NANOG Meeting Presentation Abstract

Tutorial: Options for Blackhole and Discard Routing
Meeting:	NANOG32
Date / Time:	2004-10-17 1:30pm - 3:00pm
Room:	Lake Fairfax
Presenters:	Speakers: Joe Soricelli, Juniper Joseph M. Soricelli is a Professional Services Engineer at Juniper. He is a Juniper Networks Certified Internet Engineer, a Juniper Networks Authorized Instructor, and a Cisco Certified Internet Expert. He is the author of <I>Juniper Networks Certified Internet Associate Study Guide</I> and <I>Juniper Networks Certified Internet Specialist Study Guide</I>. In addition to writing numerous training courses, he has worked with and trained carriers, telcos, and ISPs throughout his career in the networking industry. Wayne Gustavus, Verizon Wayne Gustavus Wayne Gustavus is a member of the IP Operations Support team for Verizon Internet Services. He is a Cisco Certified Internetwork Expert and has over 10 years experience in the networking industry. His current responsibilities at Verizon include supporting the national, multi-vendor router network that provides IP services for consumer and business customers. Wayne is a member of the NSP-SEC community and is active in Verizon\'s security operations, including the Inter-NOC Dial-By-ASN (INOC-DBA) network, anti-DDoS efforts, and blackhole routing infrastructure.
Abstract:	This intermediate-level tutorial offers attendees a view of some common practices for operating a blackhole service. As security concerns abound in the Internet, operators and providers are constantly exploring methods for protecting their networks and customers. During this intermediate-level tutorial we assume that attendees have basic IGP and BGP networking skills. We then build on this basic knowledge by discussing announcement methods for blackholing traffic across the network. In addition, some options for counting and logging the discarded traffic are discussed. Throughout the tutorial, operational and configuration commands from multiple vendors are used to illustrate the tutorial concepts. A brief outline of the material follows: Assumptions Discard options Static route to null Discard interface Mapping addresses to blackhole services BGP advertisements Communities Multihop options Altering next hop Injecting routes Dedicated server Accepting routes from customers Accepting routes from peers Accounting and Counting Options Filters ACLs Counters Syslog Logging Who to discard? Attacks from customers Attacks to customers Unallocated address space (bogons?) Attacks from peers
Files:	Joe Soricelli Presentation(PDF) Options for Blackhole and Discard Routing
Sponsors:	None.

Back to NANOG32 agenda.

NANOG32 Abstracts

• Show All

• BGP Multihoming Techniques
  Speakers:
  Philip Smith, Cisco Systems;

• Options for Blackhole and Discard Routing
  Speakers:
  Joe Soricelli, Juniper; Wayne Gustavus, Verizon;

• Options for Blackhole and Discard Routing
  Speakers:
  Joe Soricelli, Juniper; Wayne Gustavus, Verizon;

• Internet Number Resource Management and Administration
  Speakers:
  Ray PlzakARIN; .
  Richard JimmersonARIN; .
  

• Internet Number Resource Management and Administration
  Speakers:
  Ray PlzakARIN; .
  Richard JimmersonARIN; .
  

• ISP Security Toolkits
  Speakers:
  Tim Battles, AT&T;

• IPv6 Deployment and Case Studies
  Speakers:
  Salman Asadullah, Cisco Systems; Ciprian Popoviciu, Cisco Systems;

• IPv6 Deployment and Case Studies
  Speakers:
  Salman Asadullah, Cisco Systems; Ciprian Popoviciu, Cisco Systems;

• Good Engineering Practice as it Applies to Unlicensed Wireless Networks
  Speakers:
  Tim Pozar, Late Night Software;

• 802.1X: Deployment Experiences and Obstacles to Widespread Adoption
  Speakers:
  Terry Simons, University of Utah/open1x.org; Jon Snyder, Portland State University;

• 802.1X: Deployment Experiences and Obstacles to Widespread Adoption
  Speakers:
  Terry Simons, University of Utah/open1x.org; Jon Snyder, Portland State University;

• Extension of Multi-Service Networks
  Speakers:
  Dave Siegel, Global Crossing;

• Network Design to Support Very High-Capacity Streaming and Caching Infrastructures
  Speakers:
  Vijay GillAOL Time Warner; .
  

• Botnets
  Speakers:
  John Kristoff, Northwestern University;

• What Will Stop Spam?
  Speakers:
  Charles Stiles, AOL Time Warner; Carl HutzlerAmerica Online; .
  

• What Will Stop Spam?
  Speakers:
  Charles Stiles, AOL Time Warner; Carl HutzlerAmerica Online; .
  

• Optical Switching, a Great Tool in Platform Migration at AMS-IX
  Speakers:
  Romeo Zwart, Amsterdam Internet Exchange;

• Research Forum: Sizing Router Buffers
  Speakers:
  Guido Appenzeller, Stanford University;

• Research Forum: Performing BGP Experiments on a Semi-Realistic Internet Environment
  Speakers:
  Ke Zhang, University of California, Davis; Soon-Tee TeohUniversity of California, Davis; .
  Shih-Ming TsengUniversity of California, Davis; .
  Chen-Nee ChuahUniversity of California, Davis; .
  Kwan-Liu MaUniversity of California, Davis; .
  Felix WuUniversity of California, Davis; .
  

• Research Forum: Performing BGP Experiments on a Semi-Realistic Internet Environment
  Speakers:
  Ke Zhang, University of California, Davis; Soon-Tee TeohUniversity of California, Davis; .
  Shih-Ming TsengUniversity of California, Davis; .
  Chen-Nee ChuahUniversity of California, Davis; .
  Kwan-Liu MaUniversity of California, Davis; .
  Felix WuUniversity of California, Davis; .
  

• Research Forum: Performing BGP Experiments on a Semi-Realistic Internet Environment
  Speakers:
  Ke Zhang, University of California, Davis; Soon-Tee TeohUniversity of California, Davis; .
  Shih-Ming TsengUniversity of California, Davis; .
  Chen-Nee ChuahUniversity of California, Davis; .
  Kwan-Liu MaUniversity of California, Davis; .
  Felix WuUniversity of California, Davis; .
  

• Research Forum: Performing BGP Experiments on a Semi-Realistic Internet Environment
  Speakers:
  Ke Zhang, University of California, Davis; Soon-Tee TeohUniversity of California, Davis; .
  Shih-Ming TsengUniversity of California, Davis; .
  Chen-Nee ChuahUniversity of California, Davis; .
  Kwan-Liu MaUniversity of California, Davis; .
  Felix WuUniversity of California, Davis; .
  

• Research Forum: Performing BGP Experiments on a Semi-Realistic Internet Environment
  Speakers:
  Ke Zhang, University of California, Davis; Soon-Tee TeohUniversity of California, Davis; .
  Shih-Ming TsengUniversity of California, Davis; .
  Chen-Nee ChuahUniversity of California, Davis; .
  Kwan-Liu MaUniversity of California, Davis; .
  Felix WuUniversity of California, Davis; .
  

• Research Forum: Performing BGP Experiments on a Semi-Realistic Internet Environment
  Speakers:
  Ke Zhang, University of California, Davis; Soon-Tee TeohUniversity of California, Davis; .
  Shih-Ming TsengUniversity of California, Davis; .
  Chen-Nee ChuahUniversity of California, Davis; .
  Kwan-Liu MaUniversity of California, Davis; .
  Felix WuUniversity of California, Davis; .
  

• SP Security and NSP-SEC BOF VII
  Moderators:
  Merike Kaeo, Double Shot Security; Roland DobbinsCisco; .
  

• SP Security and NSP-SEC BOF VII
  Moderators:
  Merike Kaeo, Double Shot Security; Roland DobbinsCisco; .
  

• Optimizing Operational Input to ARIN: What Is Needed and How Do We Get It?
  Moderators:
  ARIN staffNone; .
  

• Evolving the Core: Deployment Challenges and the Internet
  Speakers:
  Scott Marcus, FCC;

• BGP—The Movie
  Speakers:
  Geoff HustonAPNIC; .
  George MichaelsonAPNIC; .
  Philip SmithCisco Systems; .
  

• BGP—The Movie
  Speakers:
  Geoff HustonAPNIC; .
  George MichaelsonAPNIC; .
  Philip SmithCisco Systems; .
  

• BGP—The Movie
  Speakers:
  Geoff HustonAPNIC; .
  George MichaelsonAPNIC; .
  Philip SmithCisco Systems; .
  

• DNS Anomalies and Their Impact on DNS Cache Servers
  Speakers:
  Chika Yoshimura, NTT Communcations; Katsuyasu Toyama, NTT Labs; Keisuke IshibashiNTT Labs; .
  Tsuyoshi ToyonoNTT Labs; .
  Masahiro IshinoNTT Communcations; .
  Kazunori FujiwaraJPRS; .
  

• DNS Anomalies and Their Impact on DNS Cache Servers
  Speakers:
  Chika Yoshimura, NTT Communcations; Katsuyasu Toyama, NTT Labs; Keisuke IshibashiNTT Labs; .
  Tsuyoshi ToyonoNTT Labs; .
  Masahiro IshinoNTT Communcations; .
  Kazunori FujiwaraJPRS; .
  

• DNS Anomalies and Their Impact on DNS Cache Servers
  Speakers:
  Chika Yoshimura, NTT Communcations; Katsuyasu Toyama, NTT Labs; Keisuke IshibashiNTT Labs; .
  Tsuyoshi ToyonoNTT Labs; .
  Masahiro IshinoNTT Communcations; .
  Kazunori FujiwaraJPRS; .
  

• DNS Anomalies and Their Impact on DNS Cache Servers
  Speakers:
  Chika Yoshimura, NTT Communcations; Katsuyasu Toyama, NTT Labs; Keisuke IshibashiNTT Labs; .
  Tsuyoshi ToyonoNTT Labs; .
  Masahiro IshinoNTT Communcations; .
  Kazunori FujiwaraJPRS; .
  

• DNS Anomalies and Their Impact on DNS Cache Servers
  Speakers:
  Chika Yoshimura, NTT Communcations; Katsuyasu Toyama, NTT Labs; Keisuke IshibashiNTT Labs; .
  Tsuyoshi ToyonoNTT Labs; .
  Masahiro IshinoNTT Communcations; .
  Kazunori FujiwaraJPRS; .
  

• DNS Anomalies and Their Impact on DNS Cache Servers
  Speakers:
  Chika Yoshimura, NTT Communcations; Katsuyasu Toyama, NTT Labs; Keisuke IshibashiNTT Labs; .
  Tsuyoshi ToyonoNTT Labs; .
  Masahiro IshinoNTT Communcations; .
  Kazunori FujiwaraJPRS; .
  

• DNSSEC Deployment: Big Steps Forward; Several Steps to Go
  Speakers:
  Steve Crocker, Shinkuro; Rob Austein, Internet Systems Consortium; Russ Mundy, SPARTA, Inc.; Suresh Krishnaswamy, SPARTA, Inc.;

• DNSSEC Deployment: Big Steps Forward; Several Steps to Go
  Speakers:
  Steve Crocker, Shinkuro; Rob Austein, Internet Systems Consortium; Russ Mundy, SPARTA, Inc.; Suresh Krishnaswamy, SPARTA, Inc.;

• DNSSEC Deployment: Big Steps Forward; Several Steps to Go
  Speakers:
  Steve Crocker, Shinkuro; Rob Austein, Internet Systems Consortium; Russ Mundy, SPARTA, Inc.; Suresh Krishnaswamy, SPARTA, Inc.;

• DNSSEC Deployment: Big Steps Forward; Several Steps to Go
  Speakers:
  Steve Crocker, Shinkuro; Rob Austein, Internet Systems Consortium; Russ Mundy, SPARTA, Inc.; Suresh Krishnaswamy, SPARTA, Inc.;

• Tracking Global Threats with the Internet Motion Sensor
  Speakers:
  Michael BaileyUniversity of Michigan; .
  Evan CookeUniversity of Michigan; .
  Danny McPhersonArbor Networks; .
  Tim BattlesAT&T; .
  

• Tracking Global Threats with the Internet Motion Sensor
  Speakers:
  Michael BaileyUniversity of Michigan; .
  Evan CookeUniversity of Michigan; .
  Danny McPhersonArbor Networks; .
  Tim BattlesAT&T; .
  

• Tracking Global Threats with the Internet Motion Sensor
  Speakers:
  Michael BaileyUniversity of Michigan; .
  Evan CookeUniversity of Michigan; .
  Danny McPhersonArbor Networks; .
  Tim BattlesAT&T; .
  

• Tracking Global Threats with the Internet Motion Sensor
  Speakers:
  Michael BaileyUniversity of Michigan; .
  Evan CookeUniversity of Michigan; .
  Danny McPhersonArbor Networks; .
  Tim BattlesAT&T; .
  

• Detecting Inconsistent Advertisements from Neighboring ASes
  Speakers:
  Nick FeamsterMIT; .
  Z. Morley MaoUniversity of Michigan; .
  Jennifer RexfordAT&T Research; .
  

• Detecting Inconsistent Advertisements from Neighboring ASes
  Speakers:
  Nick FeamsterMIT; .
  Z. Morley MaoUniversity of Michigan; .
  Jennifer RexfordAT&T Research; .
  

• Detecting Inconsistent Advertisements from Neighboring ASes
  Speakers:
  Nick FeamsterMIT; .
  Z. Morley MaoUniversity of Michigan; .
  Jennifer RexfordAT&T Research; .
  

• LinkRank: A Tool for Diagnosis of BGP Routing Dynamics
  Speakers:
  Mohit Lad, UCLA; Lixia ZhangUCLA; .
  Dan MasseyColorado State University; .
  

• LinkRank: A Tool for Diagnosis of BGP Routing Dynamics
  Speakers:
  Mohit Lad, UCLA; Lixia ZhangUCLA; .
  Dan MasseyColorado State University; .
  

• LinkRank: A Tool for Diagnosis of BGP Routing Dynamics
  Speakers:
  Mohit Lad, UCLA; Lixia ZhangUCLA; .
  Dan MasseyColorado State University; .
  

• Life and Times of J-Root
  Speakers:
  Piet BarberVerisign; .
  Matt LarsonVerisign; .
  Mark KostersVerisign; .
  Pete ToscanoVerisign; .
  

• Life and Times of J-Root
  Speakers:
  Piet BarberVerisign; .
  Matt LarsonVerisign; .
  Mark KostersVerisign; .
  Pete ToscanoVerisign; .
  

• Life and Times of J-Root
  Speakers:
  Piet BarberVerisign; .
  Matt LarsonVerisign; .
  Mark KostersVerisign; .
  Pete ToscanoVerisign; .
  

• Life and Times of J-Root
  Speakers:
  Piet BarberVerisign; .
  Matt LarsonVerisign; .
  Mark KostersVerisign; .
  Pete ToscanoVerisign; .
  

• RPSLng Status Update
  Speakers:
  Larry Blunk, Merit Network;