On May 20th 2025 a BGP message was propagated that triggered some surprising (to many) behaviors with two major BGP implementations that are often used for carrying internet traffic. In a new blog post, I will dissect what that message was, and my thoughts on how it happened: https://blog.benjojo.co.uk/post/bgp-attr-40-junos-arista-session-reset-incident
BGP handling bug causes widespread internet routing instability
one honk maybe more
inverse@chaos.social
replied 27 May 2025 13:28 +0000
in reply to: https://benjojo.co.uk/u/benjojo/h/sXxlw5Q2f2l1mv5ZCn
benjojo
replied 27 May 2025 13:36 +0000
in reply to: https://chaos.social/users/inverse/statuses/114580029886237629
@inverse thanks! A very non zero % of time was spent crafting the most unhinged social media preview image for the post
erincandescent@akko...
posted 27 May 2025 11:05 +0000
Protip for people in governments writing critical infrastucture requirements: consider language like “Your BGP implementation must survive X hours of fuzzing by<tool> without crashing or resetting the session” @benjojo
RE: https://benjojo.co.uk/u/benjojo/h/sXxlw5Q2f2l1mv5ZCn