search

NLnetLabs / rpki-faq

A community driven FAQ for the Resource Public Key Infrastructure (RPKI)
BSD 3-Clause "New" or "Revised" License
17 stars 5 forks source link

Provide an overview of supported Router implementations #3

Open AlexanderBand opened 6 years ago

AlexanderBand commented 6 years ago
job commented 6 years ago

we should separate which have support for RTR, and which have support for Origin Validation through 'static' configuration.

OpenBGPD has support for static, but not for RTR.

On Fri, Nov 16, 2018 at 3:52 PM Alex Band notifications@github.com wrote:

  • Cisco
  • Juniper
  • Nokia/Alcatel-Lucent
  • BIRD
  • Quagga
  • RTRLib usage
  • More?

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/NLnetLabs/rpki-faq/issues/3, or mute the thread https://github.com/notifications/unsubscribe-auth/AAJY2HkJwpP-FWXcZeYWGBaKFBmKSZJ2ks5uvtEsgaJpZM4YmZRY .

job commented 6 years ago

Cisco IOS: no support Cisco IOS XE: support Cisco IOS XR: support

On Fri, Nov 16, 2018 at 3:54 PM Job Snijders job@instituut.net wrote:

we should separate which have support for RTR, and which have support for Origin Validation through 'static' configuration.

OpenBGPD has support for static, but not for RTR.

On Fri, Nov 16, 2018 at 3:52 PM Alex Band notifications@github.com wrote:

  • Cisco
  • Juniper
  • Nokia/Alcatel-Lucent
  • BIRD
  • Quagga
  • RTRLib usage
  • More?

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/NLnetLabs/rpki-faq/issues/3, or mute the thread https://github.com/notifications/unsubscribe-auth/AAJY2HkJwpP-FWXcZeYWGBaKFBmKSZJ2ks5uvtEsgaJpZM4YmZRY .

AlexanderBand commented 6 years ago

Juniper JUNOS 12.2 >

maelmans commented 6 years ago

We have an item open with engineering for RFC8210 support. I'm trying to find out if it's already committed and if so in which Junos release. Could be interesting to add here.

AlexanderBand commented 6 years ago

Is this still accurate for Cisco?

High-end & mid-range routers running IOS-XR Minimum release XR 4.2.1:

As of XR 5.1.1:

Access/Enterprise routers running IOS-XE Minimum release XE 3.5:

ASR1000 & CSR1000v also support BGP route-server functions with RPKI

waehlisch commented 6 years ago

I will add something about RTRlib and its integration into FRR and BIRD.

lukastribus commented 6 years ago

@AlexanderBand c7200, c7600, ME3600, ME3800 do not run IOS-XE, but legacy IOS. Instead you probably want to add the ASR920, which is relevant and runs IOS-XE (although it does not cope with a full table, just like other platforms on this list).

ghankins commented 6 years ago

Nokia (static and RTR):

maelmans commented 6 years ago

I have this list from somewhere....I think it was the RIPE website?

Juniper:

Cisco:

Others:

I know for sure that for BIRD it's not completely actual anymore.

AlexanderBand commented 6 years ago

@maelmans, I recognise that list from a RIPE NCC slide set, such as this one. It's most likely based on this list was given to me by my Cisco contact @bduvivie at the time (~2011?). I'm basically looking for an up to date list for Cisco.

For Quagga you can use RTRLib, as per @waehlisch, but it looks like BGP-SRX is also still maintained. Perhaps @dougm-nist can shed some light on that topic.

dougm-nist commented 6 years ago

Yes BGP-SrX is still developed/maintained. Most of our recent work focuses on BGPsec, but the platform is still maintained. Actually in the next few months we will release other ports of our crypto API and proxy interface for GoBGP and ExaBGP. https://www.nist.gov/services-resources/software/bgp-secure-routing-extension-bgp-srx-prototype

dougm-nist commented 6 years ago

While I am at it, you should add GoBGP to your list.

https://github.com/osrg/gobgp

AlexanderBand commented 6 years ago

We should also add GoRTR by @lspgn.

dougm-nist commented 6 years ago

GoRTR is a RPKI-to-RTR proxy as far as I know ... not an implementation of BGP-OV. So it would go in a list of RPKI validation components, not router implementations.

AlexanderBand commented 5 years ago

Another list found here: