AS-Path Prepending: there is no rose without a thorn

AS-Path Prepending: there is no rose without a thorn
复制标题

AS-Path Prepending:没有不带刺的玫瑰

DOI:
10.1145/3419394.3423642
复制
发表时间:
2020
期刊:
IMC '20: Proceedings of the ACM Internet Measurement Conference
影响因子:
--
通讯作者:
Barcellos, Marinho
Barcellos, Marinho
中科院分区:
--
文献类型:
--
作者:
Marcos, Pedro;Prehn, Lars;Leal, Lucas;Dainotti, Alberto;Feldmann, Anja;Barcellos, Marinho

文献摘要

参考文献

被引文献

相似文献

入站流量工程 (ITE)——宣布路线的过程,例如最大化收入或最小化拥堵——是自治系统 (AS) 的一项基本任务。 AS 路径预置 (ASPP) 是一种易于使用且众所周知的 ITE 技术,路由手册将其视为影响其他 AS 路由决策的首选替代方案之一。我们观察到,原始 AS 目前占所有 IPv4 前缀的 25% 以上。ASPP 包括膨胀 BGP AS 路径。由于 AS 路径的长度是 BGP 最佳路径选择中的第二个决定因素,因此 ASPP 可以将流量引导至其他路由。尽管简单易用,但运营商和研究人员对 ASPP 的评价却各不相同。一些人质疑其必要性、有效性和可预测性,并表达了安全担忧。受这些不同观点的推动,我们重新审视 ASPP。我们的纵向研究表明,自治系统广泛部署 ASPP,尽管公开声明反对,但其利用率略有增加。我们惊讶地发现大约 6000 个 AS 至少源自一个带有前缀的前缀,但没有实现 ITE 目标。通过主动测量,我们表明 ASPP 作为 ITE 工具的有效性取决于 AS 位置和可用上游数量; ASPP 的安全影响是切实可行的;发现超过 18% 的前缀包含不必要的前缀,这些前缀除了放大现有的路由安全风险之外没有任何明显的目标。我们通过采访 20 家网络运营商来验证我们的发现。
Inbound traffic engineering (ITE)---the process of announcing routes to, e.g., maximize revenue or minimize congestion---is an essential task for Autonomous Systems (ASes). AS Path Prepending (ASPP) is an easy to use and well-known ITE technique that routing manuals show as one of the first alternatives to influence other ASes' routing decisions. We observe that origin ASes currently prepend more than 25% of all IPv4 prefixes.ASPP consists of inflating the BGP AS path. Since the length of the AS path is the second tie-breaker in the BGP best path selection, ASPP can steer traffic to other routes. Despite being simple and easy to use, the appreciation of ASPP among operators and researchers is diverse. Some have questioned its need, effectiveness, and predictability, as well as voiced security concerns. Motivated by these mixed views, we revisit ASPP. Our longitudinal study shows that ASes widely deploy ASPP, and its utilization has slightly increased despite public statements against it. We surprisingly spot roughly 6k ASes originating at least one prefix with prepends that achieve no ITE goal. With active measurements, we show that ASPP effectiveness as an ITE tool depends on the AS location and the number of available upstreams; that ASPP security implications are practical; identify that more than 18% of the prepended prefixes contain unnecessary prepends that achieve no apparent goal other than amplifying existing routing security risks. We validate our findings in interviews with 20 network operators.
显示器
DOI: 10.1007/978-3-658-29782-4_9
发表时间: 2021
期刊: Nonsequential and Distributed Programming with Go
影响因子: --
作者:
C. Maurer
通讯作者: C. Maurer
DOI: 10.17487/rfc7908
发表时间: 2016
期刊: RFC
影响因子: --
作者:
C. Maurer
通讯作者: C. Maurer
BGP 社区:路由中存在更多蠕虫
DOI: 10.1145/3278532.3278557
发表时间: 2018
期刊: Proceedings of the Internet Measurement Conference 2018
影响因子: --
作者:
Florian Streibelt;F. Lichtblau;Robert Beverly;A. Feldmann;C. Pelsser;Georgios Smaragdakis;R. Bush
通讯作者: R. Bush
云流量如何隐藏:亚马逊对等结构的研究
DOI: --
发表时间: 2019
期刊: Proceedings of the ACM SIGCOMM Internet Measurement Conference
影响因子: --
作者:
Bahador Yeganeh, Ramakrishnan Durairajan
通讯作者: Bahador Yeganeh, Ramakrishnan Durairajan
剖析巴西最大的国家公共互联网交换点生态系统
DOI: 10.1007/978-3-319-30505-9_25
发表时间: 2016
期刊: ArXiv
影响因子: --
作者:
Samuel Henrique Bucke Brito;Mateus A. S. Santos;R. Fontes;D. A. L. Perez;Christian Esteve Rothenberg
通讯作者: Christian Esteve Rothenberg