Intelligence
Latest Articles
Latest intelligence on infrastructure operators, policy decisions, market moves, and digital power shifts.
History
kc claffy and the AS Relationship Map That Was Never a Contract
A file can place two autonomous-system numbers beside `-1` and make a commercial relationship look settled. The notation is useful precisely because it compresses a hard inference into one line. The danger begins when the compression is mistaken for the agreement itself. The…
History
The Packet Reached the Area. It Had Not Reached the Person: RFC 2009
RFC 2009 tried to fit a physical polygon inside a logical Internet address by routing approximately first and deciding precisely at the edge—a scaling bargain that made location, delivery and outcome separate facts.
Story
LACNIC Budgets a $390,000 Operating Gap. Financial Results Close All but $87,000 on Paper
A budget can show a small loss while concealing three different movements: the recurring cost of running the registry, the accounting result of a portfolio and the cash that actually entered or left the institution. LACNIC’s 2025 accounts show why its 2026 plan needs those…
Creators
Ivan Pepelnjak and the discipline of verifiable network automation
From Slovenia’s early internet infrastructure to netlab’s multi-vendor labs, Ivan Pepelnjak has consistently advanced an approach built on explicit models, reproducible tests and clearly stated limits. His central contribution is not a single protocol but a durable question: what…
Story
ARIN Put Three Candidate Pools on One Slate. Only Two Go to Members
ARIN's 2026 slate is a single page with three sets of candidates and two different decision makers. General Members choose the Board and Advisory Council. Trustees choose this year's NRO Number Council representative.
Story
AFRINIC’s Draft Says Slides Must Match the Proposal. A Mismatch Creates a Version That Cannot Count
A policy meeting can be perfectly public and still leave its decisive entity obscure. AFRINIC’s proposed working-group rules require presentation slides to match the submitted proposal; if they differ, an updated version must go to the mailing list even when its changes will not…
CASE FILE
The Datastore Was Complete. The Control Plane Was Still Unproven: RFC 9826
A clean PCEP management tree can show an entity, its peers, live-looking sessions, notifications and counters in one coherent view. That coherence is a major operational gain. It is also where evidence from a management projection is most easily mistaken for proof of the network…
IETF
The Message Reassembled. The Telemetry May Still Be Incomplete
`draft-ietf-netconf-udp-notif-26` makes high-frequency YANG notifications cheaper to move across a controlled network. It also makes an important distinction unavoidable: transport evidence can show what a receiver assembled, but only a wider chain can show what the network…
History
Deborah Estrin and the Interest That Was Never a Destination Address
A destination address answers where a message should go. An interest in directed diffusion asked a stranger question: what information is wanted, for how long, and from what part of the physical world? Deborah Estrin and her collaborators made that distinction the centre of an…
History
The Address Was Borrowed. The Route Was Never Included: RFC 2008
The Address Was Borrowed. The Route Was Never Included: RFC 2008 intelligence summary explains the development, the public evidence available to readers, the organisations involved, the regional context, market exposure, and the infrastructure consequences that may follow. The…
IETF
RFC 10041 Makes OSPF Unreachability an Area-Wide Decision
The hexadecimal value `0xffff` can describe a link that remains reachable at the highest cost or a link that must be excluded from a shortest-path calculation. RFC 10041 does not resolve that ambiguity with a local switch. It makes the meaning depend on evidence from every router…
Story
APNIC's Honeynet Logged 1.27 Million Events. That Is Not 1.27 Million Attacks
An APNIC 62 presentation turns one deliberately exposed server into a useful security instrument. Its headline, however, moves between attacks, attack events and events—three labels that cannot safely share one number.
Story
RIPE Atlas Counts Probe Farming by a BGP Prefix. The Cohort Can Move Without the Probe
A probe can stay on the same shelf, under the same account and on the same access line, yet acquire different neighbours for an admission rule. RIPE Atlas limits software probes partly by the IP prefix “as seen in BGP”. That is a defensible way to protect a shared measurement…
IETF
The First Packet Left Before the Image Existed. It Still Did Not Prove Low Latency: RFC 9828
A sender can now begin carrying a JPEG 2000 image while that image is still being encoded. That is a useful reduction in one waiting stage. It is not a receipt for the time at which a receiver recovered, decoded and displayed a usable picture.
Creators
Ivan Pepelnjak and the discipline of testing network automation
Ivan Pepelnjak’s career runs from Slovenia’s early internet and exchange infrastructure to ipSpace.net and the open-source netlab project. His recurring argument is practical: automation becomes trustworthy only when intended state is modelled explicitly, vendor claims are…
IETF
The Merge Was Clean. The Baseline May Not Be: NETCONF Private Candidates
`draft-ietf-netconf-privcand-10` gives each client a private place to prepare configuration and a defined way to detect and resolve overlap before commit. The operational mistake would be to let isolation, an empty comparison or a successful merge inherit authority over…
History
Vern Paxson and the Connection Log That Was Never a Packet Capture
At 02:13, a Zeek row can look wonderfully complete: two addresses, two ports, a protocol, duration, byte counts, state and a compressed history. The temptation is to promote that row from an observation into a transcript. Vern Paxson’s architecture made the row useful precisely…
IETF
RFC 10003 Makes CMC Transport a Separate Evidence Layer
A CMC request can cross HTTP successfully and still be pending, rejected or incomplete at the certificate authority. RFC 10003 gives the carrier a precise form; RFC 10002 gives the PKI operation its result. Governance fails when those two receipts are collapsed into one green…
Story
DAOport’s RIPE NCC Membership Shows Governance Access, Not Yet an Operating Network
DAOport’s RIPE NCC Membership Shows Governance Access, Not Yet an Operating Network intelligence summary explains the development, the public evidence available to readers, the organisations involved, the regional context, market exposure, and the infrastructure consequences that…
Global Cloud Services
AlmazCloud’s AS210328: What the Public Record Can—and Cannot—Verify
A fresh review of the available registry, routing, DNS, web, certificate and PeeringDB sources finds a useful monitoring baseline, but not a verified operating or customer-service footprint. The central distinction is between a recorded network identity, an independently observed…