And the best solution to replace BGP out there is LISP. However, even in LISP there are fundamental flaws that weren't designed for from inception.
When I had control over an AS I made a very specific point to always monitor path changes for performance and security reasons all the time. If you have an AS and you're not - then you're doing it wrong with the most critical piece of your infrastructure.
Comments
And the best solution to replace BGP out there is LISP. However, even in LISP there are fundamental flaws that weren't designed for from inception.
When I had control over an AS I made a very specific point to always monitor path changes for performance and security reasons all the time. If you have an AS and you're not - then you're doing it wrong with the most critical piece of your infrastructure.
Heh, most AS's don't even adhere to BCP38 and you expect them to be monitoring for path changes and hijacks?