draft-rpki-doa's Introduction

draft-spaghetti-sidrops-rpki-doa

RPKI Discard Origin Authorization. A mechanism to confirm whether a resource holder authorized a specific tuple of (peer AS, origin AS, prefix, prefixlength and BGP community) to signal a request to discard traffic.

Work in progress repository for Internet-Draft draft-spaghetti-sidrops-rpki-doa

Usage

Draft documents

The source files for the Internet-Draft documents are:

draft-spaghetti-sidrops-rpki-doa.xml
RpkiDiscardOriginAuthorization-2021.asn

To regenerate the text and HTML versions after making changes, run:

make drafts

Object prototyping

An rpkimancer plug-in is also available, providing the ability to read and write example DOA objects.

To install (in the root of your checkout):

python3 -m pip install rpkimancer-doa

Object creation and inspection is provided by the rpkincant CLI tool.

See rpkincant --help for usage information.

After making changes to the ASN.1 module source, execute make asn1 to update the patched version in python distribution tree.

To setup a development environment with the required test dependencies:

python3 -m venv .venv
. .venv/bin/activate
python3 -m pip install -r packaging/requirements-dev.txt

draft-rpki-doa's People

Contributors

Stargazers

Watchers

draft-rpki-doa's Issues

Refine EE 3779 resource requirements

Requiring that ipAddrBlocks and originAsID are both covered by the EE
cert's 3779 extensions makes it impossible to issue DOAs in BYOIP scenarios
unless the addresses are delegated to the provider's CA.

This needs further discussion.

Initial Update

The bot created this issue to inform you that pyup.io has been set up on this repo.
Once you have closed it, the bot will open pull requests for updates as soon as they are available.