Preserving privacy at IXPS

Xiaohe Hu, Arpit Gupta, Nick Feamster, Aurojit Panda, Scott Shenker

Research output: Chapter in Book/Report/Conference proceedingConference contribution


Autonomous systems (ASes) on the Internet increasingly rely on Internet Exchange Points (IXPs) for peering. A single IXP may interconnect several 100s or 1000s of participants (ASes) all of which might peer with each other through BGP sessions. IXPs have addressed this scaling challenge through the use of route servers. However, route servers require participants to trust the IXP and reveal their policies, a drastic change from the accepted norm where all policies are kept private. In this paper we look at techniques to build route servers which provide the same functionality as existing route servers without requiring participants to reveal their policies thus preserving the status quo and enabling wider adoption of IXPs. Prior work has looked at secure multiparty computation (SMPC) as a means of implementing such route servers however this affects performance and reduces policy flexibility. In this paper we take a different tack and build on trusted execution environments (TEEs) such as Intel SGX to keep policies private and flexible. We present results from an initial route server implementation that runs under Intel SGX and show that our approach has 20x better performance than SMPC based approaches. Furthermore, we demonstrate that the additional privacy provided by our approach comes at minimal cost and our implementation is at worse 2.1x slower than a current route server implementation (and in some situations up to 2x faster).

Original languageEnglish (US)
Title of host publicationAPNet 2018 - Proceedings of the 2018 Asia-Pacific Workshop on Networking
PublisherAssociation for Computing Machinery
Number of pages7
ISBN (Electronic)9781450363952
StatePublished - Aug 1 2018
Event2nd Asia-Pacific Workshop on Networking, APNet 2018 - Beijing, China
Duration: Aug 2 2018Aug 3 2018

Publication series

NameACM International Conference Proceeding Series


Conference2nd Asia-Pacific Workshop on Networking, APNet 2018

All Science Journal Classification (ASJC) codes

  • Software
  • Human-Computer Interaction
  • Computer Vision and Pattern Recognition
  • Computer Networks and Communications


  • BGP
  • IXP
  • Policy
  • Privacy


Dive into the research topics of 'Preserving privacy at IXPS'. Together they form a unique fingerprint.

Cite this