Kitz ADSL Broadband Information
adsl spacer  
Support this site
Home Broadband ISPs Tech Routers Wiki Forum
 
     
   Compare ISP   Rate your ISP
   Glossary   Glossary
 
Please login or register.

Login with username, password and session length
Advanced search  

News:

Author Topic: Cloudflare Ignite Consumer ISP Confusion with BGP Safety Test  (Read 1009 times)

jelv

  • Helpful
  • Kitizen
  • *
  • Posts: 1577

https://www.ispreview.co.uk/index.php/2020/04/cloudflare-ignite-consumer-isp-confusion-with-bgp-safety-test.html

Quote
Over the past few days we’ve had a small but growing stream of Tweets and Emails from people who have run Cloudflare’s new ‘Is BGP Safe Yet‘ tool and are worried that their UK broadband ISP is “unsafe” because it uses the Border Gateway Protocol (BGP) and not RPKI. Aside from poor timing with COVID-19, the result can be misleading.
Logged
Line rental: Pulse8, Broadband: AAISP Home::1 FTTC 80/20, Mobile: id Mobile

jelv

  • Helpful
  • Kitizen
  • *
  • Posts: 1577
Re: Cloudflare Ignite Consumer ISP Confusion with BGP Safety Test
« Reply #1 on: April 21, 2020, 10:00:41 AM »

AAISP

Logged
Line rental: Pulse8, Broadband: AAISP Home::1 FTTC 80/20, Mobile: id Mobile

j0hn

  • Kitizen
  • ****
  • Posts: 2858
Re: Cloudflare Ignite Consumer ISP Confusion with BGP Safety Test
« Reply #2 on: April 21, 2020, 10:18:40 AM »

AAISP cheat the test.

From the comments section

Quote
Yeah, AAISP have hacked the Cloudflare test by manually dropping the invalid prefix Cloudflare announce on their routers.
AAISP’s MD has stated on Twitter that they are looking to develop in RPKI in their core routers, but as yet, they don’t support this.

It’s all an interesting debate!
However, until such time that the entire world – both ISPs on on-side, and the content providers on the other all support RPKI, set ROAs/route objects in a RIR, then there will still be glaring gaps in RPKI being effective at stopping prefix hijacking, (and until the next weakness is found)!
Logged

Chrysalis

  • Content Team
  • Addicted Kitizen
  • *
  • Posts: 6203
Re: Cloudflare Ignite Consumer ISP Confusion with BGP Safety Test
« Reply #3 on: April 22, 2020, 04:06:38 AM »

interesting john i only read yesterday on revk blog about how they are been secure on bgp, when im back on pc ill link it, not sure if it was this specific feature though.
Logged
AAISP - Billion 8800NL bridge & PFSense BOX running PFSense 2.4 - ECI Cab - LINE STATISTICS CLICK HERE

jelv

  • Helpful
  • Kitizen
  • *
  • Posts: 1577
Logged
Line rental: Pulse8, Broadband: AAISP Home::1 FTTC 80/20, Mobile: id Mobile

Chrysalis

  • Content Team
  • Addicted Kitizen
  • *
  • Posts: 6203
Re: Cloudflare Ignite Consumer ISP Confusion with BGP Safety Test
« Reply #5 on: April 22, 2020, 12:03:03 PM »

Yep that's the post, thanks, having another read of it though, he didn't say its been deployed, just that its in the works.
Logged
AAISP - Billion 8800NL bridge & PFSense BOX running PFSense 2.4 - ECI Cab - LINE STATISTICS CLICK HERE

j0hn

  • Kitizen
  • ****
  • Posts: 2858
Re: Cloudflare Ignite Consumer ISP Confusion with BGP Safety Test
« Reply #6 on: April 22, 2020, 02:17:41 PM »

https://www.revk.uk/2020/04/bgp.html

Confirms what I said above, not yet deployed.
They simply cheat the test by dropping the invalid prefix.
Virgin do the same.
Logged
 

anything