The Approach

• Encode address space allocation in DNS,a la in-addr.arpa28.147.bgp.in-addr.arpa. AS 3130 16

• BGP speakers look up received prefixes

• Results fall into three classes

  • authenticated: found and AS matches
  • failed: found and AS does not match
  • unauthenticated: not found

• Use DNSSEC to provide authentication

Previous slide

Next slide

Back to first slide

View graphic version