US 11,909,763 B2 · BGP blackhole and hijack mitigation

Abstract

Techniques for mitigating BGP blackholes and hijackings are disclosed herein. The techniques include methods for determining, by a victim autonomous system (AS), that a first AS is associated with a first BGP route that includes the victim AS as the destination or as an AS along the first BGP route to the destination and sending a message to a second AS directing the second AS to refrain from using the first AS to propagate data to the victim AS. The message can include a set of one or more AS numbers to avoid in refraining from using to propagate data to the victim AS, a timestamp, an expiration interval, a signature of the victim AS, and an identifier identifying a certificate to be used to verify the signature. Systems and computer-readable media are also provided.

Claims20

Dependent claims

A method comprising:

determining, by a victim autonomous system (AS), that a first AS is diverting traffic from the victim AS to an unintended destination;
determining, by the victim AS, that the first AS is associated with a first Border Gateway Protocol (BGP) route that includes the victim AS as a destination or as an AS along the first BGP route to the destination;
and
suppressing utilization of the first BGP route in propagating data to the victim AS by sending a message to a second AS to avoid traffic being hijacked by the first AS, the message to the second AS including:
a set of one or more AS numbers to avoid using to propagate data to the victim AS, wherein the set of one or more AS numbers includes the first AS;
a timestamp;
an expiration interval;
a signature of the victim AS;
and
an identifier identifying a certificate for verifying the signature.

7 more elements

Dependencies are inferred from the claim text.

BGP blackhole and hijack mitigation

Life of this patent

BGP blackhole and hijack mitigation

Life of this patent

Abstract

Claims20