When will Rogers switch to secure BGP routing?

[jmellor]

I've had some quirky delays lately, and noticed some odd traceroute outputs.  I know there have been some severe issues over the last 2 years with the highly-unresilient site in North York, but they tend to be in the nature of complete outages.  Taking me over the top was this test: https://isbgpsafeyet.com/ showing that Rogers routing is easily hijacked and specifying the protocol correction to fix the issue.  So, when is Rogers fixing their routing software to correct the problem?

[-G-]

Implementing RPKI would be a nice thing for Rogers to do but I don't think that it is (or even should be) their highest priority at the moment.  It's a rather complex undertaking, to say the least, and will involve a lot of effort and coordination.

I think it's great that Cloudflare is raising awareness about RPKI but their blog post is causing unnecessary panic, and there are many practical reasons why adoption has been slow.  We also won't see the benefits until EVERY ISP signs their prefixes AND until we get to the point where all BGP peers will only accept prefixes that have been signed and validated.  Then the day will come when RPKI will be a requirement and if anything goes slightly wrong at that time, we will have bigger problems then having traffic temporarily routed through China.

Another thing to consider is that we still right in the middle of the COVID-19 pandemic, so it's also not a great time to take on an initiative such as this.  Rogers also has more important and more pressing problems to fix in their network as well before they take this on.  I would be shocked if Rogers has not already started planning for their RPKI implementation.  I'm also not going to panic because they haven't implemented it either.

[gcerullo]

Hey Rogers,

Is there any timeline for when Border Gateway Protocol (BGP) Resource Public Key Infrastructure (RPKI) security framework will be implemented?

https://isbgpsafeyet.com/

[ve3tej]

Unfortunately, my Internet provider, @Rogers (AS812), does NOT implement BGP safely. Check out https://isbgpsafeyet.com to see if your ISP implements BGP in a safe way or if it leaves the Internet vulnerable to malicious route hijacks. via @Cloudflare