Defending the Route

The Internet operates on trust, and that trust is broken every day.
BGP hijacks, route leaks, and massive DDoS attacks continue to disrupt critical infrastructure, steal cryptocurrency, and knock services offline. Defending the Route moves beyond the theory of routing security to provide a battle-tested, code-level playbook for protecting your network border. This guide is for Security Engineers, SREs, and Network Architects who need to stop attacks cold, automate their defenses, and ensure their routing policies are bulletproof.
Inside, you will master:
Session Hardening: Secure the BGP control plane against unauthorized access using TTL Security, TCP-AO, and strict Control Plane Policing (CoPP).
Cryptographic Trust: Implement RPKI and Route Origin Validation (ROV). Learn to host your own ROAs and confidently deploy "Drop Invalid" policies to eliminate origin hijacks.
DDoS Mitigation: Turn your routers into distributed firewalls with BGP FlowSpec, stopping volumetric attacks at the edge before they saturate your links.
Infrastructure as Code: Stop configuring routers by hand. Manage BGP peers securely using Ansible, Terraform, and NetBox as your Source of Truth.
Automated Validation: Build a CI/CD pipeline with Batfish to pre-validate every routing change, preventing self-inflicted outages before they reach production.
From joining the MANRS initiative to writing Python automation scripts, this book delivers the complete toolkit for the modern Network Reliability Engineer.
Secure your border today.