▼
Last week, I suggested it's time fix those BGP route leaks. I live by the words everybody complains about the weather, but nobody does anything about it, so as such I wrote an Internet-Draft with the protocol changes necessary:
draft-van-beijnum-sidrops-pathrpki-00
I think we can stop these route leaks with a relatively modest change to RPKI: by combining the ASes the origin trusts and the ASes the operator of an RPKI relying party server trusts, we have a list of all the ASes that may legitimately appear in the AS path as seen from this particular vantage point.
I believe deployment will be relatively easy, as it works for the two ASes at both ends even if ASes in the middle don't participate.
There is path filter example code in the appendix to show that this part is easy. 😀
You can see that filter code in action here:
http://bgpexpert.com/pathrpki/
I'm looking forward to hearing feedback. I've started discussions on the RIPE routing-wg mailinglist and the IETF sidrops working group mailinglist. Also feel free to mail me directly or talk to me on Twitter.
Permalink - posted 2019-06-20
Last week, there was a large route leak that involved Swiss hosting company Safe Host and China Telecom. The route leak made internet traffic for European telecoms operators KPN, Swisscom and Bouygues Telecom, among others, flow through Safe Host and China Telecom against the wishes of the telecom operators involved. See this Ars Technica story for more details.
In this post, I'm going to explain how the interaction between the technical and business aspects of internet routing have made this issue so difficult to fix. At the end I'll briefly describe a proposal that I think can actually make that happen.
Read the article - posted 2019-06-13
Geoff Huston has written a post on the APNIC blog congratulating BGP with its 30th birthday. BGP version 1 was published as RFC 1105 in June of 1989. Five years later, the BGP version 4 was published as RFC 1654. And we're still using BGP-4 today, 25 years later! Lots of things, including IPv6 support, were added later in backward compatible ways.
As usual, Geoff's story is comprehensive with lots of interesting details. For instance:
From time to time we see proposals to use geo-based addressing schemes and gain aggregation efficiencies through routing these geo-summaries rather than fine-grained prefixes.
Sorry about that. 😀 I still think it could work, though.
Well worth a read.
Permalink - posted 2019-06-10
Morgen zijn de verkiezingen voor de Nederlandse afgevaardigden naar het Europees Parlement. Ik had half-en-half het plan om hier een stukje te schrijven over wat nu de relatie is tussen de Nederlandse partijen en de Europese fracties waar zij deel van uitmaken. Maar: Stuk Rood Vlees heeft dit veel beter gedaan dan ik kon!
Absolute aanrader om deze blogpost te lezen.
De echte uitslagen komen pas zondagavond om 23 u nadat de stembussen de alle overige landen ook gesloten zijn, maar naar verwachting zal er donderdagavond wel een exitpoll zijn en wat uitslagen van individuele stembureaus.
Ik ben ook erg benieuwd naar de Britse uitslagen en de consequenties die met name de Tories hieraan zullen verbinden voor de brexit.
Permalink - posted 2019-05-22
