Skip Navigation Links
Überblick
The fragility of the internet (by Klaus Gheri) 
23.02.2009 
 

Originally built to withstand a nuclear holocaust is  what we now call the internet. Its flexible use of multiple redundant paths is one of its biggest conceptual assets.

However, the routing protocols used to build the internet along with the name resolution system (DNS) have not been built with security in mind.
Both BGP and DNS have in common that technical devices learn from other devices, that information is shared and propagated.  
Thus also flawed or mal-formatted information is processed and propagated. This is what happend recently with BGP routers getting confused by overlong AS paths.

While we may expect some improvement from the future transition to IPv6 which will also provide improved security for known protocols for the foreseeable future we have to cope with the shortcomings of the current global network infrastructure.
Not relying on a single provider but rather on two, if possible fiercely competing ones,  for the communication between own corporate locations and to the internet is one of the few options there are to counter a surplus of opaque and as shown  fallible redundance with  controlled redundance as provided by phion's traffic intelligence.

 Comment

Do you have a comment on this blog?

Feel free to contact us!