Principal Component Analysis of BGP Update Streams

  • Received : 2008.04.14
  • Accepted : 2009.03.12
  • Published : 2010.04.30

Abstract

In this paper, we propose a novel methodology to identify border gateway protocol (BGP) updates associated with major events - affecting network reachability to multiple ASes - and separate them (statistically) from those attributable to minor events, which individually generate few updates, but collectively form the persistent background noise observed at BGP vantage points. Our methodology is based on principal component analysis, which enables us to transform and reduce the BGP updates into different AS clusters that are likely affected by distinct major events. We demonstrate the accuracy and effectiveness of our methodology through simulations and real BGP data.

Keywords

References

  1. Y. Rekhter and T. Li, "A border gateway protocol 4 (BGP-4)," RFC 1771, Mar., 1995.
  2. T. Griffin, "What is the sound of one route flapping?" Netw. Modeling and Simulation Summer Workshop, 2002.
  3. D. Chang, R. Govindan, and J. Heidemann, "The temporal and topological characteristics of BGP path changes," in Proc. ICNP, 2003.
  4. M. Caesar, L. Subramanian, and R. Katz, "Root cause analysis of Internet routing dynamics," U.C. Berkeley, Tech. Rep. UCB/CSD-04-1302, Nov. 2003.
  5. A. Feldmann, O. Maennel, Z. Mao, A. Berger, and B. Maggs, "Locating Internet routing instabilities," in Froc. ACM SIGCOMM, 2004.
  6. M. Lad, D. Massey, and L. Zhang, "Link-rank: A graphical tool for capturing bgp routing dynamics," in Proc. IEEE/IPIF NOMS, Apr. 2004.
  7. J. Rexford, J. Wu, Z. M. Mao, and J. Wang, "Finding a needle in a haystack: Pinpointing significant bgp routing changes in an ip network," in Proc. NSDI, 2005.
  8. D. Massey, M. Lad, R. Oliveira, and L. Zhang, "Inferring the origin of routing changes using link weights," in Proc. Int. Conf Netw. Protocols, 2007.
  9. J. Gottlieb, L. Wang, M. Saranu, and D. Pei, "Understanding bgp session failures in a large isp," in Proc. INFO COM, 2007.
  10. Z. M. Mao, Y. Zhang, and M. Zhang, "Effective diagnosis of routing disruptions from end systems," in Proc. NSDI, 2008.
  11. K. Xu, J. Chandrashekar, and Z.-L. Zhang, "A first step towards understanding inter-domain routing," in Proc. ACM SIGCOMM Workshop on Mining Netw. Data, Philadelphia, 2005.
  12. R. Teixeira and J. Rexford, "A measurement framework for pin-pointing routing changes," in Proc. ACM SIGCOMM Netw. Troubleshooting Workshop, 2004.
  13. University of Oregon. Routeviews archive project. [Online]. Available: http://archive.routeviews.org/
  14. RIPE. Routing information service raw data. [Online]. Available: http://data.ris.ripe.net/
  15. I. T. Jolliffe, Principal Component Analysis, 2nd ed. Spinger Series in Statistics, 2002.
  16. M. Mao, R. Bush, T. Griffin, and M. Roughan, "BGP beacons," in Proc. Internet Meas. Conf, 2003.
  17. C. Labovitz, A. Ahuja, A. Bose, and F. Jahanian, "Delayed Internet routing convergence," IEEE/ACM Trans. Netw., 2001.
  18. H. F. Kaiser, "The application of electronic computers to factor analysis," Educational and Psychological Meas., 1960.
  19. SSFNET. Scalable simulation framework. [Online]. Available: http://www.ssfnet.org
  20. L. Subramanian, S. Agarwal, J. Rexford, and R. H. Katz, "Characterizing the Internet hierarchy from multiple vantage points," in Proc. IEEE INFO COM, 2002.
  21. K. Xu, J. Chandrashekar, and Z.-L. Zhang, "Inferring major events from BGP update streams," University of Minnesota, Dept. of Computer Science, Tech. Rep. 04-043, 2004.
  22. D. Andersen, N. Feamster, S. Bauer, and H. Balakrishnan, "Topology inference from BGP routing dynamics," in Proc. Internet Meas. Workshop, Nov., 2002.