Netnod launches new route server platform
Network infrastructure company Netnod is deploying a new route server platform by the end of H1 2019. The updated platform enhances network security with RPKI support and adds features like a looking glass tool for route inspection.
Netnod, a provider of network infrastructure services, announced the upcoming launch of its new route server platform for its Stockholm and Copenhagen Internet Exchange Points (IXPs) by the end of the first half of 2019. The new platform introduces significant enhancements, including a looking glass utility for route analysis and support for Resource Public Key Infrastructure (RPKI) to improve network security and prevent BGP hijacking.
The implementation necessitates preparatory actions from customers. Those connected to Netnod's route servers in Stockholm or Copenhagen must ensure their prefixes are RPKI-signed and that their AS-SET information is current. After the deadline, Netnod's route servers will, by default, reject Route Origin Authorisations (ROAs) marked as 'INVALID.' ROAs designated as 'VALID' will be accepted, while 'UNKNOWN' ROAs will be cross-referenced with the customer's AS-SET data; accepted if present, otherwise rejected.
The platform will support all standard BGP communities and will launch with RPKI functionality. BGP communities will be used to tag RPKI validation results for incoming prefixes. This allows for, among other things, the automatic rejection of INVALID routes and provides receiving parties with tools to fine-tune route selection. The objective is to promote broader RPKI adoption and mitigate the risk of BGP hijacking.
Technically, the new platform is based on the Arouteserver solution, offering a shared codebase, comprehensive documentation, and interoperability with Netnod's existing dual-vendor setup (Bird and GoBGP). Prior to the official rollout, Netnod conducted user tests during April-May 2019 at Netnod IX Copenhagen.
The deployment of the new route server platform marks a significant step in enhancing network security. RPKI integration and improved routing management contribute to ensuring more stable and secure internet traffic.