internet-infrastructure
Latest stories covering internet-infrastructure, with summaries and links to related coverage.
4 articles · page 1 of 1
Connected topics
RPKI now protects 70% of internet routes
news
14 min read
RPKI, the system that lets IP-address holders authorize which networks may announce their routes through BGP, classified 70.3% of routed Internet prefixes as valid on September 28, 2026, up from 54.0% a year earlier. Networks checking RPKI can reject unauthorized route origins, limiting mistakes and hijacks such as Pakistan Telecom’s 2008 YouTube rerouting incident. China drove much of the increase, moving from 3.7% to 83.0% of its IPv4 addresses in valid routes; Egypt, Kazakhstan and Mexico also made large gains. A typical valid route reached 596 public routing-data vantage points, while an invalid route reached only two. RPKI does not protect against all route hijacks. A forged route for a Hetzner address block passed RPKI validation on August 28, 2026 because Hetzner’s authorization permitted more-specific routes, enabling an attacker to obtain a TLS certificate and distribute a malicious Virtualizor update. IPinfo found that 16.2% of 855,217 RPKI-covered IPv4 routes had similarly permissive authorizations. ASPA, a newer mechanism for authorizing upstream providers and checking BGP paths, expanded from 131 publishing networks in September 2025 to 3,272 a year later. Only 3.5% of routing with paths longer than two networks could be positively verified by ASPA, while incomplete records at Syrian Telecom accounted for about one-quarter of observed mid-path ASPA failures.
Cloudflare's AI Psychosis
opinion
9 min read
Cloudflare provides services that enhance website performance and security. The platform has evolved from a background protector of the internet to a more visible player in the AI space.
Who's running all those tiny RPKI servers?
research
15 min read
Border Gateway Protocol (BGP) is vulnerable to prefix hijacks due to a lack of built-in trust. Resource Public Key Infrastructure (RPKI) allows address space holders to cryptographically authorize which Autonomous Systems (AS) can originate their prefixes through Route Origin Authorizations (ROAs), establishing a chain of trust with five Regional Internet Registries (RIRs).
John Carmack on Fabrice Bellard
opinion
1 min read
I admire Fabrice Bellard. He is almost certainly a better overall programmer than I am. A French engineer who lives quietly in Paris has spent 30 years writing software that the entire internet now runs on without knowing his name. He wrote the code that streams every YouTube video, every Netflix show, every TikTok clip. He wrote the code that runs the virtual