rfc-7607

Codification of AS 0 Processing

W. Kumari, R. Bush, H. Schiller, K. Patel
date2015-08 streamIETF areartg wgidr statusPROPOSED STANDARD pages5 canonicalhttps://www.rfc-editor.org/rfc/rfc7607 doi10.17487/RFC7607
This document updates RFC 4271 and proscribes the use of Autonomous System (AS) 0 in the Border Gateway Protocol (BGP) OPEN, AS_PATH, AS4_PATH, AGGREGATOR, and AS4_AGGREGATOR attributes in the BGP UPDATE message.

updates

Extracted elements (8)

design-rationale §1

AS 0 was already used in RPKI Route Origin Attestations (RFC 6491) to mark prefixes as not to be used in a routing context, requiring BGP implementations to not accept or propagate routes containing AS 0. This document codifies existing behavior already implemented by at least two BGP implementations, correcting an omission in prior BGP specifications.

bgp, routing, security

interoperability-note §2

Authors of future protocol extensions carrying an Autonomous System number are encouraged to recognize that AS 0 is reserved and to provide clear direction on how to handle AS 0 in those extensions.

bgp, routing

normative-requirement §2 MUST NOT

A BGP speaker MUST NOT originate or propagate a route with an AS number of zero in the AS_PATH, AS4_PATH, AGGREGATOR, or AS4_AGGREGATOR attributes.

bgp, routing

normative-requirement §2 MUST NOT

A router MUST NOT initiate a BGP connection claiming to be AS 0.

bgp, routing

normative-requirement §2 MUST

An UPDATE message containing AS number zero in the AS4_PATH or AS4_AGGREGATOR attribute MUST be considered malformed and handled per RFC 6793 error handling procedures.

bgp, routing

normative-requirement §2 MUST

If a BGP speaker receives AS 0 as the peer AS in an OPEN message, it MUST abort the connection and send a NOTIFICATION with Error Code 'OPEN Message Error' and subcode 'Bad Peer AS'.

bgp, routing

registry §3

The IANA registry for '16-bit Autonomous System Numbers' has been updated so that the entry for AS 0 is simply 'Reserved'.

registry, bgp

security-consideration §4

By ensuring all implementations ignore routes containing AS 0, the document prevents malicious parties from announcing routes with AS 0 to hijack address resources that RPKI ROAs have marked as not in use. Allowing a resource holder to issue a ROA with AS 0 as the only valid origin signals that a prefix should not be routed.

security, bgp, routing