Blog
How the Internet in Australia went down under
This Wednesday for about 30 minutes many Australians found themselves without Internet access. All these users were relying either directly of indirectly on the Telstra network, which at that point was isolated from the Internet. This story quickly hit the local headlines, in this blog we’ll look at the technical details of this event and […]
Read MoreF-Root DNS server moved to Beijing
F-Root DNS server moved to Beijing Systems such as DNS (root) servers often rely on anycast technology to improve availability and response time. The idea behind anycast is that the same prefix is announced from multiple geographically separated systems. As a result the client should always end-up at the closest (as seen from a BGP […]
Read MoreInternet Syria offline
The unrest in Syria continues and as of this morning it seems that the Syrian government has shutdown about of all Syrian networks. The Internet in Syria is dominated by “The Syrian Telecommunications Establishment”, which routes its networks from AS29256 and AS29386. Besides these providers there are AS6453 – Tata communications which routes 6 Syrian […]
Read MoreFacebook’s detour through China and Korea
Many of you remember the story of about a year ago, when we reported that a Chinese network was announcing a significant part of the prefixes on the Internet. Networks affected by this incident included big names such as dell.com and cnn.com as well as U.S. government (.gov) and military (.mil) sites, including those for […]
Read MoreEgypt Back Online
A few moments ago I noticed the first signs of life from the previously unreachable Egyptian networks. We saw the first BGP announcements for Egypt come in at at 09:30:48 UTC. And as of 10:52 UTC the website of Noor data networks was reachable again. It looks like the majority of the providers are now […]
Read MoreInternet in Egypt offline
Click for latest updates: Last updated at January 31, 21:00 UTC Different media are reporting that Internet and other forms of electronic communications are being disrupted in Egypt. Presumably after a government order in response to the protests. Looking at BGP data we can confirm that according to our analysis 88% of the ‘Egyptian Internet’ […]
Read MoreSecuring BGP routing with RPKI and ROA’s
Securing BGP has been on the todo list of the IETF and the community at large for many years. Over the years we’ve seen several proposals, the Resource Public Key Infrastructure (RPKI) is the latest and most successful initiative. RPKI solves one of the most fundemental problems. It allows us to verify whether an Autonomous […]
Read More‘Hijack’ by AS4761 – Indosat, a quick report
This is just a quick post to address some of the emails I’ve received today. Quite a bit of BGPmon.net users have received a notification regarding a possible hijack of their address space. On Friday January 14th AS4761, INDOSAT-INP-AP, started to originate a large number of new prefixes. A quick check show that AS4761 originated […]
Read MoreThe State of IPv6 in Canada
IPv6 deployment statics in Canada, demonstrate that the Canadian transit market is being taken over by large global transit providers
Read MoreIPv6 deployment in 2010, how far are we?
We are nearing the end of 2010 and while we’re all sitting around the Christmas tree something else is nearing its end. We’re just a few months away from IPv4 exhaustion; the end of the IPv4 lifetime is insight. This will have many organizations rush to implement IPv6 in their networks. So how far are […]
Read MoreChinese BGP hijack, putting things into perspective
China denies hijacking a huge chunk of US net traffic
Internet Traffic from U.S. Government Websites Was Redirected Via Chinese Networks
Google’s services redirected to Romania and Austria
BGP hijacks happen every day, the majority of them don’t affect a large geographic region and only are noticed a small number of users. Every now and then however we see an event that affects many users, either because of the geographic scale or simply because of the specific prefix that is affected. The latter […]
Read MoreStrange IPv6 bogon Announcements
This Friday a number of BGPmon.net users have received an alert message informing them that their AS was announcing a new IPv6 prefix. I too got an alert email and was surprised to when I saw the prefix that was detected, as the prefix detected was an ‘invalid’ IPv6 prefix. This is the message I […]
Read MoreChinese ISP hijacks the Internet
This morning many BGPmon.net users received an alert regarding a possible prefix hijack by a Chinese network. AS23724 is one of the Data Centers operated by China Telecom, China’s largest ISP. Normally AS23724 CHINANET-IDC-BJ-AP IDC, China Telecommunications Corporation only originates about 40 prefixes, however today for about 15 minutes they originated about ~37,000 unique prefixes […]
Read MoreIssues with allocating from 1.0.0.0/8
This week it was announced that IANA has allocated 1.0.0.0/8 to APNIC. This prefix must look familiar to many as we see it often in examples and documentation. And let’s be honest haven’t you used 1.1.1.1 on one of your test routers to quickly test something? Receiving a prefix from this range might result in […]
Read MoreRouting diff report, Rancid for BGP
Just like many you, I use rancid to track changes in configurations of our routers and switches. This week BGPmon.net released a new feature called ‘routing report’, you can think of this as a Rancid for your BGP routing table. Every day BGPmon compares the announcements by your ASN with those of the day before. […]
Read MoreProgramming with the BGPmon.net Web Services API
Lately I have received quite some questions with regard to connecting BGPmon.net with existing monitoring software. As well as requests for making more data available for developers. I’m happy to announce that these things should now be possible trough the BGPmon.net Web Services API. This API allows you to access your BGPmon.net alert as well […]
Read MoreNew hardware for BGPmon.net server
Last week I finally received a new CPU for the BGPmon.net server. This new quad core 2.66GHz CPU replaces a 1.8GHz single core CPU. This upgrades follows the memory upgrade from a few weeks ago when memory was upgraded from 2GB to 8GB. Over the course of this week I saw significant improvement in execution […]
Read MoreThe Vatican taking the lead in IPv6 rollout?
IPv6 deployment statistics. Which country is leading in the deployment of IPv6. We tried to answer that question by looking at the BGP tables.
Read MoreBGP leak in Italy
Friday morning around 07:22:08 UTC AS9035 (Wind Telecomunicazioni) started to announce approximately 85.000 prefixes with an invalid origin AS. The origin AS was set to AS9035 while these prefixes did not belong to AS9035. The impact was local to a number of Italian providers, all Telecom Italia customers. The incident was resolved in about ~2 […]
Read MoreDoes the United States Department of Defense (DoD) Monitor their prefixes?
Ok, ok… It happens all the time, people leaking private ASN’s. But this one caught my attention. It seems that the US Department of defense (DoD) is leaking a private ASN 65401 for their prefixes 140.21.18.0/23 and 140.21.15.0/24. These prefixes are normally announced by AS5802 but now appear to be originating from the private AS […]
Read MoreNew summer release of BGPmon.net
I’m happy to announce that this week a I released the new version of BGPmon.net into production. There are several new features that many of you have asked for. In addition there are some significant changes in the database backend. This is largely to improve the performance of the webinterface and some soon to be […]
Read MoreNew notification features
The last few weeks I have been working on implementing some more notification options. A number of users have asked for sending out notification email to more than just one email address, as well as being able to send notifications to pagers. The latest release of BGPmon.net supports these features. You can find the configuration […]
Read MoreDid AS13214 really hijack the Internet?
This morning there was a discussion about a possible prefix hijack by AS13214 on the Nanog list. Cyclops users received a notification email notifying them that AS13214 was announcing their prefix. I just went trough some of the raw data and this is what I found. It seems it was picked up by the route-views4 […]
Read MoreNew IPv6 deployment statistics
Did you ever wonder what the current status of IPv6 deployment is and which country is taking the lead? A number of sites provide information about IPv6 deployment; each one uses a different way of measuring the usage. From traffics measurements, to the reach ability of popular websites over IPv6, to the growth of the […]
Read More