Routing Assets Database
{{Short description|Routing registry for Internet networks}}
The Routing Assets Database (RADb), formerly known as the Routing Arbiter Database is a public database in which the operators of Internet networks publish authoritative declarations of routing policy for their Autonomous System (AS) which are, in turn, used by the operators of other Internet networks to configure their inbound routing policy filters. The RADb, operated by the University of Michigan's Merit Network, was the first such database, but others followed in its wake, forming a loose confederation of Internet routing registries, containing sometimes-overlapping, and sometimes-conflicting,{{cite web |last1=Band |first1=Alex |title=The RPKI Documentation |url=https://rpki.readthedocs.io/en/latest/about/faq.html#i-thought-we-were-all-using-the-irr-to-check-route-origin-why-do-we-need-rpki-now |publisher=Read the Docs |access-date=1 July 2021 |quote=This has created an extensive repository of obsolete data of uncertain validity spread across dozens of route registries around the world. Most published RPSL data is neither sufficiently accurate and up to date for filtering purposes, nor sufficiently comprehensive or precise for being the golden master in router configuration.}} routing policy data, expressed in Routing Policy Specification Language (RPSL) syntax.
History
The RADb was developed in the early 1990s as part of the National Science Foundation (NSF)-funded Routing Arbiter Project.{{Cite web|title=The Internet Routing Registry - RADb|url=https://www.radb.net/|access-date=2021-05-24|website=www.radb.net}} The Routing Policy Specification Language was subsequently retroactively formalized in RFC 2280, in January, 1998.{{cite web |last1=Alaettinoglu |first1=Cengiz |last2=Bates |first2=Tony |last3=Gerich |first3=Elise |last4=Karrenberg |first4=Daniel |last5=Meyer |first5=Dave |last6=Terpstra |first6=Marten |last7=Villamizar |first7=Curtis |title=Routing Policy Specification Language (RPSL) |url=https://datatracker.ietf.org/doc/html/rfc2280 |publisher=Internet Engineering Task Force |date=January 1998}}
Usage
Historically, most larger Internet service providers, and all within the European RIPE NCC region require customers to be registered in an Internet Routing Registry prior to propagating BGP announcements of their routes.{{Cite web|title=Routing Assets Database|url=https://amp.freejournal.info/11095055/1/routing-assets-database.html|access-date=2021-05-24|website=freejournal.info|language=en}} This has not been a rigorously-enforced operational standard, however, and has declined since a peak in the early 2000s.
Security
The Internet Routing Registry system is an artifact of the 1990s era of the Internet, as the Internet's economy and governance were in transition from an academic mode to a commercial mode, and predate the era of ubiquitous cryptography. The RADb initially relied upon a trust model, in which write access to the database was not strictly controlled. A write-permissions access model was subsequently added, in which individuals or roles representing each Autonomous System had authority to write records related to that AS, including which IP address blocks it would originate routing advertisements for, and which other Autonomous Systems were allowed to advertise transit routing paths to it. The first generation of security allowed network operators to specify a MAIL-FROM attribute, requiring that updates be sent from a specific email address. Next, (B)CRYPT-PW / MD5-PW password hash authentication was added, and finally a PGP-KEY attribute was added, allowing users to cryptographically sign submitted edits.{{cite web |last1=Alamin |first1=Sara |title=Internet Routing Registry Tutorial |url=https://www.ws.afnog.org/afnog2019/sie/590-irrrpki/IRR_RPKI.pdf |publisher=Packet Clearing House |date=18 June 2019 |access-date=1 July 2021}} Subsequent work by the Regional Internet Registries created additional IRRs which strictly tied permission to advertise IP blocks to RIR allocation data. But since DNSSEC already existed and had been applied to the in-addr zone, no end-to-end cryptographic integrity mechanism was ever added to RPSL.
See also
References
{{reflist}}
- [http://www.irr.net/ Internet Routing Registry (IRR) homepage]
- [http://www.irr.net/docs/faq.html IRR FAQs]
- [http://www.irr.net/docs/template.html Routing Registry template]
- http://www.irrd.net/
- [https://www.isc.org/software/IRRtoolset IRR Toolset]
External links
- {{Official website|https://www.radb.net/}}