There's another forum where a Jacksonville ARTCC controller echoed they had 15 people call out (not due to some anti vax movement) and had weather looming on top of the military who takes over half their airspace and doesn't give it back promptly (or the FAA gets the word but doesn't pass it along). Combined with constant understaffing and the fact that JAX can't stop departures from places like Atlanta (but other centers can) doesn't help.
Inter region traffic always goes over the backbone (this includes EIP to EIP). This also includes going from EC2 to any service like S3 in another region.
Except China. China to rest of world is not via backbone.
It would revert to not being signed, which routes just fine. You just don't get the additional security benefits. It won't turn it into invalid if I'm following what you are saying.
There can be legitimate use cases why a network maybe have a very few amount of prefixes not signed or even invalid: canaries and beacons.
For example, running tests to a signed, unsigned and invalid prefix can provide insight into how other networks are routing to them.
One example is a beacon to probe to determine if a network has enabled origin validation. Failure to connect, or a change in the routing path can provide insight into which networks on the internet have enabled origin validation.
Lack of redundancy due to cost probably has something to do with it.
Same issue with internet peering in quite a few cities (no viable 2nd location, costs a lot of money to double up the gear, additona optical transport).
AT&T has been pushing really hard on folks in the last year to take early retirement packages that would give you a fraction of what you would have gotten if you stayed on until being eligible. Friend of mine recently took the package and found a job elsewhere and commented that morale is pretty down if you are in that camp.
The most brutal thing I saw was when someone compromised a customer ISDN router (the small Ascend boxes with the curses UI) and changed the creds to login to their ISP and disconnected it and forced it to redial repeatedly. The local telco charged you for every ISDN call if it was a business line and since ISDN call initiaton/setup are instant - they had a several thousand dollar phone bill. I recall seeing the RADIUS server getting slammed with auth failure for days when that happened.
Tragically there was nothing simple about ISDN. A customer would have to know their switch type at the CO and there were a number of other things that could break it. At least with a T1/DS1 you only had to worry about SF/ESF, B8ZS/AMI and number of channels.
Yep it's the main spot in nashville for voice stuff. Has local access switches (dms 100), tandem, and LD goes out of there. At&t I think also has their long haul optical transport and some core ip backbone stuff there.
Back when I worked in a CO the engineering goal was to be able to run the building load on gen for at least 24 hours straight before getting fuel trucks. We had weekly gen tests to validate things were working as expected.
It could be that they had to de-energizd some equipment to perform inspection and work within the facility. I know our facility had a number of procedures on how to de-energize parts of the building and inhibit the generators from feeding that area (a lesson learned in the Hinsdale CO fire years ago).
During Hurricane Katrina a number of us had to invent a procedure for de-energizing non critical equipment to reduce power load in order to keep critical services running for an extended period of time since it was clear we werent going to get utility and resupplies for awhile.
Dark docs is kind of watered down history. The previous mentioned book is great. Back in the 90s Discovery actually had documentaries that covered this from the people actually involved (including the person who proposed the operation) - now we have SHARK WEEK.
Interconnection facilities are the best places to be (or rather what you want to be connected to in order to establish as many adjacencies). 111 8th in NYC. 165 Halsey in Newark. 350 easy cermak in chicago. Palo alto for the bay (but also eqx in San Jose). Infomart in dfw. Etc.
Cable landing stations generally service one cable and the actual networks that use it are generally some distance away.
Yes. Phone phreaking in the 90s involved a ton of learning the lingo and the ins and outs of the phone company. It was even weirder to go work there later on and found how much that paid off and earned trust with a lot of the older folks there.
spoofers who generate a ton of syns to legit destinations which result in a lot of syn+ack to the victim. Bcp38 would help here.
Botnets generating a ton of UDP to destinations. Hosters, cloud providers (especially those with vulnerable/open EMR clusters) and broadband ISPs with easily compromised customers are the problem here. Kudos to those who take down the botnet command and controls.
Memached/ntp/cldap amplifiers. Still out there, still a problem. Thankfully a few of these services are policed at large peering interconnection points.
Yes. As someone who has to support network infrastructure and had many network issues (at all levels) bubble up to them since the start of covid/wfh - broadband networks are being stressed during work hours. You can run your own monitoring at home to validate it to differentiate between last mile vs. peering related.
The challenge is some of thr broadband networks aren't being transparent about it. They won't admit to it, etc. Luckily I've found folks in a few companies who are willing to go off the record and explain what is the state of the last mile and give dates around planned upgrades (which are impacted due to permitting delays due to city employees struggling with covid restrictions).
I highly recommend getting two ISPs at home (cable + DSL/fttx/etc.) if you can.
As for Corp networks...they should be doing more with providing their employees some tooling to indicate if the issue is their ISP or the Corp network. It's a sad state that VPN appliances cost as much as they do (surprise - you could probably build a cheaper/better one but something something no one ever got fired for buying Cisco/etc).