Learning from Encounters with the “Untrusted BGP peer”: A Comparative Network Education Practice Using BGP and LAN

Abstract

This study aims to enable learners to practically engage with the essential challenge of Internet operations: collaboration and conflict with “Untrusted BGP peer.” To this end, we designed and implemented a new type of network practice. Specifically, the practice contrasts a locally manageable LAN environment with a BGP-based Internet environment that inherently involves unpredictable external influences. Utilizing virtualization technology, learners take on the role of ISP operators and engage in a four-stage practice: (1) incident response within a closed LAN environment, (2) construction of a virtual Internet in which learners connect to each other as “others” and observe incidents arising from these interactions, (3) experiencing attacks such as BGP hijacking initiated by external parties, and (4) reflection and analysis. Through this practice, learners gain a tangible understanding of the differing risk structures between a “controllable world” and one that requires coexistence with an untrusted BGP peer. The implementation of this practice yielded positive feedback from both participating students and instructors, suggesting that this approach is effective in cultivating practical competencies, including inter-organizational coordination and ethical decision-making.