ISD Memberships
Overview
This page lists the memberships of autonomous systems (ASes) in various isolation domains (ISDs).
Understanding AS roles
The tables below list the roles each AS takes on within its ISD, such as core, issuing, and voting. For more information on the different AS roles and their responsibilities, refer to the SCION documentation on AS roles.
What is the core role?
The core role is assigned to ASes that have additional responsibilities within an isolation domain (ISD), such as:
- Initiating the beaconing process for path discovery.
- Establishing SCION links to ASes in other ISDs. Only ASes with the core role can connect across ISD boundaries.
An AS can be part of multiple ISDs and may hold the core role in some of them while being non-core in others.
The core role is a SCION network role and is not the same as the Anapaya CORE product. The Anapaya CORE is an appliance that can be deployed to operate an AS with the core role (among other roles). For more information, see the glossary and Anapaya CORE product page.
What is the issuing role?
The issuing role is held by ASes that operate a Certificate Authority (CA) for their ISD. They are responsible for issuing AS certificates to other ASes and/or themselves. These AS certificates are used to authenticate SCION control plane information.
For more information, see the overview of certificates, keys and roles in the IETF SCION PKI draft and the terminology section of the IETF SCION control plane draft.
What is the voting role?
The voting role is held by members that participate in updating the ISD's Trust Root Configuration (TRC). When the TRC is updated, for example to change the set of core ASes, CAs, or other ISD parameters, voting members cast votes using their voting certificates. In the table below, the Voting role indicates that the AS (or an entity associated with it) holds this responsibility within the ISD.