Abstract
Network operators use the Border Gateway Protocol (BGP) to control the global visibility of their networks. When withdrawing an IP prefix from the Internet, an origin network sends BGP withdraw messages, which are expected to propagate to all BGP routers that hold an entry for that IP prefix in their routing table. Yet network operators occasionally report issues where routers maintain routes to IP prefixes withdrawn by their origin network. We refer to this problem as BGP zombies and characterize their appearance using RIS BGP beacons, a set of prefixes withdrawn every four hours. Across the 27 monitored beacon prefixes, we observe usually more than one zombie outbreak per day. But their presence is highly volatile, on average a monitored peer misses 1.8% withdraws for an IPv4 beacon (2.7% for IPv6). We also discovered that BGP zombies can propagate to other ASes, for example, zombies in a transit network are inevitably affecting its customer networks. We employ a graph-based semi-supervised machine learning technique to estimate the scope of zombies propagation, and found that most of the observed zombie outbreaks are small (i.e. on average 10% of monitored ASes for IPv4 and 17% for IPv6). We also report some large zombie outbreaks with almost all monitored ASes affected.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Similar content being viewed by others
References
BGP Zombie: Tools and Data. https://github.com/romain-fontugne/BGPzombiesSSL
Isolario Project. https://www.isolario.it/
RIPE NCC, Atlas. https://atlas.ripe.net
RIPE NCC, Current RIS Routing Beacons. https://www.ripe.net/analyse/internet-measurements/routing-information-service-ris/current-ris-routing-beacons
RIPE NCC, RIPEstat: BGP Looking Glass. https://stat.ripe.net/widget/looking-glass
RIPE NCC, RIS Raw Data. https://www.ripe.net/analyse/internet-measurements/routing-information-service-ris/ris-raw-data
The RouteViews Project. http://www.routeviews.org/
AS Hegemony Results (2017). http://ihr.iijlab.net/ihr/hegemony/
Asturiano, V.: The Shape of a BGP Update. https://labs.ripe.net/Members/vastur/the-shape-of-a-bgp-update
Avrachenkov, K., Gonçalves, P., Legout, A., Sokol, M.: Classification of content and users in BitTorrent by semi-supervised learning methods. In: 8th International Wireless Communications and Mobile Computing Conference (IWCMC), pp. 625–630, August 2012
Avrachenkov, K., Mishenin, A., Gonçalves, P., Sokol, M.: Generalized optimization framework for graph-based semi-supervised learning. In: Proceedings of the 2012 SIAM International Conference on Data Mining, pp. 966–974 (2012)
Fontugne, R., Shah, A., Aben, E.: The (thin) bridges of AS connectivity: measuring dependency using AS hegemony. In: Beverly, R., Smaragdakis, G., Feldmann, A. (eds.) PAM 2018. LNCS, vol. 10771, pp. 216–227. Springer, Cham (2018). https://doi.org/10.1007/978-3-319-76481-8_16
Luckie, M., Dhamdhere, A., Huffaker, B., Clark, D., Claffy, K.: bdrmap: Inference of borders between IP networks. In: Proceedings of the 2016 Internet Measurement Conference, IMC 2016, pp. 381–396. ACM, New York (2016)
Mao, Z.M., Bush, R., Griffin, T.G., Roughan, M.: BGP beacons. In: Proceedings of the 3rd ACM SIGCOMM Conference on Internet Measurement, pp. 1–14. ACM (2003)
Marder, A., Smith, J.M.: MAP-IT: multipass accurate passive inferences from traceroute. In: Proceedings of the 2016 Internet Measurement Conference, IMC 2016, pp.397–411. ACM, New York (2016)
Orsini, C., King, A., Giordano, D., Giotsas, V., Dainotti, A.: BGPStream: a software framework for live and historical BGP data analysis. In: IMC, pp. 429–444. ACM (2016)
Sangli, S., Chen, E., Systems, C., Fernando, R., Scudder, J., Rekhter, Y.: Graceful restart mechanism for BGP (No. RFC 4724). Technical report (2007)
Subramanya, A., Bilmes, J.: Soft-supervised learning for text classification. In: Proceedings of the Conference on Empirical Methods in Natural Language Processing, pp. 1090–1099 (2008)
Subramanya, A., Talukdar, P.P.: Graph-Based Semi-supervised Learning. Morgan & Claypool Publishers, San Rafael (2014)
Villamizar, C., Chandra, R., Govindan, R.: BGP route flap damping (No. RFC 2439). Technical report (1998)
Zhao, M., Chan, R.H.M., Chow, T.W.S., Tang, P.: Compact graph based semi-supervised learning for medical diagnosis in Alzheimer’s disease. IEEE Sig. Process. Lett. 21(10), 1192–1196 (2014)
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2019 Springer Nature Switzerland AG
About this paper
Cite this paper
Fontugne, R. et al. (2019). BGP Zombies: An Analysis of Beacons Stuck Routes. In: Choffnes, D., Barcellos, M. (eds) Passive and Active Measurement. PAM 2019. Lecture Notes in Computer Science(), vol 11419. Springer, Cham. https://doi.org/10.1007/978-3-030-15986-3_13
Download citation
DOI: https://doi.org/10.1007/978-3-030-15986-3_13
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-030-15985-6
Online ISBN: 978-3-030-15986-3
eBook Packages: Computer ScienceComputer Science (R0)