Image couldn't load - you don't seem to have IPv6 connectivity

blog topics: BGP · IPv6 · more · my publications · my business: inet⁶ consult · contact: Twitter · LinkedIn · email · 🇺🇸 🇳🇱

These are all posts about BGP, including those originally published on

RPKI tools and deployment

Recently, Cloudflare launched Is BGP safe yet?. And they immediately answer their own question: No.

What they're getting at is RPKI deployment. RPKI is a mechanism that lets the owner of a block of IP addresses specify which network gets to use those addresses. (Which AS gets to originate a prefix, in BGP speak.) RPKI protects to some forms of (mostly accidental) address hijacking. But for RPKI to work, the address owner needs to publish a "route origination authorization" (ROA) and networks around the globe need to filter based on these ROAs.

Five years ago, I wrote that RPKI is ready for real-world deployment. So where are we now? The US National Institute of Standards and Technology (NIST) has a very nice RPKI deployment monitor, showing the following graph:

Full article / permalink - posted 2020-05-04

→ BGP – the right tool for so many jobs

This is a post that I wrote for the Noction blog:

Like other very successful protocols such as HTTP and DNS, over the years BGP has been given more and more additional jobs to do. In this blog post, we’ll look at the new functionality and new use cases that have been added to BGP over the years. These include various uses of BGP in enterprise networks and data centers.

Recently, I've been looking a bit at BGP in datacenters, and it's really interesting to see how BGP is used in such different ways than it is for global inter-domain routing.

Permalink - posted 2020-03-23

BGP hands-on training courses in 2020

For 2020, there will be hands-on BGP training courses in association with NL-ix on the following dates:

Permalink - posted 2020-02-12 - 🇳🇱 Nederlandse versie

Winner doesn't take all: IPv6 is now a success, even at 25% deployment

We shouldn't gauge the success of IPv6 by looking at how much IPv6 replaces IPv4, but by how much IPv6 complements IPv4. And it's already doing that quite well today by making IPv4aaS (IPv4 as a service) possible. And IPv4aaS will make ISPs require IPv6 when peering with streaming services and other big content providers.

Permalink - posted 2020-01-23 - 🇳🇱 Nederlandse versie

IPv4 now also exhausted in Africa

As of a few days ago, IPv4 has run out in all regions in the world, as AFRINIC, the Regional Internet Registry that serves Africa, has now reached IPv4 exhaustion phase 2.

For more on the IPv4 exhaustion over the last decade, see my story The rise of IPv6 and fall of IPv4 in the 2010s.

posted 2020-01-16

❝Beating BGP is harder than we thought❞

In a paper for the HotNets'19, seven researchers admit that "beating BGP is harder than we thought". (Discovered through Aaron '0x88cc' Glenn.) The researchers looked at techniques used by big content delivery networks, including Google, Microsoft and Facebook, to deliver content to users as quickly as possible. This varies from using DNS redirects to PoPs (points of presence) close to the user, using BGP anycast to route requests to a PoP closeby and keeping data within the CDN's network as long as possible ("late exit" or "colt potato" routing).

Turns out, all this extra effort only manages to beat BGP as deployed on the public internet a small fraction of the time.

Full article / permalink - posted 2019-12-30

older posts

Search for:
RSS feed

Archives: 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2010, 2011, 2013, 2014, 2015, 2016, 2018, 2019, 2020