Abstract
An IP prefix can be announced on the Internet from multiple endpoints, possibly leading to so-calledMOAS (Multiple-Origin AS) prefixes. Longlived MOASes are traditionally considered to be the result of network topology engineering such as prefix multihoming. Short-lived MOAS are commonly attributed to be the result of router misconfigurations.
In this article, we look atMOAS prefixes in the long term and seek the patterns behind these situations. We first revisit previous work by looking at the duration of MOAS events. We group these events according to the prefix announced and show that short-lived MOASes are not due to misconfigurations, but to origin instability or route flapping.We also identify topology patterns that result inMOAS prefixes and use them to classify these events. We show that, contrary to popular belief, multihoming is neither the main use case leading to MOAS, nor the most popular pattern. Finally, we look at the evolution of these observations by analysing data collected 10 years apart.
Chapter PDF
Similar content being viewed by others
Keywords
These keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.
References
Hawkinson, J., et al.: Guidelines for creation, selection, and registration of an Autonomous System (AS). RFC 1930 (March 1996)
Zhao, X., et al.: An analysis of BGP multiple origin AS (MOAS) conflicts. In: IMW (2001)
Rekhter, Y., et al.: A Border Gateway Protocol 4 (BGP-4). RFC 4271
RIPE NCC: Routing Information Service, http://www.ripe.net/ris/
Kwan-Wu, C.: On the characteristics of BGP multiple origin AS conflicts. In: ATNAC (2007)
Lad, M., et al.: PHAS: A Prefix Hijack Alert System. In: USENIX Security Symposium (2006)
Shi, X., et al.: Detecting prefix hijackings in the internet with argus. In: IMC (2012)
Siganos, G., et al.: BGP routing: A study at large time scale. In: Proc. IEEE Global Internet (2002)
Mahajan, R., et al.: Understanding bgp misconfiguration. SIGCOMM Comput. Commun. Rev. 32(4), 3–16 (2002)
Huston, G.: BGP reports, http://bgp.potaroo.net/
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2014 IFIP International Federation for Information Processing
About this paper
Cite this paper
Jacquemart, Q., Urvoy-Keller, G., Biersack, E. (2014). A Longitudinal Study of BGP MOAS Prefixes. In: Dainotti, A., Mahanti, A., Uhlig, S. (eds) Traffic Monitoring and Analysis. TMA 2014. Lecture Notes in Computer Science, vol 8406. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-54999-1_11
Download citation
DOI: https://doi.org/10.1007/978-3-642-54999-1_11
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-642-54998-4
Online ISBN: 978-3-642-54999-1
eBook Packages: Computer ScienceComputer Science (R0)