This archive is retained to ensure existing URLs remain functional. It will not contain any emails sent to this mailing list after July 1, 2024. For all messages, including those sent before and after this date, please visit the new location of the archive at https://mailman.ripe.net/archives/list/bcop@ripe.net/
[bcop] Feedback Requested: Routing Resilience Manifesto
- Next message (by thread): [bcop] Feedback Requested: Routing Resilience Manifesto
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Andrei Robachevsky
robachevsky at isoc.org
Tue Sep 2 09:25:36 CEST 2014
Hi, Some of you might have commented on the Manifesto (https://www.routingmanifesto.org/). Thank you for that. BTW, it is going to get a more neutral name - Mutually Agreed Norms for Routing Security - MANRS). We are in the process of incorporating the feedback in order to release the final version. What is currently missing are references to resources providing specific guidance in a form of BCOPs, BCPs, etc. for each of the Actions. Specifically: 1. Prevent propagation of incorrect routing information · Network defines a clear routing policy and implements a system that ensures correctness of their own announcements and announcements from their customers to adjacent networks with a prefix and as-path granularity. · Network operator is able to communicate to their adjacent networks which announcements are correct. . Network operator applies due diligence when checking the correctness of their customer's announcements, specifically that the customer legitimately holds the ASN and the address space it announces. 2. Prevent traffic with spoofed source IP address . Network operator implements a system that enables source address validation for at least single-homed stub customer networks, their own end-users and infrastructure. Network operator implements anti-spoofing filtering to prevent packets with incorrect source IP address from entering and leaving the network. 3. Facilitate global operational communication and coordination between the network operators . Network operator maintains globally accessible up-to-date contact information. Any references to stable documents would be appreciated. Thanks, Andrei Benno Overeinder wrote on 02/07/14 16:45: > Posted for Andrei Robachevsky, ISOC. > > Colleagues, > > A small group of network operators has been working on defining a > minimal, but feasible package of recommended measures that, if deployed > on a wide scale, could result in visible improvements to the security > and resilience of the global routing system. > > Many operators are ahead of the curve and already implement much more > than the proposed recommendations. But we believe that gathering support > for these relatively small steps could pave the road to more significant > actions on a global scale. > > We called this set of recommendations a Routing Resilience Manifesto – > you can find a draft document here: https://www.routingmanifesto.org/. > > This initial version of the Manifesto was drafted by a small group, but > we need a wider community review, your feedback, and, ultimately, your > support to make this initiative fly. It was already presented at several > venues, like RIPE and NANOG, and now we open it for a more detailed > review. Please note that this is very much a work in progress. > > Please review the document and provide your feedback and text > suggestions online or via routingmanifesto at isoc.org by 31 August 2014. > > Regards, > > Andrei Robachevsky > Internet Society >
- Next message (by thread): [bcop] Feedback Requested: Routing Resilience Manifesto
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
[ BCOP Archives ]