TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

A Simple BGP: BGP protocol fixed from route leaks

30 pointsby hkr_magover 9 years ago

3 comments

namecastover 9 years ago
Neat idea!<p>Some technical details from clicking through to the github repo for their fork of BIRD, detailing the config and protocol changes you&#x27;d need to make for interoperability:<p>Change in BGP Configuration: In each BGP protocol section you must set a role option. Currently, there are 4 possible values for this option: 1) &quot;provider&quot; - neighbor is your upstream provider; 2) &quot;customer&quot; - neighbor is your customer; 3) &quot;peer&quot; - neighbor is your peer; 4) &quot;internal&quot; - neighbor is part of your AS or company (in case of multiple AS). Without setting a role in BGP protocol section you will receive error message from config parser. Also you could set strict_mode option in BGP protocol section. In this scenario BGP session with your neighbor will be established only if your neighbor also support Roles and corresponding Role is correct.<p>BGP Protocol modification: There are two main changes in BGP protocol behaviour: 1. BGP Update modification: to routes that were learned from upstreams or peers add special non-transitive attribute “Local Announce” (BGP Path attribute code 19). On links with upstreams and peers filter out routes with determined attribute; 2. BGP Open modification: to OPEN messages add new capability option &quot;Role&quot; (Capability code 38), in which broadcast value of Role configuration option. Establish connection only if speaker and its neighbor have appropriate pair of Roles: (provider, customer), (customer, provider), (peer, peer), (internal, internal).
mattzitoover 9 years ago
Shouldn&#x27;t this be something that&#x27;s proposed and implemented by the IETF, since BGP is an IETF standard?<p><a href="http:&#x2F;&#x2F;datatracker.ietf.org&#x2F;wg&#x2F;idr&#x2F;charter&#x2F;" rel="nofollow">http:&#x2F;&#x2F;datatracker.ietf.org&#x2F;wg&#x2F;idr&#x2F;charter&#x2F;</a>
评论 #10699283 未加载
melanor9over 9 years ago
Hi guys,<p>I am one of the guys responsible for this development. We do mean to (at least) try to do draft with IETF. We do realize that IETF process might feel funny and painful, but running the bgp the way it is even more painful.<p>Sort of trying to scratch our own itch..... Wish us some luck, we will need it in quantities.