^ Top

NANOG Meeting Presentation Abstract

RIPE Lessons from RPKI adoption
Meeting: NANOG63
Date / Time: 2015-02-04 2:30pm - 3:00pm
This item is webcast
Room: Salon I
Presenters: Speakers:

Alex Band, RIPE NCC

Alex Band is the Product Manager at the RIPE Network Coordination Centre (NCC). He is responsible for the planning and communication behind the RIPE NCC's many products and services. This includes lifecycle management, gathering and prioritising customer requirements, defining the product vision, and working closely with technical development departments to ensure the RIPE NCC delivers successful products and services. Alex has in-depth knowledge of RIPE NCC's products and services, and their target audience -- the RIPE NCC membership and the RIPE community. Alex frequently travels throughout the RIPE NCC service region (Europe, the Middle East and Central Asia) to deliver presentations on behalf of the RIPE NCC on a number of topics, including: resource certification (RPKI), Internet policy and governance, IPv4 and IPv6, the RIPE Routing Registry, and the RIPE Policy Development Process. Prior to his current role, Alex was a Trainer at the RIPE NCC for four years.
Abstract: The RIPE NCC has been running a hosted RPKI service for four years now. In tandem, we ship the RPKI Validator relying party software. The system has had a lot of traction in our region since the launch, as can be seen from the global adoption statistics:

http://certification-stats.ripe.net

I would like to give a presentation on our our design philosophy, community approach and all other factors that make this a succesful service that real operators use in their daily work and engage in a discussion with the audience why this seemingly isn't the case in North America.

Instead of using slides, I would like to do a live demo of the hosted software and validator (adventurously installed from scratch). To give you an idea of what this looks like I have a short YouTube video, but also an hour long webinar in case you'd like more background:

http://youtu.be/gLwHp12wOGw
http://meet95212513.adobeconnect.com/p3bv0t6lli0/

A public install of our RPKI Validator is available here:

http://localcert.ripe.net:8088

The general idea is that with all emerging technologies, there is the chicken and agg problem of operators having to invest time and resources in a new system, while the gains may be low or non-existent as an early adopter. Easy analogies are IPv6 and DNSSEC. As an organisation, we try to take away as many hurdles as we can, and I would like to show how we've done that to successfully overcome this problem.

Please let mw know if you would like more background information; I can also make slides if that is really desired.
Files: pdfRIPE Lessons from RPKI adoption(PDF)
youtubeRIPE Lessons from RPKI adoption
Sponsors: None.

Back to NANOG63 agenda.

NANOG63 Abstracts

  • Network Integration Panel
    Moderators:
    Joe Provo, Google; Panelists:
    McGehee Games, CenturyLink; Steve Powell, Level3; Dave Siegel, Level 3 Communications; Richard A Steenbergen
  • Network Integration Panel
    Moderators:
    Joe Provo, Google; Panelists:
    McGehee Games, CenturyLink; Steve Powell, Level3; Dave Siegel, Level 3 Communications; Richard A Steenbergen
  • Network Integration Panel
    Moderators:
    Joe Provo, Google; Panelists:
    McGehee Games, CenturyLink; Steve Powell, Level3; Dave Siegel, Level 3 Communications; Richard A Steenbergen
  • Network Integration Panel
    Moderators:
    Joe Provo, Google; Panelists:
    McGehee Games, CenturyLink; Steve Powell, Level3; Dave Siegel, Level 3 Communications; Richard A Steenbergen
  • Network Integration Panel
    Moderators:
    Joe Provo, Google; Panelists:
    McGehee Games, CenturyLink; Steve Powell, Level3; Dave Siegel, Level 3 Communications; Richard A Steenbergen
  • DNS Track
    Moderators:
    Duane Wessels, VeriSign;
  • Real-world Network Automation
    Moderators:
    Matt Peterson, Cumulus Networks; Panelists:
    Bronwyn Lewis, Packet Clearing House; Carlos Vicente, Dyn; Jérôme Fleury, CloudFlare;
  • Real-world Network Automation
    Moderators:
    Matt Peterson, Cumulus Networks; Panelists:
    Bronwyn Lewis, Packet Clearing House; Carlos Vicente, Dyn; Jérôme Fleury, CloudFlare;
  • Real-world Network Automation
    Moderators:
    Matt Peterson, Cumulus Networks; Panelists:
    Bronwyn Lewis, Packet Clearing House; Carlos Vicente, Dyn; Jérôme Fleury, CloudFlare;
  • Real-world Network Automation
    Moderators:
    Matt Peterson, Cumulus Networks; Panelists:
    Bronwyn Lewis, Packet Clearing House; Carlos Vicente, Dyn; Jérôme Fleury, CloudFlare;

 
^ Back to Top