BGP Prefix Protection for Missing Route Advertisement Recovery
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
BGP prefix loss occurs due to misconfigurations, route flapping, malicious announcements, and session failures, leading to connectivity issues and instability in routing decisions.
Innovation Solution
Implementing a BGP prefix protection device (BPPD) that monitors BGP prefixes, verifies their validity, and re-sends missing prefixes using a new BGP attribute (BGP-PC) to ensure continuous propagation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If BGP routers use standard advertisement methods (network command, redistribution, propagation from peers, aggregate-address), then routing information can be shared efficiently, but prefix loss occurs due to misconfigurations, route flapping, malicious announcements, and session failures
Solution Approach 1:
The patent introduces a BGP Prefix Protection Device (BPPD) as an intermediary component between BGP routers. The BPPD monitors BGP prefix advertisements, validates their legitimacy, and ensures proper propagation across the network. This intermediary device prevents prefix loss by detecting misconfigurations, filtering malicious announcements, and maintaining prefix information even when route flapping or session failures occur, thus resolving the contradiction between efficient standard advertisement methods and reliable prefix propagation.
2Reliability
If BGP routers propagate prefixes from peers to maintain network reachability, then routing stability is improved, but malicious actors can announce prefixes they do not own causing legitimate prefixes to be withdrawn
Solution Approach 1:
The patent implements a feedback mechanism where the BGP Prefix Protection Device continuously monitors BGP prefix advertisements and validates them against multiple criteria including origin validation, path consistency, and policy compliance. When a malicious announcement is detected, the BPPD provides feedback by filtering the announcement and notifying relevant BGP routers. This feedback loop maintains network reachability for legitimate prefixes while blocking malicious ones, resolving the contradiction between propagating prefixes for reachability and preventing malicious announcements.
3Stability of the object's composition
If BGP session between routers is maintained to ensure prefix visibility, then routing decisions remain stable, but session failures cause prefix loss until re-established
Solution Approach 1:
The patent implements a cushioning mechanism where the BGP Prefix Protection Device maintains a local cache of validated BGP prefixes and their associated routing information. When a BGP session failure occurs, the BPPD uses this pre-cached information to continue advertising prefixes to affected routers, providing a buffer that prevents immediate prefix loss. This beforehand cushioning ensures prefix visibility and routing stability even during session disruptions, resolving the contradiction between session maintenance for stability and reliability during failures.
Data Source
AI summary
Aspects of the subject disclosure may include, for example, a device, having: a processing system including a processor; and a memory that stores executable instructions that, when executed by the processing system, facilitate performance of operations, the operations including: receiving a border gateway protocol (BGP) prefix from a first provider edge (PE) router; determining that a second PE router failed to send the BGP prefix to the device; confirming that the BGP prefix is valid; and sending the BGP prefix to the second PE router. Other embodiments are disclosed.