• Routing Security

    Prefix filtering and validation in a Route Server infrastructure

    Route Servers (RS) are currently a critical piece of infrastructure in all the most important IXPs worldwide. This is especially true for those environments where a huge number of peers exists (often more than a hundred). The main role of RSes is to facilitate interconnection between multiple routers. They are a value-added service offered by IXPs and a quick shortcut to full operational status for new members. We could also describe the RS as an “enabling” service, a real “accelerator” of peering. It replaces the configuration of n bilateral peering sessions with a single BGP session by bringing several positive aspects: it allows to receive most of the IPv4 /…

  • Namex IRRHound
    Routing Security

    Hunting Routing Resources around the World

    Following the progressive exhaustion of IPv4 address space, we observed a parallel growth in commercial trading of available IPv4 addresses which led to a global redistribution of address blocks from their original “birthplace”. Such is the case of address blocks that had been originally allocated by a given Regional Internet Registry (RIR) – say ARIN, for example – but were then sold to a company that started to use and announce them in a completely different region – say RIPE. While this is perfectly fine and legitimate, it sometimes poses an additional burden on those subjects, namely Internet Exchange Points, that rely on information stored into Internet Routing Registries (IRR)…