I feel like I need an ELI5
post
Border Gateway Protocol (BGP) is the routing protocol for the Internet. Much like the post office processing mail, BGP picks the most efficient routes for delivering Internet traffic.
It was a cyber attack. What the fuck is this title?
Can someone explain to me what security issues BGP has? I've never looked into this aspect of networking and I only kinda know what BGP is supposed to be doing.
One option is to hijack a prefix by announcing a more specific one. This should then route traffic to the more specific prefix to your AS. You can then analyse and forward the traffic, attempt to impersonate a server within this range or simply drop the incoming packets.
As the author described, this case might be a bit more tricky, as BGP prefers shorter routes to longer ones. However, it seems that some longer-than-necessary routes were in use.
all 3 comments