Plenary - Main Room (Tue, 14:00)
This is a draft agenda: changes are still being made.
RFC 7454 on BGP operations and security recommends that network operators restrict access to TCP port 179, which routers use to receive reachability messages from their peers. However, we identify 141,313 IP addresses that accept TCP connections and exchange OPEN messages, corresponding to 20,432 routers across 4,194 Autonomous Systems (ASes). This work presents a detailed insight into how we identified such routers, ASes, and routers' deployment roles as border and internal routers. Using an …
Mobile operators, ISPs, and IXPs run passive measurements for engineering, which can also be used as complementary vantage points on how society behaves online: mobility, application consumption, disruptions, and how all of these vary across space and time. The community already reads major events off this infrastructure, i.e., shutdowns, cable cuts, and wartime rerouting, through RIPE RIS and Atlas, IODA, and OONI. We argue that the same passive vantage reaches subtler social signals, such as…
Operating a global backbone connecting dozens of data centers requires strict enforcement of which prefixes are allowed to cross domain boundaries. A single misconfiguration — a wrong BGP community tag or an unregistered prefix — can cascade into widespread service disruption across multiple network domains.
This talk presents our journey building a multi-layered defence system against routing domain violations at scale. After a major routing incident exposed gaps in our boundary protection, we…