Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Now the hijacker (AS65003) will attract all the traffic away from AS65001 (destined to 40.0.0.0/8); in parallel the ExaBGP speaker will send the BGP update of the hijack (among other updates seen by AS65004) to the ONOS instance (running artemis) which is going to detect the hijack. Inside the logs you will see that the attack is actually detected and the deaggregation mechanism has successfully mitigated the attack (by announcing the more specific 40.0.0.0/9 and 40.128.0.0/9 from the BGP speaker of the protected AS). After BGP converges and the control and data planes are consistent, the traffic of AS65001, destined to 40.0.0.0/8, returns to the protected AS.

...