logo

BGP ORIGIN attribute manipulation and its impact on the Internet

ID: abb782a2-f06f-56b5-90d1-fe6102c7b58d

STIX ID: report--abb782a2-f06f-56b5-90d1-fe6102c7b58d

Feed Name: Cloudflare Blog

Date Published: 2026-07-24

Date Updated: 2026-07-24

Author: Iliana Xygkou

...
...

This report analyzes how Autonomous Systems manipulate the BGP ORIGIN path attribute to influence route selection and attract traffic: through coordinated experiments announcing prefixes with different ORIGIN values and parsing public BGP updates, the authors find many ASes (including top-tier providers) rewrite ORIGIN to IGP, resulting in roughly 70% of observed AS_PATHs ending with IGP and redirecting traffic toward large providers; the paper argues ORIGIN is widely abused for economic advantage and recommends community action to deprecate or neutralize its influence in path selection.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.