Is BGP safe yet?
BGP is the internet's routing protocol but lacks built-in security. RPKI is the key to fixing it, and many major operators are finally stepping up to secure global data paths.
Border Gateway Protocol (BGP) is the postal service of the Internet. It’s responsible for looking at all of the available paths that data could travel and picking the best route.
Unfortunately, it isn’t secure, and there have been some major Internet disruptions as a result. But fortunately there is a way to make it secure.
ISPs and other major Internet players (Sprint and others) would need to implement a certification system, called RPKI.
Displaying major operators and their RPKI status:
| Name | Type | Details | Status | ASN | |---|---|---|---|---| | Lumen | transit | signed + filtering | safe | 3356 | | Arelion (formerly Telia) | transit | signed + filtering | safe | 1299 | | Cogent | transit | signed + filtering | safe | 174 | | NTT | transit | signed + filtering | safe | 2914 | | Sparkle | transit | signed + filtering | safe | 6762 | | Hurricane Electric | transit | signed + filtering | safe | 6939 | | GTT | transit | signed + filtering | safe | 3257 | | TATA | transit | signed + filtering | safe | 6453 | | Zayo | transit | signed + filtering | safe | 6461 | | PCCW | transit | signed + filtering | safe | 3491 | | Vodafone | transit | signed + filtering | safe | 1273 | | Orange | transit | signed + filtering | safe | 5511 | | Comcast | ISP | signed + filtering | safe | 7922 | | AT&T | ISP | signed + filtering | safe | 7018 | | Verizon | ISP | signed + filtering | safe | 701 | | FPT Telecom | ISP | signed + filtering | safe | 18403 | | Microsoft | cloud | signed + filtering | safe | 8075 | | Amazon | cloud | signed + filtering | safe | 16509 | | Cloudflare | cloud | signed + filtering | safe | 13335 | | Google | cloud | signed + filtering | safe | 15169 |
Source: Hacker News
