Skip to main content

Intelligence

Latest Articles

Latest intelligence on infrastructure operators, policy decisions, market moves, and digital power shifts.

An empty 1994 school media room where one lit modem feeds separate terminal, classroom-network and queued-mail paths, while a mesh filters only the mail tray and blank policy and training boards remain apart.

History

The School Got a Connection. Its Policy Still Had to Be Written: RFC 1578

The circuit could come up before the institution was ready. In February 1994, RFC 1578 explained Internet access to primary and secondary schools by separating things that the verb “connect” made too easy to merge: a path, a set of usable applications, trained people, technical…

Sep 6, 2026
A steady amber fibre signal passes through a sequence of translucent service chambers that settle gradually into calm blue light.

Story

RIPE NCC’s Fibre Returned in Minutes. Access Recovery Took About Thirty Minutes

On 27 May, a supplier’s work in a manhole disconnected RIPE NCC’s fibre for only a couple of minutes. The connection came back and recovery was automatic. Yet RIPE NCC says it took about thirty minutes for everything to recover. The useful question is not whether automation…

Sep 6, 2026
A thick cyan control flow crosses one central glass conduit between two endpoints while parallel member paths and a dark return path remain untested.

CASE FILE

The Large BFD Packet Stayed Up. The Whole Path Was Not Proven: RFC 9764

A green BFD session can now say something useful about packet size, but only if the claim stays as narrow as the packets that earned it. RFC 9764 turns padded control traffic into a recurring lower-bound test. It does not turn one forwarding treatment into a certificate for every…

Sep 6, 2026
A cobalt packet with a four-cell resource selector crosses five routing nodes; capable nodes map it into resource lanes, one transparent node bypasses the selection, and an amber disturbance meets a sharp trust boundary above empty receipt wells.

CASE FILE

The Packet Carried a Resource ID. The Path Did Not Promise to Obey

An IPv6 packet may name the resource partition it wants at every hop and still emerge without proof that every router recognized the request, used the intended queue or preserved the promised isolation.

Sep 6, 2026
A modular address rail passes through removable registry and provider frames while copper paths continue to aggregate and old and new prefix rails coexist.

History

The Provider Was Written into the Address. Then the Field Disappeared

IPv6 did not begin with a timeless answer to who should sit between a site and the global routing table. Its early documents tried several physical layouts for that authority—and left a remarkably frank account of who would pay when aggregation, portability and resilience pulled…

Sep 6, 2026
Editorial still life separating calendar, deal folder, loan binder and share ledger as acquisition-financing timing layers.

Global Cloud Services Trends

Lattice’s US$925m AMI draw is not its US$1bn cash purchase price

Lattice’s AMI acquisition has four different clocks: a pre-close quarterly report, a lending commitment, a closing-day borrowing and a forward revenue statement. Reading them as one number makes the transaction look more settled than the disclosed evidence allows.

Sep 6, 2026
Three separate cable paths converge through a beige early-1990s gateway into one abstract green block-mode terminal while an empty device slot and unlit response socket remain outside it.

History

Three Telnet Options Made a Terminal. None Named the Session: RFC 1576

A standard had already designed one explicit switch into 3270 mode. Running systems chose three switches instead. By 1994, Terminal-Type, Binary and End of Record could make an ordinary Telnet connection carry a block-oriented IBM display stream, even though the client still…

Sep 6, 2026
Two blank glass certificate plates share a narrow amber fingerprint bridge while cyan and violet proof streams enter a separate verifier that branches to three local outcomes.

CASE FILE

The Certificates Were Related. The Verifier Still Owned the Decision: RFC 9763

A certificate authority can attest that two credentials belong to the same end entity. It cannot make two private keys act in a live exchange, choose a peer’s trust anchors or decide whether one successful authentication is enough. RFC 9763 is valuable because it draws that line…

Sep 6, 2026
A 1995-era root DNS machine keeps an amber established path active while a larger cyan experimental query stream arrives beside a narrow route record unfolding into a broad sheet.

History

The New Root Address Took Most Queries. The Old One Stayed: Net 39

For 38 days in 1995, one root-server installation answered through an experimental address inside Net 39 as well as through its familiar address. Well over half of roughly 400 million queries reached the new interface. The striking fact is not only that the unfamiliar address…

Sep 6, 2026
Two scanning planes cross the same transparent directory grid; amber cached file states remain stored while a cobalt evidence gate passes only the newly observed state to the output rail.

CASE FILE

The Cache Could Stay. The Old Answer Could Not

An NFS client may re-read a busy directory, see the same names and still tell an application that a growing file has its old size. Revision 11 of a working-group draft answers that failure without pretending to abolish caching: it limits which answer the client may expose after…

Sep 6, 2026
A bounded token-status ring stops inside an authorization chamber while a separate resource mechanism weighs request proof and local policy before choosing a response path.

CASE FILE

The Authorization Server Said Active. The Resource Server Still Had to Decide

One green boolean can look like permission. RFC 9767 is more disciplined: `active: true` is an authorization server’s answer to a resource server’s specific question about a token, a proof method and, sometimes, minimum access. The resource server still owns the application…

Sep 6, 2026
A dark parent prism divides one cyan telemetry signal among four publishing processes that cross a shared gateway, with one amber discontinuity visible at the receiver.

CASE FILE

One Subscription, Many Publishers: The Parent Owns the Split

A collector can ask one network node for one stream of updates and receive data from several publishing processes hidden behind the same address and subscription identifier. Revision 21 of the NETCONF distributed-notification draft corrects the authority that makes this possible…

Sep 6, 2026
One addressed 1990s network terminal returns a direct reply while a large field of other terminals remains dark beside an incomplete reverse-name card catalogue.

History

The RFC Said Every Host Must Answer. Running Code Said Otherwise: RFC 1788

In 1995, an RFC said every host and router had to answer a new kind of name query. In 2013, another RFC recorded that the messages had never been widely implemented or deployed. Between those two sentences lies a useful history of how an Internet standard acquires—or fails to…

Sep 6, 2026
A 1993 beige terminal sends punctuation-like filter syntax into branching amber predicate paths that select directory drawers while a separate star remains literal data.

History

The Filter Looked Readable. The Server Executed a Predicate: RFC 1558

In one short LDAP expression, `*` could ask whether an attribute existed, widen a value into a substring pattern, or survive as a literal character only if the writer escaped it. The line was made for people to read. The server did not read it as prose. RFC 1558 gave executable…

Sep 6, 2026
A sealed amber evidence envelope, a dark bounded artifact and a separate blue decision lattice stand on distinct plinths.

CASE FILE

A SLSA Attestation Is Evidence, Not the Acceptance Decision

A SLSA provenance statement can say something precise about one artifact and the build that produced it. That precision matters. But it does not choose which builders a verifier trusts, define a package’s expected source and parameters, declare a release complete, or decide what…

Sep 6, 2026
A negotiated gate admits a segmented QUIC stream while a smaller inner boundary preserves only the shrinking reliable prefix and later packets dissolve.

CASE FILE

QUIC's Partial Reset Gained a Permission Gate. Its Delivery Promise Can Still Shrink

Revision 11 of QUIC Stream Resets with Partial Delivery closes an important permission gap: an endpoint may not send `RESET_STREAM_AT` unless its peer advertised support. That rule says the receiver can parse the extension. It does not make the sender's first Reliable Size…

Sep 6, 2026
A three-position counter and three parallel packet ledgers reflect marked traffic across a broken feedback path toward a physically separate sender decision chamber.

CASE FILE

The Receiver Counted the Marks. It Did Not Choose the Sender’s Response

An acknowledgment disappears. The next one arrives with a three-bit counter advanced, but perhaps not by as little as it seems: the counter may have wrapped while the evidence was missing. RFC 9768 gives TCP a better congestion receipt, not an oracle. The receiver reflects marks…

Sep 6, 2026
A complete form route and an early-contact doorway meet at an unlabelled junction.

AFNOG

AfNOG’s Partial-Input Invitation Opens the Door Without Mapping the Process

AfNOG’s 2007 call welcomed suggestions and expressions of interest even without all requested proposal information, but the cited page did not explain beside that invitation how these inputs related to a complete proposal.

Sep 6, 2026
Far-end fault evidence returns along a link, pruning the forward edge and shifting traffic to an alternate path.

IETF

RFC 9917 Lets the Far End Prune the Forward Path

A link can look healthy where traffic leaves but damaged where it arrives. RFC 9917 turns that far-end evidence into a policy input: an operator-defined threshold can place an Extended Administrative Group on the reverse edge, allowing the forward edge to be removed from a…

Sep 6, 2026
Three versions of the same eight-bit IPv4 service octet show its shift from service switches to DSCP and ECN signaling.

History

The Octet That Changed Its Contract: From IPv4 Type of Service to DSCP and ECN

The second octet of the IPv4 header did not move, but its contract did. What began as precedence and desired service qualities became a configurable per-hop behavior selector plus an explicit congestion signal—a history of compatibility managed by redefining bits in place.

Sep 6, 2026