4 ms·
What is the barrier of entry for an individual or company to obtain a public ASN and theoretically announce a nefarious route? Would it come down to an irrespo
by moondev 7y ago
What is the barrier of entry for an individual or company to obtain a public ASN and theoretically announce a nefarious route?
Would it come down to an irresponsible ISP blindly trusting the bad router?
It does seem important for not putting this burden on each ISP, just trying to understand the scope of all this.
- ShakataGaNai 7y agoGetting a public ASN is relatively trivial. If you're curious, you can read more about it here: https://www.arin.net/resources/guide/request/ https://www.arin.net/resources/guide/request/ As for whats stopping the announcement of bad routes? Mostly just the ISPs, the big transit providers, and the IX's. The problem isn't the small users. You, as a nefarious individual, are unlikely to be able to cause much real damage. In datacenters where you don't bring your own dedicated transit (expensive), you have to tell them your ASN and IP information so it gets whitelisted. The problem is large players. If China Telecom wants to claim Google's IPs... well the entire world's transit providers may not acknowledge that - but enough will to cause a real problem. More examples: https://en.wikipedia.org/wiki/BGP_hijacking#Public_incidents https://en.wikipedia.org/wiki/BGP_hijacking#Public_incidents
- moondev 7y agoThank you for the detailed reply, exactly what I was looking for and very interesting!