Hyperbgp: Robust and Effective Bgp Security Mechanism with Blockchain
Jiang Li,Mingwei Xu,Zhuotao Liu,Zili Meng,Yuan Yang,Qi Li,Yangyang Wang
DOI: https://doi.org/10.2139/ssrn.4199288
2022-01-01
SSRN Electronic Journal
Abstract:The Internet has been evolving for decades with rapidly increasing parties, from thousands of Autonomous Systems (ASes) to hundreds of thousands of ASes nowadays.Unfortunately, the inter domain routing protocol, specifically the Border Gateway Protocol (BGP), is not designed to provide a reliable routing service for hundreds of thousands of ASes.In BGP, a minor misbehavior of AS operators (e.g., intentional attack or unintentional misconfiguration) will cause routing anomaly (e.g., prefix hijack and path manipulation) in a large scale. However, existing solutions to enhance BGP security face the trade-off between robustness against failures and effectiveness in providing real-time and accurate detection.To break the trade-off, we propose HyperBGP, which exploits the decentralization and trustworthiness features of blockchain. We design a blockchain to validate the integrity of a routing path from its upstream ASes, so that BGP will operate functionally as long as more than a half of ASes are functional.To make HyperBGP deployable in practice, we introduce several design blocks to improve the scalability, facilitate deployment and reduce resource consumption of HyperBGP.We implement the prototype and evaluate its security and performance. Our results demonstrate that HyperBGP is robust and effective at securing inter-domain routing against route anomaly and incurs negligible cost in performance.