AFRINIC saga currently tracked end-to-end.
Governance / Case File
CASE FILE
Case File governance intelligence tracks institutions, policy processes, standards activity, registry operations, accountability disputes, and implementation signals that affect internet infrastructure. BTW.
Institutional BreakdownLegal and Policy ConflictElection and Control Risk
Institution legitimacy and continuity risk mapping.
Primary-source based timeline and risk analysis.
Used for continuity and policy exposure planning.
Latest Coverage
Latest from CASE FILE
763 articles
CASE FILE
The Internet Saw One AS. Operations Had Twelve: BGP Confederations and the Authority of a Hidden Topology
The public route never changed. External peers still saw AS 64500, the sessions remained Established and the prefix stayed visible in collectors. Inside the network, however, one router had crossed from Member-AS 65021 to 65031 while its neighbor still believed the old boundary.…
CASE FILE
The Router Could Not Read the Attribute, So It Forwarded It: BGP's Partial Bit and the Authority of Ignorance
This technical explainer opens with a constructed operating scenario, not a reported incident. The transit router does exactly what the protocol asks: it receives a route carrying an optional transitive attribute it does not understand, preserves the opaque bytes, sets Partial…
CASE FILE
The Prefix Was IPv4; the Way There Was IPv6: RFC 8950 and the Authority of a Cross-Family Next Hop
In an illustrative migration scenario, the maintenance report says the IPv6-underlay change succeeded. Every BGP session is Established, capability 5 appears in both OPEN messages, and the IPv4 prefixes remain visible. Yet one rack cannot reach an IPv4 customer. The route exists…
CASE FILE
The Next Key Was Announced but Not Delivered: TCP-AO and the Authority of a Key Epoch
In an illustrative rollover scenario at 02:07, the dashboard turns green. Both BGP routers show key 42 in their key chains, and one captured TCP segment carries `RNextKeyID=42`. The operator concludes that the rollover has completed and deletes key 17. Seconds later, TCP…
CASE FILE
The Packet Arrived with No Distance to Spare: BGP GTSM and the Authority of Proximity
In an illustrative maintenance scenario at 02:13, one direction of a multihop BGP session moves onto a longer path. The peer still emits every TCP segment with TTL 255. The receiver, configured to admit two routed hops, now sees 252 instead of 253 and discards the traffic before…
CASE FILE
The Filter That Crossed the Session but Not the Boundary: BGP ORF and the Authority to Ask for Less
Consider an illustrative customer changing its inbound prefix-list from a full table to a narrow feed. Its router immediately looks cleaner: unwanted routes disappear from the local RIB. Yet the provider may still be generating and transmitting every one of them, only to have the…
CASE FILE
The Session Was Established and Carried No Routes: RFC 8212 and the Authority of Explicit Policy
The following replacement-edge maintenance scenario is illustrative, not a reported incident. The new edge shows `Established`; KEEPALIVEs advance and the peer has been stable for twenty minutes, yet the IPv4 table is empty and nothing has been advertised. The transport is…
CASE FILE
The Session Fell Silent but Left a Reason: BGP Shutdown Communication and the Authority to Explain a Closure
The peering drops at the scheduled minute. This time the receiver does not see only `Cease`. The terminal NOTIFICATION also carries a compact ticket reference, a reason and an expected maintenance interval. That text can remove hours of ambiguity. It can also be forged, exposed…
CASE FILE
Both Connections Reached OPEN; Only One Could Remain: BGP Collision Detection and the Authority of a Stable Identifier
Both routers dial at once. Two TCP connections complete between the same pair of addresses, and each carries a valid BGP OPEN. Neither transport is broken. Yet one configured peering cannot keep two competing finite-state machines and two versions of its session history. BGP…
CASE FILE
The Peer Kept Sending but Stopped Receiving: BGP SendHoldTimer and the Authority to End a One-Way Session
The neighbour is still sending KEEPALIVEs, so the BGP dashboard remains green. Yet its TCP receive window has collapsed to zero and none of the local withdrawals can leave the socket. The session is established, inbound liveness is real, and the route information held by the…
CASE FILE
Internet Society Seated Four Trustees. The Challenge Record Still Stops at “Rejected”
Four Internet Society trustees began three-year terms in July after an election cycle that included one formal challenge. The Board disclosed that it reviewed background material and associated audit results before unanimously rejecting that challenge. What the public still…
CASE FILE
The Route Was Accepted So Packets Would Die: BGP BLACKHOLE and the Authority to Destroy Reachability
A blackhole announcement is a rare routing message whose success is measured by non-delivery. That inversion can save a network during a DDoS attack, but only if the right to sacrifice one destination is narrower, more observable and more reversible than the emergency that…
CASE FILE
The Session Could Carry It; the Next One Could Not: BGP Extended Messages and the Authority of a Shared Size Budget
A BGP speaker accepts a 12-kilobyte UPDATE, selects the route and prepares to propagate it. The next neighbour accepts only the old 4,096-octet envelope. Nothing is malformed, the policy still prefers the path and the prefix is valid—yet the complete announcement cannot cross the…
CASE FILE
The Monitor Saw the Route, Not the Packet: BGP BMP and the Authority of a Control-Plane Witness
A monitoring feed can be accurate and still support a false conclusion. BGP Monitoring Protocol gives operators structured views of routes before policy, after policy, at export and after selection. Those views are not interchangeable. The first duty of a BMP system is therefore…
CASE FILE
The Metric Crossed the AS Boundary: BGP AIGP and the Authority to Define One Interior Cost
Two autonomous systems can belong to one operator and still speak different mathematical languages. If one calls a 10-millisecond link “10” and the other calls a high-capacity link “10,” adding their metrics produces a precise number with no coherent meaning. BGP AIGP can carry a…
CASE FILE
The Backup Was Chosen Before the Failure: BGP PIC and the Authority of Precomputed Forwarding
When a backbone link fails, the first packets do not wait for a committee of routing processes to reconsider millions of destinations. On a router using BGP Prefix Independent Convergence, they may follow a backup that was selected and installed hours earlier. The speed comes…
CASE FILE
The Reflector Chose from the Wrong City: BGP ORR and the Authority to Compute Another Router’s Best Exit
A centralized route reflector can make a path decision from a place where no customer traffic ever flows. BGP Optimal Route Reflection lets it calculate from a client’s logical position instead. The mechanism restores a missing perspective, but it also creates a new delegated…
CASE FILE
The Route Reflector Hid the Choice: BGP ADD-PATH and the Authority to Expose Alternatives
A route reflector can make a large network easier to operate by showing each client only the route it selected. That economy also removes choices. ADD-PATH creates a way to carry several paths for one prefix, but the protocol does not decide which alternatives deserve exposure…
CASE FILE
The Route Was Valid. The Reflector Called It a Loop: BGP Cluster IDs and the Authority to Discard Reachability
Every BGP session was Established. The customer prefix was valid at its source. Yet a regional reflector refused the route because a four-octet value in `CLUSTER_LIST` matched its own. The protocol had done exactly what it was told: an identity meant to stop loops had been reused…
CASE FILE
The Policy Changed; the Routes Did Not: BGP Route Refresh and Re-evaluation Authority
Editing an inbound BGP policy changes a rule, not the routes already judged under the old one. To apply the new rule, a router needs the inputs again. Route Refresh lets it ask a capable neighbor to re-advertise the neighbor's current export set without destroying the session—but…
Member Unlock
Restricted Profile Intelligence
Login is required to unlock full profile briefings and deep-dive sections.
Strategic Circle Briefing
Join to unlock strategic briefings after signing in.
Join Strategic CircleLeadership Alliance Briefing
For qualified IP-asset owners and management; sign in to unlock alliance briefings.
Join Leadership AllianceSession Map
Active Dossiers
AFRINIC Saga
Multi-year governance and legal crisis with implications for RIR accountability worldwide.
Open AFRINIC Saga