Welcome to DU! The truly grassroots left-of-center political community where regular people, not algorithms, drive the discussions and set the standards. Join the community: Create a free account Support DU (and get rid of ads!): Become a Star Member Latest Breaking News Editorials & Other Articles General Discussion The DU Lounge All Forums Issue Forums Culture Forums Alliance Forums Region Forums Support Forums Help & Search

douglas9

(4,473 posts)
Sun Apr 19, 2020, 02:50 PM Apr 2020

Find out if your ISP implements BGP safely

Cloudflare launched Is BGP safe yet recently that provides Internet users with a test to find out whether their Internet Service Provider (ISP) has implemented a certification system to make BGP safer to use.

All it takes is to open the website and click on the "test your ISP" button to run a quick test that determines whether the ISP has implemented the certification system RPKI.

Border Gateway Protocol (BGP) is a core Internet protocol that is used to determine the route that data takes on the Internet. One of the issues associated with the protocol is that the possibility of hijacking exists. A basic example would be that traffic from a user in the United States would go through servers in Asia to access the New York Times website.

While that is usually caused by server misconfigurations, it is sometimes used on purpose to redirect traffic for malicious or privacy-invading purposes, e.g. to record data.

Cloudflare's test checks if the ISP has implemented Resource Public Key Infrastructure (RPKI) by announcing a legitimate route and making sure the route is invalid. If the site is loaded, the invalid route was accepted by the ISP which in turn means that the ISP has not implemented RPKI.


https://www.ghacks.net/2020/04/19/find-out-if-your-isp-implements-bgp-safely/


6 replies = new reply since forum marked as read
Highlight: NoneDon't highlight anything 5 newestHighlight 5 most recent replies
Find out if your ISP implements BGP safely (Original Post) douglas9 Apr 2020 OP
Thanks. Nice to know I'm safe! WhiteTara Apr 2020 #1
FAIL. facepalm BootinUp Apr 2020 #2
Your reply certainly helped my understanding... ret5hd Apr 2020 #3
I assume he was saying his ISP failed the Border Gateway Protocol test. Make7 Apr 2020 #4
My isp failed. That was it. Nt BootinUp Apr 2020 #5
You Can Now Check If Your ISP Uses Basic Security Measures douglas9 Apr 2020 #6

ret5hd

(21,320 posts)
3. Your reply certainly helped my understanding...
Sun Apr 19, 2020, 03:49 PM
Apr 2020

of the issue.

Anyone else? Did you find this reply enlightening?

Make7

(8,546 posts)
4. I assume he was saying his ISP failed the Border Gateway Protocol test.
Sun Apr 19, 2020, 06:17 PM
Apr 2020

If not then there definitely needed to be an explanation.

douglas9

(4,473 posts)
6. You Can Now Check If Your ISP Uses Basic Security Measures
Mon Apr 20, 2020, 05:46 AM
Apr 2020

FOR MORE THAN an hour at the beginning of April, major sites like Google and Facebook sputtered for large swaths of people. The culprit wasn't a hack or a bug. It was problems with the internet data routing standard known as the Border Gateway Protocol, which had allowed significant amounts of web traffic to take an unexpected detour through a Russian telecom. For Cloudflare CEO Matthew Prince, it was the last straw.

BGP disruptions happen frequently, generally by accident. But BGP can also be hijacked for large-scale spying, data interception, or as a sort of denial of service attack. Just last week, United States Executive Branch agencies moved to block China Telecom from offering services in the US, because of allegedly malicious activity that includes BGP attacks. Companies like Cloudflare sit on the front lines of the BGP blowback. And while the company can't fix the problem directly, it can call out those that are slow to contribute defenses.

On Friday, the company launched Is BGP Safe Yet​, a site that makes it easier for anyone to check whether their internet service provider has added the security protections and filters that can make BGP more stable. Those improvements are most effective with wide adoption from ISPs, content delivery networks like Cloudflare, and other cloud providers. Cloudflare estimates that so far about half of the internet is more protected thanks to heavy hitters like AT&T, the Swedish telecom Telia, and the Japanese telecom NTT adopting BGP improvements. And while Cloudflare says it doesn't seem like the Rostelecom incident was intentional or malicious, Russian telecoms do have a history of suspicious BGP meddling, and similar problems will keep cropping up until the whole industry is on board.

https://www.wired.com/story/cloudflare-bgp-routing-safe-yet/

Latest Discussions»Help & Search»Computer Help and Support»Find out if your ISP impl...