APNIC and NIXI partner to strengthen routing security and technical capacity in India
The partnership will expand IPv6 and RPKI deployment including piloting an RPKI Repository Mirror to support a more secure and resilient Internet ecosystem.
Tag: RPKI
Beyond origin validation: Four classes of routing attack nobody Is validating
Guest Post: RPKI has made real progress against prefix hijacking. But when you map every known class of BGP attack against the defences that exist, four of them turn out to sit entirely outside cryptographic validation — handled with local filters, static thresholds and reactive response.
South Asia SRF highlights Member priorities on IPv6, routing security, and training
More than 100 APNIC Members attended the South Asia APNIC Sub-Regional Forum alongside SANOG 44 in Kathmandu. Member feedback gathered during the event will help inform APNIC’s future priorities across the region.
Understanding partial reachability in the Internet core
Guest Post: Persistent partial reachability is not noise — it is a fundamental, measurable part of how the Internet behaves today. A small number of long-lived peninsulas cause most of the impact, and recognizing them can dramatically improve both operational clarity and measurement accuracy.
[Podcast] Canonical Cache Representation
Job Snijders discusses a new, compact representation of RPKI-signed objects and an archive of spooled snapshots of the global RPKI repositories.
Who’s running all those tiny RPKI servers?
Guest Post: Small RPKI publication servers comprise a quiet but important part of the Internet’s trust infrastructure. Understanding who operates these servers, and why, helps reveal both strengths and gaps in today’s routing security.
Data synchronization
Distributed systems depend on synchronization, but every approach has tradeoffs. From full copies to delta updates, how do you choose the right method?
ROA adoption barriers to practical planning tools: Reflections from ARIN 57
Guest Post: Even operators with strong BGP knowledge tend to create ROAs infrequently and may lack deep familiarity with their behaviour. ROOTBEER helps operators understand what to consider when creating ROAs.
Hunting stuck routes with the BGP Clock and the BGP Stuck Route Observatory
Guest Post: BGP stuck routes remain an important problem for network operators. To help bridge this visibility gap, Cisco ThousandEyes introduced a methodology for measuring the prevalence of stuck routes: The BGP Clock.
Your elected leaders: Terry Sweetser, Routing Security SIG Chair
The Internet is built by communities, not just networks. As Routing Security SIG Chair, Terry is focused on strengthening that effort — from advancing RPKI adoption to supporting the next generation of operators.