Abstract: Disclosed are, inter alia, methods, apparatus, computer-storage media, mechanisms, and means associated with validation of routes advertised by Border Gateway Protocol. One embodiment validates or invalidates a route received in a Border Gateway Protocol (BGP) update message. A route is validated in response to determining that the originating autonomous system specified in the AS_Path attribute for the route in a received BGP update message has authority to advertise the route and/or whether or not multiple autonomous systems identified in the AS_Path attribute of the update message is authorized to advertise the route, possibly in a particular order.

Abstract: In one embodiment, one or more virtual private network (VPN) prefixes may be grouped at a network node into sets having shared network border node next-hop options, where each border node has a defined index value associated therewith. Also, a list of VPN labels associated with each VPN prefix may be maintained by the network node, where each VPN label is associated with a border node of a particular set by a corresponding index value. Further, the network node may determine a particular border node for traffic to be forwarded, along with the defined index value. The network node may then apply the index value to select an associated VPN label, and may affix the selected VPN label to the traffic for forwarding.

Abstract: In one or more embodiments, an architecture is provided that may intercept a route update message and compare AS numbers of an AS path with a list of AS numbers known or inferred to be problematic. In one or more embodiments, the problematic AS numbers can be substituted with a local AS number such that loop detection checks enforced automatically on many networks do not discard the message and/or prevent connectivity between two disparate networks.