Our Approach

• Encode address space allocation in DNS

• Use DNSSEC to provide authentication

• Have BGP look up each prefix in DNS

• Paths to prefixes fall into three classes

  • Authenticated
  • Unauthenticated
  • Authentication failures (bogon)

Previous slide

Next slide

Back to first slide

View graphic version