{"id":299,"date":"2018-09-27T04:04:57","date_gmt":"2018-09-27T04:04:57","guid":{"rendered":"http:\/\/rtechblog.psg.com\/?p=299"},"modified":"2018-09-27T04:04:57","modified_gmt":"2018-09-27T04:04:57","slug":"clarifications-to-bgp-origin-validation-based-on-resource-public-key-infrastructure-rpki","status":"publish","type":"post","link":"https:\/\/rtechblog.rg.net\/?p=299","title":{"rendered":"Clarifications to BGP Origin Validation Based on Resource Public Key Infrastructure (RPKI)"},"content":{"rendered":"<pre>        RFC 8481\r\n\r\n        Title:      Clarifications to BGP Origin Validation Based\r\n                    on Resource Public Key Infrastructure (RPKI) \r\n        Author:     R. Bush\r\n        Status:     Standards Track\r\n        Stream:     IETF\r\n        Date:       September 2018\r\n        Mailbox:    randy@psg.com\r\n        Pages:      5\r\n        Characters: 9629\r\n        Updates:    RFC 6811\r\n        I-D Tag:    draft-ietf-sidrops-ov-clarify-05.txt\r\n        URL:        https:\/\/www.rfc-editor.org\/info\/rfc8481\r\n        DOI:        10.17487\/RFC8481\r\n\r\nDeployment of BGP origin validation based on Resource Public Key\r\nInfrastructure (RPKI) is hampered by, among other things, vendor\r\nmisimplementations in two critical areas: which routes are validated\r\nand whether policy is applied when not specified by configuration.\r\nThis document is meant to clarify possible misunderstandings causing\r\nthose misimplementations; it thus updates RFC 6811 by clarifying that\r\nall prefixes should have their validation state set and that policy\r\nmust not be applied without operator configuration.\r\n<\/pre>\n","protected":false},"excerpt":{"rendered":"<p>RFC 8481 Title: Clarifications to BGP Origin Validation Based on Resource Public Key Infrastructure (RPKI) Author: R. Bush Status: Standards Track Stream: IETF Date: September 2018 Mailbox: randy@psg.com Pages: 5 Characters: 9629 Updates: RFC 6811 I-D Tag: draft-ietf-sidrops-ov-clarify-05.txt URL: https:\/\/www.rfc-editor.org\/info\/rfc8481 DOI: 10.17487\/RFC8481 Deployment of BGP origin validation based on Resource Public Key Infrastructure (RPKI) is [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[12,9,7],"tags":[],"class_list":["post-299","post","type-post","status-publish","format-standard","hentry","category-ietf","category-routers","category-security"],"_links":{"self":[{"href":"https:\/\/rtechblog.rg.net\/index.php?rest_route=\/wp\/v2\/posts\/299","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rtechblog.rg.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rtechblog.rg.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rtechblog.rg.net\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/rtechblog.rg.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=299"}],"version-history":[{"count":1,"href":"https:\/\/rtechblog.rg.net\/index.php?rest_route=\/wp\/v2\/posts\/299\/revisions"}],"predecessor-version":[{"id":300,"href":"https:\/\/rtechblog.rg.net\/index.php?rest_route=\/wp\/v2\/posts\/299\/revisions\/300"}],"wp:attachment":[{"href":"https:\/\/rtechblog.rg.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=299"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rtechblog.rg.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=299"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rtechblog.rg.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=299"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}