Doug Madory Profile picture
Director of Internet Analysis at @Kentikinc. Alum of @dynresearch @renesys @uva @dartmouth @usairforce
Aug 24, 2022 6 tweets 3 min read
In my latest blog post for @kentikinc, I join forces with @JobSnijders of @fastly once again. This time to answer an important question:

How much does RPKI ROV reduce the propagation of RPKI-invalid BGP routes?

kentik.com/blog/how-much-… This analysis was motivated by a discussion following the recent Rostelecom hijack of Apple:

It seemed a good time to run the numbers for the whole routing table.
Aug 22, 2022 5 tweets 3 min read
Large disruption of Internet services in #Pakistan.

According to @kentikinc data, traffic dropped by 40% at 17:57 UTC (10:57pm local). Image Also visible in @gatech_ioda:
Mar 18, 2022 6 tweets 4 min read
It’s been >3 weeks since the #UkraineRussiaWar began.

Despite many outages, Ukraine's Internet is still online due in part to the heroic efforts by local techs fixing disruptions at great risk to themselves.

A 🧵 of 30-day snapshots of Ukrainian internet connectivity... From @Kentikinc’s view, overall peak traffic levels into Ukraine have declined by about 20%.

This reflects a drop in internet usage that can be attributed to damaged infrastructure and fewer Ukrainian users due to millions of Ukrainians fleeing, among other factors.
Feb 1, 2022 16 tweets 7 min read
I was curious of the origin of the assertion in this piece that Russia cut a subsea cable when it annexed Crimea in 2014.

This biggest issue is that there was no subsea cable connecting Crimea at the time.

Follow me as I try to find the origin of this story… This starts with @jserhmcyber’s piece published yesterday.
atlanticcouncil.org/blogs/new-atla…

"When Russia illegally invaded and annexed Crimea in 2014, one of its first actions was to cut a submarine cable linking the peninsula to the outside world."

That cites…
Jan 15, 2022 8 tweets 4 min read
Island nation of #Tonga is completely offline following a #tsunami triggered by a massive volcanic eruption in the Pacific Ocean.

According to @kentikinc data, traffic volumes began to drop around 4:30 UTC (5:30pm local) before finally going to zero at 5:40 UTC (6:40pm local). Here's a view of the eruption from space:
Jul 11, 2021 6 tweets 5 min read
Countrywide internet outages in Cuba following widespread anti-government protests. #KeepItOn

According to @kentikinc data, internet traffic to/from Cuba dropped to zero at 20:05 UTC (4:05pm local). Outages also visible in @caida_ioda:
ioda.caida.org/ioda/dashboard…
Sep 8, 2020 5 tweets 2 min read
RPKI in action!

On Friday, AS209 created ROAs for 64.193.176.0/20 and 64.193.192.0/20 to regain IP space hijacked by AS134121.

Networks that drop RPKI invalids (2914,1299,6939) dropped the routes, although they are still in circulation via other networks. Image rpki-validator.ripe.net/announcement-p…

whois.arin.net/rest/net/NET-6… Image
Aug 31, 2020 5 tweets 6 min read
As part of our measurement platform, we run 100s of millions of traceroutes per day - normally 1.5 million traverse AS3356 per hour.

At the nadir of the #centurylinkoutage, we were only seeing 474k successful traceroutes via AS3356 - a drop of 68%!

map.internetintel.oracle.com/?root=traffic&… Because of the massive scale of these networks, these charts rarely exhibit any movement.

The disturbance caused by the outage and subsequent de-peering is visible on the charts of other "Tier-1" telecoms in the DFZ.

map.internetintel.oracle.com/?root=traffic&… ImageImageImageImage