nanog mailing list archives
tcp md5 bgp attacks?
From: Randy Bush <randy () psg com>
Date: Tue, 14 Aug 2018 14:38:35 -0700
so we started to wonder if, since we started protecting our bgp sessions with md5 (in the 1990s), are there still folk trying to attack? we were unable to find bgp mib counters. there are igp interface counters, but that was not our immediate interest. we did find that md5 failures are logged. looking at my logs for a few years, i find essentially nothing; two 'attackers,' one my own ibgp peer, and one that noted evildoer rob thomas, bgprs01.ord08.cymru.com. we would be interested in data from others. note that we are neither contemplating nor suggesting removing md5 from [y]our bgp sessions. randy
Current thread:
- tcp md5 bgp attacks? Randy Bush (Aug 14)
- Re: tcp md5 bgp attacks? Grant Taylor via NANOG (Aug 14)
- Re: tcp md5 bgp attacks? Job Snijders (Aug 14)
- Re: tcp md5 bgp attacks? Roland Dobbins (Aug 14)
- Re: tcp md5 bgp attacks? Fred Baker (Aug 15)
- Re: tcp md5 bgp attacks? joel jaeggli (Aug 14)
- Re: tcp md5 bgp attacks? Randy Bush (Aug 14)
- Re: tcp md5 bgp attacks? Roland Dobbins (Aug 14)
- Re: tcp md5 bgp attacks? Randy Bush (Aug 15)
- Re: tcp md5 bgp attacks? joel jaeggli (Aug 14)
- Re: tcp md5 bgp attacks? Niels Bakker (Aug 19)
- Re: tcp md5 bgp attacks? Randy Bush (Aug 14)
- Re: tcp md5 bgp attacks? Grant Taylor via NANOG (Aug 14)
