Tutorial

Live eTutorial: Securing Internet Routing with RPKI – 2-part

Start
09:00 - 27 January 2021
End
12:30 - 28 January 2021
Location
Time shown in UTC +10:00

Register now

Synopsis

Why do we keep seeing news headlines about major networks not being reachable because traffic got rerouted to somewhere else? BGP mishaps are very common and frighteningly very easy. Examples are malicious route hijacking, mis-origination (fat fingers), and bad filters (route leaks). We need better mechanism(s) to ensure no one can inject false information into the global routing system that easily.

This two-part tutorial will look at current tools/techniques, how RPKI is just a piece in the puzzle, and what we should do to secure the internet routing.

Fees

This online tutorial is fee-free.

Target audience

Anyone interested in understanding issues with securing the internet routing system and the use of filtering tools/techniques including filtering using ROAs.

Prerequisites

This workshop is not an introduction – It is assumed that the workshop participants have a working knowledge of IP routing, along with know how to use a router command line interface.The lab exercises use Cisco IOS configuration syntax.

It is recommended that these APNIC Academy online courses are completed before the start of the tutorial:

    Course outline

    • Intro to RPKI
    • Route Origin Validation
    • Creating ROAs
    • Deploying RPKI validators
    • RTR configuration on routers
    • Defining BGP policies to act on validation states

    Other requirements

    Hardware: It is highly recommended that participants bring their own laptop computers for lab work.

    Software: SSH Client, Telnet Client

    Confirm Secure SHell (SSH) is allowed from the office or home network to access the lab infrastructure? Test ssh connectivity, try to connect to route-views.oregon-ix.net. For example from the CLI type: ssh rviews@route-views.oregon-ix.net

    Please note

    This is a 2-part tutorial, to be delivered 9.00am-12.30pm (UTC +10:00) on 27 and 28 January.

    Please check the time zone for your location.

    Please note: so we can deliver the hands-on exercises effectively there are a limited number of places available.

    Local Contact

    APNIC Training
    Email: training@apnic.net