3 ms·
Let's see if I can explain it concisely... When you send traffic to an IP address, your router must know where to send it to. In consumer routers, you usually
by chousuke 10y ago
Let's see if I can explain it concisely...
When you send traffic to an IP address, your router must know where to send it to. In consumer routers, you usually just have a default route for the whole internet towards your ISP's gateway, but the ISP must also maintain a routing table to know where the packet must go next, and BGP is the protocol most commonly used to advertise where each network resides.
Every ISP could in theory maintain the internet routing tables by just having a set of static routes, but considering that the IPv4 internet routing table consists of over half a million entries at the moment (and it's growing), this is practically impossible. Instead, each ISP (or "Autonomous System") peers with others to advertise their routes to the network blocks assigned to them, and often the routes they receive from other peers.
When you have multiple peers like this, the advertised routes contain as metadata the IANA assigned global AS numbers of each participant in the network up to the endpoint (the "AS path"), thus allowing routers to calculate the shortest route in case two peers advertise routes to the same network block. This also gives the internet its self-healing property, since if one router goes down, you usually have an alternate path available.
The BGP "communities" mentioned in the article are a way for peers to signal additional information about their routes. For example, an ISP can publicly claim that they will not forward traffic to routes advertised with a certain community, allowing a network operator to tell their transit ISP to drop DoS traffic to a subset of their addresses before it reaches their network, helping protect customers not under attack.
- d33 10y agoNote that the protocol has imperfect security, which is worrying: https://security.stackexchange.com/questions/56069/what-security-mechanisms-are-used-in-bgp-and-why-do-they-fail https://security.stackexchange.com/questions/56069/what-secu...