4 ms·
i have long suspected that BGP routes can be altered on-demand to push domestic traffic outside national borders and justify its recording and use by intelligen
by conformal 13y ago
i have long suspected that BGP routes can be altered on-demand to push domestic traffic outside national borders and justify its recording and use by intelligence services.
it is entertaining to see this done in the wild.
- windexh8er 13y agoIt's not that they can be altered - it's that the path can be manipulated so that the path "looks" better. Generally there needs to be some collusion in that regard however since it's oft easy to steer traffic by AS-prepending (making ingress swing across multi-homed AS), but harder to control the egress. If you can announce a relatively concise prefix of traffic you know you want and nobody notices it's pretty easy for this to go unnoticed for a period of time. As the prefix gets smaller that's harder to control however (since more specific routes will generally be installed in the routing table over less specific). That being said it shouldn't be trivial to announce networks you don't own. This is where the people process oft breaks down.