[routing-wg] Add BGPsec support to Hosted RPKI?

Hi Nick,

On Mon, Sep 20, 2021 at 03:04:17PM +0100, Nick Hilliard wrote:
> Job Snijders via routing-wg wrote on 19/09/2021 23:28:
> > BGPsec is a RPKI-based technology which enables network operators to
> > transitively validate whether a given BGP UPDATE
> 
> is anyone using bgpsec in production?

Not that I'm aware of, but I do know folks are actively studying the
feasibility and potential benefits in prepration for potential
production deployments. Still early days.

I believe there are multiple barriers to BGPsec deployment in
'production' environments, one of which is that it is a bit cumbersome
to certify & publish BGP router keys.

Support to manage BGPsec keys via the RPKI dashboard will make it easier
for people to experiment with the various open source BGPsec
implementations, which in turn paves the way to wider deployment in a
few years. In order to gauge uptake of BGPsec, it first should be made
(more easily) available to operators.

This thread is not intended as an in-depth explorations of the pro's and
con's of BGPsec, but rather to inquiry whether there is any appetite to
implement a (relatively simple) and standardized keying operation, and
leave it up to operators to use the service or not.

Kind regards,

Job