Defending the Route: A Practitioner's Guide to BGP Security, RPKI, DDoS Mitigation, and Network Automation: 3 (The BGP Masterclass)

Yuan Li

ISBN 13: 9798277385708

Published by Independently published, 2025

About this Item

Seller Inventory # LU-9798277385708

Bibliographic Details

• Title: Defending the Route: A Practitioner's Guide to BGP Security, RPKI, DDoS Mitigation, and Network Automation: 3 (The BGP Masterclass)
• Publisher: Independently published
• Publication Date: 2025
• Language: English
• ISBN 13: 9798277385708
• Binding: Paperback
• Condition: New
• Dimensions: 17.78W x 0.69H x 25.4D centimeters 17.78 centimeters width by 0.69 centimeters height by 25.4 centimeters depth
• Weight: 222 grams

About this title

Synopsis

The Internet operates on trust, and that trust is broken every day.
BGP hijacks, route leaks, and massive DDoS attacks continue to disrupt critical infrastructure, steal cryptocurrency, and knock services offline. Defending the Route moves beyond the theory of routing security to provide a battle-tested, code-level playbook for protecting your network border. This guide is for Security Engineers, SREs, and Network Architects who need to stop attacks cold, automate their defenses, and ensure their routing policies are bulletproof.
Inside, you will master:
Session Hardening: Secure the BGP control plane against unauthorized access using TTL Security, TCP-AO, and strict Control Plane Policing (CoPP).
Cryptographic Trust: Implement RPKI and Route Origin Validation (ROV). Learn to host your own ROAs and confidently deploy "Drop Invalid" policies to eliminate origin hijacks.
DDoS Mitigation: Turn your routers into distributed firewalls with BGP FlowSpec, stopping volumetric attacks at the edge before they saturate your links.
Infrastructure as Code: Stop configuring routers by hand. Manage BGP peers securely using Ansible, Terraform, and NetBox as your Source of Truth.
Automated Validation: Build a CI/CD pipeline with Batfish to pre-validate every routing change, preventing self-inflicted outages before they reach production.
From joining the MANRS initiative to writing Python automation scripts, this book delivers the complete toolkit for the modern Network Reliability Engineer.
Secure your border today.