Donate

Securing BGP

Border Gateway Protocol (BGP) helps stitch together the thousands of networks that collectively deliver what we think of as the Internet. Networks use BGP to exchange “reachability information” – networks they know how to get to. Any network that is connected to the Internet eventually relies on BGP to reach other networks.

BGP has worked extremely well and continues to the be a key protocol that makes the Internet work. The problem is, BGP was created long before security was a major concern. BGP assumes that all networks are trustworthy. Technically, there are no built-in security mechanisms to validate that routes are legitimate. In addition, networks are scattered across the globe making the chain of trust difficult to trace, and even if you’re trying to validate information, there’s a lack of reliable resource data.

Every network should help secure the global routing system as a whole. The Internet Society supports Mutually Agreed Norms for Routing Security (MANRS). MANRS is a community initiative of network operators and Internet Exchange Points (IXPs) that creates a baseline of security expectations for routing security. MANRS calls for simple, but concrete actions that will reduce the most common routing threats, including BGP hijacking.

Much of our work is outlined in the Deploy360 Securing BGP Section. A few key resources to get you started:

Securing BGP News

Route Leak Causes Major Google Outage
Route Leak Causes Major Google Outage Thumbnail
Securing Border Gateway Protocol (BGP) 15 November 2018

Route Leak Causes Major Google Outage

Google recently faced a major outage in many parts of the world thanks to a BGP leak. This incident...

U.S. R&E Community Embraces Routing Security
U.S. R&E Community Embraces Routing Security Thumbnail
Securing Border Gateway Protocol (BGP) 14 November 2018

U.S. R&E Community Embraces Routing Security

The Internet Society participated in a Routing Security Workshop that was held during the Internet2 Technology Exchange 2018 on...

‘Action needed’ on global data routing system to disrupt internet hijackers’
SC-Magazine
In the News 7 November 2018

‘Action needed’ on global data routing system to disrupt internet hijackers’

SC Magazine
IETF 103, Day 2: IPv6, NTP, Routing Security & IoT
IETF 103, Day 2: IPv6, NTP, Routing Security & IoT Thumbnail
Securing Border Gateway Protocol (BGP) 5 November 2018

IETF 103, Day 2: IPv6, NTP, Routing Security & IoT

This week is IETF 103 in Bangkok, Thailand, and we’re bringing you daily blog posts highlighting the topics of interest...

GLIF 2018 Held at the Home of Hamlet
GLIF 2018 Held at the Home of Hamlet Thumbnail
Securing Border Gateway Protocol (BGP) 17 October 2018

GLIF 2018 Held at the Home of Hamlet

The 18th Annual Global LambaGrid Workshop (GLIF 2018) was held on 18-21 September 2018 at the Kulturværftet in Helsingør...

Training the next generation of network engineers in Kyrgyzstan
Training the next generation of network engineers in Kyrgyzstan Thumbnail
Securing Border Gateway Protocol (BGP) 11 October 2018

Training the next generation of network engineers in Kyrgyzstan

The Internet Society in conjunction with Packet Clearing House (PCH), our Kyrgyzstan Chapter (ISOC-KG) and the CAREN Project organised...

Load More