Navigating the Path to Routing Security in Africa: Insights from the MANRS Observatory

Introduction

In the vast and ever-evolving digital landscape of the African region, the security of data and network communications stands as a critical cornerstone. It's a realm where vigilance is not merely a virtue but an absolute necessity. Enter the Mutually Agreed Norms for Routing Security (MANRS), a global initiative dedicated to enhancing the security and resilience of the internet's routing infrastructure.

What is MANRS?

MANRS, standing for Mutually Agreed Norms for Routing Security, is a collaborative effort among network operators, internet service providers (ISPs), and the broader internet community to bolster the security of the global routing system. Its primary aim is to reduce common threats, such as prefix hijacking, route leaks, and IP address spoofing, which can cause information theft, reputation damage, financial losses, and disrupt the very fabric of the internet.

The MANRS Observatory: A Lens into Routing Security

The MANRS observatory is a tool that provides invaluable insights into the state of routing security worldwide. In this article, we turn our focus to the African continent, examining the current state of routing security through the lens of the MANRS Observatory.

The African Internet Landscape

Africa, a continent of vast potential and growth, is no stranger to the transformative power of the internet. With 2237 networks registered members of AFRINIC, the regional internet registry responsible for managing IP address resources, the continent's digital footprint is expanding rapidly. It's important to note that this figure represents networks that have acquired resources from AFRINIC, which is just a portion of the total networks in the region. We encourage all eligible networks to consider AFRINIC membership to facilitate responsible resource allocation, including IPv4, IPv6, and ASNs. To become an AFRINIC member, go to: https://afrinic.net/become-member

Routing Security in Africa: A Snapshot

Now, let's delve into the numbers that shed light on the state of routing security in Africa. Out of the 2237 AFRINIC member networks, only 60 have chosen to be participants in the MANRS initiative. These forward-thinking networks have embraced MANRS principles to enhance the security and resilience of their routing infrastructure.

But what about the broader security landscape? In September alone, Africa experienced 94 routing security incidents, attributed to 60 culprits. These incidents included 14 route misoriginations, 2 route leaks, and a concerning 78 bogon announcements, which means someone originating a prefix that is either not yet assigned or is reserved, a practice detrimental to responsible network operation.

It's important to note that these figures are observed from a MANRS perspective and relate only to the participants who are 60 out of thousands of networks in Africa, including the 2237 AFRINIC members. This could be worse if we had all networks in Africa in the MANRS Observatory database.

In the realm of Internet Routing Registry (IRR), we find that 97% of routes originated from the 60 African MANRS participants have proper documentation in the IRR database with either a route, a route6 object, or both. However, when it comes to Resource Public Key Infrastructure (RPKI), we encounter both progress and room for improvement.

In terms of RPKI's components:

• ROAs (Route Origin Authorizations) cover 27.1% of originations, indicating that a significant portion is secured. However, 72.2% are unknown, meaning they are not covered by a ROA, and 0.7% are invalid, indicating attempts to originate a prefix with an ASN when the existing ROA does not match.

• ROV (Route Origin Validation), which informs routing decisions based on RPKI data, is currently used by only 6.3% of networks from Africa participating in the MANRS initiative.

These figures underscore that while progress has been made, there is still a long journey ahead to fortify routing security in Africa.

Call to Action

As we examine these statistics, we must recognize the collective responsibility to bolster routing security in Africa. Here are three actionable steps:

1. Becoming an AFRINIC Member: Consider AFRINIC membership to facilitate responsible resource allocation. Follow the link: https://afrinic.net/become-member
2. Adopting MANRS Actions: Embrace the MANRS principles and become a MANRS participant to enhance routing security. Follow the link: https://www.manrs.org/join/
3. Reach Out: If you face challenges or have questions about routing security, reach out to me or industry experts and community resources for guidance and support.

Together, we can navigate the path to a more secure routing ecosystem in Africa, safeguarding the future of internet connectivity on the continent.