基于HTTPS的RPKI缓存更新机制

RPKI作为解决路由劫持等网络安全问题的重要网络架构，其传输结构主要有两方面构成：供给侧和依赖方的数据同步，以及依赖方和需求侧的数据传输.目前国内外研究内容主要集中在供给侧和依赖方的数据同步环节.依赖方和需求侧的数据传输仍处于初步探究状态.本文针对当前RPKI理论架构难以适应实际部署需求的缺陷，设计并利用JSON化的RPKI缓存数据，实现了一种基于HTTPS的RPKI缓存更新架构.实验结果表明，该分发架构传输稳定.与当前RPKI理论架构相比能够适应多层传输和大量数据传输的需要.

RPKI Cache Update Mechanism Based on HTTPS

As an important network architecture for solving network security problems such as route hijacking, RPKI has two main components: data synchronization between the supply side and the relying party, and data transmission between the relying party and the demand side. At present, the research content worldwide mainly focuses on the data synchronization link between the supply side and the relying party. The data transmission between the relying party and the demand side is still in the initial state of exploration. In view of the shortcomings of the current RPKI theoretical architecture, we design and use Jsonized RPKI cache data to implement an HTTPS-based RPKI cache update architecture, which can meet the needs of actual deployment. Experimental results show that the distribution architecture is stable. Compared with the current RPKI theoretical architecture, it can adapt to the needs of multi-layer transmission and large-scale data transmission.