Understanding ASPA: The next step in routing security
Join this APNIC Academy webinar to understand how ASPAs work, how they complement ROAs, and how you can begin monitoring and deploying them in your network.
Tag: routing
APNIC and NIXI partner to strengthen routing security and technical capacity in India
The partnership will expand IPv6 and RPKI deployment including piloting an RPKI Repository Mirror to support a more secure and resilient Internet ecosystem.
[Podcast] Canonical Cache Representation
Job Snijders discusses a new, compact representation of RPKI-signed objects and an archive of spooled snapshots of the global RPKI repositories.
Who’s running all those tiny RPKI servers?
Guest Post: Small RPKI publication servers comprise a quiet but important part of the Internet’s trust infrastructure. Understanding who operates these servers, and why, helps reveal both strengths and gaps in today’s routing security.
ASPA at APNIC: Strengthening BGP path validation
With support now available in MyAPNIC and the Registry API, APNIC Members can publish ASPAs to help detect route leaks and strengthen the integrity of Internet routing.
[Podcast] What ‘name-based routing’ really means
Internet routing is shifting from IP-based forwarding to name-based decisions, with DNS and intermediaries steering requests. How does this work in practice, and who decides where your request is served from?
BGP Router ID structuring in IPv6 native networks
Guest Post: How to design and structure BGP Router IDs in IPv6-native networks.
Ephemeral leaks and automated BGP route leak detection
Guest Post: Many BGP route leaks flagged by automated systems are short-lived artifacts of normal convergence. Doug Madory draws on Cloudflare Radar, RouteViews, and Jared Mauch’s leak detector to show how these ‘ephemeral leaks’ occur, why they rarely disrupt traffic, and why they still matter for routing security.
SCION: The overlay network for bankers
SCION has both supporters and critics, but it faces a major challenge: Replacing BGP while competing in an environment where network decisions are driven more by carrier costs than by strategic priorities.
ReAct: Reflection attack mitigation for asymmetric routing
Guest Post: DDoS attacks continue to be a destructive force on the Internet. ReAct was created to provide efficient and effective mitigation against AR-DDoS attacks, when routing is either symmetric or asymmetric.