Interdomain%20Routing:%20Monitoring%20and%20Modeling

1
Interdomain Routing Monitoring and Modeling

• SRCCS Workshop
• Seoul, Korea
• January 11 2005

Timothy G. Griffin Computer
Laboratory University of Cambridge timothy.griffin
_at_cl.cam.ac.uk http//www.cl.cam.ac.uk/tgg22/
2
Outline

• Routing Forwarding
• BGP Border Gateway Protocol
• PUBLIC BGP data sources
• High volume
• Rich Semantics
• High Variability
• Examples
• A Challenge

3
Architecture of Dynamic Routing
IGP
EGP ( BGP)
AS 1
IGP
IGP Interior Gateway Protocol
Metric based OSPF, IS-IS, RIP,
EIGRP (cisco)
AS 2
EGP Exterior Gateway Protocol
Policy based BGP
The Routing Domain of BGP is the entire Internet
4
Technology of Distributed Routing
Link State
Vectoring

• Topology information is flooded within the
  routing domain
• Best end-to-end paths are computed locally at
  each router.
• Best end-to-end paths determine next-hops.
• Based on minimizing some notion of distance
• Works only if policy is shared and uniform
• Examples OSPF, IS-IS

• Each router knows little about network topology
• Only best next-hops are chosen by each router for
  each destination network.
• Best end-to-end paths result from composition of
  all next-hop choices
• Does not require any notion of distance
• Does not require uniform policies at all routers
• Examples RIP, BGP

5
The Gang of Four
6
Forwarding vs. Routing
7
How Many ASNs are Being Used Today?
Jan 11, 2005
Thanks to Geoff Huston http//www.potaroo.net/
8
Some Korean ASNs
See http//www.cidr-report.org/autnums.html
1237 KREONET-AS-KR Korea Institute of Science
and Technology Information 1704
KAIST-SEOUL-AS-KR Korea Advanced Institute of
Science and Technology 1781 KAIST-DAEJEON-AS-KR
Korea Advanced Institute of Science and
Technology 3559 KORNET-AS-KR Korea
Telecom 3757 ERX-TRAN Korea Telecomm Research
Laboratory 3825 ERX-HANANET Korea Telecomm
Research Center 4040 ERX-KORNET-PS Korea
Telecomm Research Center 4060 ERX-KORNET-DJ
Korea Telecomm Research Center 4666 HNCNET-AS
We are new Internet Service Provider in South
Korea. 4766 KIX Korea Internet Exchange for
"96 World Internet Exposition 4861
GLOBAL-IP-KOREA-AS-AP Global One
Communications 5051 KOLNET-AS-KR Korea Telecom
Hitel 7557 KTNET-AS Korea Trade International
Association 7558 KBS-AS Korean Broadcasting
System 7562 KOTISNET-AS Korea International
Trade Assocication(KITA) 7563 KII-AS Korea
Internet Infrastructure 7564 KAERINET-AS Korea
Atomic Energy Research Institute 7620
IASIAWORKS-AS iAsiaWorks Korea, Ltd 9270
APAN-KR-AS Asia Pacific Advanced Network
Korea(APAN-KR) Consortium 9275 KRICTNET-AS-KR
Korea Research Institute of Chemical
Technology 9452 KUNET-AS Korea University 9454
SUPERNET-AS Korea Telecom ATM service 9455
EDUNET-AS Korea Education Research Information
Service 9488 SNU-AS-KR Seoul National
University 9489 KARINET-AS Korea Aerospace
Research Institute 9494 KOSINET-AS Korea open
system information network 9521 KININET-AS
Korea INstitute of Industry Technology
Information 9526 KOSCOM-AS KOREA SECURITIES
COMPUTER CORP. 9581 HKTI-KR-AS-AP Cable
Wireless Internet Services (Korea) Limited 9640
I-KOREA-AS Internet-Korea 9640 I-KOREA-AS
Internet-Korea 9641 KITEL-AS Korea
InformationTELecommunication system CO. 9643
SIGNGATE-AS Korea Information Certificate
Authority 9693 KFTCCA-AS Korea Financial
Telecommunications Clearings Institute 9698
KDIC Korea Deposit Insurance Corporation 9699
KFB-AS Korea First Bank 9700 KRNIC-AS-KR Korea
Network Information Center 9760 KTIS-AS Korea
Telecom Infomation System Group 9763 AFFIS-AS
Korea Information Center for Agriculture,
Forestry 9766 KSE-AS KOREA STOCK EXCHANGE 9847
KSFC-AS-KR Korea Securities Finance
Corporation 9857 KOGAS-AS-KR KOREA GAS
CORPORATION 9864 KSDNET-AS-KR Korea Securities
Depository 9884 SINGTEL-KR SingTel Korea
Limited 9945 KCACBACKUP-AS-KR Korea
Information Security Agency 9949 HOSEO-AS
HOSEO UNIVERSITY 9959 KOREASTOCKEXCHANGE-AS
KOREA STOCK EXCHANGE 9964 PERSNET Korea
Telecom Freetel 9967 KEBCS-AS Korea Exchange
Bank of Credit Services 9970 KUT-AS Korea
University of Technology and Education
9971 MULTINET-AS KOREA MULTINET INC. 9974
SIGNKOREA-AS KOREA SECURITIES COMPUTER CORP.
BUNDANG CENTER 9976 ICNDP-AS-KR Korea Cable TV
NamIncheon Broadcasting.co.ltd 9979 KEB-AS
KOREA EXCHANGE BANK 10050 EPOSTBANK-AS-KR
Ministry of Information and Communication
Republic of Korea 10055 KORAIL-AS-KR Korean
National Railroad Administration 10059 KIDC-AS
Korea Internet Data Center 10063 KMA-AS Korea
Meteorological Administration 10064
INFOSECKOREA-AS InfosecKorea, Inc. 10064
INFOSECKOREA-AS InfosecKorea, Inc. 10070
KRISS-AS Korea Research Institute of Standards
and Science 10073 KNOU-AS Korea National Open
University 10088 KWANGWOON-UNIV-AS-AP
KWANGWOON University in Seoul, Korea 10157
YAHOO-AS-KR Yahoo! Korea, Corp. 10158
CIGNAL-AS Cignal Global Communications Korea,
Inc. 10161 KITC-AS Korea Investment Trust
Management Securities Co.,LTD 10162 KIT-AS
Korea Internet Telecom 10165 CUSTOMS-AS-KR
KOREA CUSTOMS SERVICE 10166 KOWANET-AS-KR
Korea Water Resources Corporation 10168
NSKFB-AS Korea First Bank 10170 BOKNET-AS The
Bank of Korea 10178 KBTUS-AS Korea Baptist
Theological University/Seminary 10183
NUCH-AS-KR The Korean National University of
Cultural Heritage 10184 KFCCC-AS Korean
Federation of Community Credit Cooperatives 10187
KISDI-AS-KR Korea Information Society
Developement Institute 10194
KOREAFUTURES-AS-KR koreafutures inc 10194
KOREAFUTURES-AS-KR koreafutures inc 10201
CWNK-KR-AS-AP Cable Wireless Network
Korea. 17576 KOSEF-AS-KR Korea Science and
Engineering Foundation 17579 KREONET2-AS-KR
Korea Institute of Science and Technology
Information 17585 PPS-AS-KR Public Procurement
Service The Republic of Korea 17590 KGPC-AS-KR
Korea Game Promotion Center 17591 KRFNET-AS-KR
korea Research Foundation 17592 IBK-AS-KR
Industrial Bank of Korea 17595 KINSNET-AS-KR
Korea Institute of Nuclear Safety 17601
KCGF-AS-KR KOREA CREDIT GUARANTEE FUND 17605
WCOM-AS-KR MCI Worldcom Korea 17837 KCP-AS-KR
Korea Cyber Payment Inc 17840 KOREACERT-AS-KR
KECA, Inc. 17852 KOREALIFE-AS-KR
KOREALIFE 17865 SCOURT-AS-KR Supreme Court of
Korea 17866 KISTNET-AS-KR Korea Institute of
Science and Technology 17867 KBINET-AS-KR
KOREA BANKING INSTITUTE 17875 KSDA-AS-KR The
Korea Securities Dealers Association 18023
KOREAMARITIME-UNIV-AS-AP Korea Maritime
University in YoungDoGu DongSamDong Busan,
Korea 18023 KOREAMARITIME-UNIV-AS-AP Korea
Maritime University in YoungDoGu DongSamDong
Busan, Korea 18026 CHEJU-UNIV-AS-AP CHEJU
University in 1,Ara 1(il)-dong, jeju-si JEJU-DO
Korea 18028 GYEONGSANG-UNIV-AS-AP GYEONGSNAG
National University in 900 Gazwadong, JINJU,
Korea 18030 DONGYANG-UNIV-AS-AP Dongyang
Technical College in 62-160 Kochuk-dong, Kuro-gu,
Seoul, Korea 18031 SANGMYUNG-UNIV-AS-AP Sang
Myung University in 7 Hongji-Dong Jongro-Gu,
Seoul Korea 18034 KANGNUNG-UNIV-AS-AP KANGNUNG
University in jibyeundong 123 Kangnung, Kangwon,
Korea 18035 HANSEO-UNIV-AS-AP HANSEO
University in 360, Daegok-Ri, Seosan-Si,
ChungNam, Korea 18038 KNUE-UNIV-AS-AP Korea
National University of Education 18157
CHUNGJU-UNIV-AS-AP CHUNGJU University in 123
Keomdanri Iryoumyun Chungsi, Chungbuk,
korea 18158 CHUNGBUK-UNIV-AS-AP Chungbuk
University in 48 Gasindong Hungduckku Chengju,
Chungbuk, Korea
18161 HANYANG-WOMENS-UNIV-AS-AP Hanyang Womens
college in 17 Hangdang-dong Seongdong-Ku,Seoul,
Korea 18163 JINJU-UNIV-AS-AP Jinju National
University in 150 chilamdong Jinju, Gyeongnam,
Korea 18169 KOREA-CULTURE-CONTENT-AGENCY-AS-AP
KOREA CULTURE CONTENT AGENCY in Seoul 18309
KOVAN-AS-KR Korea VAn Service Co.LTD 18310
VITSSEN-AS-KR Korea cable television Anyang
Broadcasting Corporation 18312 KAMCO-AS-KR
Korea Asset Management COrporation 18325
KORCHRISTUNIV160-AS-KR Korea Christian
University 18340 KORAC-HEALTHSCI1-AS-KR
College of Health Sciences, Korea
University 23552 KORNU-AS-KR Korea Nazarene
University 23560 METLIFEKOREA-AS-KR MetLife
Korea 23560 METLIFEKOREA-AS-KR MetLife
Korea 23664 MONTESSORI-AS-AP Montessori Korea
in Seoul, Korea 23668 KOREA-POLYTECHNIC-UNIV-AS
-AP KOREA POLYTECHNIC University 23714
KEIMYUNG-UNIV-AS-AP KEIMYUNG University in Daegu,
Korea 23716 CHANGWON_COLLEGE-UNIV-AS-AP
CHANGWON_COLLEGE in Changwon-City,
Kengsangnam-Do, Korea 23743 FAREAST-UNIV-AS-AP
FAREAST University, Korea 23759
KMMH-UNIV-AS-AP KEIMYUNG COLLEGE, Korea 23908
IIAC-AS-AP Incheon international Airport Corp in
Incheon, Korea 23971 CHUGYE-UNIV-AS-AP CHUGYE
University For The Arts in Seoul, Korea 23972
ASANMED-AS-AP ASAN Medical Center in Seoul,
Korea 23975 YC-UNIV-AS-AP yonam institute of
digital technology in jinju, South Korea 23980
YOUNGNAM-UNIV-AS-AP YOUNGNAM University in
Gyeongsangbuk-do,Korea 23981 SWC-UNIV-AS-AP
Suwon Women.s College in Kyonggi-Do, Korea 23982
HANKYONG-UNIV-AS-AP HANKYONG National
University in Ansung, Kyonggi-do, Korea 23983
DAEJEON-UNIV-AS-AP Daejeon University in Daejeon
, Korea 23989 DONGGUK-UNIV-AS-AP DONGGUK
University in Kyongju Gyeongsangbuk-do
Korea 29864 KOREA-DAILY Korean Central Daily
News 29864 KOREA-DAILY Korean Central Daily
News
9
How Many Prefixes are Being Routed Today?
Jan 11, 2005
From AS 4637 Reach Network
10
What do I Mean by BGP ?
BGP
RFC 1771

optional extensions RFC 1997 (communities) RFC
2439 (damping) RFC 2796 (reflection) RFC3065
(confederation)

routing policy configuration languages
(vendor-specific)

Current Best Practices in Management of
Interdomain Routing
11
Four Types of BGP Messages

• Open Establish a peering session.
• Keep Alive Handshake at regular intervals.
• Notification Shuts down a peering session.
• Update Announcing new routes or withdrawing
  previously announced routes.

announcement
prefix attributes values
12
BGP Attributes
Value Code
Reference ----- -----------------------------
---- --------- 1 ORIGIN
RFC1771 2 AS_PATH
RFC1771 3 NEXT_HOP
RFC1771 4
MULTI_EXIT_DISC RFC1771 5
LOCAL_PREF RFC1771
6 ATOMIC_AGGREGATE
RFC1771 7 AGGREGATOR
RFC1771 8 COMMUNITY
RFC1997 9 ORIGINATOR_ID
RFC2796 10 CLUSTER_LIST
RFC2796 11 DPA
Chen 12
ADVERTISER RFC1863 13
RCID_PATH / CLUSTER_ID RFC1863
14 MP_REACH_NLRI
RFC2283 15 MP_UNREACH_NLRI
RFC2283 16 EXTENDED
COMMUNITIES Rosen ... 255
reserved for development
Most important attributes
Not all attributes need to be present in every
announcement
From IANA http//www.iana.org/assignments/bgp-par
ameters
13
BGP Route Processing
Open ended programming. Constrain
ed only by vendor configuration language
Apply Policy filter routes tweak attributes
Apply Policy filter routes tweak attributes
Receive BGP Updates
Best Routes
Transmit BGP Updates
Based on Attribute Values
Best Route Selection
Apply Import Policies
Best Route Table
Apply Export Policies
Install forwarding Entries for best Routes.
IP Forwarding Table
14
Routing Example 2
Thanks to Han Zheng
15
Strange Round Trip Times
16
and its routing
C
RBNet
B
A
17
Data Collection GNU Zebra
router
router
BGP sessions
router
Zebra Box
BGP sessions
router
18
Reading the Data
www.mrtd.net
route_btoa translates binary to ASCII
19
RIPE Routing Information Service
http//www.ripe.net/ris
rrc00.ripe.net at RIPE NCC, Amsterdam, collects
default free routing updates from peers. From
October 1999. rrc01.ripe.net at LINX, London.
Collects route updates announced by LINX members.
From July 2000. rrc02.ripe.net at SFINX, Paris.
Collects route updates announced by SFINX members
. From March 2001. rrc03.ripe.net at AMS-IX,
Amsterdam. Collects route updates announced by
AMS-IX members. From January 2001.
rrc04.ripe.net at CIXP, Geneva. Collects route
updates announced by CIXP members. From April
2001. rrc05.ripe.net at VIX, Vienna. Collects
route updates announced by VIX members. From June
2001. rrc06.ripe.net at Otemachi, Japan.
Collects route updates announced by JPIX members.
From August 2001. rrc07.ripe.net in Stockholm,
Sweden. Collects route updates announced by the
NETNOD members. From April 2002. rrc08.ripe.net
at San Jose (CA), USA. Collects route updates
announced by the MAE-WEST members. From May 2002.
rrc09.ripe.net at Zurich, Switzerland. Collected
route updates announced by the TIX members. From
May 2003 to until early Feb 2004. rrc10.ripe.net
at Milan, Italy. Collects route updates announced
by the MIX members. From Nov 2003.
rrc11.ripe.net at New York (NY), USA. Collects
route updates announced by the NYIIX members.
From Feb 2004. rrc12.ripe.net at Frankfurt,
Germany. Collects route updates announced by the
DE-CIX members. From Jul 2004.
20
University of Oregon Route Views Project
http//antc.uoregon.edu/route-views
Participants
AOL (NoVa) 66.185.128.48
through AS1668 APAN (tpr2-tokyo)
203.181.248.242 through AS7660 ATT
(SFO) 192.205.31.33 through AS7018
Abilene (Indiana) 198.32.8.252
through AS11537 Accretive (PAO)
207.246.129.6 through AS11608 Accretive
(SEA) 207.246.129.14 through
AS11608 Army Research Lab 192.12.65.1
through AS13 Broadwing (ADDS)
216.140.14.186 through AS6395 Broadwing
(MAE-EAST) 216.140.8.63 through AS6395
Broadwing (MAE-WEST) 216.140.2.62
through AS6395 CW USA (Santa Clara)
208.172.146.2 through AS3561 COMindico
(AU) 203.194.0.5 through AS9942
Carrier1 (NYC) 212.4.193.253
through AS8918 EBONE (EU)
192.121.154.25 through AS1755 ELI
(MAE-EAST) 208.186.154.36 through AS5650
ELI (MAE-WEST) 208.186.154.35
through AS5650 EPOCH (PAIX)
155.229.0.36 through AS4565 ESnet
(GA) 134.55.20.229 through AS293
France Telecom (NYC) 193.251.128.22
through AS5511 GLOBIX (LINX)
195.66.224.82 through AS4513 GLOBIX (New
York) 209.10.12.28 through AS4513
GLOBIX (Chicago) 209.10.12.125 through
AS4513 GLOBIX (Palo Alto)
209.10.12.156 through AS4513 GT Group Tel
(Toronto,CA) 216.18.63.137 through AS6539
Genuity (Palo Alto) 4.0.4.90
through AS1 GlobalCrossing (PAIX)
208.51.113.253 through AS3549 IAGnet
(Chicago) 204.42.253.253 through AS267
IIJ (Japan) 202.232.1.91
through AS2497 ISC (Palo Alto)
204.152.184.126 through AS3557 Intermedia
(MAE-EAST) 198.32.187.23 through AS2548

JINX (Johannesburg) 196.7.106.72
through AS2905 Jippii
(ESPANIX/Spain) 62.164.11.10 through AS8782
LINX (London) 194.68.130.254
through AS5459 Level3 (Denver)
209.244.2.115 through AS3356 MFN/AboveNet
(MAE-WEST) 207.126.96.1 through AS6461
MFS/MAE-lab (San Jose) 204.29.239.1
through AS6066 Nacamar (Frankfurt)
213.200.87.254 through AS3257 Netrail
(MAE-WEST) 205.215.45.50 through AS4006
Port80 (Stockholm) 217.75.96.60
through AS16150 RCN (PAIX)
207.172.6.221 through AS6079 RCN
(VA) 207.172.6.173 through AS6079
RIPE NCC (Amsterdam) 193.0.0.56
through AS3333 STARTAP (Chicago)
206.220.240.95 through AS10764 Sprint
(Stockton) 144.228.241.81 through AS1239
Telefonica (New York) 213.140.32.144
through AS12956 Teleglobe (London,UK)
195.219.96.239 through AS8297 Teleglobe
(PAIX) 207.45.223.244 through AS6453
Telstra (Sydney,AU) 203.62.252.26
through AS1221 TELUS (Toronto)
66.203.205.62 through AS852 TouchAmerica
() 157.130.182.254 through AS19092
Verio () 129.250.0.11
through AS2914 Verio ()
129.250.0.6 through AS2914 WCI Cable
(Hillboro, OR) 209.161.175.4 through AS14608
Williams (San Francisco) 64.200.199.3
through AS7911 Williams (San Francisco)
64.200.199.4 through AS7911 X0
(Bay Area) 205.158.2.126 through AS2828
Zocalo (Berkeley) 157.22.9.7
through AS715 blackrose.org (Ann Arbor)
204.212.44.131 through AS234 netINS
(Des Moines) 167.142.3.6 through AS5056
Many streams since 2001
21
SNU Routes
SNU AS9488
TABLE_DUMP1103846404B195.66.224.1382914147.4
6.0.0/162914 4766 4766 9488 9488
9488IGP195.66.224.13802962914410NAG TABLE
_DUMP1103846404B195.66.226.1382914147.46.0.0/
162914 4766 4766 9488 9488 9488IGP195.66.226.13
802962914410NAG TABLE_DUMP1103846404B195
.66.224.908342147.46.0.0/168342 702 701 3786
3786 9488 9488 9488IGP195.66.224.9000NAG T
ABLE_DUMP1103846404B195.66.224.835511147.46.0
.0/165511 3356 4766 9488 9488 9488IGP195.66.224
.8300NAG TABLE_DUMP1103846404B195.66.224.
9913237147.46.0.0/1613237 4766 9488 9488
9488IGP195.66.224.147001323740044
1323746441NAG TABLE_DUMP1103846404B195.66.2
24.54286147.46.0.0/16286 4766 9488 9488
9488IGP195.66.224.5400NAG TABLE_DUMP1103
846404B195.66.224.1382914147.47.0.0/162914
4766 4766 9488 9488 9488IGP195.66.224.1380296
2914410NAG TABLE_DUMP1103846404B195.66.226.
1382914147.47.0.0/162914 4766 4766 9488 9488
9488IGP195.66.226.13802962914410NAG TABLE
_DUMP1103846404B195.66.224.908342147.47.0.0/1
68342 702 701 3786 3786 9488 9488
9488IGP195.66.224.9000NAG TABLE_DUMP11038
46404B195.66.224.835511147.47.0.0/165511
3356 4766 9488 9488 9488IGP195.66.224.8300NA
G TABLE_DUMP1103846404B195.66.224.991323714
7.47.0.0/1613237 4766 9488 9488
9488IGP195.66.224.147001323740044
1323746441NAG TABLE_DUMP1103846404B195.66.2
24.54286147.47.0.0/16286 4766 9488 9488
9488IGP195.66.224.5400NAG TABLE_DUMP1103
846409B195.66.224.1382914203.246.119.0/242914
4766 4766 9488 9488 9488IGP195.66.224.1380296
2914410NAG TABLE_DUMP1103846409B195.66.226
.1382914203.246.119.0/242914 4766 4766 9488
9488 9488IGP195.66.226.13802962914410NAG
TABLE_DUMP1103846409B195.66.224.908342203.246
.119.0/248342 702 701 3786 3786 9488 9488
9488IGP195.66.224.9000NAG TABLE_DUMP11038
46409B195.66.224.835511203.246.119.0/245511
3356 4766 9488 9488 9488IGP195.66.224.8300NA
G TABLE_DUMP1103846409B195.66.224.991323720
3.246.119.0/2413237 4766 9488 9488
9488IGP195.66.224.147001323740044
1323746441NAG TABLE_DUMP1103846409B195.66.2
24.54286203.246.119.0/24286 4766 9488 9488
9488IGP195.66.224.5400NAG TABLE_DUMP1103
846410B195.66.224.1382914210.97.140.0/232914
4766 4766 9488 9488 9488IGP195.66.224.1380296
2914410NAG TABLE_DUMP1103846410B195.66.226.
1382914210.97.140.0/232914 4766 4766 9488 9488
9488IGP195.66.226.13802962914410NAG TABLE
_DUMP1103846410B195.66.224.908342210.97.140.0
/238342 702 701 3786 3786 9488 9488
9488IGP195.66.224.9000NAG TABLE_DUMP11038
46410B195.66.224.835511210.97.140.0/235511
3356 4766 9488 9488 9488IGP195.66.224.8300NA
G TABLE_DUMP1103846410B195.66.224.991323721
0.97.140.0/2313237 4766 9488 9488
9488IGP195.66.224.147001323740044
1323746441NAG TABLE_DUMP1103846410B195.66.2
24.54286210.97.140.0/23286 4766 9488 9488
9488IGP195.66.224.5400NAG
Data from rrc01.ripe.net (LINX, London)
December 24, 2004
22
KAIST Routes
AS 1704
TABLE_DUMP1103846404B195.66.224.835511137.68.
0.0/165511 9318 1704IGP195.66.224.8300NAG
TABLE_DUMP1103846404B195.66.224.54286137.68.
0.0/16286 9318 1704IGP195.66.224.5400NAG
TABLE_DUMP1103846404B195.66.224.908342137.68.
0.0/168342 1299 209 9318 1704IGP195.66.224.900
0NAG TABLE_DUMP1103846404B195.66.224.9913
237137.68.0.0/1613237 9318 1704IGP195.66.224.1
76001323740044 1323746441NAG TABLE_DUMP1
103846404B195.66.224.908342143.248.0.0/168342
3292 15412 9318 9318 1781IGP195.66.224.6400
NAG TABLE_DUMP1103846404B195.66.224.8355111
43.248.0.0/165511 9318 1781IGP195.66.224.8300
NAG TABLE_DUMP1103846404B195.66.224.643292
143.248.0.0/163292 15412 9318 9318
1781IGP195.66.224.640032921008
32921905NAG TABLE_DUMP1103846404B195.66.226
.643292143.248.0.0/163292 15412 9318 9318
1781IGP195.66.226.640032921008
32921905NAG TABLE_DUMP1103846404B195.66.224
.9913237143.248.0.0/1613237 9318
1781IGP195.66.224.176001323740044
1323746441NAG TABLE_DUMP1103846404B195.66.2
24.1382914143.248.0.0/162914 4766 9318
1781IGP195.66.224.13803072914410NAG TABLE
_DUMP1103846404B195.66.224.54286143.248.0.0/1
6286 9318 1781IGP195.66.224.5400NAG TABLE
_DUMP1103846404B195.66.226.1382914143.248.0.0
/162914 4766 9318 1781IGP195.66.226.13803072
914410NAG TABLE_DUMP1103846406B195.66.2
24.908342192.249.24.0/248342 3292 15412 9304
9318 1781IGP195.66.224.6400NAG TABLE_DUMP
1103846406B195.66.224.835511192.249.24.0/2455
11 9318 1781IGP195.66.224.8300NAG TABLE_DU
MP1103846406B195.66.224.643292192.249.24.0/24
3292 15412 9304 9318 1781IGP195.66.224.64003
2921008 32921905NAG TABLE_DUMP1103846406B1
95.66.226.643292192.249.24.0/243292 15412 9304
9318 1781IGP195.66.226.640032921008
32921905NAG TABLE_DUMP1103846406B195.66.224
.9913237192.249.24.0/2413237 9318
1781IGP195.66.224.176001323740044
1323746441NAG TABLE_DUMP1103846406B195.66.2
24.1382914192.249.24.0/242914 4766 9318
1781IGP195.66.224.13803072914410NAG TABLE
_DUMP1103846406B195.66.224.54286192.249.24.0/
24286 9318 1781IGP195.66.224.5400NAG TABL
E_DUMP1103846406B195.66.226.1382914192.249.24
.0/242914 4766 9318 1781IGP195.66.226.1380307
2914410NAG TABLE_DUMP1103846406B195.66.2
24.908342192.249.25.0/248342 702 701 1239 9318
1781IGP195.66.224.9000NAG TABLE_DUMP11038
46406B195.66.224.835511192.249.25.0/245511
9318 1781IGP195.66.224.8300NAG TABLE_DUMP
1103846406B195.66.224.9913237192.249.25.0/241
3237 9318 1781IGP195.66.224.176001323740044
1323746441NAG TABLE_DUMP1103846406B195.66.2
24.1382914192.249.25.0/242914 4766 9318
1781IGP195.66.224.13803072914410NAG TABLE
_DUMP1103846406B195.66.224.54286192.249.25.0/
24286 9318 1781IGP195.66.224.5400NAG TABL
E_DUMP1103846406B195.66.226.1382914192.249.25
.0/242914 4766 9318 1781IGP195.66.226.1380307
2914410NAG
AS 1781
23
A Picture of AS 1237KREONET-AS-KR Korea
Institute of Science and Technology Information
13237
209
5511
2914
286
209 ASN-QWEST Qwest 286 AS286 KPN
Eurorings Backbone AS 1237 KREONET-AS-KR
Korea Institute of Science and
Technology Information 2914 VERIO Verio,
Inc. 2516 KDDI KDDI CORPORATION 3608
KIX-AS-KR National
Computerization Agency 5511 OPENTRANSIT
France Telecom 3786 ERX-DACOMNET DACOM
Corporation 4766 KIX Korea Internet Exchange
for "96 World Internet
Exposition 7564 KAERINET-AS Korea Atomic
Energy Research Institute 9489
KARINET-AS Korea Aerospace
Research Institute 9949 HOSEO-AS HOSEO
UNIVERSITY 9860 TMCNET-AS TongMyong College
9982 PAICHAI-AS PAICHAI UNIVERSITY 9870
DEUNET-AS DONG-EUI UNIVERSITY 10063 KMA-AS
Korea Meteorological Administration 13237
LAMBDANET-AS LambdaNet AS for
European Operations
701
4766
2516
3786
7018
3608
1237
9949
9489
9870
9860
7564
10063
9982
24
BGP Operations Hard State Protocol
Establish session on TCP port 179
AS1
BGP session
Exchange all active routes
AS2
While connection is ALIVE exchange route UPDATE
messages
Exchange incremental updates
25
A few AS 1237 updates
BGP4MP1103885081A195.66.226.1382914221.158.7
3.0/242914 4766 4766 3608 1237
17576IGP195.66.226.13802962914410NAG BGP4
MP1103885081A195.66.226.1382914221.158.73.0/2
42914 4766 3608 1237 17576IGP195.66.226.13803
072914410NAG BGP4MP1103885106W195.66.226.1
382914221.158.73.0/24 BGP4MP1103896978A195.66
.226.1382914221.158.73.0/242914 4766 4766
17576IGP195.66.226.13802962914410NAG B
GP4MP1103885081A195.66.226.1382914203.253.232
.0/242914 4766 4766 3608 1237 17576IGP195.66.22
6.13802962914410NAG BGP4MP1103885081A195
.66.226.1382914203.253.232.0/242914 4766 3608
1237 17576IGP195.66.226.13803072914410NAG
BGP4MP1103885106W195.66.226.1382914203.253.2
32.0/24 BGP4MP1103896978A195.66.226.138291420
3.253.232.0/242914 4766 4766 17576IGP195.66.226
.13802962914410NAG
26
BGP Update Streams
Data from rrc01.ripe.net (LINX, London)
27
A Closer Look
28
High Variability
29
A Closer Look
30
1000 Second Bins
31
Look At BGP Table Size
32
A Closer Look
33
Another Example Christmas Eve!
34
A Closer Look
35
High Variability, Again
36
1000 Second Bins
37
And Table Size
38
SQL Slammer from Route-Views
39
A Challenge
Develop rigorous models for

• Generation of BGP updates
• Propagation of BGP updates
• BGP observations

MUST BE EXTERNALLY AND INTERNALLY CONSISTENT!!
40
This will not be easy

• Data is complex
• Implementation matters
• A network of BGP speakers acts like a large
  network of Communicating Finite State Machines
  ---- so is a large finite state transducer
• BGP topology is not known
• BGP policies are secret

41
Implementation Does Matter!
stateless withdraws widely deployed
stateful withdraws widely deployed
Thanks to Abha Ahuja and Craig Labovitz for this
plot.