Skip to content

Safeguarding the Internet's Backbone: Unleashing the Power of RPKI for Unbreakable IPv4 and IPv6 BGP Security - BRKENT-2179#

Cisco Live US 2026 (Las Vegas) digest Program Core pick Las Vegas · 31 May – 4 June 2026

Abstract

Jeffry Handal (Cisco), John Shea (Cisco)

  • Why: RPKI deployment is the practical, deployable answer to BGP hijacking — core internet-routing security with direct DC/WAN interconnect relevance.
  • What: Real-world BGP hijack incidents (criminal and nation-state) analyzed against what RPKI and related BGP capabilities would have prevented, plus deployment strategies and working configuration examples to start an RPKI rollout (from abstract only).
  • How: Route Origin Validation mechanics, deployment patterns (full vs partial ROV), and complementary BGP security capabilities.
  • Where applicable: Any organization operating BGP and announcing prefixes — vendor tooling is Cisco IOS-XR/IOS-XE but RPKI/RFC 6811 is standards-based and cross-vendor.