4 posts
A practical guide to reading BGP looking glass output — how to interpret the AS path, origin AS, next hop, RPKI status, and route collectors, and how to use a looking glass to diagnose reachability problems, suboptimal routing, and hijacks.
How a 2018 BGP hijack redirected Amazon Route 53 traffic, harvested private keys from MyEtherWallet users, and stole $152K in Ethereum — BGP and DNS weaknesses chained.
How a government censorship order, a leaked more-specific route, and one upstream provider that didn't filter turned into a global internet outage that took YouTube offline for nearly two hours in 2008 — and what it proved about BGP's fundamental trust problem.
BGP was built for trust, not security. RPKI fixes that by cryptographically validating route origins — here's how to deploy it on Cisco IOS-XE, IOS-XR, and NX-OS.
