{"id":13147,"date":"2021-12-06T19:07:29","date_gmt":"2021-12-07T00:07:29","guid":{"rendered":"https:\/\/carleton.ca\/scs\/?page_id=13147"},"modified":"2021-12-06T19:07:29","modified_gmt":"2021-12-07T00:07:29","slug":"tr-05-09-analysis-of-bgp-prefix-origins-during-googles-may-2005-outage","status":"publish","type":"page","link":"https:\/\/carleton.ca\/scs\/research\/scs-technical-reports\/technical-reports-2005\/tr-05-09-analysis-of-bgp-prefix-origins-during-googles-may-2005-outage\/","title":{"rendered":"TR-05-09: Analysis of BGP Prefix Origins During Google’s May 2005 Outage"},"content":{"rendered":"

Carleton University
\nTechnical Report<\/a> TR-05-09
\nNovember 15, 2005<\/p>\n

Analysis of BGP Prefix Origins During Google’s May 2005 Outage<\/h2>\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
Tao Wan & P.C. Van Oorschot<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n

Abstract<\/h3>\n

Google went down for 15 to 60 minutes around 22:10, May 07, 2005 UTC, which was acknowledged to have been caused by Google internal DNS misconfigurations. Another vulnerable protocol which could have caused such service outage is BGP. To pursue the latter possibility further, we explore how BGP was functioning during that period of time using the Route- Views BGP data set. Interestingly, our investigation reveals that one Autonomous System (i.e., AS174 operated by Cogent), which is apparently independent from Google, mysteriously originated routes for one of the IP prefixes assigned to Google (64.233.161.0\/24) immediately prior to the service outage. As a result, 49.1% of ASes re-advertising routes for 64.233.161.0\/24 switched to the incorrect path. Those poisoned ASes directly serve 1500 IP prefixes, and span a broad range of geographic locations. Since this erroneous prefix origination apparently has not occurred previously, or after this specific instance, we consider that it might have been the result of malicious activity (e.g., compromise of one or more BGP speakers) and contributed at least partially to Google\u0092s service outage.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

TR-05-09.pdf<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Carleton University Technical Report TR-05-09 November 15, 2005 Analysis of BGP Prefix Origins During Google’s May 2005 Outage Tao Wan & P.C. Van Oorschot Abstract Google went down for 15 to 60 minutes around 22:10, May 07, 2005 UTC, which was acknowledged to have been caused by Google internal DNS misconfigurations. Another vulnerable protocol which […]<\/p>\n","protected":false},"author":49,"featured_media":0,"parent":12337,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_relevanssi_hide_post":"","_relevanssi_hide_content":"","_relevanssi_pin_for_all":"","_relevanssi_pin_keywords":"","_relevanssi_unpin_keywords":"","_relevanssi_related_keywords":"","_relevanssi_related_include_ids":"","_relevanssi_related_exclude_ids":"","_relevanssi_related_no_append":"","_relevanssi_related_not_related":"","_relevanssi_related_posts":"","_relevanssi_noindex_reason":"","_mi_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"footnotes":"","_links_to":"","_links_to_target":""},"yoast_head":"\nTR-05-09: Analysis of BGP Prefix Origins During Google's May 2005 Outage - School of Computer Science<\/title>\n<meta name=\"description\" content=\"Carleton University Technical Report TR-05-09 November 15, 2005 Analysis of BGP Prefix Origins During Google's May 2005 Outage Tao Wan & P.C. Van\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/carleton.ca\/scs\/research\/scs-technical-reports\/technical-reports-2005\/tr-05-09-analysis-of-bgp-prefix-origins-during-googles-may-2005-outage\/\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/carleton.ca\/scs\/research\/scs-technical-reports\/technical-reports-2005\/tr-05-09-analysis-of-bgp-prefix-origins-during-googles-may-2005-outage\/\",\"url\":\"https:\/\/carleton.ca\/scs\/research\/scs-technical-reports\/technical-reports-2005\/tr-05-09-analysis-of-bgp-prefix-origins-during-googles-may-2005-outage\/\",\"name\":\"TR-05-09: Analysis of BGP Prefix Origins During Google's May 2005 Outage - School of Computer Science\",\"isPartOf\":{\"@id\":\"https:\/\/carleton.ca\/scs\/#website\"},\"datePublished\":\"2021-12-07T00:07:29+00:00\",\"dateModified\":\"2021-12-07T00:07:29+00:00\",\"description\":\"Carleton University Technical Report TR-05-09 November 15, 2005 Analysis of BGP Prefix Origins During Google's May 2005 Outage Tao Wan & P.C. Van\",\"breadcrumb\":{\"@id\":\"https:\/\/carleton.ca\/scs\/research\/scs-technical-reports\/technical-reports-2005\/tr-05-09-analysis-of-bgp-prefix-origins-during-googles-may-2005-outage\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/carleton.ca\/scs\/research\/scs-technical-reports\/technical-reports-2005\/tr-05-09-analysis-of-bgp-prefix-origins-during-googles-may-2005-outage\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/carleton.ca\/scs\/research\/scs-technical-reports\/technical-reports-2005\/tr-05-09-analysis-of-bgp-prefix-origins-during-googles-may-2005-outage\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/carleton.ca\/scs\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Research\",\"item\":\"https:\/\/carleton.ca\/scs\/research\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"SCS Technical Reports\",\"item\":\"https:\/\/carleton.ca\/scs\/research\/scs-technical-reports\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Technical Reports 2005\",\"item\":\"https:\/\/carleton.ca\/scs\/research\/scs-technical-reports\/technical-reports-2005\/\"},{\"@type\":\"ListItem\",\"position\":5,\"name\":\"TR-05-09: Analysis of BGP Prefix Origins During Google’s May 2005 Outage\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/carleton.ca\/scs\/#website\",\"url\":\"https:\/\/carleton.ca\/scs\/\",\"name\":\"School of Computer Science\",\"description\":\"Carleton University\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/carleton.ca\/scs\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"TR-05-09: Analysis of BGP Prefix Origins During Google's May 2005 Outage - School of Computer Science","description":"Carleton University Technical Report TR-05-09 November 15, 2005 Analysis of BGP Prefix Origins During Google's May 2005 Outage Tao Wan & P.C. Van","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/carleton.ca\/scs\/research\/scs-technical-reports\/technical-reports-2005\/tr-05-09-analysis-of-bgp-prefix-origins-during-googles-may-2005-outage\/","twitter_misc":{"Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/carleton.ca\/scs\/research\/scs-technical-reports\/technical-reports-2005\/tr-05-09-analysis-of-bgp-prefix-origins-during-googles-may-2005-outage\/","url":"https:\/\/carleton.ca\/scs\/research\/scs-technical-reports\/technical-reports-2005\/tr-05-09-analysis-of-bgp-prefix-origins-during-googles-may-2005-outage\/","name":"TR-05-09: Analysis of BGP Prefix Origins During Google's May 2005 Outage - School of Computer Science","isPartOf":{"@id":"https:\/\/carleton.ca\/scs\/#website"},"datePublished":"2021-12-07T00:07:29+00:00","dateModified":"2021-12-07T00:07:29+00:00","description":"Carleton University Technical Report TR-05-09 November 15, 2005 Analysis of BGP Prefix Origins During Google's May 2005 Outage Tao Wan & P.C. Van","breadcrumb":{"@id":"https:\/\/carleton.ca\/scs\/research\/scs-technical-reports\/technical-reports-2005\/tr-05-09-analysis-of-bgp-prefix-origins-during-googles-may-2005-outage\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/carleton.ca\/scs\/research\/scs-technical-reports\/technical-reports-2005\/tr-05-09-analysis-of-bgp-prefix-origins-during-googles-may-2005-outage\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/carleton.ca\/scs\/research\/scs-technical-reports\/technical-reports-2005\/tr-05-09-analysis-of-bgp-prefix-origins-during-googles-may-2005-outage\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/carleton.ca\/scs\/"},{"@type":"ListItem","position":2,"name":"Research","item":"https:\/\/carleton.ca\/scs\/research\/"},{"@type":"ListItem","position":3,"name":"SCS Technical Reports","item":"https:\/\/carleton.ca\/scs\/research\/scs-technical-reports\/"},{"@type":"ListItem","position":4,"name":"Technical Reports 2005","item":"https:\/\/carleton.ca\/scs\/research\/scs-technical-reports\/technical-reports-2005\/"},{"@type":"ListItem","position":5,"name":"TR-05-09: Analysis of BGP Prefix Origins During Google’s May 2005 Outage"}]},{"@type":"WebSite","@id":"https:\/\/carleton.ca\/scs\/#website","url":"https:\/\/carleton.ca\/scs\/","name":"School of Computer Science","description":"Carleton University","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/carleton.ca\/scs\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"}]}},"acf":{"banner_image_type":"none","banner_button":"no"},"_links":{"self":[{"href":"https:\/\/carleton.ca\/scs\/wp-json\/wp\/v2\/pages\/13147"}],"collection":[{"href":"https:\/\/carleton.ca\/scs\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/carleton.ca\/scs\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/carleton.ca\/scs\/wp-json\/wp\/v2\/users\/49"}],"replies":[{"embeddable":true,"href":"https:\/\/carleton.ca\/scs\/wp-json\/wp\/v2\/comments?post=13147"}],"version-history":[{"count":1,"href":"https:\/\/carleton.ca\/scs\/wp-json\/wp\/v2\/pages\/13147\/revisions"}],"predecessor-version":[{"id":13148,"href":"https:\/\/carleton.ca\/scs\/wp-json\/wp\/v2\/pages\/13147\/revisions\/13148"}],"up":[{"embeddable":true,"href":"https:\/\/carleton.ca\/scs\/wp-json\/wp\/v2\/pages\/12337"}],"wp:attachment":[{"href":"https:\/\/carleton.ca\/scs\/wp-json\/wp\/v2\/media?parent=13147"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}