Merge pull request #2824 from GOLinux/master

[Translating]20150407 How to secure BGP sessions using authentication on Quagga.md
This commit is contained in:
joeren 2015-05-25 07:53:17 +08:00
commit 24f607c960

View File

@ -1,3 +1,4 @@
Translating by GOLinux!
How to secure BGP sessions using authentication on Quagga
================================================================================
The BGP protocol runs over TCP, and as such, it inherits all the vulnerabilities of a TCP connection. For example, within a BGP session, an attacker may impersonate a legitimate BGP neighbor, and convince the BGP routers on the other end to share their routing information with the attacker. The problem occurs when the attacker advertises and injects bogus routes towards neighboring routers. The unsuspecting neighboring routers may then start sending live traffic towards the attacker, which in most cases goes nowhere and simply gets dropped. Back in 2008, YouTube actually [fell victim][1] to such BGP route poisoning, and suffered major outage on their video service for more than an hour. In a far worse case, if the attacker is savvy enough, they can falsely act as a transparent transit router and sniff the transit traffic for any sensitive data. As you can imagine, this can have far reaching consequences.
@ -82,4 +83,4 @@ via: http://xmodulo.com/bgp-authentication-quagga.html
[a]:http://xmodulo.com/author/sarmed
[1]:http://research.dyn.com/2008/02/pakistan-hijacks-youtube-1/
[2]:http://tools.ietf.org/html/rfc2385
[3]:http://xmodulo.com/centos-bgp-router-quagga.html
[3]:http://xmodulo.com/centos-bgp-router-quagga.html