4 ms·
Fundamental flaw in how services like Cloudflare are architected is that they propagate route leaks from obscure places all over the world.
by arvinds 11y ago
Fundamental flaw in how services like Cloudflare are architected is that they propagate route leaks from obscure places all over the world.
- jgrahamc 11y agoAlso Google: https://blog.cloudflare.com/why-google-went-offline-today-and-a-bit-about/ https://blog.cloudflare.com/why-google-went-offline-today-an... Hardly, a "CloudFlare" problem.
- toomuchtodo 11y agoFundamental flaw in how BGP was designed from the old days. Give me a transit or peering connection where filters aren't in place, and you can announce anyone's IP blocks with their AS (SS7 is very similar, as it was built for a closed telcom ecosystem where all participants were trusted: https://www.youtube.com/watch?v=lQ0I5tl0YLY https://www.youtube.com/watch?v=lQ0I5tl0YLY). There are efforts to move to a more secure version of BGP, but that'll be done around the same time the transition to IPv6 is complete.
- arvinds 11y agoThe problem is these kinds of leaks were more local except for services which have a large internal network. Yes - Google has that problem, but it is naive to assume that more of these won't happen. Any service which has a super easy path to having all their routing tables polluted so quickly is more vulnerable than others.