Enforcing the First AS in BGP AS_PATHs

Source summary: Some recent route hijacks reported by Spamhaus captured our attention. In many of these hijack attempts, an apparent bad actor took advantage of unused autonomous system numbers, or ASNs. Notably in these hijacks, the actor appears to be creating fake AS_PATHs toward destinations, misdirecting traffic down an unexpected path. By creating forged AS_PATHs, the hijacker is attempting to lead traffic somewhere it isn’t normally meant to go while also trying to conceal their identity. A hijacker cou…

Why it matters: Add your own practical explanation here before publishing.

What to do: Add recommended action/checks here.

Read the original source

Original source: Cloudflare Blog