BGP
The core routing protocol of the Internet, responsible for exchanging IP address reachability information between autonomous systems (ASes). It was designed for scalability and flexibility rather than security: routers trust peer announcements by default, making it susceptible to route hijacking and route leaks.
Timeline (last 90 days)
RPKI is a cryptographic framework for verifying the authenticity of internet routing announcements.
In traditional BGP routing, any network can claim to own a certain IP address range, and routers lack a mechanism to verify whether that announcement is legitimate.
RFC 8950 allows an IPv6 address to be used as the next hop for IPv4 routes in a BGP session.
In traditional BGP design, an UPDATE message carrying IPv4 NLRI must be paired with an IPv4 next-hop address, while IPv6 prefixes require an IPv6 next hop; this is the default behavior of RFC 4271 (BGP-4).
NLRI (Network Layer Reachability Information) is the field in a BGP UPDATE message used to express reachable prefixes, and is essentially a list of a prefix plus a prefix length.
When a router receives an IPv4 route but the next hop is an IPv6 address, it needs to recursively look up the outgoing interface via the IPv6 routing table, and then perform forwarding based on the IPv4 destination address.
An autonomous system (AS) is the basic administrative unit in the Internet routing system, operated by a single organization, owning a set of IP address ranges under unified management, and exchanging routing information with other ASes via the Border Gateway Protocol (BGP); AS numbers are assigned by regional Internet registries and are globally unique
When a region's data centers or IXPs fail due to a physical strike, BGP routes reconverge, traffic is forced to detour along other paths, which may lead to increased latency and higher packet loss, and may even cause brief network unreachability due to route flapping
By querying the WHOIS database or BGP routing information, one can trace the registered owner of a given IP address.
A BGP misconfiguration by Pakistan Telecom in 2008 caused a global YouTube outage lasting several hours.
2 more timeline events
All Facts (12)
RPKI is a cryptographic framework for verifying the authenticity of internet routing announcements.
50%UnverifiedIn traditional BGP routing, any network can claim to own a certain IP address range, and routers lack a mechanism to verify whether that announcement is legitimate.
50%UnverifiedRFC 8950 allows an IPv6 address to be used as the next hop for IPv4 routes in a BGP session.
50%UnverifiedIn traditional BGP design, an UPDATE message carrying IPv4 NLRI must be paired with an IPv4 next-hop address, while IPv6 prefixes require an IPv6 next hop; this is the default behavior of RFC 4271 (BGP-4).
50%UnverifiedNLRI (Network Layer Reachability Information) is the field in a BGP UPDATE message used to express reachable prefixes, and is essentially a list of a prefix plus a prefix length.
50%UnverifiedWhen a router receives an IPv4 route but the next hop is an IPv6 address, it needs to recursively look up the outgoing interface via the IPv6 routing table, and then perform forwarding based on the IPv4 destination address.
50%UnverifiedAn autonomous system (AS) is the basic administrative unit in the Internet routing system, operated by a single organization, owning a set of IP address ranges under unified management, and exchanging routing information with other ASes via the Border Gateway Protocol (BGP); AS numbers are assigned by regional Internet registries and are globally unique
50%UnverifiedWhen a region's data centers or IXPs fail due to a physical strike, BGP routes reconverge, traffic is forced to detour along other paths, which may lead to increased latency and higher packet loss, and may even cause brief network unreachability due to route flapping
50%UnverifiedBy querying the WHOIS database or BGP routing information, one can trace the registered owner of a given IP address.
50%UnverifiedBGP operates on a trust model and is vulnerable to attacks such as route hijacking and route leaks.
50%UnverifiedHigh-quality DNS services require deploying Anycast nodes globally and broadcasting the same IP address via BGP so that queries are routed to the nearest server.
50%UnverifiedA BGP misconfiguration by Pakistan Telecom in 2008 caused a global YouTube outage lasting several hours.
50%