PING

DASH sees a large route leak in Singapore


Listen Later

In june of this year, the Dashboard for AS Health or DASH, a service operated by APNIC saw a leak of approximately 260,000 BGP routes from a vantage point in Singapore, and sent alerts to around 90 subscribers to our routing mis-alignment notification service which is part of DASH.


BGP is the state of announcements made and heard worldwide, calculated by every BGP speaker for themselves and although its globally connected and represents “the same” network, not everyone sees all things, as a result of filtering and configuration differences around the globe. BGP also should align with two external information systems, the older Internet Routing Registry (IRR) system which uses a notation called RPSL to represent routing policy data, including the “route” object, and Resource Public Key Infrastructure or RPKI, which represents the origin-AS (in BGP, who originates a given prefix) in a cryptographically signed objected called a ROA. The BGP prefix and origin (the route) should align with whats in an IRR route object and an RPKI ROA, but sometimes these disagree. Thats what DASH is designed to do: tell you when these three information sources fall out of alignment.


I discussed this incident, and the APNIC Information Product family (DASH, a collaboration with RIPE NCC called NetOX, and the delegation statistics portal called REX) with Rafael Cintra, the product manager of these systems, and with Dave Phelan who works in the APNIC Academy and has a background in Network Routing Operations.


You can find the APNIC Information products here: (note that the DASH service needs a MyAPNIC login to be used)


  • https://dash.apnic.net the DASH portal login page (MyAPNIC resource login needed)
  • https://netox.apnic.net NetOX the Network Observatory web service
  • https://rex.apnic.net Resource Explorer: delegation statistics for the world


And you can read about the Information Products family in these blog articles:


  • New Alert Options for DASH
  • Routing Status added to DASH
  • Suspicious Traffic Alerts added to DASH
  • Using DASH to rank economies by suspicious traffic
  • How DASH helps monitor Network Health
  • Worldwide REX
  • Introducing REX a new approach for the internet directory
  • Hands-On with APNIC’s NetOX
...more
View all episodesView all episodes
Download on the App Store

PINGBy APNIC

  • 5
  • 5
  • 5
  • 5
  • 5

5

4 ratings


More shows like PING

View all
Security Now (Audio) by TWiT

Security Now (Audio)

1,976 Listeners

Radiolab by WNYC Studios

Radiolab

43,946 Listeners

Risky Business by Patrick Gray

Risky Business

365 Listeners

Freakonomics Radio by Freakonomics Radio + Stitcher

Freakonomics Radio

32,260 Listeners

Talk Python To Me by Michael Kennedy

Talk Python To Me

590 Listeners

Python Bytes by Michael Kennedy and Brian Okken

Python Bytes

215 Listeners

Click Here by Recorded Future News

Click Here

412 Listeners

Darknet Diaries by Jack Rhysider

Darknet Diaries

7,879 Listeners

IPv6 Buzz by Packet Pushers

IPv6 Buzz

34 Listeners

The Hedge by Russ White

The Hedge

15 Listeners

Signals and Threads by Jane Street

Signals and Threads

72 Listeners

The RIPE Labs Podcast by RIPE Labs Editor

The RIPE Labs Podcast

1 Listeners

Risky Bulletin by risky.biz

Risky Bulletin

43 Listeners

Oxide and Friends by Oxide Computer Company

Oxide and Friends

47 Listeners

The 404 Media Podcast by 404 Media

The 404 Media Podcast

315 Listeners