Implementasi BGP dan Resource Public Key Infrastructure menggunakan BIRD untuk Keamanan Routing

The validity of the routing advertisements sent by one router to another is essential for Internet connectivity. To perform routing exchanges between Autonomous Systems (AS) on the Internet, a protocol known as the Border Gateway Protocol (BGP) is used. One of the most common attacks on routers running BGP is prefix hijacking. This attack aims to disrupt connections between AS and divert routing to destinations that are not appropriate for crimes, such as fraud and data breach. One of the methods developed to prevent prefix hijacking is the Resource Public Key Infrastructure (RPKI). RPKI is a public key infrastructure (PKI) developed for BGP routing security on the Internet and can be used by routers to validate routing advertisements sent by their BGP peers. RPKI utilizes a digital certificate issued by the Certification Authority (CA) to validate the subnet in a routing advertisement. This study aims to implement BGP and RPKI using the Bird Internet Routing Daemon (BIRD). Simulation and implementation are carried out using the GNS3 simulator and a server that acts as the RPKI validator. Experiments were conducted using 4 AS, 7 routers, 1 server for BIRD, and 1 server for validators, and there were 26 invalid or unknown subnets advertised by 2 routers in the simulated topology. The experiment results show that the router can successfully validated the routing advertisement received from its BGP peer using RPKI. All invalid and unknown subnets are not forwarded to other routers in the AS where they are located such that route hijacking is prevented.

PredictRoute: A Network Path Prediction Toolkit

Accurate prediction of network paths between arbitrary hosts on the Internet is of vital importance for network operators, cloud providers, and academic researchers. We present PredictRoute, a system that predicts network paths between hosts on the Internet using historical knowledge of the data and control plane. In addition to feeding on freely available traceroutes and BGP routing tables, PredictRoute optimally explores network paths towards chosen BGP prefixes. PredictRoute's strategy for exploring network paths discovers 4X more autonomous system (AS) hops than other well-known strategies used in practice today. Using a corpus of traceroutes, PredictRoute trains probabilistic models of routing towards prefixes on the Internet to predict network paths and their likelihood. PredictRoute's AS-path predictions differ from the measured path by at most 1 hop, 75% of the time. We expose PredictRoute's path prediction capability via a REST API to facilitate its inclusion in other applications and studies. We additionally demonstrate the utility of PredictRoute in improving real-world applications for circumventing Internet censorship and preserving anonymity online.

Analisis dan Perancangan Simulasi Perbandingan Kinerja Jaringan Komputer Menggunakan Metode Protokol Routing Statis, Open Shortest Path First (OSPF) dan Border Gateway Protocol (BGP) (Studi Kasus Tanri Abeng University)

Network is a communication between two devices to communicate with each other either using wire or wireless media. The LAN network topology used at Tanri Abeng Unversity still uses a static routing topology, where the routing process is still done manually, so that if there is an addition of a new network, it will be difficult to configure the routing table. In this research, a network topology with dynamic routing methods will be built that will help improve network performance at Tanri Abeng University. The purpose of this research is to analyze the comparison of network performance at Tanri Abeng Unversity in sending data packets using static routing protocols, OSPF, and BGP based on the parameters used. In this research also, the ping process was carried out using the cisco packet tracer 100 times with the size of the data packet sent of 32 bytes for each routing method to be compared. Then in this research, the test scenario was carried out eight times on each parameter of throughput, packet loss, delay, and jitter in the hope of determining which routing method is more optimal among static routing, OSPF, and BGP at Tanri Abeng University. The test results show that BGP routing for throughput and packet loss parameters is superior to other routing methods, while OSPF routing for delay and jitter parameters is superior to other routing methods.

Enhancing Border Gateway Protocol Security Using Public Blockchain

Communication on the Internet consisting of a massive number of Autonomous Systems (AS) depends on routing based on Border Gateway Protocol (BGP). Routers generally trust the veracity of information in BGP updates from their neighbors, as with many other routing protocols. However, this trust leaves the whole system vulnerable to multiple attacks, such as BGP hijacking. Several solutions have been proposed to increase the security of BGP routing protocol, most based on centralized Public Key Infrastructure, but their adoption has been relatively slow. Additionally, these solutions are open to attack on this centralized system. Decentralized alternatives utilizing blockchain to validate BGP updates have recently been proposed. The distributed nature of blockchain and its trustless environment increase the overall system security and conform to the distributed character of the BGP. All of the techniques based on blockchain concentrate on inspecting incoming BGP updates only. In this paper, we improve on these by modifying an existing architecture for the management of network devices. The original architecture adopted a private blockchain implementation of HyperLedger. On the other hand, we use the public blockchain Ethereum, more specifically the Ropsten testing environment. Our solution provides a module design for the management of AS border routers. It enables verification of the prefixes even before any router sends BGP updates announcing them. Thus, we eliminate fraudulent BGP origin announcements from the AS deploying our solution. Furthermore, blockchain provides storage options for configurations of edge routers and keeps the irrefutable history of all changes. We can analyze router settings history to detect whether the router advertised incorrect information, when and for how long.

PERBANDINGAN ROUTING PROTOCOL EXTERIOR BGP VERSI 4 DENGAN ROUTING INTERIOR EIGRP PADA ALGORITMA LINKSTATE MENGGUNAKAN PARAMETER PACKET LOSS

- Computer networks very influential on the speed of transferring data from one computer to another computer by using a PC or server, in this case, the routing configuration is very influential. The best routing route selection is the solution to determine the most rapid and efficient routing, and as the best routing consideration, the researcher has examined two routings, namely BGP (Border Gateway Protocol) routing and EIGRP (Enhanced Interior Gateway Routing Protocol) using the Cisco Paket Traccer application. After the researcher was done an experiment, the researcher gets the result of the average EIGRP delay that is 54.619 and the packet loss result between EIGRP and BGP is not available (successful packet delivery). Keywords - BGP Routing Protocol Exterior, EIGRP Interior Routing, Algorithm Link state, Packet loss Abstrak - Jaringan komputer sangat berpengaruh pada kecepatan transfer data antar satu komputer ke komputer lain baik itu pc maupun server, dalam hal ini konfigurasi routing sangat berpengaruh. Pemilihan jalur routing terbaik merupakan solusi untuk menentukan routing yang paling cepat dan efisien, dan sebagai bahan pertimbangan routing terbaik penulis meneliti dua routing yakni routing BGP (Border Gateway Protocol) dan routing EIGRP (Enhanced Interior Gateway Routing Protocol) mengguanakan aplikasi Cisco Packet Traccer. Setelah dilakukannya percobaan yang penulis perbuat, maka didapatkan hasil dari rata-rata delay EIGRP yaitu 54,619 dan hasil dari packetloss antara EIGRP dan BGP tidak ada (pengiriman paket sukses). Kata Kunci - Routing Protocol Exterior BGP, Routing Interior EIGRP, Algoritma Link state, Packet loss.

Kinerja Quagga Pada Routing BGP IPv6 Menggunakan Metode Dual Stack

Alamat jaringan yang digunakan saat ini adalah IPv4 (Internet Protocol v4), perkembangan jaringan menuju IoT (Internet of Think) meningkatkan kebutuhan akan alamat IP (Internet Protocol. Solusi terkait masalah IP adalah dengan melakukan migrasi ke alamat IPv6 (Internet Protocol Version 6).Metode transisi IPv4 ke IPv6 menggunakan Dual Stack merupakan metode yang paling baik dan stabil untuk dapat diimplementasikan. Salah satu pertimbangan dari provider penyedia jasa dan jaringan internet dalam melakukan migrasi ke jaringan IPv6 adalah terkait dengan kinerja BGP (Border Gateway Protocol) yang merupakan routing pondasi terbentuknya internet. Hal ini terkait dengan besarnya rute dengan adanya IPv6 yang nantinya mengakibatkan besarnya konsumsi CPU, memori dan lamanya BGP dalam menerima table routing secara penuh (convergence). Salah satu software routing BGP yang popular dan banyak digunakan di jaringan adalah menggunakan Quagga routing. Hasil dari penelitian ini menunjukkan bahwa penggunaan Quagga dalam menangani 10 peer BGP IPv4 dan IPv6 menunjukkan hasil yang baik, router membutuhkan waktu 106,6 second atau kurang lebih 1 menit 7 detik dengan konsumsi CPU maksimal 18,54% dan konsumsi memori 16,45% untuk dapat menerima seluruh table routing.Kata Kunci — Ipv6, Dual Stack, Quagga, BGP routing, convergenceThe current network address is IPv4 (Internet Protocol v4), network development towards IoT (Internet of Think) increases the need for IP addresses (Internet Protocol). The solutions of IP problem are to migrate to IPv6 (Internet Protocol Version 6) addresses. IPv4 to IPv6 transition method using Dual Stack is the best and most stable method to implement. One of the considerations of internet service provider in migrating to IPv6 network is related to BGP (Border Gateway Protocol) performance that is the foundation routing internet connection. This is related to the magnitude of the route with the IPv6 which will result in the amount of CPU consumption, memory and the length of BGP in receiving the full table routing (convergence) One of the popular and widely used BGP routing software on the network is using Quagga routing. The results of this study show that using Quagga in handling 10 BGP IPv4 and IPv6 peers shows good results, the router takes 106.6 seconds or approximately 1 minute 7 seconds with a maximum CPU consumption of 18.54% and memory consumption of 16.45% to be able to accept all routing tables.Keywords— Ipv6, Dual Stack, Quagga, BGP routing, convergence

Reducing convergence time along with improvement in path service quality of border gateway protocol

Border Gateway Protocol (BGP) is an exterior gateway routing protocol used between various autonomous systems across the internet. BGP helps in selecting the best route for the transmission of data among the users. The transmission policy followed by BGP should be such that it should increase BGP routing performances. This work aims to reduce the convergence time of the network with the improvement of QOS (Quality of Service) in the routing of Border Gateway Protocol. Our results show that we can obtain a reduced framework environment which has a best routing path with better energy and quality, along with reduction in convergence time.