Intelligence

Latest Articles

Latest intelligence on infrastructure operators, policy decisions, market moves, and digital power shifts.

AI editorial portrait of Mark Handley beside two separate SDP origin lineages whose revision sequences stop at a shared boundary

IETF

Mark Handley and the SDP Version You Cannot Compare Across Origins

A controller receives two session descriptions. One places version 391 in its `o=` line, the other 402. A dashboard sorts the larger number to the top and calls it latest. The arithmetic is flawless and the conclusion can still be wrong: the two descriptions carry different…

One query crosses a translucent policy gate into an authenticated luminous log tree while an identical amber query is stopped before the tree, beyond the proof visible to separated service and audit planes.

IETF

A Key Transparency Proof Cannot Audit Who Was Allowed to Look

Alice searches a Key Transparency log for Bob and receives a valid proof. Fred makes the same request and is stopped by the application before the log sees it. The proof can show that Alice’s answer fits an authenticated, globally consistent tree. It cannot show why Alice was…

Two archival ASN ledger trays show scattered gaps in the older tray and an amber path crossing into the new tray beneath a network map of Africa

Story

AFRINIC Crossed an ASN Block Boundary With 52 Earlier Numbers Absent From the Ledger

AFRINIC Crossed an ASN Block Boundary With 52 Earlier Numbers Absent From the Ledger intelligence summary explains the development, the public evidence available to readers, the organisations involved, the regional context, market exposure, and the infrastructure consequences…

A cobalt glass conduit encloses one session, an amber two-way request channel and three cyan one-way subscription channels before seven separate evidence gates and a distant physical network.

IETF

The Stream Was Ordered. The Network Was Not Yet Proven

At the instant a controller receives `<rpc-reply><ok/></rpc-reply>`, the change can feel complete. The bytes arrived in order, the peer was authenticated, and the server returned success. Yet each of those facts belongs to a different evidentiary layer from the question operators…

A late-1990s management console accepts a four-cell green address path into an orderly object tree while a sixteen-cell blue address field remains outside the viewing aperture beside an explicit selector.

History

The IP MIB Passed Compliance. IPv6 Was Still Outside the Frame: RFC 2011

A green conformance result can be perfectly accurate and still answer the wrong operational question. RFC 2011 made the surviving MIB-II IP and ICMP entities orderly under SMIv2. Its own IESG Note also warned that the order stopped at a four-octet address. The document is a…

A broad field of abstract agent nodes narrows through successive translucent filters while amber metadata traces reveal an emerging decision pattern before the final candidate is chosen, with observation roles held on separate planes.

IETF

Agent Discovery Leaks Intent Before Any Agent Is Chosen

A procurement agent asks for a French-hosted inference service that accepts a rare credential, supports a particular model family and can start within an hour. No supplier has been contacted and no agent has been selected. Yet the query has already described the buyer’s…

AI editorial portrait of George Varghese beside unequal packet queues and carried deficit ledgers tracing a circular service round

History

George Varghese and the Deficit Counter That Made Round Robin Count Bytes

Round robin looks fair when a scheduler gives every queue one turn. On a packet link, however, turns are not equal units: one queue may send 1,500 bytes while another sends 500. M. Shreedhar and George Varghese changed the accounting unit. Deficit Round Robin lets each queue…

Two translucent channels carry cyan assessed responses and amber unknown responses through narrowing respondent pools into four unequal regional trays.

Story

APNIC's Governance Score Is 77%. Its Don't-Know Average Is 20%.

APNIC's new survey does not produce one verdict on governance. It produces a positive score among people able to judge eight claims, and a separate measure of how often members could not judge them. Any decision that carries the first number forward should carry the second one…

A sealed exam capsule inside a minute ring connects through a transparent network blueprint to three evolving credential frames

Story

RIPE NCC’s New IPv6 Exam Lasts 60 Minutes. Its Badge Will Last Three Years

A short private assessment is being asked to support a long public claim. Before RIPE NCC launches its IPv6 Advanced certificate, it should make the badge’s changing technical scope visible without exposing a single exam question.

AI editorial portrait of Jennifer Rexford beside two abstract network exits, where the nearer local doorway leads to a longer uncertain downstream path

History

Jennifer Rexford and the Nearest BGP Exit That Was Never an End-to-End Optimum

An engineer changes one interior link weight. No external route is withdrawn, no new neighbour appears, and the destination prefix stays the same. Yet traffic leaves through another border router. Jennifer Rexford and her collaborators made this seam between IGP and BGP visible…

Distinct repository evidence streams enter a translucent RPKI validator, including one retained amber failure, while a separate local-policy layer shapes a cache lattice delivered to routers above a receding history of prior states.

IETF

An RPKI Validator Needs an Audit Trail, Not Just a Green Cache

The routing dashboard is green at 09:10. At 09:40 a repository refresh succeeds, the cache changes and the earlier state disappears. When an operator later asks which RPKI objects, failures, trust anchors and local exceptions informed a route decision at 09:10, the green light…

A glass notification envelope containing two clocks, a blank node tag and sequence beads passes a blue schema gate while seven amber evidence stations and an operational network remain separate.

IETF

The Envelope Parsed. The Observation Is Not Yet Proven

`draft-ietf-netconf-notif-envelope-05` gives YANG-Push notifications a header that can travel with the message. That makes correlation easier. It does not collapse identity, continuity, time, provenance and operational truth into one successful parse.

A worn key ring gives way to an arc of glass-enclosed operating evidence around a period beige root-service machine with separate clocks, links, power feeds, capacity vessels and an alert handset.

History

The Root Server Became a Stack of Receipts: RFC 2010

RFC 2010 turned confidence in a capable root-server volunteer into inspectable duties—from checksums and clocks to capacity, contacts and outage notices—without deciding who deserved the role.

A cyan authority beam narrows through four key-bound glass frames while an amber task-intent line remains separate and a violet revocation signal stops before an offline endpoint.

IETF

A Delegation Chain Narrows Authority but Cannot Carry Intent

An OAuth resource server may one day receive a chain whose signatures, key links, audiences, time bounds and permission subsets all validate. That green result would be meaningful: no downstream client could have validly enlarged the authority it received. It would still leave a…

Two differently segmented luminous route components enter a precision assembly gate before separate programming, packet-execution and traffic-result paths.

CASE FILE

The Two Routes Arrived. Their Bits Still Did Not Belong Together: RFC 9819

An ingress PE can possess the two BGP advertisements required to construct an SRv6 Service SID and still lack permission to treat their bits as one executable instruction. RFC 9819 makes the missing proof visible: identity, argument size, insertion boundary, local acceptance…

Four voting tokens—three teal and one amber—remain inside three threshold arcs while a fifth neutral token is set aside behind a translucent recusal screen.

Story

One Recusal and One No Would Block AFRINIC GovCom Advice

AFRINIC’s five voting members do not approve formal advice through an ordinary supermajority. If one member recuses, a 3–1 vote clears the approval floor and still fails the separate dissent test.

AI editorial portrait of kc claffy before bounded BGP collector views resolving into an incomplete inferred AS topology

History

kc claffy and the AS Relationship Map That Was Never a Contract

A file can place two autonomous-system numbers beside `-1` and make a commercial relationship look settled. The notation is useful precisely because it compresses a hard inference into one line. The danger begins when the compression is mistaken for the agreement itself. The…

A cyan packet carrying an amber irregular polygon crosses coarse partition tiles and reaches overlapping base-station fields, where only receivers inside the exact polygon illuminate.

History

The Packet Reached the Area. It Had Not Reached the Person: RFC 2009

RFC 2009 tried to fit a physical polygon inside a logical Internet address by routing approximately first and deciding precisely at the edge—a scaling bargain that made location, delivery and outcome separate facts.

Transparent budget bridge separating an operating gap, an amber financial-results layer and a rising cash channel

Story

LACNIC Budgets a $390,000 Operating Gap. Financial Results Close All but $87,000 on Paper

A budget can show a small loss while concealing three different movements: the recurring cost of running the registry, the accounting result of a portfolio and the cash that actually entered or left the institution. LACNIC’s 2025 accounts show why its 2026 plan needs those…

Ivan Pepelnjak and the discipline of verifiable network automation

Creators

Ivan Pepelnjak and the discipline of verifiable network automation

From Slovenia’s early internet infrastructure to netlab’s multi-vendor labs, Ivan Pepelnjak has consistently advanced an approach built on explicit models, reproducible tests and clearly stated limits. His central contribution is not a single protocol but a durable question: what…