FROM THE BLOG
Notes on the network.
The Internet Has No GPS: How BGP Policy Steers Your Packets
BGP does not pick the shortest path. Local preference, communities, and peering contracts steer traffic. Learn to read policy with live lookup and looking glass tools.
Your IP Address Is a Costume: CGNAT, Anycast, and Reputation Lies
IP reputation fails on CGNAT, anycast, and cloud egress. Learn to read origin ASN, prefix, and live BGP instead of a fraud score that thinks a city is a person.
“The AI Is Slow” Is Usually a Routing Ticket
When ChatGPT, Copilot, or an LLM API feels slow, check anycast, DNS, and AS paths before you blame GPUs. A global ping and traceroute workflow for AI apps.
When a Bad ROA Looks Like a Nation-State Attack
A mistyped ROA can blackhole a brand worldwide on networks that enforce RPKI. Tell a routing-origin outage from a hijack using validator, lookup, and looking glass.
The DNS Resolver Your AI Copilot Uses Without Asking
AI browsers, IDE copilots, and agents pick their own DNS. See how that leaks names, bypasses office resolvers, and how to verify the resolver ASN with IP lookup.
Stop Trusting Vendor Domains. Allow-List the ASN.
AI and SaaS vendors change IPs constantly. Build an allow-list from published prefixes and live origin ASNs, then verify with BGP lookup, RDAP, and RPKI.
The Smart Camera That Joined Someone Else’s Botnet
AI cameras and mesh satellites share your public origin ASN. Isolate IoT, verify egress with IP lookup, and catch devices that tunnel off the guest network.
Scrapers Already Live in Your IPv6 Prefix
IPv6 is how modern scanners and AI crawlers arrive when IPv4 NAT still feels quiet. Inventory your prefix, check origin and ROAs, and firewall v6 like it is public.
BGP Monitoring Is a Heartbeat. Logs Are an Autopsy.
Monitor origin ASN, prefix presence, and RPKI state while they are still changing. A lightweight BGP heartbeat using lookup, looking glass, and ROA checks.
Why GeoIP Thinks You Work in Ashburn, Virginia
GeoIP pins anycast and cloud prefixes to famous datacenter towns. Use origin ASN, looking-glass next hops, and live prefix data instead of a city label.
Before You Blame the Model, Look Up the Prefix
AI security incidents often start as routing and DNS facts: unexpected origin ASN, invalid ROA, hostile resolver. A first-look checklist using live BGP tools.
One Peering Spat Can Partition a Country
A depeering fight at an IXP can isolate a region without a cable cut. See AS path changes on a looking glass and confirm with traceroute and origin lookup.