HO CHI MINH CITY UNIVERSITY OF TECHNOLOGY VIET NAM NATIONAL UNIVERSITY, HO CHI MINH CITY HO CHI MINH CITY UNIVERSITY OF TECHNOLOGY FACULTY OF COMPUTER SCIENCE & ENGINEERING THESIS BUILIDING MONITORING TOOL FOR CORE NETWORK USING BGP PROTOCOL MAJOR: COMPUTER ENGINEERING INSTRUCTOR: PhD. NGUYEN LE DUY LAI REVIEWER: PhD. NGUYEN DUC THAI STUDENT : NGUYEN DINH TUAN Î 1552411 VO NAM HAI - 1652178 HO CHI MINH City, December 2021 Monitoring tool for BGP Protocol Page 0 HO CHI MINH CITY UNIVERSITY OF TECHNOLOGY A萎I H窺C QU渦C GIA TP.HCM C浦NG HÒA XÃ H浦I CH曳 PIJ C"XK烏T NAM ---------- A瓜c l壱p - T詠 do - H衣nh phúc VT姶云PI"A萎I H窺C BÁCH KHOA KHOA: Khoa h丑c và K悦 thu壱t Máy tính NHI烏M V影 LU一N ÁN T渦T NGHI烏P B浦 MÔN: H羽 th嘘ng và M衣ng Chú ý: Sinh viên phVi dán tぜ này vào trang nhXt cてa bVn thuyxt trình H窺 VÀ TÊN: Võ Nam H違i ______________________ MSSV: 1652178 ______ NGÀNH: Khoa h丑c Máy tính __________ L閏P: _______________ 30"A亥w"8隠 lu壱n án: (Ti院ng Vi羽t): Xây d詠ng công c映 giám sát m衣ng lõi s穎 d映ng giao th泳c BGP (English): Building monitoring tool for the core network using BGP protocol. Nhi羽m v映 (yêu c亥u v隠 n瓜i dung và s嘘 li羽w"dcp"8亥u): Objectives: The BGP protocol has become a fundamental part of the operation and performance of the Internet.
As the de facto Internet inter domain routing protocol, the BGP protocol has a number of vulnerabilities and weaknesses. Monitoring BGP is an effective way to improve the security of inter domain routing In addition, Software- Defined Networking (SDN) appears with the idea to decouple the vertically coupled architecture and reconstruct the Internet as a modular structure and Border Gateway Protocol (BGP) participates in transitioning the existing networks to SDN. Therefore, it is obvious that we should undertake the BGP monitoring process when monitoring applications or those services that are offered being Internet the basis of its communication. Tasks: X Get the background by studying the BGP protocol X List main challenges as far as BGP monitoring is concerned X Raise problems that can be evaluated according to the fundamental processes of the BGP protocol.
X Define the monitoring metrics and functionality to monitor BGP routing information on the routing device Monitoring tool for BGP Protocol Page 1 HO CHI MINH CITY UNIVERSITY OF TECHNOLOGY X Propose a monitoring platform and build a monitoring tool for the BGP network X Evaluate the real need for a possible monitoring scheme. Required results: X Report and demo of monitoring tool operations 3. Ngày giao nhi羽m v映 lu壱n án: ___/___/___. Ngày hoàn thành nhi羽m v映: ___/___/___.
H丑 tên gi違ng viên h逢噂ng d磯n: Ph亥p"j逢噂ng d磯n: 1) T.S Nguy宇n Lê Duy Lai 100% N瓜i dung và yêu c亥w"NXVP"8«"8逢嬰c thông qua B瓜 môn. Pi {"00000000"vjƒpi"000000000"p<o"0000000000 CH曳 NHI烏M B浦 MÔN GI謂PI"XKçP"J姶閏NG D郁N CHÍNH (Ký và ghi rõ hが tên) (Ký và ghi rõ hが tên) Nguy宇n Lê Duy Lai PHYN DÀNH CHO KHOA, Bし MÔN: Pi逢運i duy羽t (ch医o"u挨"d瓜):________________________ A挨p"x鵜: _______________________________________ Ngày b違o v羽: __________________________________ Ak吋m t鰻ng k院t: _________________________________ P挨k"n逢w"vt英 lu壱n án: _____________________________ Monitoring tool for BGP Protocol Page 2 HO CHI MINH CITY UNIVERSITY OF TECHNOLOGY A萎I H窺C QU渦C GIA TP.HCM C浦NG HÒA XÃ H浦I CH曳 PIJ C"XK烏T NAM ---------- A瓜c l壱p - T詠 do - H衣nh phúc VT姶云PI"A萎I H窺C BÁCH KHOA KHOA: Khoa h丑c và K悦 thu壱t Máy tính NHI烏M V影 LU一N ÁN T渦T NGHI烏P B浦 MÔN: H羽 th嘘ng và M衣ng Chú ý: Sinh viên phVi dán tぜ này vào trang nhXt cてa bVn thuyxt trình H窺 VÀ TÊN: Nguy宇p"A·pj"Vw医n ________________ MSSV: 1552411 ______ NGÀNH: Khoa h丑c Máy tính __________ L閏P: _______________ 30"A亥w"8隠 lu壱n án: (Ti院ng Vi羽t): Xây d詠ng công c映 giám sát m衣ng lõi s穎 d映ng giao th泳c BGP (English): Building monitoring tool for the core network using BGP protocol. Nhi羽m v映 (yêu c亥u v隠 n瓜i dung và s嘘 li羽w"dcp"8亥u): Objectives: The BGP protocol has become a fundamental part of the operation and performance of the Internet. As the de facto Internet inter domain routing protocol, the BGP protocol has a number of vulnerabilities and weaknesses.
Monitoring BGP is an effective way to improve the security of inter domain routing In addition, Software- Defined Networking (SDN) appears with the idea to decouple the vertically coupled architecture and reconstruct the Internet as a modular structure and Border Gateway Protocol (BGP) participates in transitioning the existing networks to SDN. Therefore, it is obvious that we should undertake the BGP monitoring process when monitoring applications or those services that are offered being Internet the basis of its communication. Tasks: X Get the background by studying the BGP protocol X List main challenges as far as BGP monitoring is concerned X Raise problems that can be evaluated according to the fundamental processes of the BGP protocol. X Define the monitoring metrics and functionality to monitor BGP routing information on the routing device Monitoring tool for BGP Protocol Page 3 HO CHI MINH CITY UNIVERSITY OF TECHNOLOGY X Propose a monitoring platform and build a monitoring tool for the BGP network X Evaluate the real need for a possible monitoring scheme.
Required results: X Report and demo of monitoring tool operations 3. Ngày giao nhi羽m v映 lu壱n án: ___/___/___. Ngày hoàn thành nhi羽m v映: ___/___/___. H丑 tên gi違ng viên h逢噂ng d磯n: Ph亥p"j逢噂ng d磯n: 2) T.S Nguy宇n Lê Duy Lai 100% N瓜i dung và yêu c亥w"NXVP"8«"8逢嬰c thông qua B瓜 môn.
Pi {"00000000"vjƒpi"000000000"p<o"0000000000 CH曳 NHI烏M B浦 MÔN GI謂PI"XKçP"J姶閏NG D郁N CHÍNH (Ký và ghi rõ hが tên) (Ký và ghi rõ hが tên) Nguy宇n Lê Duy Lai PHYN DÀNH CHO KHOA, Bし MÔN: Pi逢運i duy羽t (ch医o"u挨"d瓜):________________________ A挨p"x鵜: _______________________________________ Ngày b違o v羽: __________________________________ Ak吋m t鰻ng k院t: _________________________________ P挨k"n逢w"vt英 lu壱n án: _____________________________ Monitoring tool for BGP Protocol Page 4 HO CHI MINH CITY UNIVERSITY OF TECHNOLOGY VT姶云PI"A萎I H窺C BÁCH KHOA C浦NG HÒA XÃ H浦I CH曳 PIJ C"XK烏T NAM KHOA KH & KT MÁY TÍNH A瓜c l壱p - T詠 do - H衣nh phúc ---------------------------- Ngày 24 tháng 12 p<o 2021. PHI蔭U CH遺M B謂O V烏 LVTN *F pj"ejq"pi⇔ぜk"j⇔ずng ddn/phVn biうn) 1. H丑 và tên SV: ‚ X "Pco"J違i - MSSV: 1652178 Piw{宇p"A·pj"Vw医n - MSSV: 1552411 Ngành (chuyên ngành): 40"A隠 tài: BUILIDING MONITORING TOOL FOR CORE NETWORK USING BGP PROTOCOL 3. H丑 v‒p"pi逢運k"j逢噂ng d磯n/ph違n bi羽n: Nguy宇n Lê Duy Lai 4.
T鰻ng quát v隠 b違n thuy院t minh: S嘘 trang: 64 S嘘 ej逢挨pi< 5 S嘘 b違ng s嘘 li羽u: S嘘 hình v胤: 53 S嘘 tài li羽u tham kh違o: 13 Ph亥n m隠m tính toán: Hi羽n v壱t (s違n ph育m) 5. T鰻ng quát v隠 các b違n v胤: - S嘘 b違n v胤: B違n A1: B違n A2: Kh鰻 khác: - S嘘 b違n v胤 v胤 tay S嘘 b違n v胤 trên máy tính: 6. Nh英pi"逢w"8k吋m chính c栄a LVTN: In this dissertation, the thesis has been studying the BGP as well as the challenges of BGP monitoring. Some monitoring metrics and functionality to monitor BGP routing information on the routing devices are raised in such as peer_as, peer_ip, as_path, asn.
The thesis presented how to design and build a monitoring tool for the BGP network following the Cooperative Information Sharing Model (CoISM). The implementation of the BGP Monitor tool helps in the identification of BGP IP prefix disputes and their categorization as BGP hijacking incidents. BGP Monitor then analyses BGP communications that have been Monitoring tool for BGP Protocol Page 5 HO CHI MINH CITY UNIVERSITY OF TECHNOLOGY archived in MRT files. This tool is evaluated with the number of prefix counts and elapsed time for processing file dumps.
Nh英ng thi院u sót chính c栄a LVTN: However, the presented topic is still limited including the inability to support more issues such as BGP Route Misconfigurations, Route Flapping, Infrastructure Failures, DDoS Attacks. The tool built based on CoISM missed the real-time processing. The thesis needs a more thorough survey on some most common BGP Monitoring tools that deliver frequent updates, as often as each minute, giving users the most up-to-date information quickly and minimizing the delay needed to identify and respond to issues. :0"A隠 ngh鵜<"A逢嬰c b違o v羽 ¸ B鰻 uwpi"vj‒o"8吋 b違o v羽 ¸ Mj»pi"8逢嬰c b違o v羽 ¸ 9.
3 câu h臼i SV ph違i tr違 l運k"vt逢噂c H瓜k"8欝ng: a. Why do BGP problems occur? Give some examples on BGP issues if someone starts to broadcast a duplicate address or simply one that overlaps with an existing subnet? b. In which ways a route hijacking can occur deliberately or by accident? c. How a serious hijack case can affect the entire Internet? (consequences of route hijacking) 320"Aƒpj"ikƒ"ejwpi"*d茨ng ch英: gi臼i, khá, TB): Ak吋m : 7.5 /10 Ký tên (ghi rõ h丑 tên) Nguy宇n Lê Duy Lai Monitoring tool for BGP Protocol Page 6 HO CHI MINH CITY UNIVERSITY OF TECHNOLOGY VT姶云PI"A萎K"J窺E"DèEJ"MJQC C浦NG HÒA XÃ H浦I CH曳 NGH A VI烏T NAM KHOA KH & KT MÁY TÍNH A瓜c l壱p - T詠 do - H衣nh phúc ---------------------------- Pi {""46"vjƒpi"34"p<o"4243" PHI蔭U CH遺M B謂O V烏 LVTN *F pj"ejq"pi⇔ぜk"j⇔ずpi"fdp1rjVp"dkうp+" 1.
H丑 và tên SV: Nguy宇n Aình Tu医n Î MSSV: 1552411 Võ Nam H違i Î MSSV: 1652178 Ngành (chuyên ngành): Computer Engineering 2. A隠 tài: Building Monitoring Tool For Core Network Using BGP Protocol. H丑 tên ng逢運i ph違n bi羽n: Nguy宇n A泳c Thái 4. T鰻ng quát v隠 b違n thuy院t minh: S嘘 trang: S嘘 ch逢挨ng: S嘘 b違ng s嘘 li羽u S嘘 hình v胤: S嘘 tài li羽u tham kh違o: Ph亥n m隠m tính toán: Hi羽n v壱t (s違n ph育m) 5.
T鰻ng quát v隠 các b違n v胤: - S嘘 b違n v胤: B違n A1: B違n A2: Kh鰻 khác: - S嘘 b違n v胤 v胤 tay S嘘 b違n v胤 trên máy tính: 6. Nh英ng 逢u 8i吋m chính c栄a LVTN: ̋ Students completed a monitoring tool and demonstrated it. Nh英ng thi院u sót chính c栄a LVTN: ̋ Thesis organization: o Chapter and section numbering problem, spelling problem. o Section titles do not ocvej"ugevkqp"eqpvgpvu."ÐCko"cpf"QdlgevkxguÑ"ugevkqp"kp"vjg" Introduction chapter does not contain any aim and objectives.
̋ Students focused on building a monitoring tool (a software), but did not follow software development life cycle (Requirement analysis, Design, Development, Testing, Ockpvgpcpeg."È+0"" ̋ Students did not evaluate the built monitoring tool. A隠 ngh鵜: A逢嬰c b違o v羽 R B鰻 sung thêm 8吋 b違o v羽 o Không 8逢嬰c b違o v羽 o 9. 3 câu h臼i SV ph違i tr違 l運i tr逢噂c H瓜i 8欝ng: a. Briefly describe BGP protocol, and provide the contribution of your work.
Show functionalities of the your software (monitoring tool) and describe them. Prove that the your software works properly. Monitoring tool for BGP Protocol Page 7 HO CHI MINH CITY UNIVERSITY OF TECHNOLOGY 10. Aánh giá chung (b茨ng ch英: gi臼i, khá, TB): TB Ai吋m : 5/10 Ký tên (ghi rõ h丑 tên) Nguy宇n A泳c Thái Monitoring tool for BGP Protocol Page 8 HO CHI MINH CITY UNIVERSITY OF TECHNOLOGY COMMITMENT The team warrants that everything presented in the report is the work of the team itself - except for the cited reference knowledge as well as the sample source code provided by the manufacturer itself, completely not copied from any other source.
If the commitment is contrary to the truth, the group would like to take all responsibility before the Dean of the Faculty and the School Rector. Nguyen Dinh Tuan, Vo Nam Hai Monitoring tool for BGP Protocol Page 9 HO CHI MINH CITY UNIVERSITY OF TECHNOLOGY ACKNOWLEDGEMENT Firstly, we would like to express our sincere gratitude to our advisor PhD. Nguyen Le Duy Lai for the continuous support of our thesis, for his patience, motivation, and immense knowledge. His guidance helped us in all the time of researching and writing this thesis.
We could not have imagined having a better advisor and mentor for our thesis. Besides our advisor, we would like to show gratitude to Ho Chi Minh City University of Technology for giving us the opportunity to learn great lessons of theory and practical experience. And special thanks also give to the support and kindness from lecturers in Computer Science and Engineering Department as well as Office for International Study Program - OISP of Ho Chi Minh City University of Technology. Monitoring tool for BGP Protocol Page 10 HO CHI MINH CITY UNIVERSITY OF TECHNOLOGY ABSTRACT Nowadays, the BGP protocol has become a fundamental part of the operation and performance of the Internet.