poster

Poster: LeMon: Global Route Leak Monitoring Service

Authors:

Shujie ZhaoAuthors Info & Claims

ACM SIGCOMM '23: Proceedings of the ACM SIGCOMM 2023 Conference

Pages 1111 - 1113

https://doi.org/10.1145/3603269.3610852

Published: 01 September 2023 Publication History

Abstract

We develop LeMon for real-time detection of route leaks and explain how we resolved the shortcomings in previous approaches. We perform extensive evaluations of LeMon on heuristically derived datasets as well as on live BGP traffic demonstrating its performance and accuracy. We also confirm the events identified by LeMon with survey of network operators. We provide access¹ to our implementation of LeMon and to the datasets.

References

[1]

Alexander Aximov, Eugene Bogomazov, Randy Bush, Keyur Patel, and Job Snijders. Verification of as_path using the resource certificate public key infrastructure and autonomous system provider authorization. Network Working Group Internet Draft. November, 2020.

[2]

Marcelo Bagnulo, Alberto García-Martínez, Stefano Angieri, Andra Lutu, and Jinze Yang. Practicable route leak detection and protection with asiria. Computer Networks, 211:108966, 2022.

Digital Library

[3]

CAIDA. https://catalog.caida.org/. Accessed: 01.2023.

[4]

Shivani Deshpande, Marina Thottan, Tin Kam Ho, and Biplab Sikdar. An online mechanism for bgp instability detection and analysis. IEEE transactions on Computers, 58(11):1470--1484, 2009.

[5]

Romain Fontugne, Anant Shah, and Emile Aben. The (thin) bridges of as connectivity: Measuring dependency using as hegemony. In International Conference on Passive and Active Network Measurement, pages 216--227. Springer, 2018.

[6]

Lixin Gao. On inferring autonomous system relationships in the internet. IEEE/ACM Transactions on networking, 9(6):733--745, 2001.

Digital Library

[7]

Vasileios Giotsas and Shi Zhou. Valley-free violation in internet routing---analysis based on bgp community data. In 2012 IEEE International Conference on Communications (ICC), pages 1193--1197. IEEE, 2012.

[8]

Geoff Huston. Leaking routes. https://labs.apnic.net/blabs/?p=139/. Accessed: 29.07.2022.

[9]

IHR. Internet health report. https://ihr.iijlab.net/ihr/. Accessed: 01.2023.

[10]

Yuchen Jin, Colin Scott, Amogh Dhamdhere, Vasileios Giotsas, Arvind Krishnamurthy, and Scott Shenker. Stable and practical as relationship inference with problink. In NSDI, volume 19, pages 581--598, 2019.

[11]

Qrator Lab. Qrator Blog. https://blog.qrator.net, 2022. [Online; accessed 19-November-2022].

[12]

Qrator Labs. Q4 2022 ddos attacks and bgp incidents. https://blog.qrator.net/en/q4-2022-ddos-attacks-and-bgp-incidents-report_163/. Accessed: 04.2023.

[13]

Matthew Luckie, Bradley Huffaker, Amogh Dhamdhere, Vasileios Giotsas, and KC Claffy. As relationships, customer cones, and validation. In Proceedings of the 2013 conference on Internet measurement conference, pages 243--256, 2013.

Digital Library

[14]

Pablo Moriano, Raquel Hill, and L Jean Camp. Using bursty announcements for detecting bgp routing anomalies. Computer Networks, 188:107835, 2021.

[15]

Chiara Orsini, Alistair King, Danilo Giordano, Vasileios Giotsas, and Alberto Dainotti. Bgpstream: a software framework for live and historical bgp data analysis. In Proceedings of the 2016 Internet Measurement Conference, pages 429--444, 2016.

Digital Library

[16]

Yakov Rekhter, Susan Hares, and Tony Li. A Border Gateway Protocol 4 (BGP-4). RFC 4271, January 2006.

Digital Library

[17]

RIPE RIS. Ris route collectors. https://ris.ripe.net/docs/10_routecollectors.html. Accessed: 25.04.2023.

[18]

Routeviews. Routeview bgp collectors. http://www.routeviews.org/routeviews/index.php/collectors/. Accessed: 25.07.2022.

[19]

Muhammad Shuaib Siddiqui, D Montero, Marcelo Yannuzzi, René Serral-Gracià, Xavier Masip-Bruin, and Wilson Ramírez. Route leak detection using real-time analytics on local bgp information. In 2014 IEEE Global Communications Conference, pages 1942--1948. IEEE, 2014.

[20]

Muhammad Shuaib Siddiqui, Diego Montero, René Serral-Gracià, and Marcelo Yannuzzi. Self-reliant detection of route leaks in inter-domain routing. Computer Networks, 82:135--155, 2015.

Digital Library

[21]

Kotikalapudi Sriram. Design Discussion of Route Leaks Solution Methods. Internet-Draft draft-sriram-idr-route-leak-solution-discussion-07, Internet Engineering Task Force. Work in Progress.

[22]

Kotikalapudi Sriram, Doug Montgomery, Danny R. McPherson, Eric Osterweil, and Brian Dickson. Problem Definition and Classification of BGP Route Leaks. RFC 7908, June 2016.

Digital Library

[23]

Andree Toonk. Massive route leak causes internet slowdown. https://www.bgpmon.net/massive-route-leak-cause-internet-slowdown/. Accessed: 29.07.2022.

[24]

Man Zeng, Dandan Li, Pei Zhang, Kun Xie, and Xiaohong Huang. Federated route leak detection in inter-domain routing with privacy guarantee. ACM Transactions on Internet Technology, 23(1):1--22, 2023.

Digital Library

Cited By

Xie YZhang ZLi NGao H(2025)LeakFocus: Catching the perpetrator in routing leak eventComputers & Security10.1016/j.cose.2024.104300150(104300)Online publication date: Mar-2025
https://doi.org/10.1016/j.cose.2024.104300
Rodday NRodosek GPras Avan Rijswijk - Deij R(2024)Exploring the Benefit of Path Plausibility Algorithms in BGPNOMS 2024-2024 IEEE Network Operations and Management Symposium10.1109/NOMS59830.2024.10575088(1-10)Online publication date: 6-May-2024
https://doi.org/10.1109/NOMS59830.2024.10575088

Index Terms

Poster: LeMon: Global Route Leak Monitoring Service
1. Security and privacy
  1. Network security

Recommendations

Optimal Route Reflection Topology Design
LANC '18: Proceedings of the 10th Latin America Networking Conference

Autonomous Systems (ASes) exchange routing information about networks they can reach in the Internet, and the most widely extended way to connect them is by means of Border Gateway Protocol (BGP) sessions. ASes set up external BGP (eBGP) sessions ...
Designing optimal iBGP route-reflection topologies
NETWORKING'08: Proceedings of the 7th international IFIP-TC6 networking conference on AdHoc and sensor networks, wireless networks, next generation internet

The Border Gateway Protocol (BGP) is used today by all Autonomous Systems (AS) in the Internet. Inside each AS, iBGP sessions distribute the external routes among the routers. In large ASs, relying on a full-mesh of iBGP sessions between routers is not ...
Distributed Route Aggregation on the Global Network
CoNEXT '14: Proceedings of the 10th ACM International on Conference on emerging Networking Experiments and Technologies

The Internet routing system faces serious scalability challenges, due to the growing number of IP prefixes it needs to propagate throughout the network. For example, the Internet suffered significant outages in August 2014 when the number of globally ...

Comments

Information & Contributors

Information

Published In

cover image ACM Conferences

ACM SIGCOMM '23: Proceedings of the ACM SIGCOMM 2023 Conference

September 2023

1217 pages

ISBN:9798400702365

DOI:10.1145/3603269

Chairs:
Henning Schulzrinne,
Vishal Misra,
Program Chairs:
Eddie Kohler,
David Maltz

Copyright © 2023 Owner/Author(s).

Permission to make digital or hard copies of part or all of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for third-party components of this work must be honored. For all other uses, contact the owner/author(s).

Sponsors

SIGCOMM: ACM Special Interest Group on Data Communication

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 01 September 2023

Check for updates

Author Tags

Qualifiers

Poster

Funding Sources

German Federal Ministry of Education and Research
Hessen State Ministry for Higher Education, Research and Art

Conference

ACM SIGCOMM '23

Sponsor:

SIGCOMM

ACM SIGCOMM '23: ACM SIGCOMM 2023 Conference

September 10, 2023

NY, New York, USA

Acceptance Rates

Overall Acceptance Rate 462 of 3,389 submissions, 14%

Contributors

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

2
Total Citations
View Citations
175
Total Downloads

Downloads (Last 12 months)103
Downloads (Last 6 weeks)24

Reflects downloads up to 05 Mar 2025

Other Metrics

View Author Metrics

Citations

Cited By

Xie YZhang ZLi NGao H(2025)LeakFocus: Catching the perpetrator in routing leak eventComputers & Security10.1016/j.cose.2024.104300150(104300)Online publication date: Mar-2025
https://doi.org/10.1016/j.cose.2024.104300
Rodday NRodosek GPras Avan Rijswijk - Deij R(2024)Exploring the Benefit of Path Plausibility Algorithms in BGPNOMS 2024-2024 IEEE Network Operations and Management Symposium10.1109/NOMS59830.2024.10575088(1-10)Online publication date: 6-May-2024
https://doi.org/10.1109/NOMS59830.2024.10575088

View Options

Login options

Check if you have access through your login credentials or your institution to get full access on this article.

Full Access

Get this Publication

View options

PDF

View or Download as a PDF file.

eReader

View online with eReader.

Figures

Tables

Media

View Table of Conten