Detecting unsafe BGP policies in a flexible world

Perouli, Debbie; Griffin, Timothy G.; Maennel, Olaf; Fahmy, Sonia; Pelsser, Cristel; Gurney, Alexander J. T.; Phillips, Iain

doi:10.1109/icnp.2012.6459974

Cited by 8 publications

(4 citation statements)

References 24 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Unlike tools which integrate a vast amount of operational problems [8], we do not focus on inferring and/or monitoring the AS-level topology of the Internet, but on monitoring the healthy deployment of routing policies through prefix visibility. In this sense, our work is very closely related to the work on BGP wedgies by Griffin et al [6], [34]. However, none of those theoretical results is able to detect problematic routing conditions based on raw BGP observations.…”

Section: Related Workmentioning

confidence: 58%

The BGP Visibility Toolkit: Detecting Anomalous Internet Routing Behavior

Lutu

Bagnulo

Pelsser³

et al. 2016

IEEE/ACM Trans. Networking

Self Cite

View full text Add to dashboard Cite

In this paper, we propose the BGP Visibility Toolkit, a system for detecting and analyzing anomalous behavior in the Internet. We show that interdomain prefix visibility can be used to single out cases of erroneous demeanors resulting from misconfiguration or bogus routing policies. The implementation of routing policies with BGP is a complicated process, involving fine-tuning operations and interactions with the policies of the other active ASes. Network operators might end up with faulty configurations or unintended routing policies that prevent the success of their strategies and impact their revenues. As part of the Visibility Toolkit, we propose the BGP Visibility Scanner, a tool which identifies limited visibility prefixes in the Internet. The tool enables operators to provide feedback on the expected visibility status of prefixes. We build a unique set of ground-truth prefixes qualified by their ASes as intended or unintended to have limited visibility. Using a machine learning algorithm, we train on this unique dataset an alarm system that separates with 95% accuracy the prefixes with unintended limited visibility. Hence, we find that visibility features are generally powerful to detect prefixes which are suffering from inadvertent effects of routing policies. Limited visibility could render a whole prefix globally unreachable. This points towards a serious problem, as limited reachability of a non-negligible set of prefixes undermines the global connectivity of the Internet. We thus verify the correlation between global visibility and global connectivity of prefixes.

show abstract

Section: Related Workmentioning

confidence: 58%

The BGP Visibility Toolkit: Detecting Anomalous Internet Routing Behavior

Lutu

Bagnulo

Pelsser³

et al. 2016

IEEE/ACM Trans. Networking

Self Cite

View full text Add to dashboard Cite

show abstract

“…Unlike such tools which integrate a vast amount of operational problems [13], we do not focus on inferring and/or monitoring the AS-level topology of the Internet, but on monitoring the healthy deployment of routing policies. In this sense our work is very closely related to the work on BGP wedgies by Griffin et al [14], [15]. However, none of those theoretical work is able to detect problematic routing conditions based on raw BGP observations.…”

Section: Related Workmentioning

confidence: 71%

The BGP Visibility Scanner

Lutu

Bagnulo

Maennel

2013

2013 IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS)

Self Cite

View full text Add to dashboard Cite

By tweaking the BGP configurations, the network operators are able to express their interdomain routing preferences, designed to accommodate a myriad goals. Given the complex interactions between policies in the Internet, the origin AS by itself cannot ensure that only by configuring a routing policy it can also achieve the anticipated results. Moreover, the definition of routing policies is a complicated process, involving a number of subtle tuning operations prone to errors. In this paper, we propose the BGP Visibility Scanner which allows network operators to validate the correct implementation of their routing policies, by corroborating the BGP routing information from approximatively 130 independent observation points in the Internet. We exemplify the use of the proposed methodology and also perform an initial validation for the BGP Visibility Scanner capabilities through various real operational use cases.16th IEEE Global Internet Symposium 16th IEEE Global Internet Symposium

show abstract

“…In a network, the Quality of Service attributes improves overall network performance [11]. A good path selection algorithm must consider QoS attributes like path length, delay, and link bandwidth to achieve traffic engineering goals.…”

Section: Problem Statementmentioning

confidence: 99%

An Improved Quality Path Selection Approach for Border Gateway Protocol

Shukla¹,

Kumar²

2017

IJIES

View full text Add to dashboard Cite

Route instability causes the frequent changes in path selection on the Internet. A good path selection policy can avoid the repetitive changes of the route by scrutinizing the quality of path in BGP. This work is improving a Stable Route Selection (SRS) approach which has not considered the quality of path in BGP. Nevertheless, the SRS approach selects a route by considering delay and longest path uptime as the foremost criteria, which results in lower throughput and higher end-to-end delay. Consequently, we propose an Improved Stable Path Selection (ISPS) approach, which utilizes the QoS attributes for path selection process competently. For this, we consider available bandwidth, delay and longest path uptime as the QoS attribute for path selection process in BGP. Additionally, in ISPS approach, the BGP routers continuously monitor the queue and traffic flow for selecting the best available path. Subsequently, the proposed ISPS approach adapts the dynamic changes in topology without decreasing the stability of routes and QoS parameters. The simulation results exemplify the usefulness of the proposed ISPS approach over SRS in improving network performance, and yields better results concerning throughput, average end-to-end delay, packet loss rate, and exchanged updates.

show abstract

Detecting unsafe BGP policies in a flexible world

Cited by 8 publications

References 24 publications

The BGP Visibility Toolkit: Detecting Anomalous Internet Routing Behavior

The BGP Visibility Toolkit: Detecting Anomalous Internet Routing Behavior

The BGP Visibility Scanner

An Improved Quality Path Selection Approach for Border Gateway Protocol

Contact Info

Product

Resources

About