PING

DASH sees a large route leak in Singapore


Listen Later

In june of this year, the Dashboard for AS Health or DASH, a service operated by APNIC saw a leak of approximately 260,000 BGP routes from a vantage point in Singapore, and sent alerts to around 90 subscribers to our routing mis-alignment notification service which is part of DASH.


BGP is the state of announcements made and heard worldwide, calculated by every BGP speaker for themselves and although its globally connected and represents “the same” network, not everyone sees all things, as a result of filtering and configuration differences around the globe. BGP also should align with two external information systems, the older Internet Routing Registry (IRR) system which uses a notation called RPSL to represent routing policy data, including the “route” object, and Resource Public Key Infrastructure or RPKI, which represents the origin-AS (in BGP, who originates a given prefix) in a cryptographically signed objected called a ROA. The BGP prefix and origin (the route) should align with whats in an IRR route object and an RPKI ROA, but sometimes these disagree. Thats what DASH is designed to do: tell you when these three information sources fall out of alignment.


I discussed this incident, and the APNIC Information Product family (DASH, a collaboration with RIPE NCC called NetOX, and the delegation statistics portal called REX) with Rafael Cintra, the product manager of these systems, and with Dave Phelan who works in the APNIC Academy and has a background in Network Routing Operations.


You can find the APNIC Information products here: (note that the DASH service needs a MyAPNIC login to be used)


  • https://dash.apnic.net the DASH portal login page (MyAPNIC resource login needed)
  • https://netox.apnic.net NetOX the Network Observatory web service
  • https://rex.apnic.net Resource Explorer: delegation statistics for the world


And you can read about the Information Products family in these blog articles:


  • New Alert Options for DASH
  • Routing Status added to DASH
  • Suspicious Traffic Alerts added to DASH
  • Using DASH to rank economies by suspicious traffic
  • How DASH helps monitor Network Health
  • Worldwide REX
  • Introducing REX a new approach for the internet directory
  • Hands-On with APNIC’s NetOX
...more
View all episodesView all episodes
Download on the App Store

PINGBy APNIC

  • 5
  • 5
  • 5
  • 5
  • 5

5

4 ratings


More shows like PING

View all
Security Now (Audio) by TWiT

Security Now (Audio)

1,963 Listeners

Radiolab by WNYC Studios

Radiolab

43,833 Listeners

Risky Business by Patrick Gray

Risky Business

361 Listeners

The Amp Hour Electronics Podcast by The Amp Hour (Chris Gammell and David L Jones)

The Amp Hour Electronics Podcast

230 Listeners

The Talk Show With John Gruber by Daring Fireball / John Gruber

The Talk Show With John Gruber

3,115 Listeners

Network Break by Packet Pushers

Network Break

101 Listeners

Darknet Diaries by Jack Rhysider

Darknet Diaries

7,822 Listeners

IPv6 Buzz by Packet Pushers

IPv6 Buzz

33 Listeners

The Hedge by Russ White

The Hedge

15 Listeners

Ctrl+Alt+Azure by Tobias Zimmergren, Jussi Roine

Ctrl+Alt+Azure

12 Listeners

The Art of Network Engineering by Andy and friends

The Art of Network Engineering

81 Listeners

Flyvende tallerken by DR

Flyvende tallerken

31 Listeners

The Weekly Show with Jon Stewart by Comedy Central

The Weekly Show with Jon Stewart

10,200 Listeners

Risky Bulletin by risky.biz

Risky Bulletin

33 Listeners

Oxide and Friends by Oxide Computer Company

Oxide and Friends

47 Listeners