9 - BGP Security/Wedgies

Question 1

Prefix Hijacking

Answer 1

Using BGP to announce malicious routes that are more specific than legit ones. Leads to traffic redirection.

Question 2

RPKI

Answer 2

Resource Public Key Infrastructure.

Question 3

RPKI: What does it do?

Answer 3

Binds AS to IP prefix and allows operator to filter on these.

Question 4

What does BGPSEC do?

In the context of this module

Answer 4

Checks the reported ASPath is the actual path and that packets have not secretly gone somewhere else

Question 5

What is a BGP Wedgie in terms of number of operators and level of knowledge?

Answer 5

Unintended routing that cannot be debugged by one single group of operators due to lack of knowledge.