3 ms·
I know ~nothing about BGP. But couldn't there be some sore of "firewall" that would prevent clearly absurd routes from getting used? Like S-BGP?
by mirimir 7y ago
I know ~nothing about BGP.
But couldn't there be some sore of "firewall" that would prevent clearly absurd routes from getting used? Like S-BGP?
- deleted 7y ago[deleted]
- tomschlick 7y agoRPKI would allow signing of BGP routes so that networks could reject them if they were not signed by the owners. Cloudflare has been pushing it heavily to avoid this kind of crap. https://blog.cloudflare.com/rpki/ https://blog.cloudflare.com/rpki/
- mirimir 7y agoThere's a sibling subthread which says that RPKI wouldn't be enough.[0] Me, I have no clue. And ELI5, what does S-BGP do differently? 0) https://news.ycombinator.com/item?id=20980296 https://news.ycombinator.com/item?id=20980296
- indemnity 7y agoTelia is implementing RPKI too: https://www.teliacarrier.com/Press-room/Press-releases/Telia-Carrier-Takes-Major-Step-to-Improve-the-Integrity-of-the-Internet-Core-.html https://www.teliacarrier.com/Press-room/Press-releases/Telia...