Français
3. eBGP session security
This section describes the security mechanisms to be implemented when configuring eBGP sessions, to counter all the risks presented so far. They are part of a set of best practices whose use is recommended.
3.1 Protocol security
3.1.1 Automatic checks of BGP implementations
By default, configuring an eBGP session on a router requires only the following information: router's local AS, router's local IP address, remote router's AS, remote router's IP address. In practice, the router's local...
The Ultimate Scientific and Technical Reference
This article is included in
Networks and Telecommunications
This offer includes:
Knowledge Base
Updated and enriched with articles validated by our scientific committees
Services
A set of exclusive tools to complement the resources
Practical Path
Operational and didactic, to guarantee the acquisition of transversal skills
Doc & Quiz
Interactive articles with quizzes, for constructive reading
eBGP session security
Routing advertisement filtering
Bibliography
Websites
ANSSI (Agence nationale de la sécurité des systèmes d'information). – "Recommendations and guides" portal: BGP configuration best practice guide. http://www.ssi.gouv.fr/fr/guides-et-bonnes-pratiques/recommandations-et-guides/securite-des-reseaux/le-guide-des-bonnes-pratiques-de-configuration-de-bgp.html
...Standards and norms
- A border gateway protocol 4 (BGP-4), IETF request for comments - RFC 4271 - 2006
- Transmission control protocol, IETF request for comments. - RFC 793 - 1981
- BGP support for four-octet AS number space, IETF request for comments - RFC 4893 - 2007
- Stealing the internet, an internet-scale man in the middle attack, Defcon 16 http://www.defcon.org/images/defcon-16/dc16-presentations/defcon-16-pilosov-kapela.pdf...
Directory
Organizations – Federations – Associations (non-exhaustive list)
Center for Applied Internet Data Analysis (CAIDA) is a collaborative initiative between commercial, governmental and research entities to promote cooperation in the design of network infrastructures and the maintenance of a robust global Internet. http://www.caida.org/home/
...
The Ultimate Scientific and Technical Reference
