BGP Security for Software Engineers and Network Operators

Architecture, Implementation, and Operations at Production Scale

Introduction: Why BGP Security Is a Systems Problem

Chapter 1: The Internet Routing System and the Security Problem Space

1. The Routing Table: Scale, Structure, and Daily Churn
2. How a Packet Travels: From Source to Destination Through Autonomous Systems
3. The Economic and Political Architecture of the Internet: Customers, Peers, and Transit Providers
4. Why BGP Inherently Lacks Security: Design Trade-offs of the 1990s
5. Real-World Consequences: A Brief History of Major Routing Incidents

Chapter 2: BGP Protocol Mechanics Relevant to Security

1. The BGP Finite State Machine and Session Establishment
2. BGP Message Types: Open, Update, Notification, Keepalive
3. Path Attributes and Their Security-Relevant Properties
4. Route Selection and Path Preference Logic
5. IBGP, EBGP, Confederations, and Route Reflectors

Chapter 3: The BGP Threat Landscape

1. Prefix Hijacking: Origin Attacks and Traffic Redirection
2. Route Leaks: Accidental and Intentional Violation of Routing Policy
3. AS-Path Manipulation: Injection, Shortening, and Splicing
4. Maximal Prefix Announcements and Exhaustion Attacks
5. DoS Against the Routing Control Plane
6. BGP Session Hijacking and TCP Exploitation
7. Malformed Updates, Route Flapping, and Churn Attacks
8. Attribute Manipulation: MED, Local Preference, Communities
9. Real-World Incident Anatomy: A Detailed Case Study

Chapter 4: Routing Trust Architecture and Design Principles

1. The Routing Trust Problem: What Can We Verify and What Must We Trust?
2. Defense in Depth for Internet Routing
3. The Validity Spectrum: From Open to Cryptographically Verified
4. Least Privilege for Prefix Announcements
5. Trust Boundaries Across Organizational Perimeters
6. Balancing Security, Availability, and Operational Complexity

Chapter 5: RPKI Cryptographic Architecture

1. The RPKI Hierarchy: RIRs, LIRs, and End Entities
2. Resource Certificates: Binding Cryptography to IP Addresses and AS Numbers
3. Cryptographic Algorithms and Key Management in RPKI
4. Route Origin Authorizations: Structure, Semantics, and Max-Length Semantics
5. ROA Validation Logic: What “Valid” Actually Means
6. Revocation, CRLs, and Manifest Files

Chapter 6: RPKI Repositories, Validators, and RTR Protocol

1. RPKI Repositories: RIR Architecture and Availability
2. RPKI Validators: How They Build the Trust Anchored View
3. The RTR Protocol: Format, Flow, and Behavior
4. Running a Validator in Production: Resilience and Redundancy
5. Validator Comparison: Routinator, Falcon, BGP Tools RPKI Server
6. RTR Client Integration in Major Router Platforms

Chapter 7: Route Origin Validation: Design, States, and Deployment

1. ROV State Machine: Valid, Invalid, Not-Found Defined
2. Making Routing Decisions Based on ROV State
3. ROV Migration Strategies: From Passive Validation to Enforcement
4. Handling Not-Found: Policy Choices and Operational Realities
5. ROA Coverage Gaps and Their Practical Implications
6. Multi-Validator Architectures for ROV Resilience

Chapter 8: IRR, RPSL, and Legacy Route Object Systems

1. The Internet Routing Registry History and Purpose
2. RPSL Data Model: Routes, Route-Origins, and Route-Set Objects
3. Querying IRRs: Whois Protocol, Query APIs, and Batch Retrieval
4. IRR-Derived Filtering: How to Use IRR Data for Prefix Filters
5. IRR vs RPKI: Complementary Roles in Modern Architectures
6. Common IRR Data Quality Problems and Mitigation Strategies

Chapter 9: ASPA: Autonomous System Provider Authorization

1. The Problem ASPA Solves: Relationship Validation
2. ASPA Data Model: Provider Authorization Records
3. ASPA Cryptographic Structure and RPKI Integration
4. AS-Path Validation with ASPA
5. Deployment Status and Timeline
6. Limitations and Remaining Gaps

Chapter 10: BGPsec: Architectural Vision and Practical Reality

1. The BGPsec Problem Statement: Securing the AS Path
2. BGPsec Protocol: Signed Path Attributes and Key Hierarchies
3. BGPsec vs RPKI/ROV: Different Guarantees, Different Trade-offs
4. Operational Barriers to BGPsec Adoption
5. BGPsec Deployment Status and Pilot Networks
6. BGPsec as a Long-Term Goal vs Short-Term Tool

Chapter 11: BGP Communities and Route Attribute Security

1. BGP Communities: Standard, Extended, and Large Communities
2. Using Communities for Policy Enforcement
3. Security Implications of Community-Based Routing
4. Community Manipulation: Threats and Defenses
5. Vendor-Specific Community Implementations
6. Automating Community-Based Policies

Chapter 12: Prefix Filtering, AS-Path Filtering, and Bogon Defense

1. Inbound Prefix Filtering: Customer, Peer, and Transit Policies
2. Outbound Prefix Filtering and Advertisement Control
3. AS-Path Filtering and Regular Expressions
4. Bogon Filtering: Reserved, Documentation, and Private Ranges
5. Building Filtering Tables from IRR and RPKI Data
6. Policy Design Patterns: Safe Defaults and Least Privilege

Chapter 13: Route Stability Controls: Dampening, Max-Prefix, and Limits

1. BGP Route Dampening: Mechanism, Parameters, and Trade-offs
2. Max-Prefix Limits: Protecting Router Resources
3. Rate Limiting BGP Updates
4. Per-Peer and Per-Customer Quotas
5. Tuning for Stability vs Responsiveness

Chapter 14: Blackholing and Remote-Triggered Blackholing

1. Blackhole Routing: Basic Mechanics
2. Remote-Triggered Blackholing: Design and Operation
3. Standard RTBH: Discard Communities and Null Routes
4. Per-Prefix RTBH and Next-Hop Based Blackholing
5. Integration with DDoS Mitigation Systems
6. Safety and Recovery: Avoiding Accidental Blackholes

Chapter 15: Reference Architectures for Production Environments

1. Transit Provider Architecture: Tier 1, Tier 2, and Regional ISPs
2. Enterprise Multi-Homing with Dual Transit
3. SaaS and Content Provider Architectures
4. Cloud and Data Center Routing Security
5. IXP Route Server Security
6. Managed Service Provider Architectures

Chapter 16: Implementing BGP Security: End-to-End Configurations

1. FRRouting: Complete BGP Security Configuration
2. BIRD: Security-Focused BGP Daemon Setup
3. GoBGP: Programmatic BGP Security
4. Cisco IOS-XR: Production BGP Security
5. Juniper Junos: Enterprise-Grade BGP Security
6. OpenBGPD and Lightweight Deployments

Chapter 17: Automation and Infrastructure-as-Code for Routing Security

1. Configuration Management for BGP Policies
2. Generating Filters from RPKI and IRR Data
3. GitOps for Routing Security
4. Safe Deployment: Testing and Rollback Strategies
5. Automation with Ansible, Terraform, and Custom Tools
6. Preventing Configuration Drift and Unsafe Changes

Chapter 18: Routing Telemetry, Monitoring, and Anomaly Detection

1. Monitoring the Global Routing Table
2. BGP Telemetry: Streaming Updates and Table Dumps
3. Anomaly Detection: Statistical Methods and ML Approaches
4. Route Origin Monitoring and Alerting
5. Building a Routing Security Dashboard
6. Integration with SIEM and SOAR Platforms

Chapter 19: Incident Response: Detecting, Investigating, and Mitigating Routing Attacks

1. Detecting a Routing Incident: Early Warning Signals
2. Investigation Workflow: Tools, Queries, and Data Sources
3. Case Study: Responding to a Prefix Hijack
4. Case Study: Diagnosing a Route Leak
5. Case Study: Invalid ROA Incident Response
6. Communication, Coordination, and Escalation

Chapter 20: Operational Lifecycle and Production Hardening

1. ROA Lifecycle Management at Scale
2. Key and Certificate Rotation for RPKI
3. Change Management for BGP Security Policies
4. Testing and Validation Procedures
5. Capacity Planning for Routing Infrastructure
6. Disasters, Failures, and Recovery Plans
7. Auditing, Compliance, and Security Reviews

Conclusion: Building Routing Security That Works

References