This document summarizes a panel discussion on RPKI deployment. The panel discussed various RPKI deployment models including using public and local cache servers, deploying RPKI in IXPs and with route reflectors, and integrating RPKI with IRR systems. The panel also addressed common issues that can arise with RPKI such as customers claiming their prefixes are announced by other ASNs, addressing route leaks, and using RPKI information to mitigate DDoS attacks. Next steps discussed included improving internationalization support, providing feedback to developers, and launching an RPKI pilot service.

1. Copyright © 2015 Japan Network Information Center
RPKI deployment panel

2. Copyright © 2015 Japan Network Information Center
People
• Geoff Huston (chair)
• Fakrul Alam, bdHUB
• A week with analysing RPKI status
• Tomoya Yoshida, Internet Multifeed
• Deployment factors and current status
• Yoshinobu Matsuzaki, Internet Initiative
Japan
• RPKI deployment at ISP
• Taiji Kimura, Japan Network Information
Center
• About JPNIC’s RPKI
1

3. Copyright © 2015 Japan Network Information Center
RPKI Deployment Panel
• Purpose
• Gathering experienced operators voice
• Discuss further RPKI deployment for useful mechanism
2

4. Copyright © 2015 Japan Network Information Center
Discussions

5. Copyright © 2015 Japan Network Information Center
Deployment model
Public cache server
/
local cache server
4

6. Copyright © 2015 Japan Network Information Center
Deployment model
RPKI in IXP
and
Route reflector
5

7. Copyright © 2015 Japan Network Information Center
Deployment model
RPKI and IRR
6

8. Copyright © 2015 Japan Network Information Center
HOWTO
Configuring RPKI cache
and
Building own RPKI CA
7

9. Copyright © 2015 Japan Network Information Center
What do you do when…

10. Copyright © 2015 Japan Network Information Center
(Customer AS)
• Customer claims their prefix has been
announced from other AS!
9

11. Copyright © 2015 Japan Network Information Center
(Own prefix)
• You found your prefix has no
reachability from other region.
What do you do?
10

12. Copyright © 2015 Japan Network Information Center
(Customer AS)
• Customer claims their prefix has been
announced from other AS!
What do you do?
11

13. Copyright © 2015 Japan Network Information Center
(DDoS mitigation)
• DDoS packets are coming!
You found if other AS announces
specific announce.
12

14. Copyright © 2015 Japan Network Information Center
JPNIC’s RPKI
Taiji Kimura

15. Copyright © 2015 Japan Network Information Center
Issues on RPKI deployment in
Japan
• Deployment for operators
• How RPKI is use for people - BGP operators
• Language
14

16. Copyright © 2015 Japan Network Information Center
Developing items and technical
specifications
• Internationalization
• Database
• Authentication
• Redundancy and easy maintenance
• Server security
• Key management and PKI operation
15

17. Copyright © 2015 Japan Network Information Center
Internationalization
16

18. Copyright © 2015 Japan Network Information Center
Further step
• Multi-language support
• Feedbacks for developer
17

19. Copyright © 2015 Japan Network Information Center
It is time to release.
RPKI pilot service