Active BGP Probing and large AS-sets

2005-06-09 Thread Lorenzo Colitti
Hi, our announcement on nanog a few months ago of experiments involving BGP updates containing large AS-sets [1] caused a few flames. Now we have an in-depth document with results on the subject and would like to explain what we intended to do. We have presented our techniques at RIPE 50,

Re: Active BGP Probing and large AS-sets

2005-06-09 Thread Lorenzo Colitti
Hannigan, Martin wrote: Yes, but last time you said you were going to use _other peoples_ ASN's to test with and allow these announcements beyond your borders. Is this still the case? The probing AS (call it Z) announces one of its prefixes to the Internet with an AS-path that is not just

Re: Active BGP Probing and large AS-sets

2005-06-09 Thread Randy Bush
Thus, to stop its announcement from being propagated by ASes 1, 2, and 3, an AS (say AS12654) might announce one of its prefixes with an AS-path of 12654 {1,2,3}. won't that prevent 12654's announcements from being received by, as opposed to propagated by, 1, 2, and 3? randy

Re: Active BGP Probing and large AS-sets

2005-06-09 Thread Florian Weimer
* Lorenzo Colitti: So yes, the ASes inserted in the AS-set are operated by others, and yes, the announcements are sent out to the Internet at large. This approach is highly questionable. Any responsible ISP should kick you off the net for announcing AS path containing ASNs without

Re: Active BGP Probing and large AS-sets

2005-06-09 Thread Lorenzo Colitti
Randy Bush wrote: Thus, to stop its announcement from being propagated by ASes 1, 2, and 3, an AS (say AS12654) might announce one of its prefixes with an AS-path of 12654 {1,2,3}. won't that prevent 12654's announcements from being received by, as opposed to propagated by, 1, 2, and 3?

Re: Active BGP Probing and large AS-sets

2005-06-09 Thread Jeroen Massar
On Thu, 2005-06-09 at 16:59 +0200, Florian Weimer wrote: * Lorenzo Colitti: So yes, the ASes inserted in the AS-set are operated by others, and yes, the announcements are sent out to the Internet at large. This approach is highly questionable. Any responsible ISP should kick you off

Re: Active BGP Probing and large AS-sets

2005-06-09 Thread Lorenzo Colitti
Jeroen Massar wrote: And it also makes clear why it didn't pop up in GRH, as when you insert the GRH ASN 8298 it won't be announced to GRH and thus it doesn't get detected and as quite a number of people check only there it can go quite unnoticed in the IPv6 tables...* Actually, we never

Re: Active BGP Probing and large AS-sets

2005-06-09 Thread Joe Abley
On 2005-06-09, at 10:59, Florian Weimer wrote: * Lorenzo Colitti: So yes, the ASes inserted in the AS-set are operated by others, and yes, the announcements are sent out to the Internet at large. This approach is highly questionable. Any responsible ISP should kick you off the net for