<html><body bgcolor="#FFFFFF"><div><br></div><div>Ademas de las implementaciones en Cisco IOS y Juniper JunOS el NIST acaba de liberar una nueva extensión para Quagga.</div><div><br></div><div>Saludos,</div><div>as<br><br>Sent from my mobile device<div>(please excuse typoss and brevit.)</div><div><br></div></div><div><br>Begin forwarded message:<br><br></div><blockquote type="cite"><div><b>From:</b> "Montgomery, Douglas" <<a href="mailto:dougm@nist.gov">dougm@nist.gov</a>><br><b>Date:</b> 9 October 2011 14:19:48 GMT-02:00<br><b>To:</b> LIST NANOG <<a href="mailto:nanog@nanog.org">nanog@nanog.org</a>><br><b>Cc:</b> "<a href="mailto:sidr@ietf.org">sidr@ietf.org</a>" <<a href="mailto:sidr@ietf.org">sidr@ietf.org</a>><br><b>Subject:</b> <b>[sidr] Announcing BGP Secure Router Extension (BGP-SRx) Prototype Implementation</b><br><br></div></blockquote><div></div><blockquote type="cite"><div><div><div><div><div style="font-family: Consolas; font-size: medium; ">Announcing BGP Secure Router Extension (BGP-SRx) Prototype Implementation</div><div style="font-family: Consolas; font-size: medium; "><br></div><div style="font-family: Consolas; font-size: medium; ">IETF SIDR working group is developing standards for BGP origin validation</div><div style="font-family: Consolas; font-size: medium; ">and AS path validation to strengthen the inter-domain routing</div><div style="font-family: Consolas; font-size: medium; ">infrastructure. At the IETF 80 in March 2011, NIST made an introductory</div><div style="font-family: Consolas; font-size: medium; ">presentation on a prototyping effort called BGP Secure Router Extension</div><div style="font-family: Consolas; font-size: medium; ">(BGP-SRx). SRx is an open source reference implementation and research</div><div style="font-family: Consolas; font-size: medium; ">platform for investigating emerging BGP security extensions and supporting</div><div style="font-family: Consolas; font-size: medium; ">protocols.</div><div style="font-family: Consolas; font-size: medium; "><br></div><div style="font-family: Consolas; font-size: medium; ">BGP-SRx has three parts: SRx Server, SRx API, and Quagga SRx (integrates</div><div style="font-family: Consolas; font-size: medium; ">SRx API into Quagga router). The current focus in the BGP-SRx prototype is</div><div style="font-family: Consolas; font-size: medium; ">on origin validation, although it is designed to be be extended to path</div><div style="font-family: Consolas; font-size: medium; ">validation in the future (some stub functionality is already included in</div><div style="font-family: Consolas; font-size: medium; ">this version).</div><div style="font-family: Consolas; font-size: medium; "><br></div><div style="font-family: Consolas; font-size: medium; ">The current release implements: The RPKI/Router Protocol and a variety of</div><div style="font-family: Consolas; font-size: medium; ">BGP policies for enforcing Route Origin Authorizations (ROAs) conveyed</div><div style="font-family: Consolas; font-size: medium; ">from RPKI validating caches. Also included in the release are test</div><div style="font-family: Consolas; font-size: medium; ">client/server test harnesses for RPKI/Router and WireShark modules for</div><div style="font-family: Consolas; font-size: medium; ">debugging.</div><div style="font-family: Consolas; font-size: medium; "><br></div><div style="font-family: Consolas; font-size: medium; ">For more information on BGP-SRx, and to download the prototype and tools,</div><div style="font-family: Consolas; font-size: medium; ">see: <a href="http://www-x.antd.nist.gov/bgpsrx/"><a href="http://www-x.antd.nist.gov/bgpsrx/">http://www-x.antd.nist.gov/bgpsrx/</a></a></div><div style="font-family: Consolas; font-size: medium; "><br></div><div style="font-family: Consolas; font-size: medium; ">For those wanting an easy way to experiment with BGP-SRx, in June we made</div><div style="font-family: Consolas; font-size: medium; ">an announcement about the BRITE system (BGPSEC/RPKI Interoperability Test &</div><div style="font-family: Consolas; font-size: medium; ">Evaluation): <a href="http://mailman.nanog.org/pipermail/nanog/2011-June/038063.html"><a href="http://mailman.nanog.org/pipermail/nanog/2011-June/038063.html">http://mailman.nanog.org/pipermail/nanog/2011-June/038063.html</a></a></div><div style="font-family: Consolas; font-size: medium; "><br></div><div style="font-family: Consolas; font-size: medium; ">You can use BRITE (<a href="http://brite.antd.nist.gov/"><a href="http://brite.antd.nist.gov">http://brite.antd.nist.gov</a></a>/) to run BGP-SRx </div><div style="font-family: Consolas; font-size: medium; ">(or any other implementation) through aseries of test scripts that exercise </div><div style="font-family: Consolas; font-size: medium; ">numerous interesting scenarios for BGP ROA processing under different policy </div><div style="font-family: Consolas; font-size: medium; ">assumptions.</div><div style="font-family: Consolas; font-size: medium; "><br></div><div style="font-family: Consolas; font-size: medium; ">We will make a presentation at NANOG-53 on Monday (9/10/11) in the ISP Security</div><div style="font-family: Consolas; font-size: medium; ">BoF where we will briefly explain the functionalities of both BGP-SRx and</div><div style="font-family: Consolas; font-size: medium; ">BRITE and also give demos. Please attend the BoF if you are interested to</div><div style="font-family: Consolas; font-size: medium; ">learn more.</div><div style="font-family: Consolas; font-size: medium; "><br></div><div style="font-family: Consolas; font-size: medium; ">Comments and feedback about SRx and BRITE are welcome. See the project page</div></div><div style="font-family: Consolas; font-size: medium; ">For details.</div><div style="font-family: Consolas; font-size: medium; "><br></div><div style="font-family: Consolas; font-size: medium; ">dougm</div><div><div><div>-- </div><div>Doug Montgomery – Mgr. Internet & Scalable Systems Research / ITL / NIST</div><div><br></div></div></div></div></div>
</div></blockquote><blockquote type="cite"><div><span>_______________________________________________</span><br><span>sidr mailing list</span><br><span><a href="mailto:sidr@ietf.org">sidr@ietf.org</a></span><br><span><a href="https://www.ietf.org/mailman/listinfo/sidr">https://www.ietf.org/mailman/listinfo/sidr</a></span><br></div></blockquote></body></html>