CloudFaire

JANUARY 3, 2025

The Internet is designed to provide multiple paths between two endpoints. Attempts to exploit multi-path opportunities are almost as old as the Internet, culminating in RFCs documenting some of the challenges. As a result, Internet devices usually use a single path and let the routers handle the path selection.

TCP 144

TCP Port Server Advertising 144

Engineering at Meta

MAY 22, 2024

Today, the internet (like most digital infrastructure in general) relies heavily on the security offered by public-key cryptosystems such as RSA, Diffie-Hellman (DH), and elliptic curve cryptography (ECC). But the advent of quantum computers has raised real questions about the long-term privacy of data exchanged over the internet.

TCP 97

TCP Encryption Server Bandwidth 97

Kentik

FEBRUARY 8, 2016

Designed before the dawn of the commercial Internet, the Border Gateway Protocol (BGP) is a policy-based routing protocol that has long been an established part of the Internet infrastructure. Why is an understanding of BGP helpful in understanding Internet connectivity and interconnectivity? Introducing BGP.

Advertising 49

Advertising Routers Internet Protocol 49

Kentik

MAY 2, 2018

In simple terms, Border Gateway Protocol (BGP) is the protocol that routes traffic on the Internet. Each BGP speaking organization is assigned an Autonomous System Number (ASN) that identifies them on the Internet. During a BGP route hijack, an attacker advertises IP prefixes from an ASN that is not the normal originator.

IP Address 49

IP Address DNS UDP port Advertising 49

Confluent

JULY 1, 2019

port 53352 dst 54.191.84.122 port 9092 rank info not available TCP aux info available Connection to ec2-54-191-84-122.us-west-2.compute.amazonaws.com compute.amazonaws.com port 9092 [tcp/XmlIpcRegSvc] succeeded! compute.internal is not resolvable from the internet, it fails. Things are looking good! Since ip-172-31-18-160.us-west-2.compute.internal

Port 101

Port IaaS DNS Network 101

Kentik

MARCH 13, 2019

Distributed denial-of-service (DDoS) attacks have been a continuous threat since the advent of the commercial Internet. These attributes are added to the NLRI field within the BGP Update Message that’s advertised to peers and define the particular traffic that the Flowspec route will match. Destination Prefix. Source Prefix.

IP Address 49

IP Address Port Routers DNS 49

Kentik

DECEMBER 19, 2016

The link may be almost full, but there may be no TCP retransmits, and the latency may be good. We’ve got an advertising technology customer, and ad tech is a really interesting space for network sophistication. But for the 99% of attacks that actually happen on the Internet, it’s a tractable problem. Absolutely, it is.

Application 40

Application Network Networking Server 40