CloudFaire

JANUARY 3, 2025

Enter Multi-Path TCP (MPTCP), which exploits the presence of multiple interfaces on a device, such as a mobile phone that has both Wi-Fi and cellular antennas, to achieve multi-path connectivity. It's a major extension to the TCP protocol, and historically most of the TCP changes failed to gain traction. There is another way.

TCP 137

TCP Port Server Advertising 137

Engineering at Meta

MAY 22, 2024

This is close to the typical TCP/IPv6 maximum segment size (MSS) of 1440 bytes, but is still fine for a full TLS handshake. This poses some challenges given significant usage of TCP Fast Open (TFO) for internal traffic. Figure 2: Left: TLS handshake with TFO done in same round trip as TCP handshake.

TCP 119

TCP Encryption Server Bandwidth 119

Kentik

MAY 2, 2018

During a BGP route hijack, an attacker advertises IP prefixes from an ASN that is not the normal originator. During last week’s attack, the attacker was redirecting traffic that belonged to Amazon’s Route 53 DNS servers. In this case, requests for MyEtherWallet.com were answered with the IP address of a fake server in Russia.

IP Address 49

IP Address DNS UDP port Advertising 49

Confluent

JULY 1, 2019

port 53352 dst 54.191.84.122 port 9092 rank info not available TCP aux info available Connection to ec2-54-191-84-122.us-west-2.compute.amazonaws.com compute.amazonaws.com port 9092 [tcp/XmlIpcRegSvc] succeeded! compute.amazonaws.com:9092 --topic test >> $ kafka-console-consumer --bootstrap-server ec2-54-191-84-122.us-west-2.compute.amazonaws.com:9092

Port 101

Port IaaS DNS Networking 101

Kentik

DECEMBER 19, 2016

If the link is congested, then a basic NetFlow tool function allows you to double click on that, and you can see that the link is full because there’s tons of traffic due to the database servers syncing. The link may be almost full, but there may be no TCP retransmits, and the latency may be good. So the data’s coming from the servers.

Networking 40

Networking Network Application Server 40