论文标题

保持社区清洁:探索BGP社区的路由信息​​影响

Keep your Communities Clean: Exploring the Routing Message Impact of BGP Communities

论文作者

Krenc, Thomas, Beverly, Robert, Smaragdakis, Georgios

论文摘要

BGP社区被广泛用于标记前缀聚合,以进行政策,交通工程和Inter-As信号传导。由于个人的努力定义了自己的社区语义,因此许多人盲目地传播了他们不认识的社区。先前的研究表明,当社区未过滤时潜在的安全漏洞。这项工作阐明了社区的第二个意想不到的副作用和宽松的传播:不必要的BGP路由消息的增加。由于其传递性属性,社区属性的变化会在整个已建立的路线中引起更新消息,只是更新社区。我们通过表征与社区(包括过滤时)在受控实验室实验中的多个现实世界中实施的更新有关,包括对社区进行更新的处理。然后,我们检查了两个路线收集器系统中在野外观察到的10年的BGP消息。在2020年,所有公告中约有25%修改了社区属性,但保留了最新公告的道路;另外25%的更新既不是社区也不是道路。使用可预测的信标前缀,我们证明了社区在标签上和在附近的ASES和既不添加过滤社区的邻近ASES上都会增加更新消息。这种效果对于路径探索期间地理位置社区而言是突出的:在一天中,所有独特的社区属性中有63%仅由于全球退出而被揭示。

BGP communities are widely used to tag prefix aggregates for policy, traffic engineering, and inter-AS signaling. Because individual ASes define their own community semantics, many ASes blindly propagate communities they do not recognize. Prior research has shown the potential security vulnerabilities when communities are not filtered. This work sheds light on a second unintended side-effect of communities and permissive propagation: an increase in unnecessary BGP routing messages. Due to its transitive property, a change in the community attribute induces update messages throughout established routes, just updating communities. We ground our work by characterizing the handling of updates with communities, including when filtered, on multiple real-world BGP implementations in controlled laboratory experiments. We then examine 10 years of BGP messages observed in the wild at two route collector systems. In 2020, approximately 25% of all announcements modify the community attribute, but retain the AS path of the most recent announcement; an additional 25% update neither community nor AS path. Using predictable beacon prefixes, we demonstrate that communities lead to an increase in update messages both at the tagging AS and at neighboring ASes that neither add nor filter communities. This effect is prominent for geolocation communities during path exploration: on a single day, 63% of all unique community attributes are revealed exclusively due to global withdrawals.

扫码加入交流群

加入微信交流群

微信交流群二维码

扫码加入学术交流群,获取更多资源