PPT-BGP Diagnostic Message

draftraszuk bgp diagnosticmessage00 Robert Raszuk Enke Chen Bruno Decraene IETF 79 November 2010 Beijing China Agenda Goals Encoding Diagnostic message TLVs Goals To enhance current practices for troubleshooting network connectivity problems especially on eBGP boundaries. unmedu Stephanie Forrest University of New Mexico Santa Fe Institute forrestcsunmedu Jennifer Rexford Princeton University jrexcsprincetonedu Abstract The Internets interdomain routing protocol BGP is vulnerable to a number of damaging attacks which Jeffrey Haas, et seq.. jhaas@juniper.net. add-path current status. The base BGP add-path feature is well deployed and interoperable at this point:. Alcatel-Lucent. Cisco. Juniper. (and probably others…). Network Positioning System. RIPE61 . Rome, November 2010. Stefano . Previdi. - . sprevidi@cisco.com. . Distinguished Engineer. Cisco Systems. Cisco NPS Introduction. NPS Introduction/Overview. Service Applicability. Lecture 20: Routing . Security. (Hijacking the Internet for fun and profit!). Based on slides from J. Rexford @ Princeton U. Revised Fall 2014 by P. Gill. BGP. : The Internet’s Routing Protocol (1). IP Routing: BGP Configuration Guide, Cisco IOS XE Release 3S 1 7KH%*3*UDFHIXO6KXWGRZQIHDWXUHUHGXFHVRUHOLPLQDWHVWKHORVVRILQERXQGRU BGP. . Part -. II. CCNP Network Route . BGP. . Part -. II. BGP ROUTE REDISTRIBUTION. Scenario:. R1 R2, R3 in AS 1000 with IP addresses of 192.168.10.1 and loopback 1.1.1.1, 192.168.10.2 & loopback 2.2.2.2 and. Sylvia Ratnasamy. http://inst.eecs.berkeley.edu/~ee122. /. Material thanks to Ion . Stoica. , Scott . Shenker. , Jennifer Rexford, and many other colleagues. BGP: The story so far. Destinations are IP prefixes (12.0.0.0/8). ZONE CODE INS BRANCH BANKURA BGP EE BANKURA BGP BANKURA GOVT POLYTECHNIC ME BANKURA KG KG ENGINEERING INSTITUTE CE BANKURA KG KG ENGINEERING INSTITUTE CST BANKURA KG KG ENGINEERING INSTITUTE EE BANKUR DISTRIBUTED DENIAL OF SERVICE (DDOS) ATTACKS. IPS/IDS. Enterprise or IDC. Service Provider Network. Router. DDoS. attack traffic consumes SP network capacity. DDoS. attacks are launched from compromised systems (bots). Rajiv Papneja - Mohan . Nanduri. Bhavani. . Parise. - Eric . Brendel. Susan Hares . - Jay . Karthik. Background and Current Status. Terminology for Benchmarking BGP Device Convergence in the (RFC 4098) / June 2005. Virtual . PE. . draft-fang-l3vpn-virtual-pe-05. Luyuan Fang, Ed. . David Ward . Rex Fernando . draft-ni-l3vpn-pm-bgp-ext-00. Hui Ni, . Shunwan Zhuan, . Zhenbin Li. Huawei Technologies. IETF 87, Berlin, Germany. Solution Suggested in . [. draft. -dong-l3vpn-pm-framework. ]. Basic Idea: . Create a . some slides borrowed from Jen Rexford (Princeton U). How does BGP work. AS-level (autonomous system, collection of networks under single administrative org). Relationships (usually private info). Customer/provider (customers pay to providers). Danny McPherson . danny@arbor.net. . Shane Amante . shane@level3.net. Lixia Zhang . lixia@cs.ucla.edu. . 2. Agenda. Objective. main focus on intra-domain. outline issues with BGP scalability caused by network path explosion.