Cloudflare Radar's new BGP origin hijack detection system

This post introduces Cloudflare Radar's new BGP origin hijack detection system, bringing internal monitoring capabilities to the public. It details the mechanics of BGP and origin hijacking, explains the limitations of current prevention mechanisms like RPKI, and outlines the design of Cloudflare's detection system, which uses a prefix trie to monitor BGP update messages for origin changes and identify potential hijacks. This enhances the network's security and stability by providing public visibility into routing anomalies.