YouTube IP Hijacking

Mon Feb 25 08:14:23 UTC 2008

On Sun, 24 Feb 2008, Sargun Dhillon wrote:
> I don't know how large Pakistani Telecom is, but it I bet its not large
> enough that PCCW should be allowing it to advertise anything.

I think you're failing to take into account how multihoming generally
works.  The real fallacy here is that PCCW/BTN refuses to prefix-list
filter their customers, as evidenced by this and past leaks.  If
something productive can come from today's outage, it would be PCCW
beginning to do their part as responsible Internet citizens, given
(excuse the pun) "peer" pressure.

I'd also focus on the lessons learned from the un-official "IP
Hijacking BOF" held in San Jose, during which engineers and
researchers studied the extent to which obviously-bogus route
advertisements propagated across the public Internet.  At these
events,  prefixes such as 1/8 and 100/7 were advertised, and, by
Renesys/bgplay/route-views/etc data, accepted by >99% (?) of the
internet.  IP blocks that were hijacked before (like 146.20/16) were
announced with similar outcome.

Results were planned to be presented at the next NANOG, but they
shouldn't be a surprise to anyone in the industry: nobody filters.

Paul Wall