REN Routing Security

[Andrew Gallo <>]

Hello Anita- Welcome on board!

I think focusing on MANRS makes the most sense.  We've talked a lot about 
RPKI in the past, but that is only one piece of routing security. MANRS 
nicely encompasses Route Origin Validation.

Someone suggested I2 meeting of having a member's directory with MANRS 
status.  I think this is a great idea.

As for other activities- Karl brought up the topic of IRRs, and I think this 
might be a good topic for further discussion, at least for me :)

If there is anyone in the community that wants to share how they're using IRR 
data, discuss tools and workflow, I'd love to hear it.  I've sent sometime 
cleaning up both GW campus IRR records, and the records of our regional 
(CAAREN).  Things look correct, but I'm not entirely sure.
Conceptually, I know how other operators would use this data, but I'd love to 
understand in detail, how it is used.

Thanks.




On 6/24/2018 10:39 PM, Anita Nikolich wrote:
> All -
> I'm thrilled to be working part time with I2 on routing security, a topic 
> dear to my heart.
>
> I'm still getting up to speed, but who's committed to MANRS and to what parts 
> of it? (I saw GWU and ESnet has already signed up.) A couple of the actions 
> seem pretty straightforward (i.e., #3 maintaining your contact info) and some 
> are clearly complex (i.e., RPKI). Internet2 is trying to understand what the 
> community is willing and able to do.
>
> Now that folks in this group have had some time to mull this over, are there 
> other tools/activities that should be discussed by the group to improve R&E 
> routing security? I saw the ARTEMIS presentation - did people find it compelling 
> enough to suggest its use? In order to demonstrate the importance of some of 
> these simple (yet time consuming) activities within MANRS, would it be helpful to 
> set some parameters for metrics that would lend credence to the value of them?
>
> Though it's summer, should we schedule one more call in the next couple weeks 
> to address: 1. willingness to implement MANRS and 2. metrics of success? Not 
> tied to these topics, but before we know it TechX and Fall will be here.
>
> Thank you for indulging me in the many questions!
>
> Anita Nikolich

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature