基于区块链的BGP路由策略检测机制  

BGP routing policy monitoring mechanism based on block chain technology

作　　者：冷峰 赵琦[2] 延志伟[2] 曾宇[3] LENG Feng;ZHAO Qi;YAN Zhiwei;ZENG Yu(Computer Network Information Center,Chinese Academy of Sciences,Beijing 100190;China Internet Network Information Center,Beijing 100190;University of Chinese Academy of Sciences,Beijing 100049)

机构地区：[1]中国科学院计算机网络信息中心,北京100190 [2]中国互联网络信息中心,北京100190 [3]中国科学院大学,北京100049

出　　处：《高技术通讯》2022年第10期1004-1016,共13页Chinese High Technology Letters

基　　金：北京市科技新星计划(Z191100001119113)资助项目。

摘　　要：针对路由传播过程中存在的自治域间策略违背的现象开展研究,提出边界网关协议(BGP)路由策略检测机制(BRPM2),设计包含策略链以及验证模块的系统架构。通过理论分析、原型设计与仿真验证,证明了提出的检测算法和系统架构可充分利用资源公钥基础设施(RPKI)技术资源,使RPKI依赖方承载验证功能并与路由器通信,实现功能解耦,便于部署应用。同时BRPM2具备验证方法简单、支持增量部署的优点,可在无需修改路由协议的前提下,提升域间路由系统安全。Aiming at the phenomenon of policy violations between autonomous system in the process of routing propagation,the border gateway protocol(BGP)routing policy monitoring mechanism(BRPM2)is proposed,and a system architecture including a policy chain and a verification module is carried out.Through theoretical analysis,prototype system design and simulation verification,it is shown that the monitoring mechanism could make full use of resource public key infrastructure(RPKI)resources,the RP takes the responsibility of verification function and communicated with the routers,which could realize the function decoupling and facilitate the deployment of applications.BRPM2 is simple and can be deployed incrementally,thus it can improve the security of the inter-domain routing system without modifying the BGP protocol.

关 键 词：资源公钥基础设施(RPKI) BGPsec 路由决策 区块链 边界网关协议(BGP)路由策略检测机制(BRPM2) 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TP311.13[自动化与计算机技术—计算机科学与技术]