Mingwei Zhang

RFC 9234 lets routers reject route leaks on their own, using BGP Roles and the Only to Customer attribute. We measured who has deployed it, and found two Tier 1 networks unexpectedly stripping OTC.

Bryton Herdes, Iliana Xygkou, and Mingwei Zhang

BGP is vulnerable to routing hijacks and path leaks that negatively impact traffic on the Internet. RPKI helps solve some of these problems, but for some forged paths, we need to rely on a simpler mechanism: First AS enforcement in BGP.

Bryton Herdes, Bryce Walters, and Mingwei Zhang

ASPA is the cryptographic upgrade for BGP that helps prevent route leaks by verifying the path network traffic takes. New features in Cloudflare Radar make tracking its adoption easy.

Mingwei Zhang and Bryton Herdes

Cloudflare Radar has added new tools for monitoring PQ adoption, KT logs for messaging, and ASPA routing records to track the Internet's migration toward more secure encryption and routing standards.

David Belson, Mingwei Zhang, André Jesus, Suleman Ahmad, Sabina Zejnilovic, Thibault Meunier, and Mari Galicer

A BGP “zombie” is essentially a route that has become stuck in the Default-Free Zone (DFZ) of the Internet, potentially due to a missed or lost prefix withdrawal. We’ll walk through some situations where BGP zombies are more likely to rise from the dead and wreak havoc.

Bryton Herdes, June Slater, and Mingwei Zhang

We will cover some of the reasons why operators need to monitor the AS-SET memberships for their ASN, and now Cloudflare Radar can help.

Mingwei Zhang and Bryton Herdes

Real-time BGP route visualization is now available on Cloudflare Radar, providing immediate insights into global Internet routing.

Mingwei Zhang

On June 27, 2024, a small number of users globally may have noticed that 1.1.1.1 was unreachable or degraded. The root cause was a mix of BGP (Border Gateway Protocol) hijacking and a route leak

Bryton Herdes, Mingwei Zhang, and Tanner Ryan

BGP origin hijacks allow attackers to intercept, monitor, redirect, or drop traffic destined for the victim's networks. We explain how Cloudflare built its BGP hijack detection system, from its design and implementation to its integration on Cloudflare Radar

Mingwei Zhang and Celso Martinho

The Internet is a vast, sprawling collection of networks that connect to each other. The new Cloudflare Radar Routing page monitors routing changes and anomalies and presents statistics about how we see traffic getting routed on the Internet

Mingwei Zhang

In this blog post, we will introduce our new system designed to detect route leaks and its integration on Cloudflare Radar and its public API.

Mingwei Zhang, Vasilis Giotsas, and Celso Martinho

An outage at one of the largest ISPs in Canada, Rogers Communications, started earlier today, July 8, 2022, and is ongoing (eight hours and counting), and is impacting businesses and consumers.

João Tomé, Tom Strickx, and Mingwei Zhang