Feature Request - BGP RPKI

RouterOS RouterOS beta
1

Please add BGP RPKI Filtering.

https://www.arin.net/resources/manage/rpki/

2

Important.
Really excited to see some BGP development in V7

3

+1 Open-Source RPKI/RTR implementation in C available over at http://rpki.realmv6.org/

4

RPKI would be awesome. But I would be more than happy with decent BGP performance, including route ingestion and interactive lookup.

5

It’s only a matter of time before RPKI becomes a standard for most IP transit peerings. This is a feature we desperately need to keep using MikroTik routers to peer into the DFZ.

BGP FlowSpec is also important for DDoS mitigation.

6

By replacing their custom routing implementation (Quagga fork or whatever) with something more recent like the frrouting protocol suite they could probably do both… https://github.com/FRRouting/frr

7

ROS didn’t use Quagga and no there will not be FRR.

8

There will not even be a fixed ROS BGP implementation for the next decades.

9

This is not true.
Back in 2.x days ROS was using quagga. And a rather buggy version at that.

But yes, the current implementation AFAIK is not based on quagga.

10

What about RPKI? Is it being discussed at least?

11

+1 for BGP Flow Spec as well.

12

Any news on RPKI Route Origin Validation on ROS? As written above, there’s an open source C library available under MIT license… http://rpki.realmv6.org/

13

Yes, please add this to the list. More and more people are asking for it.

14

Yes +1

It is important feature

15

+1 for:

  • Decent ingestion performance
  • Decent lookup performance
  • RPKI

In this order. Much as I want RPKI, I feel that without significant improvements in basic performance, ROS is out of the border.

16

RPKI Origin Validation

Is a urgent must have - otherwise I need to switch to some alternative to keep my perring links up and running …

17

+1 for RPKI and Flowspec

18

Currently work in progress

19

Thank you @mrz
I am super excited to start playing with whatever you release and give feedback for BGP. I cannot wait to be able to finally share full routing tables between my edge routers to have a truly blended table of all connections let alone to start filtering out all the BGP hijacks with RPKI.

https://photos.app.goo.gl/UG4DihVvKxMqZ6mk6

20

[quote=vntnet post_id=784778 time=1586431931 user_id=131637]
Hi mrz,



Do you have an estimate of the release date for BGP in the development channel?

Even if it’s full of bugs or without RPKI … but so that we have an idea of performance.



Several of my clients have asked me for alternatives to Mikrotik because of the RouterOS 6’s poor performance in learning routes, in particular.



Thanks in advance,



Regards,

Alexandre
[/quote]

No software update will ever fix this. The architecture (tile-gx) used in CCR-series was simply not designed for BGP routing.