3 ms·

Is it fair to say BGP in general relies on “good will” trust model? I wonder if there exists an authoritative mechanism similar to browser punishing rouge or in

• maltalex 9y ago
  > Is it fair to say BGP in general relies on “good will” trust model? Yes. > I wonder if there exists an authoritative mechanism similar to browser punishing rouge or incompetent CA Not really. Although if you get a reputation for being notoriously problematic, the "big boys" - the large networks who are the responsible adults in this game might deny you service or stop accepting your announcements. > I supposed the integrity and the authentication is achieved by implementing and deploying RPKI RPKI doesn't really solve the issue. It validates only the initial announcer, so BGP hijacks can still occur. It would however help reduce hijacks due to mistakes in configuration.
• bandrami 9y ago
  It's better than it used to be. Back in the mid-90s I was a newly-minted network engineer working in my first datacenter and we were all very excited about this new "BGP" technology... Fifteen minutes later, half of Fairfax County is stuck in a routing loop, and we're getting calls from NOCs as far away as London asking us what the f* we're doing to their traffic. That was the wild west: back then, a typo could (and sometimes did) actually take down The Internet. There's more filtering and checking and second-guessing today. But, ultimately, it's based on a web of trust model, you're right, with all the weaknesses that come with that.