# SD-BROV: An Enhanced BGP Hijacking Protection with Route Validation in Software-Defined eXchange
## 4 Implementation and Evaluation  
### Enabling SD-BROV over Multi-Site REN Testbed  
At the very beginning for designing SDX application, preparing an affordable and experimental testing place is required. This research has collaborated with the National Research and Education Network (NREN) to acquire network testbed resources for supporting development and experiment facility. The testbed consists of two NREN sites, Malaysian Research & Education Network (MYREN [25]) and TaiWan Advanced Research & Education Network (TWAREN [26]), which are bridged by Trans-Eurasia Information Network (TEIN [27]) in behind. This testbed utilizes SDN and VXLAN to conduct multiple paths to emulate local links among BGP routers separately. Such an experiment network is shown as Figure 5. At MYREN site, the hardware components used during the experiment consist of Supermicro servers (with Intel Xeon D-1528 CPU, Micron DDR4 32 G RAM, Intel 545 s SSD 256 G, Intel I350 NIC) and Netgear M4300 switch, stitching to a Cisco router for Layer 3 forwarding. At TWAREN site, the hardware components used in the experiment include Cisco UCS C240 M3 server (with Intel E5520 CPU, Kingston DDR3 128 G RAM, 600 G SAS RAID 1 + 0 disk array, Intel I350 NIC) and Cisco C3K switch, stitching to Cisco ASR9K router for Layer 3 forwarding. Additionally, Table 1 lists used software components and related networking technologies in development. \begin{table}
\begin{tabular}{p{113.8 pt} p{284.5 pt}} \hline \hline
**Software Component** & **Description** \\ \hline OpenvSwitch (OVS [28]) & An open-source production quality, multilayer virtual switch that supports OpenFlow protocol, which is widely used as southward protocol for allowing control communication between SDN controller and network components [5]. OVS provides support for tunnelling protocols, Virtual extensible Local Area Network (VXLAN), which is a stateless tunnelling framework that allows us to overlay Layer 2 networks on top of Layer 3 networks. \\ \hline Open Networking Operating System (ONOS [29]) & An open-source SDN controller maintained by Open Networking Foundation (ONF). It is designed by considering extensibility, modularity, and scalability to meet the needs of Internet Service Provides (ISPs). It provides a Java Application platform with an abstraction of the network and exposes services to the network functions. \\ \hline Quagga [30] & A software suite provides RGP-4 routing protocol support. In implementation, Quagga daemon is running in Linux Containers (LXCS) which acts as the BGP speaker and external BGP (eGBT) routes in developed SDN environment. It is responsible to handle route consolidation before it is sent to the SDN controller as well as manage routing information exchanges with external networks. \\ \hline SDN-IP & It is an ONOSp-in-a application that allows the SDN controller to connect with the external networks through Internet with BGP [31]. SDN-IP requires to co-work with one or more BGP speakers, forming internal BGP (iBGP) peers to receive and process the BGP routing information passively. When SDN-IP receives route information, it translates it into a multi-point to single-point (MPESP) intent through ONOS intent service, which is eventually translated as OpenFlow rules for allowing connectivity between an BGP peers in SDX. \\ \hline Routinator & Routinator server is based on the RFRXI valida developed by NLnetLabs (written in Rust language). It uses protocols such as SDN or RFRX Delta Protocol (RRDP) to download the certificates and Route Origin Authorization (ROA) from RIRS; RFRXtivities and put them to a local check for serving the route validation request.