Skip to main content

Intelligence

Latest Articles

Latest intelligence on infrastructure operators, policy decisions, market moves, and digital power shifts.

A host chooses a narrow reachable route from a few first-hop advertisements while a higher-preference path is broken

History

The Host That Learned a Small Routing Table: How IPv6 Ranked First Hops

IPv6 did not make every host a routing speaker. It let a router disclose a few expiring choices, then left the host to combine longest-prefix logic, observed reachability and local policy. The useful invention was as much the boundary as the route.

Aug 23, 2026
BGP ORF shown as a small cyan receiver request crossing a live session toward a larger sender-side export mechanism that permits only a narrow ordered set of amber routes.

CASE FILE

The Filter That Crossed the Session but Not the Boundary: BGP ORF and the Authority to Ask for Less

Consider an illustrative customer changing its inbound prefix-list from a full table to a narrow feed. Its router immediately looks cleaner: unwanted routes disappear from the local RIB. Yet the provider may still be generating and transmitting every one of them, only to have the…

Aug 23, 2026
AI editorial portrait of Linda Dunbar beside an expiring old network location and a newly confirmed destination path.

IETF

Linda Dunbar and the Directory That Must Not Invent a Neighbour

A virtual machine moves between racks, but an edge switch still holds yesterday's answer: the address is reachable through the old location. The reply can be perfectly formatted, delivered by an authenticated channel and still send traffic to the wrong place. Linda Dunbar's…

Aug 23, 2026
Separate request streams pass through distinct counters; one exhausted amber scope meets a temporary gate while other cyan scopes continue and a recovery arc points later

History

The Server That Counted Before It Answered: Why HTTP Needed 429

A request can be valid, authorized and still arrive after its allotted share has gone. HTTP 429 made that refusal legible while leaving the decisive questions—who is counted, across what scope and at whose cost—with the server that owns the capacity.

Aug 23, 2026
RFC 8212 explicit BGP policy shown as two connected carrier routers with a live cyan session link while separate inbound and outbound gates hold amber route paths closed for staged authorization.

CASE FILE

The Session Was Established and Carried No Routes: RFC 8212 and the Authority of Explicit Policy

The following replacement-edge maintenance scenario is illustrative, not a reported incident. The new edge shows `Established`; KEEPALIVEs advance and the peer has been stable for twenty minutes, yet the IPv4 table is empty and nothing has been advertised. The transport is…

Aug 23, 2026
A translucent candidate endpoint waits behind a gate while local-link probes return with matching and different nonce tokens

History

The Silence That Licensed an Address: What IPv6 DAD Could Prove

IPv6 DAD based an important decision on a negative observation: no rival appeared during a bounded local probe. The protocol had to say exactly how far that silence could reach.

Aug 23, 2026
A complete outer probe ring circles a repaired scheduling carousel and four narrower selector arcs, beside a ten-slot glass ledger with unmatched public entries and a sealed privacy capsule.

Story

RIPE Atlas Closed a Probe-Assignment Incident Without a Measurement Ledger

A missing vantage point can describe the Internet, the probe or the scheduler. On 18 August, RIPE Atlas made the third possibility explicit: measurements using an area choice other than `worldwide` had trouble receiving probes. The backend was fixed; the public record still does…

Aug 23, 2026
Two separate graphite gateway structures face a clean cyan session termination ring while a small amber context capsule settles into an independent receiving evidence console.

CASE FILE

The Session Fell Silent but Left a Reason: BGP Shutdown Communication and the Authority to Explain a Closure

The peering drops at the scheduled minute. This time the receiver does not see only `Cease`. The terminal NOTIFICATION also carries a compact ticket reference, a reason and an expected maintenance interval. That text can remove hours of ambiguity. It can also be forged, exposed…

Aug 23, 2026
Two luminous connections span the same dark routing gateways; a cyan session continues while an amber duplicate dissolves at a precise termination ring.

CASE FILE

Both Connections Reached OPEN; Only One Could Remain: BGP Collision Detection and the Authority of a Stable Identifier

Both routers dial at once. Two TCP connections complete between the same pair of addresses, and each carries a valid BGP OPEN. Neither transport is broken. Yet one configured peering cannot keep two competing finite-state machines and two versions of its session history. BGP…

Aug 23, 2026
An unconditional amber write is stopped at a gate marked 428, while a second write carries a validator into an atomic compare-and-commit chamber

History

The Write That Had to Name Its Past: Why HTTP Needed 428

A write request can be perfectly formed and still be too ignorant to trust. HTTP 428 gave an origin a precise way to demand the missing fact: which version of this resource did the writer actually see?

Aug 23, 2026
A cyan DNS selection plane sends a service request toward two preferred server sockets with unequal amber paths and one recessed backup target

History

The Name That Chose a Service: How DNS SRV Found Servers

A domain once led clients toward one address and a remembered port. DNS SRV made service location an explicit, bounded choice among hosts.

Aug 23, 2026
Two dark routing gateways exchange cyan control pulses in one direction while amber signal blocks queue behind a narrowed return path beside a timer.

CASE FILE

The Peer Kept Sending but Stopped Receiving: BGP SendHoldTimer and the Authority to End a One-Way Session

The neighbour is still sending KEEPALIVEs, so the BGP dashboard remains green. Yet its TCP receive window has collapsed to zero and none of the local withdrawals can leave the socket. The session is established, inbound liveness is real, and the route information held by the…

Aug 23, 2026
One red packet stream is admitted through a policy gate into a black discard aperture, while cyan and amber routes continue across the surrounding network.

CASE FILE

The Route Was Accepted So Packets Would Die: BGP BLACKHOLE and the Authority to Destroy Reachability

A blackhole announcement is a rare routing message whose success is measured by non-delivery. That inversion can save a network during a DDoS attack, but only if the right to sacrifice one destination is narrower, more observable and more reversible than the emergency that…

Aug 23, 2026
An intact cyan route capsule containing amber attribute tiles crosses a wide session aperture but stops before a smaller independent next-hop aperture, while smaller complete capsules pass below.

CASE FILE

The Session Could Carry It; the Next One Could Not: BGP Extended Messages and the Authority of a Shared Size Budget

A BGP speaker accepts a 12-kilobyte UPDATE, selects the route and prepares to propagate it. The next neighbour accepts only the old 4,096-octet envelope. Nothing is malformed, the policy still prefers the path and the prefix is valid—yet the complete announcement cannot cross the…

Aug 23, 2026
AI editorial portrait of Hannes Gredler beside one OSPF link whose two traffic directions move onto alternate paths.

IETF

Hannes Gredler and the OSPF Link That Had to Drain Both Ways

An operator makes one end of a circuit prohibitively expensive, watches routes leave, and calls the link drained. Yet packets can still enter from the neighbour because OSPF does not advertise one indivisible circuit: each router originates its own directional state. Hannes…

Aug 23, 2026
Two identical five-stack result plates sit before and after two transparent audit gates, while an empty document slot breaks the line to the official-state plate.

Story

LACNIC's ASO AC Result Became Official Without a Closure Receipt

At 18:00 UTC on 20 August, one public election table crossed a consequential boundary. The names and 144 votes did not change. The page's status did: the provisional result became the official result after two audit windows. What did not appear beside that new status was the…

Aug 23, 2026
An amber request capsule is stopped at a barrier marked 425 before an incomplete handshake ring, while the same capsule passes after the ring closes

History

The Request That Had to Wait for Proof: Why HTTP Needed 425

TLS 1.3 let returning clients send requests before a new handshake finished. HTTP 425 made replayable early data wait without changing the request itself.

Aug 23, 2026
Four distinct control-plane layers send separate cyan telemetry beams to a glass collector while an independent amber forwarding path runs beneath them and one monitoring gap remains visible.

CASE FILE

The Monitor Saw the Route, Not the Packet: BGP BMP and the Authority of a Control-Plane Witness

A monitoring feed can be accurate and still support a false conclusion. BGP Monitoring Protocol gives operators structured views of routes before policy, after policy, at export and after selection. Those views are not interchangeable. The first duty of a BMP system is therefore…

Aug 23, 2026
Three distinct internal cost systems feed a transparent accumulator inside an amber administrative boundary, while an external network remains disconnected and a lower metric path visibly breaks at a gap.

CASE FILE

The Metric Crossed the AS Boundary: BGP AIGP and the Authority to Define One Interior Cost

Two autonomous systems can belong to one operator and still speak different mathematical languages. If one calls a 10-millisecond link “10” and the other calls a high-capacity link “10,” adding their metrics produces a precise number with no coherent meaning. BGP AIGP can carry a…

Aug 23, 2026
Three distinct glass name chains keep their leading blocks while one shared blue suffix is replaced by an amber suffix at a fixed gate between two separate authority rings

History

The Alias That Could Not Move Authority: DNS DNAME

DNAME redirects descendant lookups by replacing one suffix. The owner, zone apex and NS delegation stay put even when many queries follow the new subtree.

Aug 23, 2026