# Centralized Digital Coin Exchanges **URL:** \ **Category:** Development\ **Created:** [November 8, 2017, 1:34pm UTC](https://bisq.community/t/centralized-digital-coin-exchanges/3385 "2017-11-08T13:34:33Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![ganganath](https://bisq.community/letter_avatar/ganganath/32/6_22734026db12803ebb3e059622ac3534.png) [@ganganath](https://bisq.community/u/ganganath)\ **Post date:** [November 8, 2017, 1:34pm UTC](https://bisq.community/t/centralized-digital-coin-exchanges/3385/1 "2017-11-08T13:34:33Z")
From the network security and availability point of view, it is preferred that digital exchange uses their own IP addresses. Our researches shows that 90% of the digital exchanges are hosted in Cloudflare, AWS or Incapsula. Also none of the digital exchanges uses their own IP addresses. Couple of issues are identified. 1. Too much centralized, traditional banks online transactions are more decentralized 2. Your addresses are summarized with other services when the cloud service provider advertise the IP segments to internet, which means a bad actor can advertise a detailed prefix so that you are not reachable from the internet until the upstream ISPs identify and stop the bad actor ( IP highjacking). 3. Less redundancy as not multihomed. We are concerned as network engineers, whether these issues are thought or not. Would like to know what the network designers of BISQ think regarding our above concern. Best Regards, Ganga ---
**Author:** ![Nolaan](https://bisq.community/user_avatar/bisq.community/nolaan/32/1100_2.png) [@Nolaan](https://bisq.community/u/Nolaan)\ **Post date:** [November 8, 2017, 2:07pm UTC](https://bisq.community/t/centralized-digital-coin-exchanges/3385/2 "2017-11-08T14:07:05Z")
> [@ganganath](#): > > Our researches shows that 90% of the digital exchanges are hosted in Cloudflare, AWS or Incapsula. Can you provide the source of this data and also the actual research please? ---
**Author:** ![Nolaan](https://bisq.community/user_avatar/bisq.community/nolaan/32/1100_2.png) [@Nolaan](https://bisq.community/u/Nolaan)\ **Post date:** [November 8, 2017, 2:09pm UTC](https://bisq.community/t/centralized-digital-coin-exchanges/3385/3 "2017-11-08T14:09:10Z")
Furthermore @ganganath Bisq is open source and all the reference documents can be found on github. All the answers to your questions are here : [https://github.com/bisq-network/docs/blob/master/dao/phase-zero.adoc#Part-I](https://github.com/bisq-network/docs/blob/master/dao/phase-zero.adoc#Part-I) ---
**Author:** ![ganganath](https://bisq.community/letter_avatar/ganganath/32/6_22734026db12803ebb3e059622ac3534.png) [@ganganath](https://bisq.community/u/ganganath)\ **Post date:** [November 8, 2017, 2:20pm UTC](https://bisq.community/t/centralized-digital-coin-exchanges/3385/4 "2017-11-08T14:20:55Z")
We checked all the known digital coin exchanges to see what IP addresses they used to host their site(Gateway for users) to buy and sell. I am not talking about master nodes or other relay nodes working in the background. ![digital exchanges still centralized](https://bisq.community/uploads/default/original/2X/e/e2555bd860f09b74e79e32fec35a90ef1520e489.jpg) Attached diagram shows the most of the Digital Coin Exchanges. ---
**Author:** ![ganganath](https://bisq.community/letter_avatar/ganganath/32/6_22734026db12803ebb3e059622ac3534.png) [@ganganath](https://bisq.community/u/ganganath)\ **Post date:** [November 8, 2017, 2:22pm UTC](https://bisq.community/t/centralized-digital-coin-exchanges/3385/5 "2017-11-08T14:22:05Z")
Hi Nolaan, Thanks I will go through it. Hope I will find the information I am looking for. ---
**Author:** ![Nolaan](https://bisq.community/user_avatar/bisq.community/nolaan/32/1100_2.png) [@Nolaan](https://bisq.community/u/Nolaan)\ **Post date:** [November 8, 2017, 2:25pm UTC](https://bisq.community/t/centralized-digital-coin-exchanges/3385/6 "2017-11-08T14:25:55Z")
> [@ganganath](#): > > We checked all the known digital coin exchanges to see what IP addresses they used to host their site(Gateway for users) to buy and sell. I am not talking about master nodes or other relay nodes working in the background. Please do because bisq sits on top of Tor and trades are made in a P2P fashion. I was hoping for data with text and number, not a picture. Regards ---
**Author:** ![ganganath](https://bisq.community/letter_avatar/ganganath/32/6_22734026db12803ebb3e059622ac3534.png) [@ganganath](https://bisq.community/u/ganganath)\ **Post date:** [November 8, 2017, 2:49pm UTC](https://bisq.community/t/centralized-digital-coin-exchanges/3385/7 "2017-11-08T14:49:02Z")
This is not that much of unknown information. You just need to check the network status of other organizations. Let me think again before sending it to you. I think that BISC exchange will be unreachable if /24 network is advertised to internet by a bad actor. Do you think this is not a problem with your technology? Then it is really great to heat. Best Regards, Ganga ---
**Author:** ![Nolaan](https://bisq.community/user_avatar/bisq.community/nolaan/32/1100_2.png) [@Nolaan](https://bisq.community/u/Nolaan)\ **Post date:** [November 8, 2017, 2:51pm UTC](https://bisq.community/t/centralized-digital-coin-exchanges/3385/8 "2017-11-08T14:51:58Z")
> [@ganganath](#): > > will be unreachable if /24 network is advertised to internet by a bad actor I’m not sure I understand this part. Can you elaborate a little be more for me please. ELI5 ---
**Author:** ![ganganath](https://bisq.community/letter_avatar/ganganath/32/6_22734026db12803ebb3e059622ac3534.png) [@ganganath](https://bisq.community/u/ganganath)\ **Post date:** [November 8, 2017, 3:48pm UTC](https://bisq.community/t/centralized-digital-coin-exchanges/3385/9 "2017-11-08T15:48:18Z")
Sure, bisq.network 54.250.174.92 AS16509 54.250.128.0/18 Amazon Japan Above is the the address of the BISQ exchange. Now assume somebody say 54.250.174.0/24 is available in Russia or Brazil or India, then internet believes it, until Amazon complains to those ISPs who believed that information. You may search internet on ‘IP Prefix hijacking’ for details. Internet works on a protocol called BGP. Most specific information ( routing prefix) get prioritized. Even Amazon is keep on advertising to the internet saying 54.250.128.0/18 is Amazon, if a small network operator with an AS may advertise 54.250.174.0/24 as them self. So all the traffic from the internet to bisq.network goes to them and not to Amazon. It is called IP Prefix highjacking. Of course after a couple of hours we can stop that but some times it takes longer. This is why it is important to have your own addresses and AS number when critical services are running. I hope to provide you more information. Please keep in touch. Best Regards, Ganga ---
**Author:** ![ganganath](https://bisq.community/letter_avatar/ganganath/32/6_22734026db12803ebb3e059622ac3534.png) [@ganganath](https://bisq.community/u/ganganath)\ **Post date:** [November 8, 2017, 3:57pm UTC](https://bisq.community/t/centralized-digital-coin-exchanges/3385/10 "2017-11-08T15:57:06Z")
> **[BGP hijacking](https://en.wikipedia.org/wiki/BGP_hijacking)** > > BGP hijacking (sometimes referred to as prefix hijacking, route hijacking or IP hijacking) is the illegitimate takeover of groups of IP addresses by corrupting Internet routing tables maintained using the Border Gateway Protocol (BGP). The Internet is a global network in enabling any connected host, identified by its unique IP address, to talk to any other, anywhere in the world. This is achieved by passing data from one router to another, repeatedly moving each packet closer to its destination... These are some famous highjacking. A small prefix hijack like a /24 or /20 is almost not discussed as it happens daily basis. There are mechanisms such as RPKI but in reality it is not fully implemented. You may ask Amazon to advertise /24s then this issue is addressed. Of course there are other advantages of having your own network like the banks do. More control robust DDoS prevention mechanism Better redundancy You need a network engineer but considering a major digital exchange this is of course not a cost ---
**Author:** ![Nolaan](https://bisq.community/user_avatar/bisq.community/nolaan/32/1100_2.png) [@Nolaan](https://bisq.community/u/Nolaan)\ **Post date:** [November 8, 2017, 3:59pm UTC](https://bisq.community/t/centralized-digital-coin-exchanges/3385/11 "2017-11-08T15:59:34Z")
Thank you for the clarification, now I better understand your concerns. Again, Bisq is decentralized read the white paper to understand what you are dealing with. I’m not sure how practical this approach will be apart then distributing fake executable but then those executable must hijack the p2p network to make an attack workable. Anyway if you want more info Manfred will help you. Unless the white paper answers your questions. ---
**Author:** ![ganganath](https://bisq.community/letter_avatar/ganganath/32/6_22734026db12803ebb3e059622ac3534.png) [@ganganath](https://bisq.community/u/ganganath)\ **Post date:** [November 8, 2017, 4:02pm UTC](https://bisq.community/t/centralized-digital-coin-exchanges/3385/12 "2017-11-08T16:02:57Z")
I understand that a bad actor can’t steel the coins. It is almost not possible to disturb the P2P communications. What I am saying is that it possible to block users accessing bisq exchange site over the internet. It is an availability issue not a security threat. ---
**Author:** ![ganganath](https://bisq.community/letter_avatar/ganganath/32/6_22734026db12803ebb3e059622ac3534.png) [@ganganath](https://bisq.community/u/ganganath)\ **Post date:** [November 8, 2017, 11:41pm UTC](https://bisq.community/t/centralized-digital-coin-exchanges/3385/13 "2017-11-08T23:41:35Z")
White paper doesn’t answer my question. It is very clear that site availability ( able to being access the site by users) is challenged in the BGP Protocol level. ---
**Author:** ![ganganath](https://bisq.community/letter_avatar/ganganath/32/6_22734026db12803ebb3e059622ac3534.png) [@ganganath](https://bisq.community/u/ganganath)\ **Post date:** [November 9, 2017, 2:24am UTC](https://bisq.community/t/centralized-digital-coin-exchanges/3385/14 "2017-11-09T02:24:46Z")
I did a test in my office network blocking bisq.network, [bisq.io](http://bisq.io) for myself. There were no issues for using the BISQ P2P applications. Also kept on blocking the tor servers the P2P application selecting. Still the P2P client selects another tor node. Some how it keeps on working. Very nice. ---
**Author:** ![ganganath](https://bisq.community/letter_avatar/ganganath/32/6_22734026db12803ebb3e059622ac3534.png) [@ganganath](https://bisq.community/u/ganganath)\ **Post date:** [November 9, 2017, 2:32am UTC](https://bisq.community/t/centralized-digital-coin-exchanges/3385/15 "2017-11-09T02:32:45Z")
We want to host a BISQ node in our network. How to get more information. ---
**Author:** ![shrike](https://bisq.community/letter_avatar/shrike/32/6_22734026db12803ebb3e059622ac3534.png) [@shrike](https://bisq.community/u/shrike)\ **Post date:** [November 9, 2017, 2:49am UTC](https://bisq.community/t/centralized-digital-coin-exchanges/3385/16 "2017-11-09T02:49:11Z")
There is only the java application GUI that is found on the github and download sections. Mac/Windows/Linux. There is no headless/CLI version. There seems to be a language barrier here. Also…who is “WE”, who do you represent? ---
**Author:** ![ganganath](https://bisq.community/letter_avatar/ganganath/32/6_22734026db12803ebb3e059622ac3534.png) [@ganganath](https://bisq.community/u/ganganath)\ **Post date:** [November 9, 2017, 3:16am UTC](https://bisq.community/t/centralized-digital-coin-exchanges/3385/17 "2017-11-09T03:16:16Z")
We are an ISP in Japan in Okinawa also having a private global WAN to drag IX traffic around the world for our users. We do have plenty of bandwidth on our global WAN so looking forward to utilize them to make revenue. ---
**Author:** ![ManfredKarrer](https://bisq.community/user_avatar/bisq.community/manfredkarrer/32/26_2.png) [@ManfredKarrer](https://bisq.community/u/ManfredKarrer)\ **Post date:** [November 9, 2017, 2:49pm UTC](https://bisq.community/t/centralized-digital-coin-exchanges/3385/18 "2017-11-09T14:49:28Z")
Upcoming release will even have Tor pluggable transports support. ---
**Author:** ![keo](https://bisq.community/letter_avatar/keo/32/6_22734026db12803ebb3e059622ac3534.png) [@keo](https://bisq.community/u/keo)\ **Post date:** [November 9, 2017, 6:46pm UTC](https://bisq.community/t/centralized-digital-coin-exchanges/3385/19 "2017-11-09T18:46:12Z")
Good, hope it works in China. ---
**Author:** ![Emzy](https://bisq.community/user_avatar/bisq.community/emzy/32/381_2.png) [@Emzy](https://bisq.community/u/Emzy)\ **Post date:** [November 9, 2017, 9:13pm UTC](https://bisq.community/t/centralized-digital-coin-exchanges/3385/20 "2017-11-09T21:13:08Z")
I think you mix up the exchange part and the website part. bisq.network 54.250.174.92 AS16509 is only the Website. And the whole exchange will run without it. As it is using Tor for it’s communication you only need one woking Tor entry node. Generally on BGB security: You are right the BGP is the internet backbone protocol, if you mess with it you can do bad things. But the bad things don’t go undetected, every BGP peer can see your manipulation and you will face consequences. Maybe loose your AS. So I’m personally not afraid of BGP manipulation. Best Emzy [Next page](https://bisq.community/t/centralized-digital-coin-exchanges/3385.md?page=2)