Topic
RoutingSecurity
All guides filed under this topic, newest first.
Stream of Knowledge
BGP
1. Opening A secure Internet edge is not one feature. It is a sequence of mutually reinforcing controls: explicit import/export policy, cus...
Read the guide →
Stream of Knowledge
BGP
1. Opening A sudden path change can look like a hijack even when the real problem is a customer's accidental transit leak, a stale ROA,...
Read the guide →
Stream of Knowledge
BGP
1. Opening During a volumetric attack, preserving the rest of the network can require intentionally discarding traffic to the attacked dest...
Read the guide →
BGP
1. Opening Routers do not normally crawl the global RPKI repositories themselves. A relying-party validator validates signed objects and ex...
Read the guide →
BGP
1. Opening Traditional route-leak prevention relies on operators correctly encoding business relationships in policy. RFC 9234 adds a machi...
Read the guide →
BGP
1. Opening An eBGP session without an explicit import or export policy can become an accidental trust boundary. RFC 8212 changes that expec...
Read the guide →
BGP
1. Opening Route flap dampening was created to protect networks from unstable prefixes repeatedly appearing and disappearing. History showe...
Read the guide →
BGP
1. Opening Maximum-prefix is one of the simplest controls that can prevent a peer from overwhelming a routing table or accidentally sending...
Read the guide →