MITM and Routing Security

If the motivation behind the effort behind securing BGP was to allow any BGP speaker to distinguish between routing updates that contained “genuine” routing information and routing updates that contained contrived or false information, then these two reports point out that we’ve fallen short of that target. What’s gone wrong?…


Superstorm Sandy and the Global Internet

The Internet has managed to collect its fair share of mythology, and one of the more persistent myths is that from its genesis in a cold war US think tank in the 1960’s the Internet was designed with remarkable ability to “route around damage.” Whether the story of this cold…


Some Further Thoughts on Securing Routing

It seems that the discussion about route leaks and securing BGP continues. Here, I’d like to quickly explore the issues related to the distinction between routing protocols, routing policies, routing and packet forwarding, and look at why securing the routing protocol does not necessarily ensure that you have secured packet…


Leaking Routes

Its happened again. We’ve just had yet another major routing leak, this time bringing down the Internet for most of an entire country. Maybe twenty years ago no one would’ve noticed, let alone comment, but now of course its headline material in the media. What happened? And how could this…


Hunting the Bogon Filter

Until recently IP network operators were encouraged to set up so-called “bogon address filters” at the edge of their networks. These filters were intended to discard all incoming traffic where the source address in the IP header was from a block of addresses that was known to be unallocated. The…


The (BGP) World is Flat!

In the previous article on the growth trends of BGP we looked at the BGP routing table, and looked at some predictive models for the growth of the size of the Internet’s routing table. The conclusions made in that article were that while there is a very high level of…


BGP Routing Growth in 2011

BGP has been toiling away, literally holding the Internet together, for more than two decades, and nothing seems to be falling off the edge of the Internet. As far as we can tell everyone can still see everyone else, and routing appears to be working. So why should we be…


IPv6 in 2011

Recently I wrote about the IPv4 routing table, and the changes that were observed across 2011. A reader has asked me: “Is the v6 table included in this? Would the v6 table size curve in any way pick up where the v4 curve “left off”? Maybe I’m being too hopeful!”…


The IPv4 Routing Table in 2011

The size of the global routing table for IPv4 has been growing at a steady pace for many years. However, over the last few months, the world of IPv4 routing appears to be slowing down.