RPKI Deployment Survey
The goal of this survey is to identify obstacles facing the deployment of the Resource Public Key Infrastructure (RPKI) and the adoption of route-origin authentication with RPKI. This survey is anonymous and is intended to improve academic research on interdomain routing security.
Avichai Cohen - Hebrew University of Jerusalem, Israel.
Yossi Gilad - Boston University and MIT, USA
Amir Herzberg - Bar Ilan University, Israel.
Haya Shulman - Fraunhofer SIT, Germany.
Michael Schapira - Hebrew University of Jerusalem, Israel.
For questions and comments please contact
schapiram@huji.ac.il
* Required
1. Which of the following best describes your network?
*
Choose
Stub (no customer ASes)
Small transit (<10 customer ASes, have provider ASes)
Medium transit (11-100 customer ASes, have provider ASes)
Large transit (>100 customer ASes, have provider ASes)
Tier 1 (no provider ASes)
Large content provider
Small content provider
2. What is your role?
Choose
Network operator
Manager
Security/networking consultant
Academic researcher
Other
Comments:
Your answer
3. On what continent is your network?
Choose
Africa
Asia
Australia
Europe
North America
South America
More than one / Worldwide
4. How many IP addresses are owned by your organization?
None
256 or less
Between 256 and 65536
65536-512000
More than 512000
I don't know
Other:
Clear selection
Comments:
Your answer
5. Does your organization own any AS numbers?
Yes
No
I don't know
Clear selection
Comments:
Your answer
6. Does your organization have an RPKI certificate?
Yes
No
I don't know
Other:
Clear selection
Comments:
Your answer
7. What are/were your main impediments to obtaining an RPKI certificate? (check all that apply)
None
Lack of awareness or knowledge
No demand from customers
Insufficient value (e.g., due to limited/no use of RPKI-based origin authentication)
The entity that allocated my IP addresses does not have an RPKI certicate
Other:
Comments:
Your answer
8. Does your organization have Route Origin Authorizations (ROAs)?
Yes, for all our IP prefixes
Yes, but not for all our IP prefixes
Not yet, planning to
Not planning to
Other:
Clear selection
Comments:
Your answer
9. What were/are the main impediments to issuing a Route Origin Authorization (ROA)? (check all that apply)
None
No RPKI certificate
No demand from customers
Insufficient value (e.g., due to limited/no use of origin authentication)
Liability or other legal concerns
Issuing a ROA would disconnect other organizations (e.g., due to BGP aggregation)
Other:
Comments:
Your answer
10. Do you apply RPKI-based origin-authentication filters in your BGP routers?
Yes, to drop invalid announcements
Yes, to assign lower preference to invalid announcements
No
Other:
Clear selection
Comments:
Your answer
11. What are your main concerns regarding executing RPKI-based origin authentication in your network? (check all that apply)
None
No support by routers
No demand from customers
Insufficient value
Being disconnected from legitimate destinations (e.g., due to others' mistakes when issuing ROAs)
Liability or other legal concerns
Other:
Comments:
Your answer
12. Do you filter BGP advertisements for IP prefixes more specific than /24?
Yes
No
I don't know
Clear selection
13. Is there anything else you want to share with us?
Your answer
Submit
Page 1 of 1
Never submit passwords through Google Forms.
This content is neither created nor endorsed by Google.
Report Abuse
-
Terms of Service
-
Privacy Policy
Forms