Real-time BGP Prefix Outage Detection via Continuous Monitoring
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current routing anomaly detection systems fail to provide real-time monitoring for Autonomous Systems (ASs), leading to accessibility issues and performance problems due to the lack of continuous checks for prefix-related anomalies, which can occur between infrequent monitoring intervals.
Innovation Solution
A control-plane based routing anomaly detection service that continuously collects and analyzes Border Gateway Protocol (BGP) messages from multiple data sources to identify anomalies, providing real-time alerts for route hijacks, leaks, and prefix outages, and allowing for automatic and manual mitigation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If infrequent monitoring intervals are used, then device complexity is reduced, but reliability deteriorates due to inability to detect real-time prefix outages and routing anomalies
Solution Approach 1:
The system implements continuous monitoring of BGP routing data through persistent connections to routing data sources, ensuring uninterrupted detection of prefix outages and routing anomalies. The continuous collection and analysis of routing information eliminates blind periods between monitoring intervals, maintaining real-time awareness of network status without requiring complex distributed architectures.
2Reliability
If continuous real-time monitoring is implemented, then reliability is improved, but loss of time increases due to processing delays in detecting and alerting routing anomalies
Solution Approach 1:
The system pre-configures alert thresholds and notification protocols before anomalies occur. When routing anomalies are detected, pre-established alert mechanisms immediately notify network operators through predefined channels, eliminating delays in response time. The system also maintains real-time baseline data of normal routing behavior to enable rapid anomaly identification without time-consuming analysis.
3Measurement precision
If comprehensive prefix monitoring is performed, then measurement precision is improved, but device complexity increases due to the need to track multiple prefixes across autonomous systems
Solution Approach 1:
The system extracts and focuses on specific critical parameters from comprehensive routing data, such as prefix reachability status, AS path changes, and BGP message anomalies. By selectively analyzing only the most relevant routing attributes rather than processing every detail of complex multi-prefix configurations, the system achieves high detection accuracy while maintaining manageable processing complexity through targeted data extraction and analysis.
Data Source
AI summary
Systems and methods are disclosed for monitoring routing data and issuing alarms for route anomalies detected based on the monitored routing data. Routing data, including Border Gateway Protocol (BGP) announcement and/or withdraw messages for a targeted prefix of an Autonomous System (AS), is collected and analyzed to detect route anomalies. The analysis may include a comparison of the BGP messages to internal routing data. An alarm is selectively output corresponding to the detected route anomalies. The detected route anomalies may be correlated with monitored network traffic data to classify the route anomalies, where the output of the alarm is based on the classification of the route anomalies.