Network supercycle demands new IP strategies now
AI workloads will hit 50% of traffic by 2027. Your current IPv4 setup likely cannot handle this network supercycle without upgrades.
Alexander Timokhin
11 min readTraffic
Alexander Timokhin
11 min read
Active path checks stop global blackhole errors
With RPKI valid traffic at 62.5%, legacy IRR fails. Learn how active path verification stops middle ASNs from causing global outages.
Alexei Krylov
14 min read
Routing fixes for identical private IP chaos now
Stop manual NAT hacks. Our stateful tracking resolves 10.0.1.0/24 conflicts automatically, ensuring return traffic hits the right origin every time.
Alexander Timokhin
14 min read
IPv6 governance gaps: Why 50% traffic is unmanaged risk
With 50.10% of global traffic now on IPv6, ignoring unmanaged entry points is a governance failure. Learn to frame this as a board-level liability.
Evgeny Sevastyanov
14 min read
IPv8 Reality Check: The 50% Traffic Milestone
With IPv6 traffic hitting 50.10%, the IPv8 proposal is an architectural dead end. We must optimize existing stacks, not chase vaporware.
Alexander Timokhin
13 min read
Path length traps: Why short routes risk security
Shorter paths do not equal safer paths. Learn why 75% of enterprises risk security by trusting hop counts over cryptographic proofs.
Evgeny Sevastyanov
14 min read
Internet disruptions surged 92% as state actors weaponize
State actors caused 219 incidents in Q1 2026. We analyze how 92% growth in outages shifts from glitches to tactical isolation.
Evgeny Sevastyanov
12 min read
DDoS scrubbing data shows 98% of networks exposed
New data reveals only 2% of ASes use BGP-based scrubbing. Most networks remain dangerously exposed to attacks despite marketed claims.
Evgeny Sevastyanov
13 min read
Ingress Security: Stop Paying for Redundant Stacks
Stop managing dozens of disjointed stacks. Centralize inspection in 1 VPC to cut costs and fix policy drift across your global network today.
Vladislava Shadrina
13 min read
NIST secure deployment: Stopping the 87% ransomware surge
NIST's 2026 update treats DNS as active defense against an 87% ransomware surge. Learn to deploy Protective DNS and encrypt traffic today.
Alexander Timokhin
10 min readPacific submarine cables need local IXPs now
Submarine cables carry 99% of traffic, yet Pacific islands lack carrier-neutral IXPs. We analyze how local policy prevents single points of failure.
Alexei Krylov
11 min read
Capacity reservations kill five-minute scaling lag
Stop the 5-minute scaling lag that crashes platforms. We use tagged automation to lock capacity before traffic spikes hit your ALB.
Evgeny Sevastyanov
12 min read
IPv6 traffic jumps: How one binding fix hit 79%
See how a single app binding change lifted native IPv6 from 67% to 79.2% in just 16 days by fixing specific fallbacks.
Vladislava Shadrina
13 min read
Zone transfer fees: Fix AWS NLB pricing errors
Cross-zone traffic hits $0.04 per GB. Learn how zonal affinity cuts your AWS NLB bill by 95% today.
Evgeny Sevastyanov
11 min read
Global accelerator setup: Why I love YAML now
I cut operational friction by embedding global routing in YAML. With AI hitting 58% of clusters, this declarative shift is essential.
Vladislava Shadrina
9 min read
IPv8 routing breaks legacy silicon at 64 bits
IPv8 breaks legacy silicon, forcing upgrades that current multi-billion-dollar SONiC deployments cannot support without major risk.
Alexei Krylov
12 min read
Gateway API for EKS: Unify Traffic Before 2026
Ingress NGINX retires in March 2026. Shift to Gateway API now to unify your ALB and VPC Lattice traffic with one rule.
Alexander Timokhin
13 min read
IPv6 native traffic: Pushing past 80% at home
Naive scanning crashes on aliases. See how tweaking DNS timers pushed our home lab native traffic above 90% despite legacy IoT device clutter.
Evgeny Sevastyanov
12 min read
Routing control stays yours during DDoS outages
Attacks hit 31.4 Tbps in 2025. Keep your BGP keys to steer traffic when providers fail, ensuring you never lose control.
Alexander Timokhin
14 min read
Cloudflare capacity hits 500 Tbps: Real DDoS defense
Cloudflare now holds 500 Tbps capacity, absorbing massive 31.4 Tbps attacks without slowing legitimate traffic or requiring manual intervention.
Alexei Krylov
17 min read
Blackhole validation needs active path data now
Sparkle enforced active path validation on Feb 3, 2026. Stop relying on unsigned IRR lists for your blackhole requests today.
Vladislava Shadrina
15 min read
Blackhole validation fails without maxLength checks
With 74% of traffic on RPKI routes, skipping BLACKHOLE tags creates critical risks. Learn why strict validation stops more-specific hijacks today.
Alexei Krylov
15 min read
Routing security gaps threaten your 2026 supply chain
Third-party breaches drive a massive share of incidents. Unauthenticated BGP routing remains a critical, undermanaged vulnerability you must fix.
Nikita Sinitsyn
15 min readRPKI validation gaps: Why 54% route coverage isn't enough
ASPA records surged 539% in 2025, yet route coverage lags. Learn why fragmenting ROAs slows validation and hurts your network security today.
Alexander Timokhin
12 min read
IPv6 scan surge: Why passive monitoring fails now
Scan traffic surged 100x in one year. I explain why passive listening is dead and how proactive telescopes catch modern attackers today.
Alexander Timokhin
12 min read
ARIN Governance in Louisville: What Operators See
ARIN 57 meets in Louisville this April. With 74% of traffic now RPKI-secured, we analyze the gap between route counts and real safety.
Nikita Sinitsyn
14 min read
Iran Internet Shutdown: Why 98.5% of IPv6 Vanished
At 11:50 UTC, Iran withdrew 98.5% of IPv6 space. I analyze how this BGP strategy differs from past throttling and what it means for global routing.
Alexei Krylov
12 min read
Private CloudFront origins cut public IP risk now
Cut public IP exposure with zero added cost. By 2026, private origins become mandatory for zero-trust security architectures.
Alexander Timokhin
12 min read
Peering costs revealed: The new $0.01 reality
Since April 2025, AWS charges $0.01 per GB for cross-AZ peering. I show how new billing codes expose these once-hidden network costs.
Vladislava Shadrina
11 min read