Abstract:
Starting from a project funded by the National Key Research and Development Program of China, a distributed BGP routing monitoring platform and a CGTF Looking Glass platform were established. The primary goal was to build a collaborative community that enhances the operational and measurement capabilities of National Research and Education Networks (NRENs) across the Asia Pacific region. CERNET and Tsinghua University have worked closely to address pressing challenges in BGP routing services, with implications for network security and collaboration. Since 2022, the project has received funding from both the APNIC Foundation and Tsinghua University for the further two phases of the project. The achievements have been a collaborative effort involving 19 NRENs and research organizations from various Asia Pacific economies. Moving into the current phase, the project aims to expand collaboration with more international organizations beyond the Asia Pacific region.
Relationship between CERNET and the project:
A notable partnership between CERNET (China Education and Research Network) and Institute for Network Sciences and Cyberspace (INSC) at Tsinghua University has led to significant advancements in network connectivity and security:
- Leadership and Technical Development: CERNET and INSC at Tsinghua University serve as the leadership role of this project and share the same management group. A core team composed of CERNET and INSC staff at Tsinghua University organizes and manages the project, as well as conducting technical research and development. They oversee the project’s planning, design, development, testing, and deployment.
- Providing Support and Resources: As the lead team in the project, CERNET and INSC staff at Tsinghua University provide a range of services such as financial support, personnel management, and network resources. These resources are used for project management, technical research and development, ensuring the project’s smooth execution.
- Laying the Foundation for International Collaboration: This project’s partners include NREN organizations from various economies across the Asia Pacific region, and CERNET, the biggest NREN in China. CERNET has extensive experience in management, technical work, and international collaboration through its long-standing involvement and close cooperative relationships with APAN and global NRENs. It is through the reputation and achievements of CERNET and Tsinghua University that the project successfully invited participation from 19 entities across different economies. The collaboration is due to shared understanding among member organizations regarding APAN’s common goals and objectives, and a mutual recognition of the importance of academic cooperation in the Asia Pacific region.
CERNET and Tsinghua University recognize and share the importance of APAN’s mission. By empowering NRENs with enhanced network capacity, they are laying the groundwork for stronger academic connections and more reliable digital infrastructure.
Addressing Critical Challenges:
BGP routing is a key infrastructure of the Internet, yet networks and engineers across the Asia Pacific region face a number of challenges related to BGP routing services, including network operation, measurement, security, and knowledge sharing. This project was initiated and implemented to address these particular issues.
Project Achievements:
- Building a Collaborative Community:
- The project established a governance structure and conducted regular meetings to foster collaboration among partners.
- Activities included knowledge sharing, material search, study, testing, and solution development tailored to partners’ needs.
- Bilateral meetings ensured all partners’ needs were considered in project planning and execution.
- Establishing Monitoring and Measurement Platforms:
- Deployed a BGP routing monitoring platform and a CGTF Looking Glass platform across the region.
- Enabled real-time insights into AS information, prefixes, peers, and routing paths for 19 NRENs via BGPWatch and seven NRENs via CGTF Looking Glass.
- Provided subscription-based alarms for AS prefix changes, AS neighbor changes, and prefix routing path alterations.
- BGP Hijacking Detection and Mitigation:
- Security concerns were addressed through the development of a robust hijacking detection and mitigation system, bolstering the region’s network infrastructure.
- The project’s research findings on regional prefix hijacking events were disseminated through publications and academic contributions.
- Addressed security concerns with the development of a BGP hijacking detection and mitigation system.
- Published a report on regional prefix hijacking events during 2022 and contributed two presentations at NOMS 2023 and ISCC 2023.
- Created a robust platform to detect and mitigate BGP hijacking, enhancing network security in the Asia Pacific region.
- Global Knowledge Sharing:
- Conducted training sessions, including RPKI theory, hands-on training, DNSSEC, and CompTIA online courses on network security during APAN meetings.
- Provided a demonstration video and manual for using the BGPWatch platform, benefiting network operators and the broader Internet community.
- Engaged with the community through joint meetings, presentations at APAN, APRICOT, and TNC conferences, and exhibitions at IGF.
BGPWatch Platform
Impacting Network Security and Beyond:
In conclusion, CERNET and Tsinghua University’s collaboration represents a significant step forward in addressing routing challenges and enhancing network security across the Asia Pacific region. By fostering collaboration and deploying innovative solutions, they have made tangible contributions to Internet development, setting a foundation for continued progress and cooperation in the future.
Through collaborative efforts, the project has significantly strengthened network security and resilience. By deploying monitoring platforms, enhancing security measures, and fostering global knowledge sharing, the project has not only empowered NRENs but also contributed to the broader Internet community. The project’s outcomes underscore its pivotal role in advancing network operations and security across the Asia Pacific region.
The project has received substantial positive feedback and recognition from partners and operators, with engineers and partners expressing that the project’s work is of high quality and has the potential to provide substantial assistance in their day-to-day operations.
This success is also a contribution of the invaluable opportunities provided by the APAN community, which has played a pivotal role in fostering collaboration, knowledge exchange, and collective progress. The support and engagement from the APAN community have been instrumental in driving the project’s achievements and broader impact.
Given the positive acclaim received for the project activities, the CERNET and Tsinghua teams are committed to sustaining and supporting the development of the platforms and the community. The system’s functionalities will continue to be refined and made accessible to the wider community, and the team will actively engage with engineers and partners to ensure ongoing improvements and relevance to their evolving needs. This sustained commitment to the project’s objectives will further solidify the development of network security in the Asia Pacific region and beyond.
Related websites:
Project website: https://www.bgper.net
BGPWatch platform: https://bgpwatch.cgtf.net
