Since this year I have massive trouble accessing anything hosted on AWS during the evening hours like these.
My ISP is Deutsche Telekom AG (AS3320) and it looks like the only route to AWS (AS16509) leads through Cogent (AS174). MTR is showing more than 30% packet loss through Cogent to an AWS target.
I know peering between DTAG and Cogent has been historically bad, but I never noticed issues until now. What happened? Do any BGP nerds know more?
We developed unifi-on-boot, a Debian package that persists UniFi firmware upgrades and allows you to run any script on boot.
#VPSHouse #Servers #Binghamton #NewYork #NYC #IP #Transit #Datacenter #BareMetal #Linux #DedicatedServer #Colocation #BGP #Cluster
Our Binghamton data center delivers Buffalo‑level availability, high‑speed connectivity, and unbeatable pricing—optimized for low‑latency links across New York State and neighboring states, with strong reach into Canada’s East Coast too.
Available Services: Dedicated Server, Colocation, Dedicated Private Switch / Cluster, IP Transit
"From the Stupid #DNS Tricks Department: ipasn.net" #RDAP and #BGP over DNS :-) https://www.potaroo.net/ispcol/2026-02/ipasn.html
(From @gregr )
От VPN к управляемой сети: SD‑WAN в российских NGFW
SD‑WAN — это не «еще один VPN», а надстройка, которая управляет вашими каналами связи как единой системой: сама выбирает маршрут, проверяет качество каналов и подстраивается под бизнес-требования к доступности и безопасности. В 2026 году для российских NGFW всё более актуален сценарий, когда устройство используется не только как решение по фильтрации трафика и отражению атак, но и как платформа для управления трафиком и сетевой связностью. В том числе в больших распределённых инфраструктурах с филиалами, удалёнными дата‑центрами, производственными площадками и облачной инфраструктурой.
https://habr.com/ru/companies/ideco/articles/993218/
#Информационная_безопасность #Сети #Маршрутизация #VPN #SDWAN #BGP #NGFW
All of theses #XKCD 2347 extensions had no #BGP homage •hexhex• so #PhotoshopPhillipp did it
🌗 自建自治系統：在FreeBSD上使用FRR、GRE隧道與策略路由實現BGP
➤ 從零打造個人化全球可路由網路架構
✤ https://blog.hofstede.it/running-your-own-as-bgp-on-freebsd-with-frr-gre-tunnels-and-policy-routing/
本文完整解析如何透過贊助LIR取得AS號碼與IPv6位址段，在FreeBSD系統架設BGP路由器，結合FRR路由套件與GRE/GIF隧道技術，實現個人自治系統運作。作者詳細說明從資源申請、網路配置到策略路由的實作流程，特別針對伺服器需同時使用多組IPv6位址的技術難題，提出透過隧道分發子網段的解決方案。文中更包含實際配置範例與網路架構圖解，展現如何用單臺虛擬機將自有IP位址宣告至全球路由表。
+ 原來個人也能申請AS號碼，這篇實戰指南完全打破我對BGP的傳統認知
+ 策略路由與隧道配置的細節說明非常實用，正好解決我跨機房流量分配的問題
##FreeBSD #BGP #網路架構 #IPv6 #FRR
New blog post: Running your own Autonomous System on FreeBSD.
Got an AS number and IPv6 /48 via RIPE, set up a FreeBSD BGP router with FRR, two upstreams, and built GRE/GIF tunnels ti bring my own globally routable addresses to servers at different providers.
The interesting part: dual-FIB policy routing lets FreeBSD jails speak from both provider and BGP addresses simultaneously.
https://blog.hofstede.it/running-your-own-as-bgp-on-freebsd-with-frr-gre-tunnels-and-policy-routing/
Lol, Telekom hatte die Tage wohl peering Probleme mit Clownflare und hat auf ehem. Twitter empfohlen ein VPN zu nutzen.
Und Leute die Telekom haben berichten, dass diese Probleme sich in letzter Zeit immer häufen und Sie deshalb jetzt nebenbei immer ein VPN am laufen haben.
Sonst noch jemand sowas gehört oder sogar selbst gesehen?
Aaaaand my second peer is also online now. Latency from DTAG dropped by 50%!!!
My website "hofstede.it" now lives in my own AS201379 on my asigned IP-addresses 🙂
https://bgp.tools/prefix/2a06:9801:1c::/48#asinfo
Running my own BGP router in LONAP (London) with FreeBSD and FRR, where I announce my network 2a06:9801:1c::/48 to the internet.
Peering is still fairly limited, but that'll improve within the next weeks, when I get 2 additional peers 🙂
#networking #ipv6 #peering #bgp #selfhosting #engineering #devops #freebsd
:ablobcatbounce: Incident report: :ablobcatbounce:
* Previously in the week it was noticed that Cilium had an update to 1.19.0
* Upon further inspection, this looked to be a pre-release, so it was left alone, cilium is a load-bearing component and should only be touched with care
* At some point in the last week I forgot about that and hit merge in forgejo, not an issue, since argocd won't auto-sync any load-bearing components (cilium, forgejo, argo, cert-manger, and a handful of others)
* Over the last few days I have repeatedly restarted various components while troubleshooting some OIDC issues. Including ArgoCD and Forgejo
* This caused a few sync errors or argo state refresh errors as pods were unceremoniously exploded
* At some point during this time Cilium ended up out of sync/errored
* By this point I had forgotten about the cilium major* update
* I hit sync to clear that out and see what is wrong. Everything is green, and nothing breaks.
* BGP sessions continue
* I go about my afternoon
* BGP sessions expire, causing immediate issues. since my old config was depricated
* I start the investigation with DNS, since the TV stopped playback and sites stopped loading on my laptop
* Yup, DNS is down.
* But not from my dev console, that means ad-guard DNS is down.
* Ad-guard DNS is throwing errors connecting to quad9 via DoT, I am not sure the cause of this, maybe the UI has a clue
* ad-guard DNS ui isn't opening, oh. No cluster-based site is opening actually.
* Confirmed, all LB services are down, must be BGP related
* Looking in the Mikrotik router I see two BGP sessions, so I restart the BGP service on the router, they drop and don't re-appear, must have been stale on that side.
* Restart cilium to see logs
* BGP config error? Wait, did cilium update???
⚠️ You may need to take action during upgrade to Cilium v1.19 if you use Network Policies, Cluster Mesh, LoadBalancer IPAM or BGP.* Oh right, I've been seeing depreciation warnings about the BGP config for ages now
My #BGP configuration is so fucked up that my future self will hate me 😂
Another round of price fixing between the major sponsoring LIR in Europe #bgp #lir #asn #sponsoring #glauca #inferno
We forgot that our blog is hosted by ghost.org (HQ in 🇸🇬 and servers in 🇳🇱) #DigitalSovereignty #OpenSource #DNS #BGP
In our journey to #DigitalSovereignty, here's where we are:
- Domain registration: TransIP and Prolocation 🇳🇱
- Email, calendar, collaborative writing, and more: mailbox.org 🇩🇪
- Document store: Tresorit 🇨🇭
- Critical infra hosting: Hetzner 🇩🇪
- Discourse hosting: Communiteq 🇳🇱
- Security: 1Password.eu 🇨🇦/🇪🇺 and Yubico 🇸🇪
Next up: GitHub —> Codeberg 🇩🇪
To-do: Slack —> Zulip, Matrix, Mattermost?
