cloudflare / isbgpsafeyet.com

Is BGP safe yet?
https://isbgpsafeyet.com
MIT License
282 stars 317 forks source link

Full path validation #684

Open danog opened 1 year ago

danog commented 1 year ago

Would also be nice to have full path validation, currently the test only checks if at least one of the routers on the path implements ROV, not all of them.

Should be easy to implement, just set up a different endpoint with an invalid route, and a less specific valid route matching the prefix.

liuxyon commented 4 days ago

Is there any way to ensure full path security now?

danog commented 4 days ago

It can be tested through https://rpkitest.nlnetlabs.net/