Source
BGP Role model: tracking the adoption of RFC 9234
Cloudflare evaluated the adoption of RFC 9234, a standard that uses BGP Roles and Only to Customer attributes to automatically prevent route leaks.
Why it matters
Route leaks can misdirect internet traffic, causing increased latency or connection drops for users. This standard reduces the risk of these incidents by automating leak prevention.
The details
- Cloudflare identified 67 ASes that set the OTC attribute via BMP feeds.
- Tier-1 networks GTT (AS3257) and Arelion (AS1299) were found stripping OTC attributes.
- Arelion recently updated configurations to begin preserving the OTC attribute.
Show entities and relationshipsHide entities and relationships
In this article
Topics
Organizations
Companies
Products
Key connections
Cloudflare uses RFC 9234
Cloudflare is deploying RFC 9234 BGP Roles across its global router fleet.
Cloudflare uses Border Gateway Protocol (BGP)
Cloudflare uses BGP for global routing and peering with thousands of networks.
Cloudflare uses BGP Monitoring Protocol (BMP)
Cloudflare uses BMP feeds from its routers to monitor OTC attribute propagation from peers.
Cloudflare Radar is related to Border Gateway Protocol (BGP)
Cloudflare Radar includes a Routing section for tracking BGP routing anomalies and RFC 9234 adoption.
Cloudflare uses BGPKIT
Cloudflare used the BGPKIT toolkit to parse MRT dump files during the OTC stripping experiment.
Cloudflare uses RouteViews
Cloudflare used public BGP collector data from RouteViews to analyze OTC attribute adoption.
Show 8 more connectionsShow fewer connections
Cloudflare uses RIPE RIS
Cloudflare used RIPE RIS BGP collector data to analyze OTC attribute adoption and stripping.
CAIDA is related to Border Gateway Protocol (BGP)
CAIDA provides AS relationship datasets used in BGP routing research.
GTT (AS3257) strips the OTC attribute, hindering RFC 9234 route leak prevention effectiveness.
Arelion is related to RFC 9234
Arelion (AS1299) was stripping OTC but began preserving it after Cloudflare's findings.
YYCIX was the first route server to deploy RFC 9234 BGP Roles.
BGPKIT is built with Border Gateway Protocol (BGP)
BGPKIT is a toolkit built to parse BGP MRT dumps and provide AS relationship data.
RFC 9234 is related to Border Gateway Protocol (BGP)
RFC 9234 is an extension to BGP that introduces Roles and the OTC attribute for route leak prevention.
ASPA Validation is related to Border Gateway Protocol (BGP)
ASPA validation works alongside BGP Roles and uses the Role information to determine which path validation algorithm to apply.
Related events
Cloudflare Publishes BGP Route Leak Prevention Research Using RFC 9234
Get the weekly recap
The stories like this one, picked and explained — once a week, straight to your inbox.