基于HTTPS的RPKI缓存更新机制  

RPKI Cache Update Mechanism Based on HTTPS

作　　者：耿新杰 马迪[1,2,3] 毛伟 邵晴 GENG Xin-jie;MA Di;MAO Wei;SHAO Qing(Computer Network Information Center,Chinese Academy of Sciences,Beijing 100190,China;University of Chinese Academy of Sciences,Beijing 100190,China;ZDNS Co.Ltd.,Beijing 100190,China)

机构地区：[1]中国科学院计算机网络信息中心,北京100190 [2]中国科学院大学,北京100190 [3]互联网域名系统北京市工程研究中心,北京100190

出　　处：《计算机系统应用》2019年第9期72-80,共9页Computer Systems & Applications

摘　　要：RPKI作为解决路由劫持等网络安全问题的重要网络架构,其传输结构主要有两方面构成:供给侧和依赖方的数据同步,以及依赖方和需求侧的数据传输.目前国内外研究内容主要集中在供给侧和依赖方的数据同步环节.依赖方和需求侧的数据传输仍处于初步探究状态.本文针对当前RPKI理论架构难以适应实际部署需求的缺陷,设计并利用JSON化的RPKI缓存数据,实现了一种基于HTTPS的RPKI缓存更新架构.实验结果表明,该分发架构传输稳定.与当前RPKI理论架构相比能够适应多层传输和大量数据传输的需要.As an important network architecture for solving network security problems such as route hijacking,RPKI has two main components:data synchronization between the supply side and the relying party,and data transmission between the relying party and the demand side.At present,the research content worldwide mainly focuses on the data synchronization link between the supply side and the relying party.The data transmission between the relying party and the demand side is still in the initial state of exploration.In view of the shortcomings of the current RPKI theoretical architecture,we design and use Jsonized RPKI cache data to implement an HTTPS-based RPKI cache update architecture,which can meet the needs of actual deployment.Experimental results show that the distribution architecture is stable.Compared with the current RPKI theoretical architecture,it can adapt to the needs of multi-layer transmission and largescale data transmission.

关 键 词：RPKI 数据同步 数据传输 HTTPS JSON 缓存分发架构 

分 类 号：TP3[自动化与计算机技术—计算机科学与技术]