@bgpkit

Open-source #BGP data processing toolkit. Built with ❤️ by @heymingwei @bgpkit@infosec.exchange

 San Diego, CA
bgpkit.com
Joined September 2021
  • Tweets364
  • Following1
  • Followers1.4K
115Media
Pinned Tweet
BGPKIT@bgpkitJul 11
🚀 bgpkit-parser 0.18.0 released: improved raw BGP attribute data preservation, better RIS Live raw message parsing support, and typed parsers for four more recent RFCs. bgpkit.com/blog/bgpkit-parse…

bgpkit-parser 0.18.0 Release - BGPKIT

bgpkit-parser 0.18.0 preserves more raw BGP wire data, parses RIS Live raw messages, and adds typed parsers for AIGP, SFP, BFD Discriminator, BGP Prefix-SID, and BIER attributes.

bgpkit.com
2
1
331
One BGP UPDATE message can withdraw 1,133 prefixes, where overall average is 2.87. We read a week of public MRT updates (20.8B route entries) to see how routers actually batch their routes before sending to collectors. #BGP buff.ly/3Yay4zN

One message, a thousand withdrawals - BGPKIT

Seven days of public BGP update files: 20.8 billion route entries in 7.25 billion messages, and the two very different shapes hidden inside the average of 2.87 prefixes per UPDATE.

bgpkit.com
2
3
599
bgpkit-parser v0.22.0 is out: --format text output, --hex record dumps, RIS Live link-local next hops no longer drop UPDATEs, scope-resolved BGP-LS next hops. Breaking: MSRV 1.88, Announcement::next_hop is a String. buff.ly/jxl8S8T

Release v0.22.0 · bgpkit/bgpkit-parser

Breaking changes MSRV raised to Rust 1.88 (#338): rust-version in Cargo.toml is now 1.88.0. The idna_adapter dev-dependency pin is removed as it is no longer needed. Announcement::next_hop is now ...

github.com
1
1
1
137
The text output, rendered with some color for illustration.
1
50
From @bgpkit blog: bgpkit.com/blog/virtualizor-…

Anatomy of the Virtualizor BGP Hijack: Reading the Attack in Raw BGP Bytes - BGPKIT

How AS62390 hijacked Hetzner's 162.55.80.0/24 to poison Virtualizor's update pipeline, reconstructed message-by-message from public MRT data, and why the hijacked route was RPKI-valid by design.

bgpkit.com
1
5
207
We've taken a closer look at this event. Detailed report available in this blog post. bgpkit.com/blog/virtualizor-…
Doug Madory (also on Bluesky)
@DougMadoryAug 31
Taking a look at this BGP hijack of 162.55.80.0/24 that targeted Virtualizor in recent days. Hijackers forged the origin to make the route RPKI-valid: ... 6204 62390 24940 (hijack AS path) ... 24940 (legit AS path)
1
6
1
10
1,106
bgpkit-parser 0.20.0 released! Corrupted MRT files can be salvaged with opt-in recovery iterators, parse errors keep the raw bytes for diagnosis, and it parses Cisco/Quagga text dumps directly. remote MRT reads can resume after dropped connections. github.com/bgpkit/bgpkit-par…

Release v0.20.0 · bgpkit/bgpkit-parser

Breaking changes Fallible encoding (#313): all encode paths now return Result<_, EncodingError> instead of silently truncating values that do not fit their wire-format fields. There are no ...

github.com
1
2
197
New blog post: Don't Deserialize: Serving 1.5M RPKI ROA Records from a Memory-Mapped Trie #BGP #RPKI buff.ly/OlON01x

Don't Deserialize: Serving 1.5M RPKI ROA Records from a Memory-Mapped Trie - BGPKIT

How wayback-rpki 2.0 cut steady-state RSS from 1.30 GB to around 500 MB and startup from 2.3 s to 23 ms with rkyv memory-mapped archives and jemalloc.

bgpkit.com
1
1
615
🚀 monocle v1.4.0 is out. Run BGP data searches remotely and stream results with HTTP/SSE; parse PCH's Cisco-style dumps directly; apply filters from files; reconstruct correct historical RIBs, and pair them with historical RPKISPOOL data. buff.ly/HWw9mff

monocle v1.4.0: Remote BGP Search, PCH Archive Parsing, and RIB Correctness - BGPKIT

monocle v1.4.0 adds an HTTP/SSE service, Cisco BGP-table parsing, reusable filters, RPKISPOOL historical data, and RIB-search correctness fixes.

bgpkit.com
1
1
4
622
New blog post: Finding Well-Known BGP Communities with monocle. buff.ly/rhJrJXj

Finding Well-Known BGP Communities with monocle - BGPKIT

An ad-hoc, reproducible analysis for scanning public MRT updates for BGP communities, joining them with the IANA registry, and checking behavior against RFC text.

bgpkit.com
2
1
141
New blog post: Investigating the India-Telegram #BGP Hijack with monocle. bgpkit.com/blog/investigatin…

Investigating the India–Telegram BGP Hijack with monocle - BGPKIT

A step-by-step forensic investigation of the June 2026 Telegram BGP hijack using monocle and the BGPKIT API - public data, real commands, real output.

bgpkit.com
3
7
445
🚀 monocle v1.3.0 is out: monocle rib command that reconstructs #BGP RIB state at any timestamp. Load the latest RIB dump, replay overlapping updates, and see exactly what each peer was advertising at that moment. buff.ly/hObctyz

monocle v1.3.0: Reconstruct BGP RIB State at Any Timestamp - BGPKIT

monocle v1.3.0 introduces the rib command for reconstructing BGP RIB state at arbitrary timestamps.

bgpkit.com
1
1
4
501
🚀 bgpkit-parser v0.17.0 is live: buff.ly/abIYTKk New: route-level into_route_iter() for ~50-70% faster RIB scans, MPLS Labeled NLRI parsing (RFC 3107/8277), and BMP RFC 9515/9736/9972 support. Plus smallvec AS Path optimization and attribute validation (RFC 4760).

Release v0.17.0 · bgpkit/bgpkit-parser

New features Minimal route-level parser: Added BgpRouteElem and into_route_iter() / into_fallible_route_iter() for fast scans when only prefix, AS path, peer metadata, and timestamp are needed (t...

github.com
1
1
11
1,191
OneIO v0.21.0 is now available. This release introduces the OneIo client for reusable HTTP configuration, adds custom root certificate support for corporate VPNs, and includes CLI improvements like progress bars and header support. Full changelog: buff.ly/aZU7lmf

Release v0.21.0 · bgpkit/oneio

Breaking changes OneIoError is now #[non_exhaustive]; match expressions without a wildcard _ arm will fail to compile OneIoBuilder::header() now accepts typed HeaderName/HeaderValue (infallible) i...

github.com
2
160
New experimental feature: parsing MRT files directly on local browser with @bgpkit parser WASM package! You can pass it a remote MRT file link, or drag and drop a local MRT file. Go test it out yourself! #BGP mrt-explorer.labs.bgpkit.com
3
2
1
18
1,248
Both route-views.amsix and locix.fra are now available on our broker service. Currently, the route-views.amsix URLs remains working, but we recommend users to replace the usage of route-views.amsix to avoid future issues. ui.broker.bgpkit.com/?tab=co…
Mingwei 🦀🦋@heymingweiMar 6
RouteViews collector route-views.amsix renamed to locix.fra. #BGP routeviews.org/routeviews/20…
1
3
481
BGPKIT MCP server. It's not much for now, but for sure will grow as we go. Built with @Cloudflare Agents library mcp.bgpkit.com/
2
2
5
473
monocle v1.2.0 released. New features: #BGP community filtering support for parse/search commands; wildcard matching for standard and large communities; XDG base directory spec support; CLI aliases for time filters. Learn more: buff.ly/2BVGmcY
3
4
475
New RouteViews DE-CIX Frankfurt and IXPN Lagos collectors are now available on BGPKIT Broker. You can stream the data with monocle or parse individual files with bgpkit-parser now. #BGP status.broker.bgpkit.com/?ta…
2
4
327
We have added a new "Collector Selector" feature to the bgpkit-broker dashboard. It helps to find route collectors to maximize the coverage of peer ASNs or countries. Use these collectors to help reduce the data load for your pipeline. Try it out at buff.ly/K3NK168
1
7
336
Load more