Max Resing

@resingm@infosec.exchange
145 Followers
313 Following
549 Posts

Passionate about networking protocols, the Internet, how to measure it and big data. Overall a curious mind and problem solver.

Interests & profession: #bigdata #dns #bgp #ddos #dataengineering #infosec #threatintel

Homepagehttps://maxresing.de
LinkedInhttps://linkedin.com/in/max-resing/

@dougmadory - Just wondering, what could cause Tata to actually announce the 1.1.1.0/24?

BGP.tools reveals that there are actually paths where 4755 or 6453 is the second-last hop to 13335.

For instance: 3320, 6453, 13335

Is it that Tata hosts instances for Quad 1, and failure response mechanisms ensure the prefix is still announced? Somewhat as a resiliency effort?

@generalx @GossiTheDog @DJGummikuh @ssamulczyk - That is not so much the case anymore. There is RPKI which solves the problem of route hijacks. It requires the owner of a prefix to sign it, and BGP-capable third-party networks have a way to validate or invalidate announcements, based on the route origin.
@Victorsigmoid @GossiTheDog @ssamulczyk - That might be a routing loop, which occasionally appears. Especially with those anomalies as discussed in here.

I'm frequently despondent when I see organizations remove or hide once public Internet operational status and trending data.

At one time, lots of networks used to publish a variety of status and traffic summaries. The non-profit Internet2 for example was exemplary in this regard. Cloudflare, a commercial organization, now provides far more public benefit data than they do.

A big loss earlier this year was the once public Equinix network status page - https://community.equinix.com/blog/videostutorials/introducing-equinix-status/519

As the Internet becomes increasingly complex and inconsistency abounds, having access to trends and data from diverse vantage points is as important as ever, but unfortunately increasingly difficult to get.

Introducing Equinix Status | Equinix Community - 519

Starting today you can check the status of your network products on the new Equinix Status page.  - 519

Equinix Community
@jeroen - Back online :)
@tschaefer - Kontext? 🤔

Anyone else here who can confirm a 504 - Gateway Time-out on spoofer.caida.org? Tried to access it various times today, but it just times out every time.

#Outage #CAIDA #Spoofing #Downtime

@jtk - time to step up my blogging output 😄
@jtk @dataplane - I am a fan of the weekend reads myself. Is there any interest in sharing candidate reports/papers/blog posts for putting it into future iterations of the weekend reads? Kind of a community effort on building up those resources?