Thursday, 15 November 2018 14:17

Telstra BGP routing error hits other Australian ISPs Featured

Telstra BGP routing error hits other Australian ISPs Pixabay

Australia's biggest telco Telstra took down part of the Internet in the country on Thursday morning due to a stuff-up with the routes it advertised through the border gateway protocol. The company claims a third party was responsible for the error.

The incorrect broadcast of these routes effectively hijacked the IP address ranges of a number of other providers in Australia, including Launceston-based Launtel.

The chief executive of Launtel, Damian Ivereigh, told iTWire, that he had seen the Launtel network go down primarily to the ACT at about 6.50am AEDT.

"By 8:20am, others started reporting on AusNOG (the Australian Network Operator Group mailing list), that they were seeing traffic to their networks being 'hijacked' by Telstra, asking if anyone from Telstra was able to assist," he said.

BGP hijacking occurs when groups of IP addresses are taken over by entities that corrupt Internet routing tables maintained using the BGP.

"It quickly escalated on the mailing list where many providers were reporting similar issues. An unofficial Telstra employee briefly appeared on list at around 9:00 to report the issue had been resolved."

Ivereigh said he had no idea what had happened inside Telstra. "But from the outside, they clearly started advertising incorrect 'BGP prefixes' to the Internet and effectively took down a number of other ISPs and content providers," he said.

Contacted for comment, a Telstra spokesman said the error was caused by a third party who was adding pre-approved IP ranges within the Telstra Internet Direct network which resulted in the mistaken redirection of some traffic.

"As soon as we identified the issue, it was resolved," the spokesman added.

For those who are unaware of BGP, Ivereigh said when it came to inter-carrier routing, carriers (and content providers like Google, Facebook etc) often needed to send traffic to each other.

"They rely on a protocol called BGP - Border Gateway Protocol - which essentially allows each carrier to broadcast to each other what IP address ranges (called 'prefixes') should be sent to them. We, for example, announce to the world that any traffic for the IP address range to should be sent to us."

Ivereigh said the security of the process was "not great" and one carrier could announce incorrect prefixes and effectively take over the address ranges of another provider (and take them down).

"This is limited only by the level of trust that each carrier puts on another carrier when they receive an advertisement. However, generally speaking, most trust Telstra to get this correct and so accept their advertisements without question," he said.

"So Telstra are clearly able at any time to switch off a number of other providers should they so choose. Worse, unless people are in the know, they would assume this is a fault of their provider. There are security layers being added to BGP, but the take-up is slow. Perhaps this needs to change as more of our business is conducted on the Internet."

This is the second BGP hijack reported this week. On Tuesday, Australian time, Google was affected by network issues which turned out to be due to an ISP in Africa broadcasting wrong routes.

MainOne, the ISP which was responsible for the error, said later that it was due to a misconfiguration on its BGP filters and the error lasted for 74 minutes.


You cannot afford to miss this Dell Webinar.

With Windows 7 support ending 14th January 2020, its time to start looking at your options.

This can have significant impacts on your organisation but also presents organisations with an opportunity to fundamentally rethink the way users work.

The Details

When: Thursday, September 26, 2019
Presenter: Dell Technologies
Location: Your Computer


QLD, VIC, NSW, ACT & TAS: 11:00 am
SA, NT: 10:30 am
WA: 9:00 am NZ: 1:00 pm

Register and find out all the details you need to know below.



iTWire can help you promote your company, services, and products.


Advertise on the iTWire News Site / Website

Advertise in the iTWire UPDATE / Newsletter

Promote your message via iTWire Sponsored Content/News

Guest Opinion for Home Page exposure

Contact Andrew on 0412 390 000 or email [email protected]


Sam Varghese

website statistics

Sam Varghese has been writing for iTWire since 2006, a year after the site came into existence. For nearly a decade thereafter, he wrote mostly about free and open source software, based on his own use of this genre of software. Since May 2016, he has been writing across many areas of technology. He has been a journalist for nearly 40 years in India (Indian Express and Deccan Herald), the UAE (Khaleej Times) and Australia (Daily Commercial News (now defunct) and The Age). His personal blog is titled Irregular Expression.



Recent Comments