BGP Operations and Security

Metadata

Publisher: IETF
Doc Type: Best Practice
Pages: 26
Abstract: The Border Gateway Protocol (BGP) is the protocol almost exclusively used in the Internet to exchange routing information between network domains. Due to this central nature, it is important to understand the security measures that can and should be deployed to prevent accidental or intentional routing disturbances. This document describes measures to protect the BGP sessions itself such as Time to Live (TTL), the TCP Authentication Option (TCP-AO), and control-plane filtering. It also describes measures to better control the flow of routing information, using prefix filtering and automation of prefix filters, max-prefix filtering, Autonomous System (AS) path filtering, route flap dampening, and BGP community scrubbing.
Publication Date: 2015-02-01
Status Note: Best Current Practice
DOI: 10.17487/RFC7454
Link: https://doi.org/10.17487/RFC7454
Author(s): Jerome Durand
Ivan Pepelnjak
Gert Döring

Latest version of IETF RFC 7454

Document Versions — IETF RFC 7454

▶ IETF RFC 7454 (2015-02-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 2119 [Active*]
IETF RFC 4271 [Active*]
IETF RFC 5082 [Active*]
IETF RFC 5925 [Active*]
IETF RFC 6811 [Active*]
RFC7196 — 6 EXTERNAL

Bibliographic Reference(s)

IETF.draft-ga-idr-as-migration-03 — 28 EXTERNAL
IETF.draft-ietf-idr-ix-bgp-route-server-06 — 17 EXTERNAL
IANA, "IANA IPv4 Special-Purpose Address Registry", < http://www.iana.org/assignments/iana-ipv4-special-registry >. EXTERNAL
Smith, P., Bush, R., Kuhne, M., Pelsser, C., Maennel, O., Patel, K., Mohapatra, P., and R. Evans, "RIPE-580 - RIPE Routing Working Group Recommendations On Route-flap Damping", January 2013. EXTERNAL
Smith, P. and R. Evans, "RIPE-532 - RIPE Routing Working Group Recommendations on IPv6 Route Aggregation", November 2011. EXTERNAL
IANA, "Internet Protocol Version 6 Address Space", < http://www.iana.org/assignments/ipv6-address-space >. EXTERNAL
IANA, "IANA IPv6 Special-Purpose Address Registry", < http://www.iana.org/assignments/iana-ipv6-special-registry >. EXTERNAL
Smith, P., Evans, R., and M. Hughes, "RIPE-399 - RIPE Routing Working Group Recommendations on Route Aggregation", December 2006. EXTERNAL
IANA, "IANA IPv4 Address Space Registry", < http://www.iana.org/assignments/ipv4-address-space >. EXTERNAL
Karrenberg, D., "RIPE-351 - De-Bogonising New Address Blocks", October 2005. EXTERNAL
Merit Network Inc., "Merit RADb", < http://www.radb.net >. EXTERNAL
"IRRToolSet project page", < http://irrtoolset.isc.org >. EXTERNAL
Cooper, D., Heilman, E., Brogle, K., Reyzin, L., and S. Goldberg, "On the Risk of Misbehaving RPKI Authorities", < http://www.cs.bu.edu/~goldbe/papers/hotRPKI.pdf >. EXTERNAL
Smith, P. and C. Panigl, "RIPE-378 - RIPE Routing Working Group Recommendations On Route-flap Damping", May 2006. EXTERNAL
IETF RFC 2385 [Superseded*]
IETF RFC 2827 [Active*]
IETF RFC 3704 [Active*]
IETF RFC 4012 [Active*]
IETF RFC 6192 [Active*]
IETF RFC 6480 [Active*]
IETF RFC 6666 [Active*]
IETF RFC 6952 [Active*]
RFC7115 — 15 EXTERNAL
RFC7132 — 16 EXTERNAL
RFC7353 — 29 EXTERNAL

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC7454.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 7454, BGP Operations and Security. Available at https://doi.org/10.17487/RFC7454

Snippet:

IETF RFC 7454, BGP Operations and Security. Available at https://doi.org/10.17487/RFC7454

HTML (ISO 690 compliant)

Preview:

IETF RFC 7454, BGP Operations and Security. Available at https://doi.org/10.17487/RFC7454

Snippet:

<span class="citation"><cite>IETF RFC 7454</cite>, BGP Operations and Security. Available at <a href="https://doi.org/10.17487/RFC7454" target="_blank" rel="noopener">https://doi.org/10.17487/RFC7454</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 7454, BGP Operations and Security
doi: 10.17487/RFC7454
url: https://doi.org/10.17487/RFC7454

Snippet:

<li>
<cite id="bib-rfc7454">IETF RFC 7454</cite>, BGP Operations and Security
<span class="doi">10.17487/RFC7454</span>
</li>

Referenced By

IETF RFC 8704 [Active*]