RPKI Sentinel: An Efficient RPKI-based Routing Emergency Control Platform

The Resource Public Key Infrastructure (RPKI) serves a critical role in bolstering Internet security, particularly by providing a robust mechanism for verifying Border Gateway Protocol (BGP) declarations. However, in the face of escalating traffic attacks, the data forwarding functionality of autonomous system border routers often fails to deliver services effectively. To mitigate or eliminate the impact of such attacks, this paper explores and implements the RPKI Sentinel, an efficient routing emergency control platform leveraging the reliable route authentication mechanism of RPKI. RPKI Sentinel is specifically tailored to address highvolume flooding traffic and malicious attacks, which operates by dynamically adjusting route authorizations through the Simplified Local Internet Number Resource Management with the RPKI (SLURM) mechanism within the Relying Party (RP) component of the RPKI system. This allows for redirecting malicious traffic to secure destinations or revoking route authorizations to block paths that facilitate high-volume flooding attacks. Through extensive experimentation, it has been demonstrated that the RPKI Sentinel achieves a remarkable response time for revocation of only 44.40 ms, with a blocking accuracy rate of 98.65%. Furthermore, the redirection response time is measured at 68.70 ms, with a redirection accuracy rate of 98.58%. These results highlight the effectiveness of the RPKI Sentinel in meeting the exigencies of network emergencies arising from attacks.