Internet2: Network Routing Security and RPKI Adoption in Research and Education
Deaton: The "Internet2 Routing Integrity Initiative" moniker was coined by our community: Internet2 subject matter experts like Steven Wallace and the Internet2 membership. It is focused on every R&E network operator adopting routing security best practices.
So, when it was established, there were several elements included in the discussion flowing from the Internet2 Routing Integrity Initiative: routing security, as well as broadly hardening network devices, helping detect and mitigate distributed DDoS attacks, building resilient cloud connectivity — which is especially important and current for higher education institutions — and helping increase IPv6 deployment.
While we're talking specifically about RPKI here in this Q&A, the Internet2 Routing Integrity Initiative is focused on bringing together incredibly diverse sets of data to be able to understand the unique opportunities for the R&E community to address all aspects of routing security.
In this effort, we have a network of people in the community who support higher education institutions all across the U.S., as well as staff internally who stand by to be able to connect community leaders with information about the state of their organization's routing security maturity and to help close the gap in areas like RPKI-ROA adoption.
Through the Internet2 Routing Integrity Initiative, we've been producing a valuable set of resources that are publicly available, whether in reports, or webinars and conference presentations, or informative blog posts with technical details. The Internet2 Route Reports and free Internet2 Routing Integrity Assessment tool are easy to access and uniquely tailored to R&E.
The Internet2 Route Reports and free Internet2 Routing Integrity Assessment tool are easy to access and uniquely tailored to R&E.
At our Internet2 Technology Exchange event coming up in early December in Boston, we have several sessions and workshops associated with strengthening routing security. Whether it's analyzing route policies and configurations, creating RPKI-ROAs, or leveraging other resources and best practices, these sessions present a great opportunity to learn from and connect with community experts.
Grush: What's another good, current resource to start learning about RPKI?
Deaton: In September 2024, the White House Office of the National Cyber Director released a "Roadmap to Enhancing Internet Routing Security". It provides ample background and useful links, underscoring a growing recognition of the importance of routing security.
Grush: What about MANRS?
Deaton: MANRS — the Mutually Agreed Norms for Routing Security — stands out among the broader initiatives supporting routing security. MANRS brings awareness to routing security standards and engages in outreach to get everyone to participate. It has support from multiple industry, research, and higher education community participants. Working with MANRS, we've recognized that there's a truly great opportunity to leverage virtually the entire higher education community to work together, specifically for network routing security.
Working with MANRS, we've recognized that there's a truly great opportunity to leverage virtually the entire higher education community to work together, specifically for network routing security.