构建可扩展的RPKI依赖方系统部署机制  

Scaling RPKI Relying Party System

作　　者：马迪 MA Di(Internet Domain Name System National Engineering Research Center,Beijing 100102,China)

机构地区：[1]互联网域名系统国家地方联合工程研究中心,北京100102

出　　处：《中兴通讯技术》2023年第1期40-44,共5页ZTE Technology Journal

摘　　要：互联网码号资源公钥基础设施(RPKI)依赖方系统是各类网络运行机构开展RPKI应用实践的一个关键环节。RPKI依赖方系统的研发和部署,既需要处理RPKI核心功能的“普遍性”问题,又需要兼顾网络互联互通特征的“特殊性”问题。相关解决方案需要考虑RPKI依赖方系统应当有哪些组件,各个组件如何在网络上分布,以及以何种逻辑关系分布。面向RPKI依赖方系统的核心功能,梳理了影响RPKI依赖方系统运行效能的4对矛盾,并提出了一种可扩展的RPKI依赖方系统部署机制,包含软件层面的解耦机制和硬件层面的部署机制。The resource public key infrastructure(RPKI)relying party system is key to network operations with regard to the RPKI in practice.The development and deployment of the RPKI relying party system involves both the essential functionality of the RPKI universally and the networking condition where it operates particularly.The very resolution calls for the design of modularizing the RPKI relying party system and deploying those modules physically and logically.Four contradictions regarding the operation efficiency of the RPKI relying party system are summarized and a scheme of scaling the RPKI relying party system is proposed with respect to both the decoupling mechanism of soft⁃ware and the deployment principle of network hardware.

关 键 词：RPKI 路由安全 互联网码号资源管理 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]