[164864] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: questions regarding prefix hijacking

daemon@ATHENA.MIT.EDU (Saku Ytti)
Wed Aug 7 04:59:34 2013

Date: Wed, 7 Aug 2013 11:58:57 +0300
From: Saku Ytti <saku@ytti.fi>
To: nanog@nanog.org
In-Reply-To: <CAJx5YvFPgJwM_hSVdPhEAc3oOjyiNLGNCi=Zo=pX_WPB8UnwHA@mail.gmail.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

On (2013-08-07 11:20 +0300), Martin T wrote:

> on Internet? Has there been such situations in history? Isn't there a
> method against such hijacking? Or have I misunderstood something and
> this isn't possible?

Certainly practical scenario, but in many cases not needed at all. In most
cases upstream does not do any automatic prefix filter generation, it's
maybe somewhat popular in mid-sized european shops but generally not too
common.

There is active on-going work to secure BGP and you may want to read up on
'RPKI' which is further along that track.

-- 
  ++ytti


home help back first fref pref prev next nref lref last post