Finding a needle in a haystack: Pinpointing significant BGP routing changes in an IP network

Jian Wu, Zhuoqing Morley Mao, Jennifer Rexford, Jia Wang

Research output: Contribution to conferencePaperpeer-review

77 Scopus citations

Abstract

The performance of a backbone network is vulnerable to interdomain routing changes that affect how traffic travels to destinations in other Autonomous Systems (ASes). Despite having poor visibility into these routing changes, operators often need to react quickly by tuning the network configuration to alleviate congestion or by notifying other ASes about serious reachability problems. Fortunately, operators can improve their visibility by monitoring the Border Gateway Protocol (BGP) decisions of the routers at the periphery of their AS. However, the volume of measurement data is very large and extracting the important information is challenging. In this paper, we present the design and evaluation of an online system that converts millions of BGP update messages a day into a few dozen actionable reports about significant routing disruptions. We apply our tool to two months of BGP and traffic data collected from a Tier-1 ISP backbone and discover several network problems previously unknown to the operators. Validation using other data sources confirms the accuracy of our algorithms and the tool's additional value in detecting routing disruptions.

Original languageEnglish (US)
Pages1-14
Number of pages14
StatePublished - 2005
Event2nd Symposium on Networked Systems Design and Implementation, NSDI 2005 - Boston, United States
Duration: May 2 2005May 4 2005

Conference

Conference2nd Symposium on Networked Systems Design and Implementation, NSDI 2005
CountryUnited States
CityBoston
Period5/2/055/4/05

All Science Journal Classification (ASJC) codes

  • Computer Networks and Communications
  • Control and Systems Engineering

Fingerprint Dive into the research topics of 'Finding a needle in a haystack: Pinpointing significant BGP routing changes in an IP network'. Together they form a unique fingerprint.

Cite this