HEAnet deploys the Resource Public Key Infrastructure (RPKI) on its IP network to increase security

HEAnet is committed to continuously improve internet security and protect its clients. The latest improvement is the usage of RPKI-based BGP route origin validation on its IP network identified as AS1213.

Garwin Liu, Technical Architect at HEAnet commented on the announcement: “The internet routing system is relying upon multiple connections between thousands of networks that are based on trust. By making this improvement, we are following a best practice pioneered by many institutions around the world. It is essential that we all work together to protect the internet ecosystem.”

The recent Safer Internet Day was a good opportunity to reflect on what is our contribution to making the internet a better, safer place. HEAnet recognised that in the current times we all hugely depend on reliable and safe internet connections which is why it has become crucial to increase the focus on online security.

Beginning on January 5^th 2021, HEAnet enabled RPKI filtering on its IP network. RPKI was developed in 2008 and its deployment began in 2011, however, adoption on a larger scale has only begun in the last 2-3 years. RPKI is a specialised public key infrastructure framework to support improved security for the internet’s BGP routing infrastructure through BGP Route Origin Validation (ROV). Route Origination Authorisation (ROA) states which autonomous system (AS) is authorised to originate certain IP prefixes. In addition, it can determine the maximum length of the prefix that the AS is authorised to advertise.

Anna Wilson, Technical Architect at HEAnet said: “HEAnet believes in making a positive impact and this improvement of internet safety is going to make life easier for our clients. We are excited to play our part in being a good internet citizen and look forward to further developments in this area.”

The initiative has arisen to reduce common routing threats. Examples of routing threats include route hijacking and the illegitimate takeover of groups of IP addresses by corrupting Internet routing tables maintained using the BGP. RPKI deployment allows HEAnet to make more informed and secure routing decisions.

Eoin Kenny, Innovation and R&D Manager at HEAnet said: “We are delighted to contribute to the global internet community efforts in order to improve the security and stability of internet routing. We believe that everyone should deploy RPKI-based filtering and hopefully our progress will encourage other organisations to get involved”.

For more information about RPKI, visit https://isbgpsafeyet.com/