Origin Authentication for BGP
The Problem: Any AS May Inject Any Prefix
The Ideal Solution
A Pragmatic Solution
The Approach
AS RR
An Example
BGP Listener
Startup
Authentication Successful
Authentication Failure
Unauthenticated
Special Values
Aggregation
DNS Issues
Prefix Encoding Conventions
Non-byte Aligned Delegation
2.5 Million Queries!
Open Issues
Architectural Direction
What Can We Do?
Acknowledgements
Email: randy@psg.com
Home Page: http://psg.com/~randy