Verizon and a BGP Optimizer Knocked Large Parts of the Internet Offline
From the post:<p>>"It doesn't cost a provider like Verizon anything to have such limits in place. And there's no good reason, other than sloppiness or laziness, that they wouldn't have such limits in place."<p>Is "sloppiness or laziness" really the only possible attribution here? I'm not a big fan of Verizon but I'm a big fan of civility and empathy, two qualities which your blog post lacks. Outages are a really unfortunate fact of life. We've seen them recently with Google, AWS, Dyn - all companies where technical competency is generally not questioned. It's quite possible the cause of of this outage was some "perfect storm" scenario such as an eBGP router rebooted and came up with a stale or incorrect config. "Perfect storm" scenarios even happen at companies with very rigorous engineering cultures as we saw with the most recent Google outage.<p>Your attempt to shame an organization without knowing all the details reeks of immaturity and pettiness. Ditto for your willingness to turn this into yet another Cloudflare marketing opportunity. Have you forgotten about your own Cloudbleed incident? How would you feel if it a security company took that as an opportunity to shame you for "sloppiness or laziness"? Or some other company's CEO was offering to send people "Cloudbleed Support Group" T-Shirts on HN as your own CEO is doing in this thread?<p>Lastly RPKI isn't a silver bullet, RPKI authorities can also be misconfigured and attacked[1][2]. This happened with the LACNIC incident in 2013[2]. It's also worth mentioning that RPKI potentially creates new threats[2]. But again it seems more important to you to use this as a marketing opportunity and promote yourself while throwing someone else under a bus while uttering pithy summations.<p>Also from your post:<p>>"And, in particular, we're looking at you Verizon — and still waiting on your reply."<p>Although Verizon is the 400lb gorilla in the room, their NOC and network engineers are still regular people with kids and families and feelings. They are also people who have had a really shit day today. Why you can't extend just a bit of human compassion and feel compelled to try to shame is quite inexplicable.<p>You may think that your blog post was a marketing coup but I see it as a massive failure in in both leadership and civility.<p>As a thought exercise maybe Cloudflare leadership could think about how they would like the community to react the next time they are at fault.<p>[1] <a href="https://www.cs.bu.edu/~goldbe/papers/hotRPKI.pdf" rel="nofollow">https://www.cs.bu.edu/~goldbe/papers/hotRPKI.pdf</a><p>[2] <a href="https://www.cs.bu.edu/~goldbe/papers/sigRPKI_full.pdf" rel="nofollow">https://www.cs.bu.edu/~goldbe/papers/sigRPKI_full.pdf</a>