BGP Prefix Origin Validation

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 10
Abstract: To help reduce well-known threats against BGP including prefix mis- announcing and monkey-in-the-middle attacks, one of the security requirements is the ability to validate the origination Autonomous System (AS) of BGP routes. More specifically, one needs to validate that the AS number claiming to originate an address prefix (as derived from the AS_PATH attribute of the BGP route) is in fact authorized by the prefix holder to do so. This document describes a simple validation mechanism to partially satisfy this requirement. [STANDARDS-TRACK]
Publication Date: 2013-01-01
Status Note: Proposed Standard
DOI: 10.17487/RFC6811
Link: https://doi.org/10.17487/RFC6811
Author(s): Prodosh Mohapatra
John Scudder
David Ward
Randy Bush
Rob Austein
Keyword(s): SIDR, Security

Latest version of IETF RFC 6811

Document Versions — IETF RFC 6811

▶ IETF RFC 6811 (2013-01-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

Bush, R., "RPKI-Based Origin Validation Operation" , Work in Progress, August 2012. EXTERNAL
Kumari, W., Bush, R., Schiller, H., and K. Patel, "Codification of AS 0 processing.", Work in Progress, August 2012. EXTERNAL
IETF RFC 2119 [Active*]
IETF RFC 3779 [Active*]
IETF RFC 4271 [Active*]
IETF RFC 4632 [Active*]
IETF RFC 6480 [Active*]
IETF RFC 6482 [Superseded*]
IETF RFC 6793 [Active*]
RFC6810 — RFC6810 EXTERNAL

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC6811.json

Amended by:

RFC8481 NOT IN REGISTRY

RFC8893 NOT IN REGISTRY

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 6811, BGP Prefix Origin Validation. Available at https://doi.org/10.17487/RFC6811

Snippet:

IETF RFC 6811, BGP Prefix Origin Validation. Available at https://doi.org/10.17487/RFC6811

HTML (ISO 690 compliant)

Preview:

IETF RFC 6811, BGP Prefix Origin Validation. Available at https://doi.org/10.17487/RFC6811

Snippet:

<span class="citation"><cite>IETF RFC 6811</cite>, BGP Prefix Origin Validation. Available at <a href="https://doi.org/10.17487/RFC6811" target="_blank" rel="noopener">https://doi.org/10.17487/RFC6811</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 6811, BGP Prefix Origin Validation
doi: 10.17487/RFC6811
url: https://doi.org/10.17487/RFC6811

Snippet:

<li>
<cite id="bib-rfc6811">IETF RFC 6811</cite>, BGP Prefix Origin Validation
<span class="doi">10.17487/RFC6811</span>
</li>

Referenced By

IETF RFC 6907 [Active*]
IETF RFC 7454 [Active*]
IETF RFC 8704 [Active*]
IETF RFC 8955 [Active*]
IETF RFC 9685 [Active*]
IETF RFC 9774 [Active*]