Validating BGP Filters with Active BGP Advertisement Manipulation

Organization

Departamento de Ciência da Computação, Universidade Federal de Minas Gerais

Tipo

Academic Sector

Años

2026

Paises

Brasil

BGP filters are essential for preventing route leaks and prefix hijacks, but misconfigured or outdated filters can unintentionally block legitimate route propagation and are often difficult to detect until a network disruption occurs. Because BGP policies are largely opaque, these errors may remain hidden while traffic continues to reach its destination through alternative paths. This project will develop techniques that allow network operators to actively test and validate BGP filters by manipulating route advertisements and controlling how prefixes propagate through upstream networks. Using mechanisms such as selective advertisements, BGP communities, and BGP poisoning, the research will seek to identify incorrect filtering not only at direct providers but also several AS hops away. The techniques will be evaluated in real-world scenarios through the PEERING Testbed, and the resulting tool will be packaged for use by network operators in their own environments. The project will also seek collaboration with South American operators, IXPs, and research institutions to expand PEERING’s presence and improve visibility of networks across the LACNIC region.