draft-ietf-sidrops-bar-sav

Source Address Validation Using BGP UPDATEs, ASPA, and ROA (BAR-SAV)

streamIETF groupsavnet stateactive pages20 rev09 expires2026-09-16 canonicalhttps://datatracker.ietf.org/doc/draft-ietf-sidrops-bar-sav/
Designing an efficient source address validation (SAV) filter requires minimizing false positives (i.e., avoiding blocking legitimate traffic) while maintaining directionality (see RFC8704). This document advances the technology for SAV filter design through a method that makes use of BGP UPDATE messages, Autonomous System Provider Authorization (ASPA), and Route Origin Authorization (ROA). The proposed method's name is abbreviated as BAR-SAV. BAR-SAV can be used by network operators to derive more robust SAV filters and thus improve network resilience. This document updates RFC8704.