BGP Security: From Mixed Results to Promising Progress in Internet Routing Protection
Securing BGP remains a comedy of errors, with progress slower than a snail on tranquilizers. Despite the challenges, Route Origin Validation backed by RPKI has seen over 50% deployment. While not perfect, it’s a step forward in making core infrastructure less of a hacker’s playground. Cheers to progress, however incremental!
Hot Take:
It’s 2023, and we’re still trying to secure the Internet’s core like it’s a rebellious teenager who won’t clean its room. BGP security is like trying to teach an old dog new tricks – it’s stubborn, complex, and sometimes just plain refuses to listen. But hey, at least Route Origin Validation (ROV) and ASPA are stepping up to the plate, even if BGPsec is still sitting in the dugout, nursing a hangover from 2014.
Key Points:
– BGP security has been a long-standing issue, with mixed results in improving it.
– Route Origin Validation (ROV) and Resource Public Key Infrastructure (RPKI) have made significant progress in routing security.
– The RPKI system operates independently of BGP, simplifying its implementation.
– ASPA (AS Provider Authorization) shows promise in tackling certain routing problems.
– BGPsec remains stagnant due to high implementation costs and complexity.