IRR Analysis Service
|
|
|
- John Cross
- 6 years ago
- Views:
Transcription
1 UNIVERSITÀ DEGLI STUDI ROMA TRE Dipartimento di Informatica e Automazione IRR Analysis Service Massimo Rimondini Tiziana Refice RIPE 53 Meeting 2 October 2006 Amsterdam, The Netherlands
2 UNIVERSITÀ DEGLI STUDI ROMA TRE Dipartimento di Informatica e Automazione Digging Trustworthy Information out of the IRR: an IRR Analysis Service Massimo Rimondini Tiziana Refice RIPE 53 Meeting 2 October 2006 Amsterdam, The Netherlands
3 UNIVERSITÀ DEGLI STUDI ROMA TRE Dipartimento di Informatica e Automazione An IRR Analysis Service _ that Extracts BGP Peerings from the IRR RIPE 53 Meeting 2 October 2006 Amsterdam, The Netherlands
4 What s the Point with the IRR? Born with the purpose of supporting stable and consistent routing policies A valuable source of information to understand Internet routing BUT Maintained on a voluntary basis Information is often inconsistent and/or out-of of-date Useful information is still there How to extract it? No systematic approach
5 Our Contribution(s) A method to extract BGP peerings (and more) from the IRR An investigation of the constructions used to specify peerings An implementation of the method as an on-line service A proof of effectiveness by comparison with the state of the art A comparison with actual routing data
6 Extracting Peerings is Easy aut-num: AS137 import: from AS20965 action pref=100; from AS1299 action pref=100; accept ANY export: to AS1299 announce AS-GARR changed: source: RIPE
7 Extracting Peerings is Easy aut-num: AS137 import: from AS20965 action pref=100; from AS1299 action pref=100; accept ANY export: to AS1299 announce AS-GARR changed: source: RIPE
8 Extracting Peerings is Easy aut-num: AS137 import: from AS20965 action pref=100; from AS1299 action pref=100; accept ANY export: to AS1299 announce AS-GARR changed: source: RIPE
9 Thank you! Questions?
10 Extracting Peerings is Not That Easy Structured policies aut-num: ASX5 import: { from ASX2:AS-Z2 accept /8; } refine { from ASX1 ASX2 accept /16; } except { from ASX3 accept /24;} export: to ASX1:PRNG-Y1 to ASX1:AS-Z1 except ASX9 announce /24 mp-export: to ASX11 at 2001::1 announce 2001::/48 default: to ASX12 action pref=10 default: to ASX at
11 Extracting Peerings is Not That Easy Structured policies Set objects aut-num: ASX5 import: { from ASX2:AS-Z2 accept /8; } refine { from ASX1 ASX2 accept /16; } except { from ASX3 accept /24;} export: to ASX1:PRNG-Y1 to ASX1:AS-Z1 except ASX9 announce /24 mp-export: to ASX11 at 2001::1 announce 2001::/48 default: to ASX12 action pref=10 default: to ASX at
12 Extracting Peerings is Not That Easy Structured policies Set objects aut-num: ASX5 import: { from ASX2:AS-Z2 accept /8; } refine { from ASX1 ASX2 accept /16; } except { from ASX3 accept /24;} export: to ASX1:PRNG-Y1 to ASX1:AS-Z1 except ASX9 announce /24 mp-export: to ASX11 at 2001::1 announce 2001::/48 default: to ASX12 action pref=10 default: to ASX at Complex expressions
13 Extracting Peerings is Not That Easy Structured policies Set objects aut-num: ASX5 import: { from ASX2:AS-Z2 accept /8; } refine { from ASX1 ASX2 accept /16; } except { from ASX3 accept /24;} export: to ASX1:PRNG-Y1 to ASX1:AS-Z1 except ASX9 announce /24 mp-export: to ASX11 at 2001::1 announce 2001::/48 default: to ASX12 action pref=10 default: to ASX at Complex expressions Multi-protocol extensions
14 Extracting Peerings is Not That Easy Existing tools (e.g., the RIPE Routing Registry Consistency Check) do not deal with these constructions aut-num: ASX5 import: { from ASX2:AS-Z2 accept /8; } refine { from ASX1 ASX2 accept /16; } except { from ASX3 accept /24;} export: to ASX1:PRNG-Y1 to ASX1:AS-Z1 except ASX9 announce /24 mp-export: to ASX11 at 2001::1 announce 2001::/48 default: to ASX12 action pref=10 default: to ASX at
15 Extracting Peerings is Not Easy At All aut-num: AS24336 as-name: DIGITALBANK-JP descr: d-b net Backbone import: from AS17685 accept ANY export: to AS17685 announce AS24336 admin-c: DM210-JP tech-c: DM211-JP notify: mnt-by: MAINT-AS24336 changed: source: RADB aut-num: AS24336 as-name: DIGITALBANK-JP descr: DIGITALBANK, Inc., Regional ISP in Japan country: JP import: from AS17685 action pref=100; accept ANY import: from AS7682 action pref=100; accept ANY export: to AS17685 announce AS24336 export: to AS7682 announce AS24336 admin-c: DM210-AP tech-c: DM211-AP notify: mnt-routes: MAINT-JP-DIGITALBANK mnt-by: MAINT-JP-DIGITALBANK changed: source: APNIC
16 Extracting Peerings is Not Easy At All aut-num: AS24336 as-name: DIGITALBANK-JP descr: d-b net Backbone import: from AS17685 accept ANY export: to AS17685 announce AS24336 admin-c: DM210-JP tech-c: DM211-JP notify: mnt-by: MAINT-AS24336 changed: source: RADB aut-num: AS24336 as-name: DIGITALBANK-JP descr: DIGITALBANK, Inc., Regional ISP in Japan country: JP import: from AS17685 action pref=100; accept ANY import: from AS7682 action pref=100; accept ANY export: to AS17685 announce AS24336 export: to AS7682 announce AS24336 admin-c: DM210-AP tech-c: DM211-AP notify: mnt-routes: MAINT-JP-DIGITALBANK mnt-by: MAINT-JP-DIGITALBANK changed: source: APNIC
17 Extracting Peerings is Not Easy At All aut-num: AS24336 as-name: DIGITALBANK-JP descr: d-b net Backbone import: from AS17685 accept ANY export: to AS17685 announce AS24336 admin-c: DM210-JP tech-c: DM211-JP notify: mnt-by: MAINT-AS24336 changed: source: RADB aut-num: AS24336 as-name: DIGITALBANK-JP descr: DIGITALBANK, Inc., Regional ISP in Japan country: JP import: from AS17685 action pref=100; accept ANY import: from AS7682 action pref=100; accept ANY export: to AS17685 announce AS24336 export: to AS7682 announce AS24336 admin-c: DM210-AP tech-c: DM211-AP notify: mnt-routes: MAINT-JP-DIGITALBANK mnt-by: MAINT-JP-DIGITALBANK changed: source: APNIC
18 Extracting Peerings is Not Easy At All aut-num: AS24336 as-name: DIGITALBANK-JP descr: d-b net Backbone import: from AS17685 accept ANY export: to AS17685 announce AS24336 admin-c: DM210-JP tech-c: DM211-JP notify: mnt-by: MAINT-AS24336 changed: source: RADB aut-num: AS24336 as-name: DIGITALBANK-JP descr: DIGITALBANK, Inc., Regional ISP in Japan country: JP import: from AS17685 action pref=100; accept ANY import: from AS7682 action pref=100; accept ANY export: to AS17685 announce AS24336 export: to AS7682 announce AS24336 admin-c: DM210-AP tech-c: DM211-AP notify: mnt-routes: MAINT-JP-DIGITALBANK mnt-by: MAINT-JP-DIGITALBANK changed: source: APNIC
19 Extracting Peerings is Not Easy At All aut-num: AS24336 as-name: DIGITALBANK-JP descr: d-b net Backbone import: from AS17685 accept ANY export: to AS17685 announce AS24336 admin-c: DM210-JP tech-c: DM211-JP notify: mnt-by: MAINT-AS24336 changed: source: RADB aut-num: AS24336 as-name: DIGITALBANK-JP descr: DIGITALBANK, Inc., Regional ISP in Japan country: JP import: from AS17685 action pref=100; accept ANY import: from AS7682 action pref=100; accept ANY export: to AS17685 announce AS24336 export: to AS7682 announce AS24336 admin-c: DM210-AP tech-c: DM211-AP notify: mnt-routes: MAINT-JP-DIGITALBANK mnt-by: MAINT-JP-DIGITALBANK changed: source: APNIC
20 Extracting Peerings is Not Easy At All aut-num: AS24336 as-name: DIGITALBANK-JP descr: d-b net Backbone import: from AS17685 accept ANY export: to AS17685 announce AS24336 admin-c: DM210-JP tech-c: DM211-JP notify: mnt-by: MAINT-AS24336 changed: source: RADB aut-num: AS24336 as-name: DIGITALBANK-JP descr: DIGITALBANK, Inc., Regional ISP in Japan country: JP import: from AS17685 action pref=100; accept ANY import: from AS7682 action pref=100; accept ANY export: to AS17685 announce AS24336 export: to AS7682 announce AS24336 admin-c: DM210-AP tech-c: DM211-AP notify: mnt-routes: MAINT-JP-DIGITALBANK mnt-by: MAINT-JP-DIGITALBANK changed: source: APNIC
21 Extracting Peerings is Not Easy At All aut-num: AS24336 as-name: DIGITALBANK-JP descr: d-b net Backbone import: from AS17685 accept ANY export: to AS17685 announce AS24336 admin-c: DM210-JP tech-c: DM211-JP notify: mnt-by: MAINT-AS24336 changed: source: RADB aut-num: AS24336 as-name: DIGITALBANK-JP descr: DIGITALBANK, Inc., Regional ISP in Japan country: JP import: from AS17685 action pref=100; accept ANY import: from AS7682 action pref=100; accept ANY export: to AS17685 announce AS24336 export: to AS7682 announce AS24336 admin-c: DM210-AP tech-c: DM211-AP notify: mnt-routes: MAINT-JP-DIGITALBANK mnt-by: MAINT-JP-DIGITALBANK changed: source: APNIC
22 Extracting Peerings is Not Easy At All aut-num: AS24336 as-name: DIGITALBANK-JP descr: d-b net Backbone import: from AS17685 accept ANY export: to AS17685 announce AS24336 admin-c: DM210-JP tech-c: DM211-JP notify: mnt-by: MAINT-AS24336 changed: source: RADB aut-num: AS24336 as-name: DIGITALBANK-JP descr: DIGITALBANK, Inc., Regional ISP in Japan country: JP import: from AS17685 action pref=100; accept ANY import: from AS7682 action pref=100; accept ANY export: to AS17685 announce AS24336 export: to AS7682 announce AS24336 admin-c: DM210-AP tech-c: DM211-AP notify: mnt-routes: MAINT-JP-DIGITALBANK mnt-by: MAINT-JP-DIGITALBANK changed: source: APNIC
23 Extracting Peerings is Not Easy At All aut-num: AS24336 as-name: DIGITALBANK-JP descr: d-b net Backbone import: from AS17685 accept ANY export: to AS17685 announce AS24336 admin-c: DM210-JP tech-c: DM211-JP notify: mnt-by: MAINT-AS24336 changed: source: RADB
24 Extracting Peerings is Not Easy At All aut-num: AS24336 as-name: DIGITALBANK-JP descr: d-b net Backbone import: from AS17685 accept ANY export: to AS17685 announce AS24336 admin-c: DM210-JP tech-c: DM211-JP notify: mnt-by: MAINT-AS24336 changed: source: RADB Identify stubs Look at the last update timestamp Consider highest ranked (i.e., largest) registry
25 An Overview of the Method
26 An Overview of the Method basic info analyzer count of rpsl objects (per type) overlap between registries update rate (per registry)
27 An Overview of the Method basic info analyzer basic info analyzer basic info analyzer
28 An Overview of the Method basic info analyzer basic info analyzer basic info analyzer inter-registry consistency manager
29 An Overview of the Method basic info analyzer basic info analyzer basic info analyzer inter-registry consistency manager RPSL peering specification analyzer usage of rpsl constructions
30 An Overview of the Method basic info analyzer basic info analyzer basic info analyzer inter-registry consistency manager RPSL peering specification analyzer peering classifier
31 From the Method to the On-Line Service... info info basic info analyzer ~40 ~40 mirrored registries both both regional and and local local daily daily snapshots inter-registry consistency manager a run run each each day day RPSL peering specification analyzer also also exploits peval peering classifier
32 The Peering Classifier ASX1 FULL ASX2 aut-num: ASX1 import: from ASX2 accept ASX2 export: to ASX2 announce ASX1 aut-num: ASX2 import: from ASX1 accept ASX1 export: to ASX1 announce ASX2
33 The Peering Classifier ASX1 HALF ASX2 aut-num: ASX1 import: from ASX2 accept ASX2 export: to ASX2 announce ASX1 aut-num: ASX2 import: from ASX1 accept ASX1 export: to ASX1 announce ASX2
34 The Peering Classifier ASX1 HALF_I ASX2 aut-num: ASX1 import: from ASX2 accept ASX2 export: to ASX2 announce ASX1 aut-num: ASX2 import: from ASX1 accept ASX1 export: to ASX1 announce ASX2
35 The Peering Classifier ASX1 HALF_SIDE ASX2 aut-num: ASX1 import: from ASX2 accept ASX2 export: to ASX2 announce ASX1 aut-num: ASX2 import: from ASX1 accept ASX1 export: to ASX1 announce ASX2
36 The Peering Classifier ASX1 HALF_SIDE ASX2 aut-num: ASX1 import: from ASX2 accept ASX2 export: to ASX2 announce ASX1 aut-num: ASX2 import: from ASX1 accept ASX1 export: to ASX1 announce ASX2 Build topologies with different levels of confidence
37 A Look at the Data 68 registries downloaded on 03/31/06 ftp://ftp.ripe.net/ripe/dbase ftp://ftp.radb.net/radb/database Overlapping aut-nums # of aut-nums ripe apnic radb arin verio ripe apnic radb arin verio
38 A Look at the Data 68 registries downloaded on 03/31/06 ftp://ftp.ripe.net/ripe/dbase ftp://ftp.radb.net/radb/database Overlapping aut-nums # of aut-nums ripe apnic radb arin verio ripe apnic radb arin verio
39 A Look at the Data 68 registries downloaded on 03/31/06 ftp://ftp.ripe.net/ripe/dbase ftp://ftp.radb.net/radb/database Overlapping aut-nums # of aut-nums ripe apnic radb arin verio ripe apnic radb arin verio
40 A Look at the Data 68 registries downloaded on 03/31/06 ftp://ftp.ripe.net/ripe/dbase ftp://ftp.radb.net/radb/database Overlapping aut-nums # of aut-nums left after purging ripe apnic radb arin verio ripe % apnic % radb % arin % verio %
41 Extracted Peerings This work RIPE RRCC [1] (RIPE only) [2] (RIPE only) [3] peerings 236, ,521 56,949 70, ,498 [1] P. Mahadevan et al., The Internet AS-Level Topology: Three Data Sources and One Definitive Metric. SIGCOMM Computer Communication Review, [2] B. Zhang et al., Collecting the Internet AS- Level Topology. SIGCOMM Computer Communication Review, [3] G. Siganos et al., Analyzing BGP Policies: Methodology and Tool. INFOCOM 2004.
42 Extracted Peerings peering type HALF_SIDE FULL 1/4_E 1/4_I 3/4_NOT_E 3/4_NOT_I HALF 1/2_I 1/2_E count 143,342 42,599 34,155 13,997 1,373 1, from RIPE only 58.4% 94.6% 7.7% 23.7% 80.3% 82.2% 57.9% 66.7% 47.4%
43 I just don t like figures!!
44 I just don t like figures!!...yet I do like graphs!
45 Timestamp Distribution 10,000 # of RPSL objects Last update timestamp
46 Timestamp Distribution 10,000 RIPE x APNIC + # of RPSL objects Last update timestamp
47 3% 3% Growth APNIC RADB RIPE % of variation in size 0% 0% 05/2006 Snapshot date 09/2006
48 Growth 248,000 ~100 new RPSL objects/day # of RPSL objects 232,000 05/2006 Snapshot date 09/2006
49 Extracted Peerings 270,000 ~200 more peerings/day # of peerings 245,000 05/2006 Snapshot date 09/2006
50 180,000 Extracted Peerings 150,000 HALF_SIDE FULL # of peerings 40,000 05/2006 ~10 FULL peerings/day Snapshot date 09/2006
51 Extracted Peerings 40,000 RIPE RADB APNIC FULL peerings only # of peerings 1, /2006 Snapshot date 09/2006
52 Wanna play?
53 So What? Extracting peerings from the IRR is not trivial yet it s possible A systematic approach An on-line service providing data plots Hints about the health of the IRR
54 IRR vs RIS+ORV BGP RIBs downloaded from RIS and ORV Reference date: 10/07/06 # of peerings Only in Common IRR RIS+ORV 254,660 56, ,506 24,762 32,154 Who is responsible for this?
55 What s in the pot? How many peerings not observable from routing data......are up-to-date?...involve transit ASes?...are between two tier-1? BGP routing policies Estimate consistency of IRR data against actual routing Prevent abnormal routing scenarios
56 Care to Have a Look? Thank you! Questions? G. G. Di Di Battista, T. T. Refice M. M. Rimondini, How to to Extract BGP Peering Information from the the IRR, SIGCOMM, 2006.
Interdomain Routing Policies in the Internet: Massimo Rimondini
UNIVERSITÀ DEGLI STUDI ROMA TRE Dipartimento di Informatica e Automazione Interdomain Routing Policies in the Internet: Inference and Analysis Massimo Rimondini Defense of the PhD in Computer Science and
APNIC Training. Internet Routing Registry (IRR)
APNIC Training Internet Routing Registry (IRR) Objectives To provide an introduction to the APNIC Routing Registry Explain concepts of the global RR Outline the benefits of the APNIC Routing Registry Discuss
APNIC Internet Routing Registry. Tutorial Seoul 19 August 2003
APNIC Internet Routing Registry Tutorial Seoul 19 August 2003 Overview What is an IRR Why use an IRR? RPSL IRR objects Recap attributes of some objects Routing Policy What is routing policy? Why define
Internet Routing Registry Tutorial
Internet Routing Registry Tutorial July 15, 2012, Karachi, Pakistan In conjunction with Presenters Champika Wijayatunga Training Unit Manager, APNIC champika@apnic.net Vivek Nigam Internet Resource Analyst,
Welcome! APNIC Internet Routing Registry Tutorial. In conjunction with SANOG IV
Welcome! APNIC Internet Routing Registry Tutorial 29 July 2004, Kathmandu, Nepal In conjunction with SANOG IV Introduction Presenters PART I Champika Wijayatunga champika@apnic.net PART II Gaurab Raj Upadhaya
TTM AS-level Traceroutes
TTM AS-level Traceroutes Matching IPs to ASes René Wilhelm New Projects Group RIPE NCC 1 Motivation TTM performs frequent traceroutes to find closest IP route for delay measurements
BGP and the Internet
BGP and the Internet Using Communities for Multihoming 1 Multihoming and Communities The BGP community attribute is a very powerful tool for assisting and scaling BGP Multihoming 2 Loadsharing Using Communities
APNIC Internet Routing Registry
APNIC Internet Routing Registry An introduction to the IRR TWNIC Meeting, 3 December 2003 Nurani Nimpuno, APNIC The Internet Routing Registry Global Internet Routing Registry database http://www.irr.net/
Measuring and Visualizing Inter-domain Routing Dynamics with BGPATH
UNIVERSITÀ DEGLI STUDI ROMA TRE Dipartimento di Informatica e Automazione Measuring and Visualizing Inter-domain Routing Dynamics with BGPATH Luca Cittadini Tiziana Refice Alessio Campisano Giuseppe Di
An Analysis of ARIN NetHandles with OriginAS i Data and Analysis of RIR/IRR Registry Data
Network king Progr ram Trus stworthy An Analysis of ARIN NetHandles with OriginAS i Data and Analysis of RIR/IRR Registry Data O. Kim, K. Sriram, O. Borchert, P. Gleichmann, and D. Montgomery Presentation
BGP Multihoming Techniques
BGP Multihoming Techniques Philip Smith , Oakland 2001, Cisco Systems, Inc. All rights reserved. 1 Presentation Slides Available on NANOG Web site www.nanog.org/mtg-0110/smith.html Available
BGP Multihoming Techniques
BGP Multihoming Techniques Philip Smith , Kitakyushu, Japan 2001, Cisco Systems, Inc. All rights reserved. 1 Presentation Slides Available at www.apnic.net/meetings/14/programme/docs/bgp-tutslides-pfs.pdf
RPSL - Practical Tool for ISPs?
RPSL - Practical Tool for ISPs? 14th APNIC Open Policy Meeting Kitakyushu, Japan Andy Linton Agenda Routing Policy What is Routing Policy? Why define one? RPSL What is RPSL? Benefits
Database Update. Paul Palse Database Manager, RIPE NCC
Database Update Paul Palse Database Manager, RIPE NCC Outline Introduction to the Database Group Status of APs and outstanding deliverables Projects completed between RIPE 60 and 61 RIPE Labs publication
RPKI and Routing Security
Presentation September 2015 Yerevan Regional Meeting Routing Security 2 Routing Registry route objects RPKI (Resource Public Key Infrastructure) ROAs (Route Origin Authorisation) What is the Purpose of
Inter-domain routing security and the role of Internet Routing Registries. August 1, 2004 Larry Blunk, Merit Network, Inc.
Inter-domain routing security and the role of Internet Routing Registries IEPG meeting, IETF 60 August 1, 2004 Larry Blunk, ljb@merit.edu, Merit Network, Inc. Overview State of IDR security State of the
APNIC. Database Tutorial. 3 September, Kitakyushu, Japan. 14 th APNIC Open Policy Meeting
APNIC Database Tutorial 3 September, Kitakyushu, Japan 14 th APNIC Open Policy Meeting Introduction Presenters Nurani Nimpuno Training Development Officer nurani@apnic.net Champika Wijayatunga Training
Are We Growing Fast Enough?
IPv6 routing table Introduction 1 Are We Growing Fast Enough? A snapshot of the global IPv6 routing table Gert Döring, SpaceNet AG, Munich, Germany May 5, 2009 RIPE 58, Amsterdam IPv6 routing table Overview
RPSLng. Routing Policy Specification Language - Next Generation
RPSLng Routing Policy Specification Language - Next Generation Copy... Rights This slide set is the ownership of the 6DISS project via its partners The Powerpoint version of this material may be reused
To assist you with debugging problems, this whois query was received from IP Address. Your web client may be behind a web proxy.
APNIC - Query the APNIC Whois Database To assist you with debugging problems, this whois query was received from IP Address [59.90.151.244] Your web client may be behind a web proxy. % APNIC found the
Network Working Group. Category: Informational America On-Line C. Orange RIPE NCC M. Prior Connect C. Alaettinoglu USC/ISI August 1999
Network Working Group Request for Comments: 2650 Category: Informational D. Meyer Cisco Systems J. Schmitz America On-Line C. Orange RIPE NCC M. Prior Connect C. Alaettinoglu USC/ISI August 1999 Using
Registry. NTT Communications. JPNIC IP Committee / JPNIC IRR-Plan Chair. Tomoya Yoshida Topics
Registry NTT Communications JPNIC IP Committee / JPNIC IRR-Plan Chair Tomoya Yoshida Topics Internet Registry (IR) What is the Internet Registry The Role of IR Internet Routing Registry
APNIC Internet Routing Registry. Kuala Lumpur, Malaysia, February 2004 APNIC 17 Open Policy Meeting
APNIC Internet Routing Registry Kuala Lumpur, Malaysia, February 2004 APNIC 17 Open Policy Meeting Introduction Presenters Andy Linton Citylink, New Zealand Miwa Fujii Training Officer
BGP Tutorial Part 3 Multihoming
BGP Tutorial Part 3 Multihoming Philip Smith APRICOT 2003, Taipei February 2003 1 Presentation Slides Slides are available at ftp://ftp-eng.cisco.com/pfs/seminars/apricot02-bgp02.pdf Feel
What s new at the RIPE NCC?
What s new at the RIPE NCC? PLNOG, Kraków, 28 September 2011 Ferenc Csorba Trainer, RIPE NCC ferenc@ripe.net Topics - overview The Registry System IPv4 depletion IPv6 policy update and statistics RIPEstat,
RIPE NCC Status Update
RIPE NCC Status Update IPv4 and more Marco Hogewoning, Trainer IPv4 Run Out IPv4 Distribution IANA 3 February 2011 15 April 2011 AfriNIC ARIN RIPE NCC APNIC LACNIC? 7,000 LIRs End Users 3 Business As Usual
On the importance and pervasiveness of computer networking
26 Computer Networks Giuseppe Di Battista Roma Tre University Massimo Rimondini Roma Tre University 26.1 Introduction................................................... 1 Benefits of Visualizing Computer
BGP Configuration Automation on Edge Routers
BGP Configuration Automation on Edge Routers System and Network Engineering Msc. Research Project Stella Vouteva & Tarcan Turgut Supervisor: Stavros Konstantaras, NLNetLabs Introduction Big Internet Depletion
! Distance vector routing! Link state routing.! Path vector routing! BGP: Border Gateway Protocol! Route aggregation
! Distance vector routing! Link state routing Information Network I Youki Kadobayashi! IGP and EGP Intra-domain routing protocol, inter-domain routing protocol! Path vector routing! BGP: Border Gateway
The RIPE Database & The Internet Routing Registry
The RIPE Database & The Internet Routing Registry A. M. R. Magee RIPE NCC 1 Outline Purpose of the RIPE database Description of Database Objects Querying the Database Creating, Updating and Deleting Objects
Routing(2) Inter-domain Routing
Routing(2) Inter-domain Routing Information Network I Youki Kadobayashi 1 Outline Continued from previous lecture on: Distance vector routing Link state routing IGP and EGP Interior gateway protocol, Exterior
Welcome! 31 August 2004, Nadi, Fiji APNIC 18 Open Policy Meeting. Introduction Presenters. Objectives. APNIC Members Training Course
Welcome APNIC Members Training Course Internet Routing Registry Concept 31 August 2004, Nadi, Fiji APNIC 18 Open Policy Meeting Introduction Presenters Miwa Fujii Training Officer miwa@apnic.net
Routing Security Workshop Internet Routing Registries
Routing Security Workshop Internet Routing Registries Jeff Bartig Senior Interconnection Architect, Internet2 IRR Presentation Overview NANOG 74 Updates IRR Overview IRR Tools Internet2 Participant IRR
Routing Policy Specification Language next generation. 6DEPLOY. IPv6 Deployment and Support
RPSLng Routing Policy Specification Language next generation 6DEPLOY. IPv6 Deployment and Support Copy Rights This slide set is the ownership of the 6DEPLOY project via its partners The Powerpoint version
APNIC Whois Database and use of Incident Response Team (IRT) registration. Terry Manderson APNIC AusCERT 2003
APNIC Whois Database and use of Incident Response Team (IRT) registration Terry Manderson APNIC AusCERT 2003 Contents What is APNIC? The APNIC Whois Database Reporting abuse Invalid contacts IRT object
Have We Reached 1000 Prefixes Yet?
IPv6 routing table Introduction 1 Have We Reached 1000 Prefixes Yet? A snapshot of the global IPv6 routing table Gert Döring, SpaceNet AG, Munich, Germany Oct 11th, 2005 RIPE 51, Amsterdam IPv6 routing
Routing Geoff Huston Chief Scientist, APNIC. #apricot2017
Routing 2016 Geoff Huston Chief Scientist, APNIC #apricot2017 2017 Through the Routing Lens There are very few ways to assemble a single view of the entire Internet The lens of routing is one of the ways
Supporting Notes for the Autonomous System (AS) Number Request Form
Supporting Notes for the Autonomous System (AS) Number Request Form Filiz Yilmaz, Emma Bretherick Laura Cobley Document ID: ripe-335 Date: October 2004 Obsoletes: ripe-228, ripe-279, ripe-305 See also:
BGP Multihoming Techniques
BGP Multihoming Techniques Philip Smith , Salt Lake City, Utah June 2003 1 Preliminaries Presentation has many configuration examples Uses Cisco IOS CLI Aimed at Service Providers Techniques
Internet Routing Registry
APNIC elearning: Internet Routing Registry Issue Date: 02 July 2016 Revision: 1.0 Overview What is Routing Policy IRR Database & Objects Routing Policy Documentation in IRR Database RPSL (Routing Policy
Route Filtering. Types of prefixes in IP core network: Internal Prefixes External prefixes. Downstream customers Internet prefixes
Types of prefixes in IP core network: Internal Prefixes External prefixes Downstream customers Internet prefixes Internal prefixes originated in IP core network Loopback Transport Connect inter-regional
Routing Security. Training Course
Routing Security Training Course Training Services RIPE NCC November 2015 Schedule 09:00-09:30 11:00-11:15 13:00-14:00 15:30-15:45 17:30 Coffee, Tea Break Lunch Break End Routing Security 2 Introductions
BGP Operations and Security. Training Course
BGP Operations and Security Training Course Training Services RIPE NCC December 2017 Schedule 09:00-09:30 11:00-11:15 13:00-14:00 15:30-15:45 17:30 Coffee, Tea Break Lunch Break End BGP Operations and
Analyzing BGP Policies: Methodology and Tool
Analyzing BGP Policies: Methodology and Tool Georgos Siganos Dept. of Computer Science & Engineering University of California, Riverside Riverside, USA siganos@cs.ucr.edu Michalis Faloutsos Dept. of Computer
BGP Multihoming Techniques Philip Smith APRICOT Feb - 3 Mar 2006 Perth, Australia
BGP Multihoming Techniques Philip Smith APRICOT 2006 22 Feb - 3 Mar 2006 Perth, Australia 1 Presentation Slides Available on ftp://ftp-eng.cisco.com /pfs/seminars/apricot2006-bgp-part3.pdf
APNIC Routing Workshop
APNIC Routing Workshop Surabaya, Indonesia 13-15 November, 2013 Proudly Supported by: Presenter Champika Wijayatunga Training Unit Manager, APNIC Champika is responsible for managing its training activities
CS519: Computer Networks. Lecture 4, Part 5: Mar 1, 2004 Internet Routing:
: Computer Networks Lecture 4, Part 5: Mar 1, 2004 Internet Routing: AS s, igp, and BGP As we said earlier, the Internet is composed of Autonomous Systems (ASs) Where each AS is a set of routers, links,
BGP in the Internet Best Current Practices
BGP in the Internet Best Current Practices 1 Recommended IOS Releases Which IOS?? 2 Which IOS? IOS is a feature rich and highly complex router control system ISPs should choose the IOS variant which is
Recommended IOS Releases. BGP in the Internet. Which IOS? Which IOS? 12.2 IOS release images IOS release images is the old mainline train
BGP in the Internet Best Current Practices Recommended IOS Releases Which IOS?? 1 2 Which IOS? Which IOS? IOS is a feature rich and highly complex router control system ISPs should choose the IOS variant
WHOIS Database and MyAPNIC
APNIC elearning: WHOIS Database and MyAPNIC Issue Date: 01/04/2015 Revision: Overview What is the APNIC Database? Resource Registration Object Types Inetnum/Inet6num Objects Person and Role Objects Maintainers
Route Filtering. Types of prefixes in IP core network: Internal Prefixes External prefixes. Downstream customers Internet prefixes
1 Types of prefixes in IP core network: Internal Prefixes External prefixes Downstream customers Internet prefixes 2 Internal prefixes originated in IP core network Loopback Transport Connect inter-regional
On the Evaluation of AS Relationship Inferences
On the Evaluation of AS Relationship Inferences Jianhong Xia Department of Electrical and Computer Engineering University of Massachusetts Amherst, MA 01002 jxia@ecs.umass.edu Lixin Gao Department of Electrical
RIPE NCC Status Update
RIPE NCC Status Update IPv4 and more Marco Hogewoning, Trainer The five RIRs 2 RIPE NCC Service region: Europe, Middle East and parts of Central Asia Supports coordination of Internet operations Not-for-profit
How Complete and Accurate is the Internet Routing Registry (IRR)?
How Complete and Accurate is the Internet Routing Registry (IRR)? Dec 5 th 2011 4th CAIDA-WIDE-CASFI Joint Measurement Workshop Akmal Khan, Hyun-chul Kim, Ted "Taekyoung" Kwon Seoul National University
Copyright (C) The Internet Society (1998). All Rights Reserved.
Network Working Group Request for Comments: 2280 Category: Standards Track C. Alaettinoglu USC/Information Sciences Institute T. Bates Cisco Systems E. Gerich At Home Network D. Karrenberg RIPE D. Meyer
RIPE NCC IPv6 Update. 4th Belgian IPv6 Council Meeting 11 September Nathalie Trenaman
RIPE NCC IPv6 Update 4th Belgian IPv6 Council Meeting 11 September 2013 Nathalie Trenaman Who are we? RIPE NCC Located in Amsterdam Not for profit membership organisation One of five Regional Internet
APNIC s role in stability and security. Adam Gosling Senior Policy Specialist, APNIC 4th APT Cybersecurity Forum, 3-5 December 2013
APNIC s role in stability and security Adam Gosling Senior Policy Specialist, APNIC 4th APT Cybersecurity Forum, 3-5 December 2013 Overview Introducing APNIC Working with LEAs The APNIC Whois Database
The whois Database. Introduction and Usage. Anne Lord & Mirjam Kühne. AfNOG Workshop, 10 May
The whois Database Introduction and Usage Overview What is the whois database? Why use it? Who uses it? Database query process Database update process 2 What is the whois Database? Network Management Database
IRR 101. Job Snijders, DKNOG 8 1 / 35
IRR 101 Job Snijders, DKNOG 8 job@ntt.net 1 / 35 What is this about Just a refresher on how things work today Using RPKI in context of provisioning 2 / 35 Filtering recap 1) Reject RFC 1918 (private) IP
Copyright (C) The Internet Society (1999). All Rights Reserved.
Network Working Group Request for Comments: 2622 Obsoletes: 2280 Category: Standards Track C. Alaettinoglu USC/Information Sciences Institute C. Villamizar Avici Systems E. Gerich At Home Network D. Kessens
LEA Workshop. Champika Wijayatunga & George Kuo, APNIC Wellington, New Zealand 09, May, 2013
LEA Workshop Champika Wijayatunga & George Kuo, APNIC Wellington, New Zealand 09, May, 2013 Agenda Introduction to APNIC Know about APNIC Internet Policy Development How the Internet Policies are developed
Routing in Geoff Huston Chief Scientist, APNIC
Routing in 2016 Geoff Huston Chief Scientist, APNIC Through the Routing Lens There are very few ways to assemble a single view of the entire Internet The lens of routing is one of the ways in which information
Have We Reached 1000 Prefixes Yet?
IPv6 routing table Introduction 1 Have We Reached 1000 Prefixes Yet? A snapshot of the global IPv6 routing table Gert Döring, SpaceNet AG, Munich, Germany May 8th, 2007 RIPE 54, Tallinn, Estonia IPv6 routing
Multi-Lateral Peering Agreement
Version 1.1 July 10, 2002 Multi-Lateral Peering Agreement Parties Definitions Obligations Rules Rights Exclusions Best effort basis Establishment procedure Term and renewal Change procedure Termination
A Hierarchy and Probability-Based Approach for Inferring AS Relationships
A Hierarchy and Probability-Based Approach for Inferring AS Relationships Binbin Liao liaobinbin@nlsde.buaa. edu.cn Hui Zhang hzhang@nlsde.buaa. edu.cn Liandong Liu lld@nlsde.buaa.edu.cn Ke Xu kexu@nlsde.buaa.edu.cn
Networking 101 ISP/IXP Workshops
Networking 101 ISP/IXP Workshops 1 Network Topology and Definitions Definitions and icons Network topologies PoP topologies Interconnections and IXPs IP Addressing Gluing it all together 2 Topologies and
BGP Best Current Practices. Recommended IOS Releases. Which IOS? Which IOS? 12.4 IOS release images IOS release images
BGP Best Current Practices Recommended IOS Releases ISP/IXP Which IOS?? 1 2 Which IOS? Which IOS? IOS is a feature rich and highly complex router control system ISPs should choose the IOS variant which
RIPE Database Training Course
RIPE Database Training Course Exercise Booklet January 2018 Version: 04-04-2018 Table of Contents Preparation for the training course...3 Your database objects...4 Email 1...5 Email 2...6 Email 3...7 Email
BGP BGP. Fredrik Söderquist Michael Silvin
BGP Fredrik Söderquist Michael Silvin 1 Table of Contents Background...3 A quick look at the mechanics...3 Message Types...3 BGP Message Header...3 OPEN Message (Type 1 RFC 1771)...4 UPDATE Message (Type
What comes next? 1000 Prefixes reached!
IPv6 routing table Introduction 1 What comes next? 1000 Prefixes reached! A snapshot of the global IPv6 routing table Gert Döring, SpaceNet AG, Munich, Germany Oct 30, 2008 RIPE 57, Dubai IPv6 routing
BGP Best Current Practices. ISP/IXP Workshops
BGP Best Current Practices ISP/IXP Workshops 1 What is BGP for?? What is an IGP not for? 2 BGP versus OSPF/ISIS Internal Routing Protocols (IGPs) examples are ISIS and OSPF used for carrying infrastructure
BGP Best Current Practices. ISP/IXP Workshops
BGP Best Current Practices ISP/IXP Workshops 1 Configuring BGP Where do we start? 2 IOS Good Practices ISPs should start off with the following BGP commands as a basic template: router bgp 64511 bgp deterministic-med
Evaluating the Benefits of the Locator/Identifier Separation
Evaluating the Benefits of the Locator/Identifier Separation Bruno Quoitin IP Networking Lab Computer Science and Engineering Dept. Université catholique de Louvain, Belgium (bruno.quoitin@uclouvain.be)
CS 640: Introduction to Computer Networks. Intra-domain routing. Inter-domain Routing: Hierarchy. Aditya Akella
CS 640: Introduction to Computer Networks Aditya Akella Lecture 11 - Inter-Domain Routing - BGP (Border Gateway Protocol) Intra-domain routing The Story So Far Routing protocols generate the forwarding
BGP Multihoming Techniques
BGP Multihoming Techniques Philip Smith SANOG 2, Sri Lanka July 2003 1 Presentation Slides Available on ftp://ftp-eng.cisco.com/pfs/seminars/sanog2-multihoming.pdf 2 Preliminaries Presentation
Local Internet Registry Training Course
Local Internet Registry Training Course Exercise Booklet January 2018 Exercise 1: RIPE NCC Access Account RIPE NCC Access enables you to sign into various RIPE NCC services using one password. It is also
APNIC History and Overview
APNIC History and Overview AfriNIC Meeting Cape Town, May 2000 APNIC History and Overview Formation and development Current status Resource status Meetings and coordination Questions APNIC History 1992
BGP and inter-as economic relationships
BGP and inter-as economic relationships E. Gregori 1, A. Improta 2,1, L. Lenzini 2, L. Rossi 1, L. Sani 3 1 Institute of Informatics and Telematics, Italian National Research Council Pisa, Italy 2 Information
AS-CRED: Reputation Service for Trustworthy Inter-domain Routing
AS-CRED: Reputation Service for Trustworthy Inter-domain Routing Krishna Venkatasubramanian Computer and Information Science University of Pennsylvania ONR MURI N00014-07-1-0907 Review Meeting June 10,
A Blueprint for Improving the Robustness of Internet Routing
1 A Blueprint for Improving the Robustness of Internet Routing Georgos Siganos, Michalis Faloutsos Abstract Protecting BGP routing from errors and malice is one of the next big challenges for Internet
An introduction to BGP security
An introduction to BGP security Marco d Itri @rfc1036 Seeweb s.r.l. Albanian Network Operators Group meeting - 14 November 2018 Internet: independent networks exchanging traffic The Internet
Inter-domain Routing. Outline. Border Gateway Protocol
Inter-domain Routing Outline Border Gateway Protocol Internet Structure Original idea CS 640 2 Internet Structure Today CS 640 3 Route Propagation in the Internet Autonomous System (AS) corresponds to
TURNING LEGAL WEBSITE into DDoS TOOL. OWASP Jakarta Tech Day Meetup Kalpin Erlangga Silaen
TURNING LEGAL WEBSITE into DDoS TOOL OWASP Jakarta Tech Day Meetup Kalpin Erlangga Silaen DISCLAIMER Segala cara, tehnik, peragaan serta alat yang digunakan dalam sesi presentasi ini adalah untuk tujuan
APNIC Operations IPv6 Challenges
APNIC Operations IPv6 Challenges Challenges Network/System structure/inheritance Management desires for adoption of IPv6 External parties, provisioning Let s talk about the Operations area Network Technical
EE 122: Inter-domain routing Border Gateway Protocol (BGP)
EE 122: Inter-domain routing Border Gateway Protocol (BGP) Ion Stoica October 2, 2002 (* this presentation is based on Lakshmi Subramanian s slides) Big Picture Large ISP Large ISP St u b D i al - U p
UWho and CRISP. Mark Kosters VeriSign Labs ARIN IX, April 2002
UWho and CRISP Mark Kosters VeriSign Labs, April 2002 1 Apr-2002 UWhat? Universal Whois Uwho is the name of the work VeriSign has committed to in agreement with ICANN (Appendix W.) Formal public consultations
Have we reached a 1000 prefixes yet?
IPv6 routing table Introduction 1 Have we reached a 1000 prefixes yet? A snapshot of the global IPv6 routing table Gert Döring, SpaceNet AG, Munich, Germany Oct 15, 2008 ARIN XXII, Los Angeles, USA presented
Using Resource Certificates Progress Report on the Trial of Resource Certification
Using Resource Certificates Progress Report on the Trial of Resource Certification October 2006 Geoff Huston APNIC From the RIPE Address Policy Mail List 22 25 Sept 06, address-policy-wg@lists.ripe.net
PEERING. A very brief introduction
PEERING A very brief introduction Types of Peering Private Peering Bi-lateral Peering Multi-lateral Peering Private Peering Dedicated circuit between two peers Can use a cross connect within a data centre;
CS 557 Internet Routing Policies
CS 557 Internet Routing Policies On Inferring and Characterizing Internet Routing Policies Feng Wang and Lixin Gao, 2003 Spring 2013 Characterizing Routing Policies Objective: Infer and characterize BGP
Interdomain routing with BGP4 Part 4/5
Interdomain routing with BGP4 Part 4/5 Olivier Bonaventure Department of Computing Science and Engineering Université catholique de Louvain (UCL) Place Sainte-Barbe, 2, B-1348, Louvain-la-Neuve (Belgium)
The real-time Internet routing observatory. Luca Sani RIPE Meeting 77 Amsterdam, NL October 15 th, 2018
The real-time Internet routing observatory Luca Sani RIPE Meeting 77 Amsterdam, NL October 15 th, 2018 Isolario project Objective: foster ASes to share their BGP data The more the ASes, the more the completeness
On the Characteristics of BGP Routes
On the Characteristics of BGP Routes Julien Clément and Kwan-Wu Chin School of Electrical, Computer and Telecommunications Engineering University of Wollongong Northfields Ave, NSW, Australia 2522 {jyc157,
Golden Prefixes IRR Lockdown Job Snijders
Golden Prefixes IRR Lockdown Job Snijders Agenda What s the problem? IRR not ideal A possible solution: Golden prefixes Making the best of IRR: IRR Lockdown Actual Frustrations The Youtube
MANRS How to behave on the internet
MANRS How to behave on the internet Massimiliano Stucchi TOP-IX Meeting January 2017 BGP BGP is based on trust - No built-in validation - Chain of trust is hard to establish - Data scattered over different
Algorithms for the Inference of the Commercial Relationships between Autonomous Systems: Results Analysis and Model Validation
Algorithms for the Inference of the Commercial Relationships between Autonomous Systems: Results Analysis and Model Validation Massimo Rimondini Maurizio Pizzonia Giuseppe Di Battista Maurizio Patrignani
Discovering Interdomain Prefix Propagation using Active Probing
Discovering Interdomain Prefix Propagation using Active Probing lorenzo@ripe.net - colitti@dia.uniroma3.it ISMA 2006 WIT, San Diego, 10 May 2006 http://www.ripe.net 1 The problem ISMA 2006 WIT, San Diego,
Luca Cittadini, Roma Tre University Stefano Vissicchio, UCLouvain Benoit Donnet, Université de Liege
Luca Cittadini, Roma Tre University Stefano Vissicchio, UCLouvain Benoit Donnet, Université de Liege BGP glues the Internet Border Gateway Protocol (BGP) Autonomous System (AS) Some BGP data are public
from BGPlay to ibgplay
from BGPlay to ibgplay graphical inspection of your routing data maurizio pizzonia BGPlay team - compunet@dia.uniroma3.it BGPlay avalable as RIS tool since 2004 graphically shows RIS data shows for a certain
Detecting inconsistencies in INRDB data
Detecting inconsistencies in INRDB data to identify MOAS cases and possible illegitimate Internet resource usage Peter Ruissen System and Network Engineering University of Amsterdam December 11, 2007 1