Abstract
The technology described in this publication relates to a mechanism to reduce internet outages caused by the accidental propagation of bogon routes. The approach enhances Border Gateway Protocol (BGP) implementations to block bogon IPv4 and IPv6 routes by default on external BGP sessions with public Autonomous System Numbers (ASNs). Resource Public Key Infrastructure (RPKI) does not prevent bogon routes and current mitigation relies on operator-managed routing policies. The technology described herein introduces a standardized blocking mechanism built directly into BGP. Internet Service Providers (ISPs) retain flexibility through a configurable override mechanism, referred to as a “bogon knob,” within their BGP configurations to enable the reception or advertisement of bogon routes for legitimate use cases. By combining default security with operational control, the technology described herein strengthens global routing security, maintains necessary operational control, and reduces the risk of widespread outages due to inadvertent bogon propagation.
Creative Commons License
This work is licensed under a Creative Commons Attribution 4.0 License.
Recommended Citation
N/A, "Default Bogon Routes Blocking in BGP", Technical Disclosure Commons, (September 19, 2025)
https://www.tdcommons.org/dpubs_series/8605