Network Intelligence & Protection

Network Intelligence: Using BGP Data to Protect Your Prefixes

Routing data tells you when your prefixes are hijacked, leaked or invalid. Here is how to put it to work.

Infivate Networks Team 1 min read
Network Intelligence: Using BGP Data to Protect Your Prefixes

Your routes, seen from outside

Your network looks healthy from inside even when the rest of the internet sees something different. Public route collectors show how your prefixes propagate globally and who originates them.

What to watch

  • Unexpected origin ASNs for your prefixes
  • More-specific announcements of your space
  • RPKI status of every announced prefix
  • Visibility drops after maintenance
  • Sudden path changes through unusual transit

Act on alerts quickly

When a hijack or leak appears, contact the offending network and upstreams with evidence, and consider announcing more-specifics temporarily. Valid ROAs make many networks reject the bogus route automatically.

Try it now

Our free BGP security and looking glass tools show RPKI validity, MOAS conflicts, origin history and path details for any prefix or ASN.

How Infivate Networks can help

Infivate Networks delivers Network Intelligence & Protection for organisations across India — from assessment and design to implementation and ongoing support. Talk to our team or email [email protected].

Frequently asked questions

Multiple Origin AS — when the same prefix is announced by more than one ASN. Sometimes legitimate (anycast), often a misconfiguration or hijack.

They stop origin hijacks at networks performing route origin validation, but not path manipulation; monitoring is still needed.

Need help with this?

Talk to the Infivate Networks team.

Please enter your name.
Please enter a valid email.
Please enter a valid phone number.
Please tell us a little about your requirement.
Please accept to continue.
Your details are encrypted in transit and never shared.

Keep reading

Get expert insights in your inbox

Practical updates on network security, connectivity and interconnection from the Infivate Networks team. One email, no spam.