# RPKI Defense Capability Simulation Method Based on Container Virtualization
## 2 Related Work  
The relevant work on simulation approaches for BGP networks is outlined as follows:  
In a work by [PERSON] et al. [23], GNS3 was utilized to simulate BGP networks, and on the basis of this, they analyzed BGP convergence via keepalive and hold timers. However, GNS3 has high hardware resource requirements, limiting its capacity to simulate only extremely small-scale network topologies and resulting in an inefficient router deployment. [PERSON] et al. [26] introduced an extensible BGP simulator, BGP++, constructed using the discrete event simulator NS-2 and Zebra. The simulator offers detailed and scalable BGP implementations, employing PDNS for distributed simulation across multiple workstations to achieve a large-scale simulation. Additionally, it provides a simulation toolset to read simple configuration files and expedite simulation configuration tasks. [PERSON] et al. [27] presented a highly efficient BGP simulator called FASTPLANE, which was designed primarily for BGP simulation in data centers. Compared to the latest technology of Batfish deployed in medium-sized data centers, FASTPLANE exhibited a performance that was two orders of magnitude faster. [PERSON] et al. [28] developed a new network simulator, BGPSIM, using C++ to evaluate BGP prefix hijacking attacks and countermeasures. The simulator exhibited excellent simulation performance, providing simulations within minutes. However, it gave up some advanced features of the BGP and lacked support for certain BGP extensions. While the above simulators are designed primarily for research purposes such as BGP route learning or network performance, they are insufficient in offering the necessary features and capabilities to simulate BGP security threat scenarios.  
With the rapid development of container virtualization technology in recent years, there has been a growing trend toward BGP network simulations based on container virtualization. [PERSON] et al. [25] used and extended the SEED Internet Emulator (SIE) simulator framework. The simulator is deployed through lightweight Docker containers and interconnects the containers according to topological relationships to create a BGP network simulation environment. Additionally, they introduced the RPKI into the simulation network and tested the impact on BGP network security under partial deployment conditions of the RPKI. However, the approach fails to achieve larger-scale simulation experiments, with a maximum simulation scale of 69 devices. For the SOD-BGP simulation method, we utilize Docker container technology as the virtualization technique to efficiently virtualize the computational resources of physical hosts. Additionally, by employing OpenStack, we distribute the simulation network across multiple computing nodes, thereby pooling physical resources to enable large-scale simulations.  
[PERSON] et al. [20] used the KathBGPBuilder [29] tool, which is based on container technology, to investigate and successfully reproduce a BGP prefix hijacking incident that occurred in March 2022. Through the simulation and comprehensive analysis of the hijacking event, they validated that, in the scenario where the majority of ASes adopt RPKI policies, upstream entities can intercept prefix hijacking attacks and prevent a malicious prefix from propagating. This demonstrated that using RPKI security mechanisms can eliminate or mitigate the impact of prefix hijacking attacks. However, while the experiment included a validation of RPKI policies, it only simulated the affected ASes in the attack event, failing to reflect the effectiveness of the RPKI defense in a more complex network topology. Additionally, the analysis of the experimental results was relatively simple. In the SOD-BGP, we developed attack result collection technology to capture control plane changes across all routing nodes and to monitor the data plane reachability of nodes to the target address. By analyzing the collected results and generating visual graphs, we successfully presented large-scale simulation attack outcomes.