Sonic.net does not implement Border Gateway Protocol (BGP) safely!

[Tribune]

This tool from Cloudfare says Sonic traffic is vulnerable to BGP hijacking.

[pandata]

TLDR:

BGP disruptions happen frequently, generally by accident. But BGP can also be hijacked for large-scale spying, data interception, or as a sort of denial of service attack. Just last week, United States Executive Branch agencies moved to block China Telecom from offering services in the US, because of allegedly malicious activity that includes BGP attacks.

On Friday, the company launched Is BGP Safe Yet​, a site that makes it easier for anyone to check whether their internet service provider has added the security protections and filters that can make BGP more stable.

-source: ARS

Is there a timeline when Sonic will implement RPKI?

BGP

bgp.png (30.41 KiB) Viewed 7602 times

[tcsf108]

https://isbgpsafeyet.com/

Your ISP (Sonic Telecom (Sonic.net, Inc.), AS46375) does not implement BGP safely.

It should be using RPKI to protect the Internet from BGP hijacks.

Details

fetch https://valid.rpki.cloudflare.com
correctly accepted valid prefixes

fetch https://invalid.rpki.cloudflare.com
incorrectly accepted invalid prefixes

[anthony.n]

We are aware of this issue and we are working on implementing RPKI as soon as we can! We will let you know when an update goes live or when we have a better ETA from our engineers.

[alexis.frasz]

Please do update us on the ETA. We love Sonic, but this is a serious concern that, sadly, will make us reconsider our options if unaddressed.

[skyweir]

Hi Guys,

We're 3 years out now and this still has not been adopted. What happened?

[nathanpayne]

I see from https://isbgpsafeyet.com/ that Sonic does not implement BGP safely. Given the security risk, is there a fix on the roadmap?

fetch https://valid.rpki.isbgpsafeyet.com
correctly accepted valid prefixes

fetch https://invalid.rpki.isbgpsafeyet.com
incorrectly accepted invalid prefixes

[jerrielm]

Hello!

We are signing our ROAs but not validating/rejecting from our peers yet. We are moving to validation with our top peers in the coming months and will continue to roll that project forward with more and more of our peers as time progresses.

Best Wishes!