From 67bcd640f7b6461278ca30ea26dd3fcf2968e9ca Mon Sep 17 00:00:00 2001 From: joeren Date: Mon, 25 May 2015 07:52:40 +0800 Subject: [PATCH] Update 20150407 How to secure BGP sessions using authentication on Quagga.md --- ...ow to secure BGP sessions using authentication on Quagga.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/sources/tech/20150407 How to secure BGP sessions using authentication on Quagga.md b/sources/tech/20150407 How to secure BGP sessions using authentication on Quagga.md index 020e2277cc..cf2226fac0 100644 --- a/sources/tech/20150407 How to secure BGP sessions using authentication on Quagga.md +++ b/sources/tech/20150407 How to secure BGP sessions using authentication on Quagga.md @@ -1,3 +1,4 @@ +Translating by GOLinux! How to secure BGP sessions using authentication on Quagga ================================================================================ The BGP protocol runs over TCP, and as such, it inherits all the vulnerabilities of a TCP connection. For example, within a BGP session, an attacker may impersonate a legitimate BGP neighbor, and convince the BGP routers on the other end to share their routing information with the attacker. The problem occurs when the attacker advertises and injects bogus routes towards neighboring routers. The unsuspecting neighboring routers may then start sending live traffic towards the attacker, which in most cases goes nowhere and simply gets dropped. Back in 2008, YouTube actually [fell victim][1] to such BGP route poisoning, and suffered major outage on their video service for more than an hour. In a far worse case, if the attacker is savvy enough, they can falsely act as a transparent transit router and sniff the transit traffic for any sensitive data. As you can imagine, this can have far reaching consequences. @@ -82,4 +83,4 @@ via: http://xmodulo.com/bgp-authentication-quagga.html [a]:http://xmodulo.com/author/sarmed [1]:http://research.dyn.com/2008/02/pakistan-hijacks-youtube-1/ [2]:http://tools.ietf.org/html/rfc2385 -[3]:http://xmodulo.com/centos-bgp-router-quagga.html \ No newline at end of file +[3]:http://xmodulo.com/centos-bgp-router-quagga.html