If your internet wobbled last weekend, you have Vodafone India to thank for it
(2021/04/20)
- Reference: 1618893120
- News link: https://www.theregister.co.uk/2021/04/20/vodafone_india_bgp_hijack/
- Source link:
Vodafone Idea, the Indian limb of the mega-carrier, has been fingered as the source of what’s been described as a “major BGP hijack” by Mutually Agreed Norms for Routing Security (MANRS), an organisation that “provides crucial fixes to reduce the most common routing threats.”
Early on Saturday, net-watchers noticed that an autonomous system number (ASN) held by Vodafone Idea published over 30,000 bogus border gateway protocol (BGP) prefixes.
[1]
BGP,HJ,hijacked prefix AS270497 24.152.117.0/24, RUTE MARIA DA CUNHA, BR,-,By AS55410 VIL-AS-AP Vodafone Idea Ltd, IN, [2]https://t.co/WvDvQMMDCf — Cisco BGPStream (@bgpstream) [3]April 16, 2021
The incorrect publication meant that Vodafone Idea effectively claimed to oversee around 34,000 networks that it has no role in operating.
[4]
Traffic to Vodafone Idea spiked to 13 times usual levels, and traffic to other networks drained away into an internet black hole.
The cause of the problem appears to have been an error, either by Vodafone Idea or one of its clients. The error was caught within a few minutes, but the faulty routes rolled out for at least an hour afterwards.
India's telecoms given ten years to pay $22bn in back taxes they've already disputed for a decade [5]READ MORE
Digital experience monitoring outfit Catchpoint [6]analysed the incident and said it spotted impacts on organisations including Google, Akamai, Edgecast, Deutsche Telekom, TIM, Claro, Orange, Telefonica), and several other Vodafone operations around the world.
Whatever the cause, Catchpoint and MANRS have slammed the carrier, suggesting that it could and should have been using well-known techniques that stop this sort of error from spreading and inconveniencing others.
[7]
Route filtering to rule out use of known bad routes is one such technique, and MANRS helps carriers to do it. But Catchpoint’s analysis suggests Vodafone Idea doesn’t use it, which was one reason this incident got big, fast. ®
Get our [8]Tech Resources
[1] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/networks&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YH6mOQ-NhhpvTW1NBhhJrgAAAAw&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[2] https://t.co/WvDvQMMDCf
[3] https://twitter.com/bgpstream/status/1383115813004181504?ref_src=twsrc%5Etfw
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/networks&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YH6mOQ-NhhpvTW1NBhhJrgAAAAw&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[5] https://www.theregister.com/2020/09/02/indias_telecoms_given_10_years/
[6] https://blog.catchpoint.com/2021/04/19/vodafone-idea-bgp-leak-global-routing-system-must-implement-manrs
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/networks&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YH6mOQ-NhhpvTW1NBhhJrgAAAAw&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[8] https://whitepapers.theregister.com/
Early on Saturday, net-watchers noticed that an autonomous system number (ASN) held by Vodafone Idea published over 30,000 bogus border gateway protocol (BGP) prefixes.
[1]
BGP,HJ,hijacked prefix AS270497 24.152.117.0/24, RUTE MARIA DA CUNHA, BR,-,By AS55410 VIL-AS-AP Vodafone Idea Ltd, IN, [2]https://t.co/WvDvQMMDCf — Cisco BGPStream (@bgpstream) [3]April 16, 2021
The incorrect publication meant that Vodafone Idea effectively claimed to oversee around 34,000 networks that it has no role in operating.
[4]
Traffic to Vodafone Idea spiked to 13 times usual levels, and traffic to other networks drained away into an internet black hole.
The cause of the problem appears to have been an error, either by Vodafone Idea or one of its clients. The error was caught within a few minutes, but the faulty routes rolled out for at least an hour afterwards.
India's telecoms given ten years to pay $22bn in back taxes they've already disputed for a decade [5]READ MORE
Digital experience monitoring outfit Catchpoint [6]analysed the incident and said it spotted impacts on organisations including Google, Akamai, Edgecast, Deutsche Telekom, TIM, Claro, Orange, Telefonica), and several other Vodafone operations around the world.
Whatever the cause, Catchpoint and MANRS have slammed the carrier, suggesting that it could and should have been using well-known techniques that stop this sort of error from spreading and inconveniencing others.
[7]
Route filtering to rule out use of known bad routes is one such technique, and MANRS helps carriers to do it. But Catchpoint’s analysis suggests Vodafone Idea doesn’t use it, which was one reason this incident got big, fast. ®
Get our [8]Tech Resources
[1] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/networks&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YH6mOQ-NhhpvTW1NBhhJrgAAAAw&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[2] https://t.co/WvDvQMMDCf
[3] https://twitter.com/bgpstream/status/1383115813004181504?ref_src=twsrc%5Etfw
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/networks&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YH6mOQ-NhhpvTW1NBhhJrgAAAAw&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[5] https://www.theregister.com/2020/09/02/indias_telecoms_given_10_years/
[6] https://blog.catchpoint.com/2021/04/19/vodafone-idea-bgp-leak-global-routing-system-must-implement-manrs
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/networks&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YH6mOQ-NhhpvTW1NBhhJrgAAAAw&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[8] https://whitepapers.theregister.com/
Sporting errors...
TJ1
"...should have been using well-known techniques that stop this sport of error ..."
Irony of Typos :)
Re: Sporting errors...
AndrewB57
as also the "major GBP hijack" - poor sterling
"should have been using well-known techniques"
Pascal Monett
Yeah, but that costs money . Vodaphone Idea is there to make money, not spend it.
RPKI and DNSSEC....
vodafone idea need to get it sorted ASAP
they have nothing modern
no IPv6
no DNSSEC
no RPKI
no DANE
wonder why everyone is leaving to Reliance...