Can someone explain to me what security issues BGP has? I've never looked into this aspect of networking and I only kinda know what BGP is supposed to be doing.
One option is to hijack a prefix by announcing a more specific one.
This should then route traffic to the more specific prefix to your AS.
You can then analyse and forward the traffic, attempt to impersonate a server within this range or simply drop the incoming packets.
As the author described, this case might be a bit more tricky, as BGP prefers shorter routes to longer ones. However, it seems that some longer-than-necessary routes were in use.
2 Comments
drkt_@lemmy.dbzer0.com · 1 pts · 226d
Can someone explain to me what security issues BGP has? I've never looked into this aspect of networking and I only kinda know what BGP is supposed to be doing.
jane232@discuss.tchncs.de · 2 pts · 226d
One option is to hijack a prefix by announcing a more specific one. This should then route traffic to the more specific prefix to your AS. You can then analyse and forward the traffic, attempt to impersonate a server within this range or simply drop the incoming packets.
As the author described, this case might be a bit more tricky, as BGP prefers shorter routes to longer ones. However, it seems that some longer-than-necessary routes were in use.