RIPE tools stop BGP hijacks in real time now
See how 76% of IPv4 space now uses RPKI to stop hijacks. I break down the new RIPEstat tools you need today.
Vladislava Shadrina
13 min readInterlir
Vladislava Shadrina
13 min read
RIPE General Meeting: Voting Deadlines You Can't Miss
With 3,049 votes already cast, register by May 20 via the LIR Portal to influence the Executive Board and charging schemes before deadlines pass.
Alexei Krylov
13 min read
Optical demand surge: Why copper fails AI clusters
Ciena's backlog hit $7.7 billion as optical demand surges. I analyze why copper can no longer support modern AI training clusters.
Alexander Timokhin
12 min read
Network supercycle demands new IP strategies now
AI workloads will hit 50% of traffic by 2027. Your current IPv4 setup likely cannot handle this network supercycle without upgrades.
Alexander Timokhin
11 min read
IPv4 Waiting List: 773 LIRs Stuck After 472 Days
With 773 LIRs stuck on the RIPE waiting list, free allocation is over. I analyze the shift to market transfers and rising costs.
Alexei Krylov
14 min read
India's active sharing model cuts 5G costs fast
With 95,511 BSNL sites live, active sharing merges public and private assets to stop a telecom duopoly in India.
Alexei Krylov
13 min read
PeerLock Debate: Session Locking vs Standards
With 65% of firms using AI, BGP leaks cost more. We weigh PeerLock's speed against ASPA's universal safety for your network.
Vladislava Shadrina
14 min read
Asia Data Growth Stalls: Power Limits Hit
Asia's vacancy rate dropped to 10.9% as grids limit growth. I break down why AI demand is outpacing new builds in 2026.
Vladislava Shadrina
11 min read
Active path checks stop global blackhole errors
With RPKI valid traffic at 62.5%, legacy IRR fails. Learn how active path verification stops middle ASNs from causing global outages.
Alexei Krylov
14 min read
DNS steering flaws: Why 4,300 edge POPs struggle
Akamai moves 15% of global traffic, yet DNS steering fails when users query open resolvers like 1.1.1.1 instead of local ISP servers.
Vladislava Shadrina
15 min read
SEE 14 Engineers: Stop IPv6 Growth Flatlining
SEE 14 in Belgrade tackles the 2–3% IPv6 growth stall. Join engineers April 21–22 to fix routing gaps before obsolescence hits.
Evgeny Sevastyanov
8 min read
RIPE registry helps Middle East operators survive war costs
With 88% expecting cost surges, RIPE offers payment extensions to keep Middle East operators online during active conflict and cash flow issues.
Vladislava Shadrina
14 min read
Quantum threats mean 2029 is the new deadline
With only 6% of SSH servers quantum-safe, the 2029 deadline for postquantum crypto is critical for your network security today.
Alexei Krylov
11 min read
Proton data risks: Why Swiss law fails US users
Proton honored 8,313 legal requests in 2025. See how US infrastructure undermines Swiss privacy claims for millions of users today.
Nikita Sinitsyn
13 min read
CHINOG 2026: Why Global Outages Demand Local Action
Global ISP outages surged 92% in Q1 2026. See how CHINOG 13 uses peer data to harden Midwest infrastructure against cascading failures.
Alexei Krylov
12 min read
Regnr attribute: Stop Orgname Confusion in RIPE
The new regnr attribute resolves identity ambiguity for 2.6M objects. Learn how this April 2026 update prevents legal disputes over your IP resources.
Alexander Timokhin
14 min read
Route leak lessons: Why Venezuela's 12-hour outage happened
See how 11 route leaks since December caused a 12-hour outage. Learn why weak export policies, not spies, break BGP stability today.
Vladislava Shadrina
16 min read
RIPE Registry Plans: Optimizing for Grid Limits
RIPE's Q2 2026 plan targets nine domains as power demand triples by 2030. Learn how to validate routes before the grid constrains growth.
Alexander Timokhin
11 min read
RIPE Fellowship 2026: Why 10 New Fellows Matter
Seventeen new fellows join seven technical tracks to shape policy across 75 countries, ensuring skilled operators guide our shared infrastructure.
Evgeny Sevastyanov
14 min read
RIPE Arbiters Panel: Who Decides IP Conflicts in 2026?
RIPE seeks volunteers by 6 March 2026 to resolve IP disputes. As IoT hits 21.9 billion devices, human arbiters remain essential for governance.
Evgeny Sevastyanov
13 min read
Routing fixes for identical private IP chaos now
Stop manual NAT hacks. Our stateful tracking resolves 10.0.1.0/24 conflicts automatically, ensuring return traffic hits the right origin every time.
Alexander Timokhin
14 min read
RPKI security grows with Hangzhou pilot mirror
See how 71.0% of high-risk prefixes now get RPKI coverage. Local mirrors in Hangzhou cut latency for Chinese ISPs today.
Vladislava Shadrina
12 min readIPv6 governance gaps: Why 50% traffic is unmanaged risk
With 50.10% of global traffic now on IPv6, ignoring unmanaged entry points is a governance failure. Learn to frame this as a board-level liability.
Evgeny Sevastyanov
14 min read
RPKI objects: Stop wasting 1.44TB on snapshots
See how rpkispool cuts RPKI storage from 1.44TB daily to just 62.86GB using smart deduplication for better validation.
Vladislava Shadrina
11 min read
Network automation drives 30% of enterprises soon
See how unified strategies cut unplanned downtime by 61%. Manual CLI is too risky for modern AI-driven workloads.
Alexander Timokhin
13 min read
Flexible BGP routing fixes AWS static limits
Stop manual tunnel management. Flexible BGP supports 140,000 packets per second and automatic failover for resilient AWS networks.
Evgeny Sevastyanov
15 min read
SCION network fixes fragile global bank paths
See how SCION connects every Swiss franc bank by early 2026, replacing fragile BGP with cryptographic trust for deterministic financial routing.
Nikita Sinitsyn
13 min read
ARIN 2026 NomCom: Who Vets the Three Board Seats?
See how the 2026 NomCom vets candidates for three board seats managing 39.5% of global IPv4. A clear look at ARIN's election mechanics.
Nikita Sinitsyn
14 min read
DNSSEC keys face a quantum reality check soon
Root KSKs have survived eight years, but NIST warns keys over five years face quantum risks. Learn why rotation is urgent.
Evgeny Sevastyanov
12 min read
APNIC policy shifts: What 56 economies mean for you
See how APNIC's open process serves 56 diverse economies. Real operators bridge the gap between clean protocols and messy infrastructure realities.
Vladislava Shadrina
13 min readIPv8 routing flaws: Why MPLS overhead doubles complexity
Ryan Hamel ended the IPv8 debate on May 4, 2026. We analyze why doubling BGP state tables creates unsustainable overhead for modern networks.
Alexander Timokhin
15 min read
IPv8 routing risks: Why 3B addresses strain BGP
Jamie Thain's IPv8 draft targets 18 quintillion addresses, but critics warn it demands massive CPU upgrades like the AMD EPYC 9965.
Alexander Timokhin
13 min read
IPv8 Reality Check: The 50% Traffic Milestone
With IPv6 traffic hitting 50.10%, the IPv8 proposal is an architectural dead end. We must optimize existing stacks, not chase vaporware.
Alexander Timokhin
13 min read
IPv8 and BGPv8: Why Jamie Thain's Plan Fails
Jamie Thain's IPv8 promises 3 billion addresses per ASN, but zero working implementations exist on off-the-shelf hardware today.
Alexei Krylov
12 min read
IPv4 Market Reality: Leasing Beats Migration
Real enterprise IPv6 sits at 12%. With IPv4 leasing at $0.38, the 2045 sunset date makes economic sense for now.
Evgeny Sevastyanov
12 min read
RPKI SOC 2: Why 55% of carriers now validate routes
With 55% of carriers validating routes, RIPE's SOC 2 report proves RPKI security is enterprise-grade. Learn why trust is now mandatory.
Nikita Sinitsyn
9 min read
RIR Governance Update: What 2026 Changes Mean
The 2026 RIR Governance update replaces ICP2 but leaves open issues. Learn how this affects your IP strategy before final adoption.
Evgeny Sevastyanov
13 min read
Path length traps: Why short routes risk security
Shorter paths do not equal safer paths. Learn why 75% of enterprises risk security by trusting hop counts over cryptographic proofs.
Evgeny Sevastyanov
14 min read
IPv8 in 2026: Why I Still Trust IPv4 for Now
With IPv6 growth at just 5%, I explain why IPv8's telemetry claims don't yet justify leaving our stable IPv4 infrastructure behind.
Alexei Krylov
13 min readIPv8 demands massive CPU power for forwarding
IPv8 routing requires 192 cores to handle packet rates. Learn why this control-plane indirection adds latency instead of solving scarcity.
Nikita Sinitsyn
13 min read
Interconnect removes manual colocation patches
AWS Interconnect launched April 29, 2026, cutting provisioning time from weeks to minutes by removing manual colocation steps entirely.
Evgeny Sevastyanov
13 min read
Interconnect last mile ends manual handoffs now
AWS Interconnect last mile launches April 15, 2026, turning weeks of manual coordination into instant clicks for your enterprise network.
Nikita Sinitsyn
13 min read
Cloudflare remediation stops SaaS link risks fast
The March 3, 2026 update lets admins revoke public links with one click, ending passive detection for good.
Nikita Sinitsyn
9 min read
Asymmetric routing breaks filters; ReAct fixes it
See how ReAct stops 500x NTP amplification even when asymmetric routing breaks standard symmetric filters and drops valid packets.
Vladislava Shadrina
14 min read
CIDR routing fixes: 461k redundant routes clog tables
461,596 redundant routes now clog the global table. See how rigid classful blocks caused this IPv4 exhaustion and why CIDR aggregation must return.
Evgeny Sevastyanov
14 min read
Agents buy domains by April 2026 with Stripe
Move from experiment to production: learn why only 6% of firms scale AI and how new protocols solve payment and token gaps.
Nikita Sinitsyn
9 min read
Route origin validation: Stop BGP hijacks today
The 2018 MyEtherWallet hack stole $150,000 due to missing route checks. Learn why Pacific operators must deploy RPKI filtering immediately.
Alexei Krylov
13 min read
IPv8 risks: Why centralization causes failure
IPv8 collapses seven network layers into one dependency. My review shows how a single auth timeout triggers total failure, not graceful degradation.
Nikita Sinitsyn
15 min read
IPv4 Waitlist Stuck? Why 841 LIRs Are Waiting
With 841 LIRs stuck on the RIPE waitlist, free IPv4 allocation is gone. I explain why tactical leasing is your only path forward today.
Vladislava Shadrina
14 min read
IPv6 data gaps: Why 50% adoption hides real issues
Google hit 50.10% IPv6 adoption, but APNIC shows 42%. I explain why this 8-point gap matters for your network planning today.
Alexander Timokhin
12 min read
Internet disruptions surged 92% as state actors weaponize
State actors caused 219 incidents in Q1 2026. We analyze how 92% growth in outages shifts from glitches to tactical isolation.
Evgeny Sevastyanov
12 min readPacific Internet governance gets real with new APNIC deal
APNIC and PITA updated their 2002 agreement to support 56 economies, focusing on real BGP training and local policy input for stability.
Alexander Timokhin
13 min read
Native attachment fixes AWS Client VPN SNAT gaps
AWS launched this native attachment on 24 Apr 2026 to eliminate SNAT, letting security teams map logs to specific users without extra hops.
Alexander Timokhin
14 min read
ARIN Committee Roles: Secure Your Seat by May
Stop watching from the sidelines. Apply by 1 May to join the ARIN Grant Selection Committee and directly influence regional internet stability.
Alexei Krylov
13 min read
DDoS scrubbing data shows 98% of networks exposed
New data reveals only 2% of ASes use BGP-based scrubbing. Most networks remain dangerously exposed to attacks despite marketed claims.
Evgeny Sevastyanov
13 min read
RIPE Charging 2026: How €75 Hits Your Budget
I break down the RIPE 2026 proposal where the base fee stays at €1,800 but independent assignments rise to €75. See how Option A affects your LIR.
Nikita Sinitsyn
12 min read
Ingress Security: Stop Paying for Redundant Stacks
Stop managing dozens of disjointed stacks. Centralize inspection in 1 VPC to cut costs and fix policy drift across your global network today.
Vladislava Shadrina
13 min read
RPKI validation cuts breach risk for networks
With only 40% of networks holding valid ROAs, your routing is exposed. Learn how cryptographic validation stops multimillion-dollar breaches now.
Alexei Krylov
13 min read
ARIN 57 Policy: Why Your IP Strategy Shifts Now
ARIN 57 starts April 20 with 15 council members filtering proposals. See how this impacts your IPv4 strategy and resource allocation today.
Evgeny Sevastyanov
14 min read
RIPE 2025 Data: $22 IP Lease Costs
RIPE's 2025 reports show 20,000 members facing IPv4 scarcity. Lease prices hit $22 monthly. See how governance handles this fiscal tension.
Evgeny Sevastyanov
13 min read
Deep space networking: Why TCP fails now
TCP breaks when roundtrips span hours. See why 4 million Starlink users prove IP works, but Mars needs a new approach.
Vladislava Shadrina
14 min read
BGP updates: The single peer drowning our archives
One peer generated 2.93 billion updates in a day. Learn how to filter this BGP noise and restore clarity to your routing analysis.
Alexei Krylov
11 min read
Route server blind spots break ASSET filtering
63.8% of networks lack strict validation. See how route servers miss hijacks when ASSET lists override cryptographic proof.
Evgeny Sevastyanov
14 min read
RIPE Meeting 2026: Why 394 Signatures Block Change
You need 394 signatures to challenge the RIPE Board. Discover why the May 6 deadline matters for your IP strategy and fee resistance.
Alexei Krylov
11 min read
Neoclouds bottleneck H100 clusters with weak nets
Our audit shows 50% of neoclouds miss H100 bandwidth needs. Don't let poor networking turn your AI investment into a liability.
Alexander Timokhin
12 min readAPNIC 62 Mumbai: Why Hybrid Cloud Shifts Matter Now
With 21 billion IoT connections coming by 2026, APNIC 62 in Mumbai forces operators to drop legacy manual processes for real automation.
Alexander Timokhin
13 min read
NIST secure deployment: Stopping the 87% ransomware surge
NIST's 2026 update treats DNS as active defense against an 87% ransomware surge. Learn to deploy Protective DNS and encrypt traffic today.
Alexander Timokhin
10 min read
Data centre power demand hits a wall
Goldman Sachs sees a 165% power surge by 2030. We must ask if these hyperscale assets truly serve the public or just hoard resources.
Alexei Krylov
12 min read
ARIN Governance Gaps: Why Three Volunteers Matter
ARIN needs three volunteers by April 28 to guide policy. With IPv6 overtaking IPv4 by 2026, your governance role impacts costs.
Evgeny Sevastyanov
12 min read
Akamai steering breaks when open DNS hides users
Video eats 82% of bandwidth, yet Akamai steering breaks when open DNS hides client locations. Learn why hybrid models are now essential.
Vladislava Shadrina
13 min readPacific submarine cables need local IXPs now
Submarine cables carry 99% of traffic, yet Pacific islands lack carrier-neutral IXPs. We analyze how local policy prevents single points of failure.
Alexei Krylov
11 min readAPNIC forums now reach 56 isolated economies
APNIC targets 56 economies with sub-regional forums. I see this localized shift as vital for sustaining Pacific infrastructure without heavy travel.
Alexander Timokhin
12 min read
Capacity reservations kill five-minute scaling lag
Stop the 5-minute scaling lag that crashes platforms. We use tagged automation to lock capacity before traffic spikes hit your ALB.
Evgeny Sevastyanov
12 min read
Akvorado IPv6 visibility: See SOHO traffic clearly
Stop flying blind with 80% native IPv6 traffic. Akvorado delivers enterprise visibility using just 8GB RAM, no expensive licenses needed.
Nikita Sinitsyn
14 min read
User risk scores beat static certs today
Static checks fail. See how 81% of orgs use live signals like impossible travel to block threats before data leaves your network.
Nikita Sinitsyn
14 min read
RIPE Atlas data reveals hidden topology gaps
See how 13,421 active probes map 4,000 ASNs. Real data reveals topology gaps that theoretical models often miss in global routing.
Alexei Krylov
12 min read
RIPE navigation update: What changes March 16
On March 16, 2026, RIPE replaces the old switcher with a single interface. Learn how this affects your six critical tools and LIR Portal access.
Nikita Sinitsyn
12 min read
ARIN Annual Data: 15 Council Members Guide Policy
Nikita breaks down ARIN's 8M records to show how 15 elected members shaped 2025 policy without the corporate spin.
Nikita Sinitsyn
12 min read
APNIC policy costs: Why $32 IPv4 prices matter in 2026
IPv4 prices hit $32 by 2026. See how APNIC's consensus model, not voting, shapes these operational costs for Asia Pacific networks.
Georgy Masterov
11 min read
IPv6 city governance: Xiong'an's 2026 APNIC win
Xiong'an earned the first city plaque on April 6, 2026. I analyze how this direct APNIC membership changes global routing policy.
Alexander Timokhin
14 min read
IPv6 traffic jumps: How one binding fix hit 79%
See how a single app binding change lifted native IPv6 from 67% to 79.2% in just 16 days by fixing specific fallbacks.
Vladislava Shadrina
13 min read
ARIN IPv4 Blocks: April's 67 New Allocations
ARIN filled 67 waiting list requests in April using 40 cleared blocks. Learn why verifying IP reputation is critical before you deploy.
Alexander Timokhin
14 min read
Zone transfer fees: Fix AWS NLB pricing errors
Cross-zone traffic hits $0.04 per GB. Learn how zonal affinity cuts your AWS NLB bill by 95% today.
Evgeny Sevastyanov
11 min read
Global accelerator setup: Why I love YAML now
I cut operational friction by embedding global routing in YAML. With AI hitting 58% of clusters, this declarative shift is essential.
Vladislava Shadrina
9 min read
BCPs now cost firms real money per minute
With 245 BCP entries by 2026, IETF docs now advocate unproven behaviors. Learn why this shift costs your firm substantial money per minute.
Alexander Timokhin
14 min readTelecom token shifts: China's 50M daily burn
China Telecom sees a tenfold surge as 60,000 new cloud activations prove traffic metrics are dead for modern AI agents.
Alexander Timokhin
10 min readIPv8 routing flaws: Why Thain's design fails
Thain's IPv8 draft merges 8 functions into one Zone Server, creating a single point of failure that ignores how 50.10% of users now access IPv6.
Nikita Sinitsyn
14 min read
IPv8 routing breaks legacy silicon at 64 bits
IPv8 breaks legacy silicon, forcing upgrades that current multi-billion-dollar SONiC deployments cannot support without major risk.
Alexei Krylov
12 min read
IPv8 hardware limits: Why legacy routers fail now
Global internet hit 74% penetration. Adding IPv8 now means replacing billions in legacy hardware that vendors abandoned years ago.
Vladislava Shadrina
13 min read
IPv8 draft fails: Why 64-bit zones break routing
The IPv8 draft proposes 18.4 quintillion addresses, but its centralized Zone Server creates a single failure point operators can't ignore.
Georgy Masterov
12 min read
IPv6 Truth: 10x Collision Nightmares Explained
Don't trust IPv8 hype. Data from 2026 proves IPv6 handles mergers better, avoiding the 10x collision risks seen in fragmented legacy networks.
Vladislava Shadrina
12 min read
IPv4x keeps routers working while extending space
With 57% of traffic still on IPv4, IPv4x extends space without breaking routers. A pragmatic look at the 96-bit subspace solution.
Vladislava Shadrina
14 min read
IPv4 collisions: The 127.x solution explained
Jamie Thain proposes repurposing 127.x to solve 10.x overlaps, offering a fix while global IPv6 sits at 50.10% usage in 2026.
Evgeny Sevastyanov
10 min read
Airgapped SageMaker: Zero Public Internet Setup
Build a compliant VPC with private subnets in 3 zones. Keep data off the public internet while integrating private sources securely.
Evgeny Sevastyanov
13 min read
RPKI validation hits 65.5%: Why IPv4 owners must act now
With IPv4 validity at 65.5%, ignoring RPKI risks traffic rejection. Learn how to deploy ROA and ASPA objects before enforcement deadlines hit.
Vladislava Shadrina
14 min read
Gateway API for EKS: Unify Traffic Before 2026
Ingress NGINX retires in March 2026. Shift to Gateway API now to unify your ALB and VPC Lattice traffic with one rule.
Alexander Timokhin
13 min read
BGP hijacking 2025: Why forged docs beat crypto
In 2025, forged documents bypassed crypto checks. With only 38% of IPv4 prefixes enforcing validation, identity fraud now drives route hijacking.
Evgeny Sevastyanov
13 min read
IANA Community Review: Stopping Skills Gaps Fast
The 2025 IANA report reveals how 15 community reps fight skills gaps before they break global numbering stability.
Nikita Sinitsyn
13 min read
Global network shifts: Why LexisNexis dropped Transit VPC
See how LexisNexis removed manual router instances to support 15 percent of enterprises shifting to private AI deployments by 2026.
Alexander Timokhin
14 min read
Direct Connect metrics now fix BGP blind spots
AWS removed the $0.01 API tax on March 30, 2026. Native metrics now track BGP session health without custom Lambda code.
Alexander Timokhin
13 min read
ARIN Grant 2026: How Six Volunteers Review 8M Records
Six volunteers decide ARIN's 2026 funding. Learn how this panel reviews 8M records to ensure technical merit wins over political favors.
Alexei Krylov
13 min read
IPv6 skills gap: Why 50% access isn't enough
With native access at 50.10%, basic setup fails. Learn why advanced design skills are the new bottleneck for secure networks.
Vladislava Shadrina
13 min read
ARIN Online update: Why 32% of IPv4 sits idle
ARIN's new 365-day ROA log targets routing hijacks. With 32% of global IPv4 here, secure your reassignments before reputation risks rise.
Nikita Sinitsyn
12 min read
APNIC Strategy: Four Pillars for a Stalled Market
APNIC growth hit just 1.6% in 2025. I analyze how new security pillars and 7.6-hour support times impact your IPv4 strategy today.
Alexei Krylov
9 min read
IPv6 routing loops: Fixing the 34k router bug
I analyzed how 4.19 million /64 subnets trigger routing loops. See why firmware bugs cause massive amplification and how to fix it now.
Georgy Masterov
12 min read
IPv4 wait times hit 477 days: My take
With fewer than 5 LIRs left and a 477-day wait, direct allocation is gone. I explain why transfers are your only real option now.
Vladislava Shadrina
13 min read
eBPF offloading limits: Why 55K requests stall
See why eBPF offloading hits a wall at 55K requests. Memory copies add 340 ns latency, making simple kernel modules faster for complex apps.
Vladislava Shadrina
13 min read
Route security gaps: Why East Asia lags at 31%
East Asia IPv4 valid routes hit only 31.0%. I analyze why regional averages mask critical security failures and ASN mismatches.
Alexei Krylov
12 min read
Classless routing fixes: Stop BGP table bloat today
Classful addressing wasted over 60,000 IPs per block. See how classless routing stops BGP bloat before edge complexity breaks your network.
Nikita Sinitsyn
12 min read
CIDR report data: Why 461k routes matter now
The global routing table nears 1 million routes. See why physical hardware limits now threaten core network stability without strict aggregation.
Alexei Krylov
12 min read
Amazon EVS Migration: Cut Costs by 46% Today
Shift to Amazon EVS for 46% savings, but master BGP peering first. I break down the underlay risks you cannot ignore in production.
Alexander Timokhin
15 min read
RPKI validation stops 820k IoT attacks by 2027
RPKI validation stops 820k daily IoT attacks by 2027. Learn why three security invariants prevent 65% of routing breaches today.
Alexei Krylov
13 min read
Cloudflare Gen 13 drops cache for core count
Cloudflare's new Turin chips cut cache to 2MB per core yet double throughput. See why Rust rewrites make this 6x drop work for edge networks.
Georgy Masterov
12 min readServerless keyvalue stores exploit DNS TXT data
Attackers stash 2,000 characters of Base64 code in DNS TXT records to execute malware entirely in memory, leaving zero disk artifacts.
Alexei Krylov
11 min read
APNIC Policy: How Shaila Sharmin Shapes Rules
See how Shaila Sharmin guides policy for 56 Asia-Pacific economies through community consensus, not distant bureaucratic mandates.
Nikita Sinitsyn
13 min read
BGP visibility jumps with 300 new vantage points
See how 300 vantage points expose blind spots legacy archives miss. We move beyond theory to actionable three-month BGP analytics for engineers.
Alexander Timokhin
14 min read
IPv6 training shifts to physical labs for real skills
APNIC replaced cloud models with physical sites to cut egress fees, helping teams master native IPv6 before the 2027 modernization rush.
Nikita Sinitsyn
13 min read
SCION routing stops hijacks with crypto paths
With 48.18% of invalid prefixes failing length checks, SCION routing replaces broken trust with cryptographic path validation for real security.
Alexander Timokhin
15 min read
npNOG gatherings fix what school missed for engineers
See how npNOG 10 launched a career path Gartner says will define 30% of enterprise networks by 2027. Real talk on community.
Vladislava Shadrina
12 min read
Cloud WAN cuts Betsson latency by 100 ms globally
See how Betsson cut latency by 100 ms and costs 15% by swapping complex mesh topologies for managed Cloud WAN architecture.
Alexander Timokhin
12 min read
Network automation: Why 80% success needs funding
Only 18% rate automation as successful. Learn why dedicated funding drives an 80% success rate over mere tool selection.
Vladislava Shadrina
13 min read
IPv6 native traffic: Pushing past 80% at home
Naive scanning crashes on aliases. See how tweaking DNS timers pushed our home lab native traffic above 90% despite legacy IoT device clutter.
Evgeny Sevastyanov
12 min read
ARIN Maintenance Reality: 12 Hours of Silent Drops
ARIN's 12-hour outage on March 28 discards RPKI updates instead of queuing them. Learn why waiting until 7:00 PM ET is your only safe option.
Alexander Timokhin
11 min read
Predictive routing intelligence stops BGP outages early
Only 25% of systems enforce Route Origin Validation. See how predictive intelligence scores ASN risk before malicious routes propagate globally.
Vladislava Shadrina
13 min read
ASPA validation stops Cloudflare route hijacks now
Cloudflare's ASPA rollout targets the gap where 53% of IPv4 prefixes remain unchecked, securing paths beyond origin validation.
Evgeny Sevastyanov
14 min readBGP visibility gaps: Why legacy tools miss leaks
Legacy collectors cover less than 2% of global ASes. See how 5,000 vantage points expose routing leaks that traditional tools miss completely.
Evgeny Sevastyanov
13 min readAFRINIC litigation freezes 30M IPv4 addresses in Africa
Litigation has frozen resource allocation for years. With only 30 million addresses, AFRINIC's legal crisis hurts 56 African nations.
Evgeny Sevastyanov
11 min read
RPKI validation gaps: Why 84% skip enforcement
See how Jakarta turned 1% adoption into near-total coverage. Learn why 84% of networks still skip RPKI enforcement despite clear ROI.
Nikita Sinitsyn
14 min read
RIPE Network Coordination: Why Riga Matters Now
Join me in Riga this June. With $2.5T in AI spending coming, regional coordination is vital for Baltic network survival. Let's connect!
Vladislava Shadrina
8 min read
Routing control stays yours during DDoS outages
Attacks hit 31.4 Tbps in 2025. Keep your BGP keys to steer traffic when providers fail, ensuring you never lose control.
Alexander Timokhin
14 min read
Legacy filtering fails on 20,000 eBGP sessions
Running 20,000 eBGP sessions with legacy IRR filters creates blind spots. See why ASsets fail at scale and how RPKI fixes route leaks.
Alexander Timokhin
15 min read
Asset matching beats linear scans for BGP scale
Stop using 700 policy terms for single ASN matches. Switch to asset tree lookups to fix your BGP scaling collapse today.
Alexei Krylov
12 min read
Regional routing shifts: 7 NIRs drive security
Seven regional bodies now enforce routing integrity. With TWNIC reaching 98% IPv6 validity, I analyze how NIRs secure our infrastructure.
Alexei Krylov
12 min readPMTUD black holes: Why your video calls stall
Silent ICMP drops crash throughput to 576 bytes. Learn how active probing fixes these PMTUD black holes in encrypted networks today.
Alexander Timokhin
14 min read
IPv6 resolution risks: APNIC data shows 40% loss
APNIC tests reveal a 40% failure rate in glueless DNS. We must pause before codifying fragile IPv6-only dependencies into binding RFCs.
Alexander Timokhin
15 min read
ARIN Fellowship insights from Louisville's 15 fellows
With IPv4 still carrying 60% of global traffic, the ARIN Fellowship trains 15 experts yearly to manage critical number resources.
Alexei Krylov
14 min read
APNIC 2026 Fellowship: Why I'm Joining the Selection Team
I'm joining the APNIC 2026 Fellowship selection. Volunteers dedicate up to five hours to assess candidates for Mumbai.
Nikita Sinitsyn
13 min read
Protective DNS blocklists fail schools often
Branden Palacio found 78% of firms ignore PDNS curation. See why static blocklists fail schools with massive query volumes.
Nikita Sinitsyn
14 min read
Email phishing losses: The $70M cost of waiting
Phishing losses hit $70M because reactive tools wait for failure. See how proactive patterns catch invisible threats before money vanishes.
Vladislava Shadrina
14 min read
DNS logs reveal hidden CDN costs for operators
Stop guessing where traffic goes. DNS logs show 60% of resolutions are external, costing you money. Get real visibility today.
Vladislava Shadrina
15 min read
Cloudflare capacity hits 500 Tbps: Real DDoS defense
Cloudflare now holds 500 Tbps capacity, absorbing massive 31.4 Tbps attacks without slowing legitimate traffic or requiring manual intervention.
Alexei Krylov
17 min read
ARIN Policy 2026: Why Your IP Fees Just Changed
NRPM 2026.1 went live on March 3, replacing the 2025 edition. Learn why section 8.5.1 changes mean strict new fees for your IP blocks.
Vladislava Shadrina
13 min read
IPv6 DNS fails 40%: Why dualstack matters
With a 40% failure rate on large payloads, IPv6 DNS shows why dualstack is vital for real user capability today.
Vladislava Shadrina
11 min read
Blackhole validation needs active path data now
Sparkle enforced active path validation on Feb 3, 2026. Stop relying on unsigned IRR lists for your blackhole requests today.
Vladislava Shadrina
15 min read
Blackhole validation fails without maxLength checks
With 74% of traffic on RPKI routes, skipping BLACKHOLE tags creates critical risks. Learn why strict validation stops more-specific hijacks today.
Alexei Krylov
15 min read
Blackhole path verification stops global outages
95% of orgs lack visibility. Active path verification stops local fixes from causing global blackhole outages today.
Alexei Krylov
14 min read
ARIN 57 Deadline: Secure Galt House by March 17
Don't miss the March 17 deadline for ARIN 57. The $199 Galt House rate expires then, risking your spot in critical IPv4 policy debates.
Alexei Krylov
13 min read
Agentic AI jobs: Why 50% IPv6 needs shepherds
With IPv6 hitting 50.10%, agentic AI manages networks. I explain why archiving operational exhaust is vital before history fades.
Vladislava Shadrina
14 min read
RTBH validation needs strict originASonly checks
Secure your routes with strict originASonly checks. PAM 2024 research shows IXP servers stay vulnerable without proper ROV ordering.
Evgeny Sevastyanov
11 min readReproducible builds fix signature flaws in 2025
Open-source malware detections surged 73% in 2025. We swap fragile signatures for deterministic hash validation to secure the supply chain.
Evgeny Sevastyanov
14 min read
Private DevOps Agent: Secure VPC Routing Logic
Cut MTTR by 75% using service-managed gateways. Connect your AWS DevOps agent to private VPC resources without public IPs or extra encryption.
Evgeny Sevastyanov
14 min read
ASPA path security fixes BGP transit gaps fast
Securing just the top eight ASes with ASPA records stops 96% of route leak victims. Learn how to verify your transit path today.
Vladislava Shadrina
14 min read
Cloudflare data shows 60% postquantum shift now
Client support hit 60% in two years, yet origin servers lag. See how hybrid handshakes close this critical security gap today.
Vladislava Shadrina
14 min read
APNIC 2026 Fellowship: My Take on Tech Tracks
Applications close 13 March 2026. I break down why the 5-month tech track beats passive training for real operational skills.
Alexei Krylov
13 min read
Routing security gaps threaten your 2026 supply chain
Third-party breaches drive a massive share of incidents. Unauthenticated BGP routing remains a critical, undermanaged vulnerability you must fix.
Nikita Sinitsyn
15 min read
RIPE Labs 2026: Skip Fees, Win Edinburgh Access
Win full access to RIPE 92 in Edinburgh by submitting original technical stories before the 3 April cutoff, bypassing standard fees.
Alexander Timokhin
15 min read
RIPE Strategic Shift: Navigating the 2026 Election
Nominations close April 29, 2026. We analyze how the fixed EUR 1,800 fee impacts strategic direction for the registry.
Evgeny Sevastyanov
13 min read
DNSSEC automation fixes manual key rollover failures
Manual processes caused only 4.27% of domains to sign zones. Learn how CDS records automate delegation and remove human error today.
Nikita Sinitsyn
12 min readAPNIC IPv6 debates: Why /32 still matters in 2026
At APNIC 61, chairs debated prop164. See why a /36 block might fracture routing tables for millions of users tomorrow.
Vladislava Shadrina
12 min read
RPKI validation speeds up despite 20% cache growth in 2025
With ASPA Customer ASIDs up 539%, we see a real shift from origin checks to path security, though fragmented signing strains the system.
Evgeny Sevastyanov
13 min readRPKI validation gaps: Why 54% route coverage isn't enough
ASPA records surged 539% in 2025, yet route coverage lags. Learn why fragmenting ROAs slows validation and hurts your network security today.
Alexander Timokhin
12 min read
Cloudflare Outage 2026: Why 1,100 Prefixes Failed
I analyze how a single bug withdrew 1,100 prefixes, causing a 6-hour outage that proves automated changes need human safeguards.
Vladislava Shadrina
11 min read
IPv6 scan surge: Why passive monitoring fails now
Scan traffic surged 100x in one year. I explain why passive listening is dead and how proactive telescopes catch modern attackers today.
Alexander Timokhin
12 min read
IPv6 complexity: Why 1994 design still matters
Discover why 1994 IETF mandates created IPv6 complexity. Learn why dual-stack remains vital as we approach 2026 infrastructure trends.
Vladislava Shadrina
13 min read
IPv6 complexity stems from a 1994 IETF choice
The 1994 Toronto decision rejected simple expansion, forcing dual stacks that double memory use and operational costs for networks today.
Evgeny Sevastyanov
15 min read
Forwarders Fuel DNS Attacks: The Hidden Risk
Despite 250k devices removed, transparent forwarders remain a stagnant threat, enabling attacks up to 320 Mb by bypassing standard limits.
Evgeny Sevastyanov
13 min read
RDAP shift: Handling 65B queries without WHOIS
With 374 gTLDs killing WHOIS by September 2025, I break down the urgent shift to RDAP and JSON for reliable registration data access.
Georgy Masterov
13 min read
ARIN 57 Strategy: Securing IPv4 in a Scarce Market
North America holds 39.5% of global IPv4. I break down ARIN 57 sponsorship tiers to show where your budget actually buys policy influence.
Alexander Timokhin
14 min read
Mapping queries faster by skipping octet reversals
I cut IP-to-ASN lookup time to under 100ms by ditching rigid zone files for flexible, database-driven DNS queries that skip octet reversal.
Vladislava Shadrina
13 min read
APRICOT 2026: Real Talk on Jakarta Governance
Join me in Jakarta for APRICOT 2026. We'll tackle Prop164 and prepare our networks for the 70% of enterprises adopting agentic AI soon.
Vladislava Shadrina
13 min read
Autonomous Systems: Run Your Own BGP on FreeBSD
Join 80,000 active systems by running your own BGP. Learn to decouple your network identity from providers using FreeBSD and FRRouting.
Alexei Krylov
15 min read
Indonesia internet gaps: 2025 stats reveal truth
With 229.4 million users online, Indonesia's 2025 data reveals why remote islands still lack reliable connectivity despite huge budgets.
Alexei Krylov
11 min read
IANA Performance: Don't Miss the March Deadline
You have exactly 30 days to critique the 2025 matrix before March 6. Ignore this, and governance becomes a rubber stamp.
Alexei Krylov
14 min read
Global ICANN governance shifts: 2025 impact
The NRO NC reviewed feedback from five regional lists. With 15 volunteers debating, these governance ambiguities need fixing before adoption.
Evgeny Sevastyanov
15 min readDDoS attacks hit 47M: Why perimeter defenses fail now
With 47.1 million incidents in 2025, legacy filters miss hypervolumetric floods. Learn why bandwidth saturation demands new IPv4 architecture strategies.
Alexei Krylov
12 min read
BGP memory limits: Handling 722k daily updates
The IPv4 table added 53,000 entries in 2025. I break down what this 6% surge means for your router memory and planning.
Vladislava Shadrina
13 min read
Routing communities reveal 93% of hidden handoff sites
Only 4% of routes tag origins, yet new clustering methods achieve 93% recall for mapping physical handoff points without vendor docs.
Alexander Timokhin
11 min read
Governance shifts: Why 15 volunteers shape IPv4
RIPE's new draft replaces ICP2 to manage 6 billion users. See how 15 volunteers refined global IPv4 governance standards in 2026.
Nikita Sinitsyn
14 min read
Global governance rules: Why stability beats speed now
With mobile traffic hitting 64%, rigid global governance frameworks are essential. I break down how new policies protect our shared resources.
Alexander Timokhin
14 min read
DNS lookup speeds under 100ms for ASN mapping
I map IPs to ASNs in under 100ms using DNS. With 92,000 active systems, static files just can't keep up anymore.
Vladislava Shadrina
15 min read
CNAME record order broke DNS in 2026
A single code change on Jan 8, 2026, broke DNS because 40-year-old RFC ambiguity let clients assume a record order that never existed.
Vladislava Shadrina
10 min read
Sanctions report shows 10 resources frozen now
Seven members lost resources in Q1 2026. Learn how RIPE's new transparency report changes compliance for legacy holders across 75 countries.
Evgeny Sevastyanov
11 min read
APRICOT 2026: Why 95% of networks lack visibility
See why 95% of orgs lack network visibility. Learn real IPv6mostly tactics and automation strategies from Jakarta's top engineers.
Georgy Masterov
13 min read
Whois reverse lookup: Use regid for accuracy
Standard tools miss 7.6% of data. I show how regid in RIR statistics fixes reverse IP mapping for operators.
Alexei Krylov
15 min read
Bangladesh RPKI: Why 75% Penetration Demands Action
Bangladesh's internet hit 75% penetration. At bdNOG 20, engineers skipped theory to fix real BGP hijacks via specific ROA creation labs.
Alexander Timokhin
13 min read
ARIN Policy Shift: 15 Members Can't Steer Alone
With 8M records at stake, the 15-member ARIN Council needs your voice before the 2026.1 manual locks in new rules.
Vladislava Shadrina
15 min read
RPKI checklists end manual PDF verification now
MyAPNIC now supports RFC 9323, replacing fragile email chains with automated trust. Say goodbye to manual PDF reviews for good.
Georgy Masterov
12 min read
Route leak lessons from Cloudflare's 25-min outage
Cloudflare's 25-minute outage shows how automation errors cause route leaks. I break down the RFC7908 violation and how to fix it.
Georgy Masterov
14 min read
ARIN Governance in Louisville: What Operators See
ARIN 57 meets in Louisville this April. With 74% of traffic now RPKI-secured, we analyze the gap between route counts and real safety.
Nikita Sinitsyn
14 min read
ARIN Online 2026: My Take on the New Role POC System
I tested the Jan 20, 2026 ARIN update. See how 106 staff shifted to customertocustomer tickets to cut validation bottlenecks for admins.
Vladislava Shadrina
14 min read
ARIN IPv4 Waiting List: The 2026 Reality Check
ARIN cleared 149 requests in Jan 2026. I explain why the 388-day queue beats paying $90 per IP on the volatile private market.
Vladislava Shadrina
13 min read
ARIN Workshop: Fixing RPKI After IPv6 Hits 50%
With global IPv6 access at 50.10%, our team analyzes the Feb 12 ARIN workshop. Learn practical RPKI steps to secure your routing today.
Alexei Krylov
12 min read
Iran Internet Shutdown: Why 98.5% of IPv6 Vanished
At 11:50 UTC, Iran withdrew 98.5% of IPv6 space. I analyze how this BGP strategy differs from past throttling and what it means for global routing.
Alexei Krylov
12 min read
ARIN Fellowship 2026: My Take on the 10-Spot Limit
Only 10 individuals join the 2026 ARIN Fellowship. I break down the Jan 26 deadline and why generic applications fail every time.
Nikita Sinitsyn
12 min read
ARIN Committee Picks: 5 Fellows for Policy Roles
Five individuals, including two former Fellows, now shape ARIN policy. Learn how the Jan 7 selection impacts your 2026 governance strategy.
Alexei Krylov
14 min read
Predictive BGP security stops malformed crashes now
A single malformed update crashed Cisco IOS XR. Stop relying on static filters; use predictive intelligence to score origin risks before 2026.
Evgeny Sevastyanov
12 min readPhysical internet loss now beats political shutdowns
Over 180 global disruptions hit in 2025. Learn why physical fiber cuts now cause more internet loss than political actions.
Nikita Sinitsyn
13 min read
ARIN 2025 Updates: Capping Fees at 5 Percent
I analyzed how ARIN allocated resources to 587 organizations in 2025 while capping fee hikes at 5% through 2030 for stability.
Nikita Sinitsyn
14 min read
Cloudflare performance: Why 60% of networks now lead
Cloudflare now leads 60% of top networks by focusing on connection time, not just raw download speed or theoretical throughput limits.
Nikita Sinitsyn
14 min read
Route 53 Profiles fix manual DNS logging gaps fast
Share DNS configs across 10,000 accounts instantly. Route 53 Profiles eliminate manual gaps and ensure consistent audit trails for every VPC.
Evgeny Sevastyanov
10 min read
Private CloudFront origins cut public IP risk now
Cut public IP exposure with zero added cost. By 2026, private origins become mandatory for zero-trust security architectures.
Alexander Timokhin
12 min read
Crossaccount CloudFront: Fix IPv4 Limits Now
The November 2025 update lets you share VPC origins across accounts. I show how to keep security tight while cutting management overhead.
Nikita Sinitsyn
14 min read
AWS SitetoSite VPN: Avoiding 1.25 Gbps Limits
Stop hitting 1.25 Gbps ceilings. Learn how Large Bandwidth Tunnels deliver 5 Gbps capacity for modern architectural needs.
Evgeny Sevastyanov
13 min read
Peering costs revealed: The new $0.01 reality
Since April 2025, AWS charges $0.01 per GB for cross-AZ peering. I show how new billing codes expose these once-hidden network costs.
Vladislava Shadrina
11 min read