Path verification method and related equipment

Abstract

A path verification method and related equipment are used in the technical field of communication. The method comprises the following steps: network equipment obtains path information of a message forwarding path, the message forwarding path passes through a third autonomous domain AS, a second AS and a first AS in sequence, and the third AS, the second AS and the first AS are adjacent in sequence; the network equipment determines a business relationship of a first AS pair and a business relationship of a second AS pair, the first AS pair comprises a first AS and a second AS which are arranged in sequence, and the second AS pair comprises a second AS and a third AS which are arranged in sequence; the network equipment judges whether the message forwarding path is valid or not according to the business relationship of the first AS pair and the business relationship of the second AS pair; and according to the embodiment of the invention, whether the path is valid or not needs to be determined according to the business relationship between the adjacent AS pairs, so that the P2P routing information leakage condition can be verified more accurately, and the verification result is more credible.

Description

technical field [0001] The embodiments of the present application relate to the technical field of communications, and in particular, to a path verification method and related equipment. Background technique [0002] Border Gateway Protocol (Border Gateway Protocol, BGP) is a routing protocol between autonomous systems running on Transmission Control Protocol (Transmission Control Protocol, TCP). As an external routing protocol, its main goal is to provide Routing information communication between routers in the network provides guarantee. [0003] At the beginning of the design of the BGP protocol, it was designed based on the credibility of neighbor information, so the BGP message exchange itself does not carry authentication information, so accidents such as route leakage and hijacking often occur; to solve such problems, the general A verification algorithm will be added to the BGP protocol to determine whether the routing information is legal; among them, the existing ...

AI Technical Summary

Problems solved by technology

[0003] At the beginning of the design of the BGP protocol, it was designed based on the credibility of neighbor information, so the BGP message exchange itself does not carry authentication information, so accidents such as route leakage and hijacking often occur; to solve such problems, the general A verification algorithm will be added to the BGP protocol to determine whether the routing information is legal; among them, the existing route origin verification ROA algorithm can only verify that the source AS has been tampered with, and the border gateway protocol security BGP Sec algorithm It is used to verify the credibility of the routing information published by each AS, but there is a forward compatibility vulnerability

Images