Path Plausibility Algorithms in GoBGP
Nils Höoger, Nils Miro Rodday, Oliver Borchert, Gabi Dreo Rodosek · 2023
BGP is known to be inherently insecure. Many solutions have been proposed, with the RPKI becoming operational in 2011. The RPKI only provides origin validation. This leaves path manipulation attacks and route leaks unsolved. In this demo session, we present our integration of two path plausibility algorithms, namely ASPA and AS-Cones, into the GoBGP routing daemon. We present advantages and drawbacks of both approaches and extend the NIST BGP-SRx software suite with the first implementation of AS-Cones.