Best Practice Detail

13-8-8042

Network Operators and Service Providers should validate routing information to protect against global routing table disruptions. Avoid BGP peer spoofing or session hijacking by applying techniques such as: 1) eBGP hop-count (TTL) limit to end of physical peering link, 2) MD5 session signature to mitigate route update spoofing threats (keys should be changed periodically where feasible).

Status: Rollover New

References/Comments: NSTAC ISP Working Group - BGP/DNS, Scalable key distribution mechanisms, NRIC V FG 4: Interoperability. NIST SP 800-54 Border Gateway Protocol Security .

Historical events:

• Network Operators
• Service Providers
• Internet/Data
• Cyber Security
• Network Elements
• Network Operations
• CSRIC VII: Rollover New In CSRIC VII