Thursday, 15 November 2018 14:17

Telstra BGP routing error hits other Australian ISPs Featured

Telstra BGP routing error hits other Australian ISPs Pixabay

Australia's biggest telco Telstra took down part of the Internet in the country on Thursday morning due to a stuff-up with the routes it advertised through the border gateway protocol. The company claims a third party was responsible for the error.

The incorrect broadcast of these routes effectively hijacked the IP address ranges of a number of other providers in Australia, including Launceston-based Launtel.

The chief executive of Launtel, Damian Ivereigh, told iTWire, that he had seen the Launtel network go down primarily to the ACT at about 6.50am AEDT.

"By 8:20am, others started reporting on AusNOG (the Australian Network Operator Group mailing list), that they were seeing traffic to their networks being 'hijacked' by Telstra, asking if anyone from Telstra was able to assist," he said.

BGP hijacking occurs when groups of IP addresses are taken over by entities that corrupt Internet routing tables maintained using the BGP.

"It quickly escalated on the mailing list where many providers were reporting similar issues. An unofficial Telstra employee briefly appeared on list at around 9:00 to report the issue had been resolved."

Ivereigh said he had no idea what had happened inside Telstra. "But from the outside, they clearly started advertising incorrect 'BGP prefixes' to the Internet and effectively took down a number of other ISPs and content providers," he said.

Contacted for comment, a Telstra spokesman said the error was caused by a third party who was adding pre-approved IP ranges within the Telstra Internet Direct network which resulted in the mistaken redirection of some traffic.

"As soon as we identified the issue, it was resolved," the spokesman added.

For those who are unaware of BGP, Ivereigh said when it came to inter-carrier routing, carriers (and content providers like Google, Facebook etc) often needed to send traffic to each other.

"They rely on a protocol called BGP - Border Gateway Protocol - which essentially allows each carrier to broadcast to each other what IP address ranges (called 'prefixes') should be sent to them. We, for example, announce to the world that any traffic for the IP address range to should be sent to us."

Ivereigh said the security of the process was "not great" and one carrier could announce incorrect prefixes and effectively take over the address ranges of another provider (and take them down).

"This is limited only by the level of trust that each carrier puts on another carrier when they receive an advertisement. However, generally speaking, most trust Telstra to get this correct and so accept their advertisements without question," he said.

"So Telstra are clearly able at any time to switch off a number of other providers should they so choose. Worse, unless people are in the know, they would assume this is a fault of their provider. There are security layers being added to BGP, but the take-up is slow. Perhaps this needs to change as more of our business is conducted on the Internet."

This is the second BGP hijack reported this week. On Tuesday, Australian time, Google was affected by network issues which turned out to be due to an ISP in Africa broadcasting wrong routes.

MainOne, the ISP which was responsible for the error, said later that it was due to a misconfiguration on its BGP filters and the error lasted for 74 minutes.


Recently iTWire remodelled and relaunched how we approach "Sponsored Content" and this is now referred to as "Promotional News and Content”.

This repositioning of our promotional stories has come about due to customer focus groups and their feedback from PR firms, bloggers and advertising firms.

Your Promotional story will be prominently displayed on the Home Page.

We will also provide you with a second post that will be displayed on every page on the right hand side for at least 6 weeks and also it will appear for 4 weeks in the newsletter every day that goes to 75,000 readers twice daily.



Some of the most important records are paper-based documents that are slow to issue, easy to fake and expensive to verify.

Digital licenses and certificates, identity documents and private citizen immunity passports can help you deliver security and mobility for citizens’ information.

Join our webinar: Thursday 4th June 12 midday East Australian time


Sam Varghese

website statistics

Sam Varghese has been writing for iTWire since 2006, a year after the site came into existence. For nearly a decade thereafter, he wrote mostly about free and open source software, based on his own use of this genre of software. Since May 2016, he has been writing across many areas of technology. He has been a journalist for nearly 40 years in India (Indian Express and Deccan Herald), the UAE (Khaleej Times) and Australia (Daily Commercial News (now defunct) and The Age). His personal blog is titled Irregular Expression.



Recent Comments