ABSTRACT
Although most studies of Internet routing treat each IP address block (or prefix) independently, the relationship between prefixes is important because routers ultimately forward packets based on the "longest-matching prefix." In fact, the most-specific prefix for a given destination address may change over time, as BGP routes are announced and withdrawn. Even if the most-specific route is withdrawn, routers may still be able to deliver packets to the destination using a less-specific route. In this paper, we analyze BGP update messages and Netflow traffic traces from a large ISP to characterize both the changes to the longest-matching prefix over time and the resulting effects on end-to-end reachability of the destination hosts. To drive our analysis, we design and implement an efficient online algorithm for tracking changes in the longest-matching prefix for each IP address. We analyze the BGP message traces to identify the reasons for prefix-match changes, including failures, route flapping, sub-prefix hijacking, and load-balancing policies. Our preliminary analysis of the Netflow data suggests that the relationship between BGP updates and IP reachability is sometimes counterintuitive.
- B. Zhang, V. Kambhampati, M. Lad, D. Massey, and L. Zhang, "Identifying BGP routing table transfers," in Proc. ACM SIGCOMM Workshop on Mining Network Data (MineNet), August 2005. Google ScholarDigital Library
- J. Wu, Z. M. Mao, J. Rexford, and J. Wang, "Finding a needle in a haystack: Pinpointing significant BGP routing changes in an IP network," in Proc. Networked Systems Design and Implementation, May 2005. Google ScholarDigital Library
- Rensys Blog, "Pakistan hijacks YouTube." http://www.renesys.com/blog/2008/02/pakistan_hijacks_youtube_1.shtml.Google Scholar
- N. Duffield, C. Lund, and M. Thorup, "Learn more, sample less: Control of volume and variance in network measurement," IEEE Transactions in Information Theory, vol. 51, no. 5, pp. 1756--1775, 2005. Google ScholarDigital Library
- A. Broido and k. claffy, "Analysis of RouteViews BGP data: Policy atoms," in Proc. Network Resource Data Management Workshop, 2001.Google Scholar
- Y. Afek, O. Ben-Shalom, and A. Bremler-Barr, "On the structure and application of BGP policy atoms," in Proc. Internet Measurement Workshop, pp. 209--214, 2002. Google ScholarDigital Library
- T. Bu, L. Gao, and D. Towsley, "On characterizing BGP routing table growth," Computer Networks, vol. 45, pp. 45--54, May 2004. Google ScholarDigital Library
- X. Meng, Z. Xu, B. Zhang, G. Huston, S. Lu, and L. Zhang, "IPv4 address allocation and BGP routing table evolution," ACM Computer Communication Review, January 2005. Google ScholarDigital Library
- C. Labovitz, A. Ahuja, A. Bose, and F. Jahanian, "Delayed Internet routing convergence," IEEE/ACM Trans. on Networking, vol. 9, pp. 293--306, June 2001. Google ScholarDigital Library
- R. Mahajan, D. Wetherall, and T. Anderson, "Understanding BGP misconfiguration," in Proc. ACM SIGCOMM, August 2002. Google ScholarDigital Library
- J. Rexford, J. Wang, Z. Xiao, and Y. Zhang, "BGP routing stability of popular destinations," in Proc. Internet Measurement Workshop, November 2002. Google ScholarDigital Library
- J. Karlin, S. Forrest, and J. Rexford, "Autonomous security for autonomous systems," Computer Networks, October 2008. Google ScholarDigital Library
- M. Lad, D. Massey, D. Pei, Y. Wu, B. Zhang, and L. Zhang, "PHAS: A prefix hijack alert system," in Proc. USENIX Security Symposium, 2006. Google ScholarDigital Library
- M. Zhang, C. Zhang, V. Pai, L. Peterson, and R. Wang, "PlanetSeer: Internet path failure monitoring and characterization in wide-area services," in Proc. Operating System Design and Implementation, 2004. Google ScholarDigital Library
- N. Feamster, D. Andersen, H. Balakrishnan, and M. F. Kaashoek, "Measuring the effects of Internet path faults on reactive routing," in Proc. ACM SIGMETRICS, 2003. Google ScholarDigital Library
- R. Mahajan, N. Spring, D. Wetherall, and T. Anderson, "User-level path diagnosis," in Proc. Symposium on Operating System Principles, October 2003. Google ScholarDigital Library
- Z. M. Mao, J. Rexford, J. Wang, and R. H. Katz, "Towards an accurate AS-level traceroute tool," in Proc. ACM SIGCOMM, August 2003. Google ScholarDigital Library
- F. Wang, L. Gao, O. Spatscheck, and J. Wang, "STRID: Scalable trigger-based route incidence diagnosis," in Proc. IEEE International Conference on Computer Communications and Networks, August 2008.Google ScholarCross Ref
- P. Huang, A. Feldmann, and W. Willinger, "A non-intrusive, wavelet-based approach to detecting network performance problems," in Proc. Internet Measurement Workshop, November 2001. Google ScholarDigital Library
- V. N. Padmanabhan, L. Qiu, and H. Wang, "Server-based inference of Internet performance," in Proc. IEEE INFOCOM, March 2003.Google Scholar
Index Terms
- Impact of prefix-match changes on IP reachability
Recommendations
Dynamics of hot-potato routing in IP networks
Despite the architectural separation between intradomain and interdomain routing in the Internet, intradomain protocols do influence the path-selection process in the Border Gateway Protocol (BGP). When choosing between multiple equally-good BGP routes, ...
Dynamics of hot-potato routing in IP networks
SIGMETRICS '04/Performance '04: Proceedings of the joint international conference on Measurement and modeling of computer systemsDespite the architectural separation between intradomain and interdomain routing in the Internet, intradomain protocols do influence the path-selection process in the Border Gateway Protocol (BGP). When choosing between multiple equally-good BGP routes, ...
Impact of hot-potato routing changes in IP networks
Despite the architectural separation between intradomain and interdomain routing in the Internet, intradomain protocols do influence the path-selection process in the Border Gateway Protocol (BGP). When choosing between multiple equally-good BGP routes, ...
Comments