bgunderlay bgunderlay bgunderlay

Why I Always Check AS-SETs When Securing Internet Routing

AS-SET Monitoring: A Leader’s Guide to Internet Routing Security

Visual representation of AS-SETs in internet routing security
Visual representation of AS-SETs in internet routing security

Executive Summary: What You Need to Know

🎯 Critical Business Impact – AS-SETs are the trust framework that prevents routing incidents that can take your business offline or compromise your data security

💰 Financial Implications – Improper AS-SET management can lead to route leaks that cause service outages, customer churn, and reputation damage

🚀 Strategic Action – Implementing hierarchical AS-SETs and regular monitoring provides essential protection for your network infrastructure

⚠️ Risk Assessment – Without proper AS-SET hygiene, your business is vulnerable to BGP incidents that can impact global connectivity

Why Should a ‘Technical’ Topic Like AS-SETs Matter to Business Leaders?

Imagine waking up to discover your company’s online services are completely unreachable. Your e-commerce platform is down, customer support channels are offline, and remote employees can’t access critical systems. The culprit? Not a sophisticated cyber attack, but a routing mishap that could have been prevented with proper AS-SET management.

In simple terms, AS-SETs are like the digital address verification system for your business online. They determine if your internet traffic reaches its intended destination and whether others can trust the digital pathways to your services. When properly maintained, they’re invisible guardians of your connectivity. When neglected, they become single points of failure that can take your entire digital presence offline.

As CEO of InterLIR, a specialized IPv4 address marketplace, I’ve witnessed firsthand how routing security issues can devastate businesses. In today’s digital economy, network reliability isn’t just an IT concern-it’s a fundamental business continuity issue that directly impacts revenue, customer trust, and operational stability.

The global internet routing system operates on a surprisingly fragile trust model. Your business depends on thousands of network operators worldwide correctly configuring their systems to route traffic appropriately. AS-SETs are the primary mechanism that prevents chaos in this ecosystem, acting as the guardrails that keep traffic flowing properly.

In this guide, I will break down what AS-SETs are in simple terms, explain why managing them correctly is critical for your business, and provide a clear roadmap for making smart decisions about this essential component of your digital infrastructure. Let’s start by understanding how these digital address systems evolved and why they’ve become so valuable.

Where Did These Digital Trust Mechanisms Come From, and Why Are They So Important?

The internet wasn’t always the complex, interconnected system we know today. In its early days, it resembled a small town where everyone knew each other, and trust was implicit. Network operators could simply call one another on the phone to verify routing information or resolve issues. As a business leader, think of this era as similar to running a small local shop where you personally knew every supplier and customer.

From Small Community to Global Marketplace

As the internet expanded exponentially, this informal trust system became unsustainable. The equivalent of a global city emerged, with millions of digital “addresses” (IP addresses) and thousands of networks (Autonomous Systems or ASes) needing to communicate reliably. This growth created an urgent need for a structured way to verify which networks could legitimately announce which routes.

This is where AS-SETs entered the picture. An AS-SET is essentially a declaration that says, “These are my legitimate customers, and I vouch for their traffic.” It’s similar to how a bank might verify your identity before allowing you to open an account or how a property deed establishes legitimate ownership.

This shift from a small, trust-based community to a massive global system created a high-stakes environment where routing mistakes or malicious actions can have immediate, far-reaching consequences. For business leaders, understanding AS-SETs isn’t about grasping technical minutiae-it’s about recognizing a fundamental business risk that can affect your entire operation.

At InterLIR, we’ve built our business around helping companies secure and manage their IP address resources. I’ve observed that companies with robust AS-SET management rarely experience the catastrophic outages that plague those who neglect this critical infrastructure component. The difference isn’t just technical competence-it’s strategic risk management.

The Business Value of Proper Routing Hygiene

Think of AS-SETs as the digital equivalent of property deeds and building permits. When properly maintained, they ensure that your digital assets (IP addresses) are recognized as legitimately yours across the global internet. This legitimacy is what allows your customers to reach your services, your employees to access your systems, and your business to maintain its online presence.

The business value becomes clear when you consider the alternative: without proper AS-SET management, your network is vulnerable to route leaks and hijacks that can redirect your traffic to unintended destinations, potentially exposing sensitive data or simply making your services unreachable.

How Can a Business Protect Itself from Routing Security Threats?

Protecting your business from routing security threats requires understanding the verification framework that AS-SETs provide. Think of this as your “due diligence checklist” for ensuring your digital pathways remain secure and reliable.

Step 1: Understanding Your Digital Address Verification (The ‘Property Deed’)

Just as you would verify the deed before purchasing property, you need to ensure your network’s AS-SET information is accurate and properly maintained. This means knowing which Internet Routing Registry (IRR) objects represent your network and confirming they correctly reflect your business relationships.

At InterLIR, when we help businesses acquire IPv4 addresses, we emphasize the importance of proper documentation in routing registries. This isn’t just paperwork-it’s the foundation of your network’s security and reliability. Without it, you’re essentially operating without clear title to your digital property.

Step 2: Implementing Proper Filtering (The ‘Security System’)

Once you understand your AS-SET information, you need to implement proper filtering based on this data. This is like installing a security system that only allows authorized visitors into your building. In networking terms, it means configuring your routers to accept only legitimate route announcements and reject everything else.

This filtering is critical because it prevents your network from accidentally propagating incorrect routing information, which could contribute to larger internet outages. It also protects you from accepting invalid routes that could redirect your traffic through unauthorized networks.

Step 3: Regular Monitoring and Maintenance (The ‘Ongoing Inspection’)

Just as you would regularly inspect and maintain your physical infrastructure, you need to monitor and update your AS-SET information. This includes verifying that all included ASNs (Autonomous System Numbers) are legitimate customers or appropriately related networks, and promptly removing any that are no longer valid.

New tools like Cloudflare Radar’s AS-SET monitoring capabilities make this process more accessible, allowing you to visualize your AS-SET relationships and identify potential issues before they cause problems.

Security Approach The Risky Way The Safe Way
AS-SET Management Using generic, non-hierarchical AS-SETs that anyone can modify Implementing hierarchical AS-SETs (ASN:AS-NAME format) that only authorized parties can change
Route Filtering Accepting all route announcements without verification Implementing strict filtering based on AS-SET data using tools like bgpq4
Monitoring Reactive approach, addressing issues only after outages occur Proactive monitoring of AS-SET information and routing announcements
Documentation Minimal or outdated documentation of network relationships Comprehensive, regularly updated documentation of all network relationships

Process diagram showing safe AS-SET management workflow
Process diagram showing safe AS-SET management workflow

What is the True Business Cost of Getting AS-SET Management Wrong?

The technical nature of AS-SETs often obscures their profound business impact. Let me frame this in terms that resonate with executive leadership and business stakeholders.

The Hidden Costs of Inadequate Routing Security

💸 Revenue Loss from Downtime – When route leaks make your services unreachable, every minute translates to lost transactions. For e-commerce businesses, this can mean thousands or even millions in lost revenue per hour.

🔥 Brand and Reputation Damage – Customers don’t distinguish between “our network had a routing issue” and “our service is unreliable.” Repeated outages erode trust and push customers toward competitors.

📉 Wasted Marketing Investment – If your digital properties are unreachable due to routing issues, your marketing spend becomes ineffective. You’re paying to drive traffic to destinations that customers can’t reach.

👥 Operational Inefficiency – When IT teams are constantly fighting routing fires, they can’t focus on innovation and improvement. This opportunity cost is substantial but often overlooked.

⚖️ Regulatory and Compliance Risks – For businesses in regulated industries, network reliability is often a compliance requirement. Routing failures can trigger regulatory scrutiny and potential penalties.

At InterLIR, we’ve worked with clients who initially viewed IP address management and routing security as purely technical concerns. After experiencing the business impact of routing incidents, they quickly recognized these as strategic business issues requiring executive attention and investment.

The Business Case for Quality AS-SET Management

Investing in proper AS-SET management isn’t a technical expense-it’s business insurance that protects your digital operations. Consider this real-world example: One of our clients, a mid-sized e-commerce platform, experienced a 6-hour outage due to a route leak that could have been prevented with proper AS-SET filtering. The incident cost them approximately €75,000 in lost transactions and required emergency IT support costing an additional €15,000.

By comparison, implementing proper AS-SET management and monitoring would have cost less than €10,000 annually. The ROI for routing security isn’t just positive-it’s overwhelming when you consider the potential costs of failure.

For businesses that depend on digital channels-which today means virtually every business-routing security should be viewed as a fundamental component of business continuity planning, not an obscure technical detail.

What is the Smart Leader’s Roadmap for AS-SET Security?

As business leaders navigate the complex landscape of network security, a clear roadmap for AS-SET management is essential. Here’s my strategic guidance based on years of experience in the IP address marketplace and routing security field.

The Evolving Landscape of Routing Security

🔮 Current Transition – The industry is moving from the trust-based AS-SET system toward more secure alternatives like Autonomous System Provider Authorization (ASPA), but this transition will take years to complete.

🔧 Emerging Tools – New monitoring capabilities from providers like Cloudflare Radar are making AS-SET management more accessible and transparent, reducing the technical barrier to entry.

📈 Growing Awareness – As high-profile routing incidents continue to make headlines, executive awareness of routing security is increasing, elevating this from a technical concern to a business priority.

At InterLIR, we’re actively helping our clients navigate this transition by ensuring their IP address resources are properly documented and secured. The businesses that adapt quickly gain a competitive advantage in terms of reliability and security.

A Leader’s 90-Day Action Plan

1️⃣ Assess Your Current Posture – Ask your technical team to provide a clear assessment of your AS-SET management practices. Key questions include: Are we using hierarchical AS-SETs? How frequently are they audited? What filtering is in place to prevent route leaks?

2️⃣ Quantify Your Risk Exposure – Calculate the potential business impact of a routing incident. Consider direct revenue loss from downtime, customer support costs, and reputation damage. This creates a clear business case for investment.

3️⃣ Implement Basic Protections – Even if you can’t overhaul your entire routing security posture immediately, implement the most critical protections: hierarchical AS-SETs, basic filtering, and regular monitoring.

4️⃣ Develop a Monitoring Strategy – Establish regular reviews of your AS-SET information and routing announcements. Leverage free tools like Cloudflare Radar to gain visibility without significant investment.

5️⃣ Create an Incident Response Plan – Develop a clear protocol for responding to routing incidents, including communication templates, technical response procedures, and post-incident analysis.

This approach balances immediate security improvements with longer-term strategic planning. It acknowledges the reality that most businesses can’t transform their routing security overnight but can take meaningful steps to reduce risk.

The most successful digital businesses aren’t necessarily those with the most advanced technology-they’re the ones that effectively manage the risks inherent in their digital infrastructure. AS-SET management is a perfect example of how seemingly technical details can have profound business implications.

Building a Culture of Routing Hygiene

Beyond specific technical measures, business leaders should foster a culture that recognizes the importance of routing hygiene. This means including routing security in risk assessments, allocating appropriate resources for management and monitoring, and ensuring that technical teams understand the business impact of their work in this area.

At InterLIR, we’ve observed that organizations with strong executive support for routing security initiatives implement more effective protections and respond more quickly to emerging threats. This isn’t just correlation-it’s causation. When leadership recognizes the business value of routing security, the entire organization aligns around this priority.

AS-SETs may seem like an obscure technical detail, but they represent a critical component of your business’s digital foundation. In an increasingly interconnected world, the security and reliability of your network routing directly impact your ability to serve customers, support employees, and maintain business continuity.

As the CEO of InterLIR, I’ve witnessed both the devastating consequences of neglecting routing security and the competitive advantages gained by businesses that prioritize it. The difference isn’t technical sophistication-it’s strategic awareness and proactive management.

While the internet’s routing infrastructure will continue to evolve toward more secure models, AS-SET management remains an essential business practice today. By understanding its importance, implementing basic protections, and fostering a culture of routing hygiene, business leaders can significantly reduce their exposure to one of the most overlooked risks in the digital landscape.

🌐 IPv4 Marketplace & LIR Services

GLOBAL IP ADDRESS SOLUTIONS

Professional broker services for secure IP transfers, reputation-clean address blocks, and LIR support across all regional registries.

📚 Related Articles You Might Find Useful

Alexander Timokhin

CEO

    Ready to get started?

    Articles
    A Beginner’s Guide to Subnetting IPv4 and IPv6 Addresses (2026 Update)
    A Beginner’s Guide to Subnetting IPv4 and IPv6 Addresses (2026 Update)

    A Beginner’s Guide to Subnetting IPv4 and IPv6 Addresses Subnetting is a critical

    More
    IPv4 Leasing Revolution: Why Smart Businesses Are Ditching Ownership in 2025
    IPv4 Leasing Revolution: Why Smart Businesses Are Ditching Ownership in 2025

    Why IPv4 Leasing Is Becoming the Smart Choice for Businesses in 2025 1. Introduction

    More
    Network Isolation Revolution: IPv4 Marketplace Insights for Enterprise Security
    Network Isolation Revolution: IPv4 Marketplace Insights for Enterprise Security

      As CEO of InterLIR, I’ve witnessed firsthand how network isolation strategies

    More
    What is ASN?
    What is ASN?

    What is an ASN? ASN stands for Autonomous System Number. It is a unique identifier

    More
    How Anycast DNS Actually Works (And Why Your Network Needs It)
    How Anycast DNS Actually Works (And Why Your Network Needs It)

    Anycast DNS: A Leader’s Guide to Protecting Your Digital Infrastructure Executive

    More
    Why RPKI Matters: Securing Your Company’s Internet Traffic
    Why RPKI Matters: Securing Your Company’s Internet Traffic

    RPKI Certification: A Leader’s Guide to Internet Routing Security Executive

    More
    Why RIPE Address Policy Matters for Your Company’s Digital Future
    Why RIPE Address Policy Matters for Your Company’s Digital Future

    Executive Summary: What You Need to Know 🎯 Strategic Importance – Internet

    More
    AWS Outages: The CEO’s Guide to Preventing Downtime & Protecting Revenue
    AWS Outages: The CEO’s Guide to Preventing Downtime & Protecting Revenue

      When AWS DynamoDB failed in October 2025, thousands of businesses discovered that

    More
    What I Wish CEOs Knew About Managing IP Reputation Risk
    What I Wish CEOs Knew About Managing IP Reputation Risk

    Executive Summary: What You Need to Know 🎯 IP reputation directly impacts your

    More
    How to Create a Subnet and Configure Routing
    How to Create a Subnet and Configure Routing

    Mastering Subnetting and Routing for Modern Networks Why Subnetting Matters in Today’s

    More