View source for AS 7007 incident

{{Short description|Major disruption of the Internet on April 25, 1997}}
The '''AS 7007 incident''' was a major disruption of the [[Internet]] on April 25, 1997, that started with a [[Engineering:Router (computing)|router]] operated by [[Autonomous system (Internet)|autonomous system]] 7007 (MAI Network Services, although sometimes incorrectly attributed to the Florida Internet Exchange<ref>[http://catless.ncl.ac.uk/Risks/19.12.html#subj1 Peter G. Neumann, "Internet Routing Black Hole", The Risks Digest: Volume 19: Issue 12, Friday 2 May 1997]</ref>) accidentally leaking a substantial part of its entire [[Routing table|routing table]] to the Internet, creating a routing [[Black hole (networking)|black hole]].

Probably because of a bug in the affected router, the routes leaked were deaggregated to [[Classless Inter-Domain Routing|/24]] prefixes, which were more specific than the routes originally present on the Internet, and had the AS path rewritten to 7007, leading the [[Border Gateway Protocol]] (BGP) used by the Internet's routers to prefer the leaked routes. This was then exacerbated by other problems that prevented the routes from disappearing from other networks' routing tables, even after the original router that had sent them had been disconnected. The combination of these factors resulted in an extended disruption of operations throughout the Internet.

Analysis of this event led to major changes in Internet Service Providers' BGP operations intended to mitigate the effects of any subsequent similar events.<ref>[http://lists.ucc.gu.uwa.edu.au/pipermail/lore/2006-August/000040.html Murphy's Law Strikes Again: AS7007]</ref>

== See also ==
* [[Route filtering]]

== References ==
{{reflist}}

== External links ==
* {{cite web|url=http://news.cnet.com/2100-1033-279235.html|title=Router glitch cuts Net access|date=April 25, 1997|publisher=cnet news|access-date=2009-03-06}}
* [http://www.patrickmcdaniel.org/pubs/ccs03a.pdf Origin authentication in interdomain routing]
* [http://www.cse.psu.edu/~mcdaniel/cse545/slides/cse545-interdomain.pdf Interdomain Routing Security]
* [http://seclists.org/nanog/1997/Apr/444 nanog mailing list archive: "7007 Explanation and Apology"]
* [https://web.archive.org/web/20190330203458/https://www.nanog.org/mailinglist/mailarchives/old_archive/1997-04/index.html A view of all NANOG mailing list discussions around the date of the incident - see 25 April 1997]
* [https://www.noction.com/blog/bgp_security_announcing_prefixes_without_authorization BGP security: announcing prefixes without authorization]

[[Category:Routing]]
[[Category:Internet architecture]]

{{Sourceattribution|AS 7007 incident}}