Live data from Hacker News

Route Leak Impacting Cloudflare

cloudflarestatus.com

31–40 of 164 posts

Re: Route Leak Impacting Cloudflare

#31

Earlier quoted context omitted.

Thanks for the updates. I wish I could get this information somewhere other than hacker news though. :(

The team is updating the status page but not with granular detail because they'd have to spend time discussing what to say. I'm giving you the blow by blow.

You're the best, we really appreciate it!

Re: Route Leak Impacting Cloudflare

#32
post #16

How would that kind of disruption happen? Someone else also anycasting the CF IP addresses?

BGP route/prefix leaks. BGP is the protocol that deals with routing across the various internet backbones (known in the protocol as "autonomous systems", identified by an AS number).

On that protocol, the various systems broadcast what prefixes they can route, which then affects the rest of the networks' routing decisions.

By error or malice, a system can report a prefix they cannot or should not route, causing other systems to start routing traffic across it. This will either just cause weird routes (such as ones going through certain suspicious countries), cause poor performance for those routed, or no connection at all for those routed.

Re: Route Leak Impacting Cloudflare

#38
I’m pretty sure 1.1.1.1 for dns is impacted by this. Initially I thought my WiFi was having issues this morning until I realized it must be dns switching 1.1.1.1 out and besides the cloudflare sites everything is normal again

Re: Route Leak Impacting Cloudflare

#39
post #16

How would that kind of disruption happen? Someone else also anycasting the CF IP addresses?

BGP route/prefix leaks. BGP is the protocol that deals with routing across the various internet backbones (known in the protocol as "autonomous systems", identified by an AS number). On that protocol, the various systems broadcast what prefixes they can route, which then affects the rest of the networks' routing decisions. By error or malice, a system can report a prefix they cannot or should not route, causing other…

At 3-4 major leaks per year it seems like we should probably fix BGP one of these days...
Post reply on HN