Fedor Vompe
Fedor Vompe is a software engineer at Deutsche Telekom. His interests span different areas of Internet routing and security, including BGP security, routing policy, Internet Routing Registries (IRR), RPKI, and ASPA technologies. He is passionate about network technologies and software development. He believes in fast, reliable, precise, and simple solutions that address complex technical challenges and solve real customer problems.
Session
BGP routing security relies on many technologies, both old and new, such as IRR-based Route Filters and RPKI Technologies like Route Origin Authorizations (ROAs) or Autonomous System Provider Authorization (ASPA-s). While these technologies are well-known, they are still used together, and accurate route filter generation remains a challenging task with significant operational implications for large-scale router filter generation at major tier-1 ISPs.
We show that AS-Set documentation in RIR databases is still critical yet systematically overlooked. We evaluate the scope and patterns of these issues - including missing documentation, AS-Set explosive expansion, and cyclic dependencies - demonstrating that accurate AS-Set documentation remains a foundational requirement for operational filtering.
We present the toolchain and technologies like Route Query Specification (RQSpec) we use for route filter generation at scale, compensating for the complexity introduced by poor documentation.