
Speaker: Kurt Lindqvist
Abstract: not received

Title: Internet data transfer record between CERN and California
Speaker: Paolo Moroni
Abstract: Taking advantage of the DataTAG project infrastructure and its extension to Sunnyvale (California), a single sustained TCP stream of 2.38 Gbit/sec was achieved over long distance network on February 27-28 2003. This established a new world record in network performance, according to the framework of the Internet2 Land Speed Record Competition. The presentation will include some technical details about the devices and the configuration where this kind of performance could be achieved.

Title: Securing the Border Gateway Protocol
Speaker: Stephen Kent
Abstract: This presentation describes architectural vulnerabilities associated with BGP, and derives security requirements based on the semantics of the protocol, vs. on observed or postulated attacks. The design of S-BGP, a proposed security extension to BGP includes:

• the use of IPsec for point-to-point security
• a PKI to represent prefix and AS allocation
• digitally signed attestations that represent authorization to advertise prefixes
• processes for generating and validating S-BGP UPDATEs
• and repositories for distribution of PKI and some attestation data

Each of the elements of the design will be described and its use in securing BGP will be explained. The presentation includes a discussion of performance and storage aspects of S-BGP, and what is required of routers to support the protocol. Incremental deployment of S-BGP is discussed, and the protocol is compared to several other extant or proposed approached to BGP security. The presentation concludes with a discussion of the current status of the S-BGP project, including available, open-source software.

Title: Introduction to Secure Origin BGP (soBGP)
Speaker: David Cook
Abstract: The presentation provides a comprehensive introduction to soBGP. The concepts and mechanisms, along with some deployment scenarios are discussed. soBGP uses an incremental approach to authenticating the origin and validating the path of BGP advertisements, allowing for maximum operator flexibility.