Home / Field notes
Field notes

Field Notes

Notes we wrote for customers, not for search engines. Short, practical, and occasionally inconvenient if you have already made the mistake.

Capacity

Size for the 95th, plan for the spike

Buying for your worst second is expensive; buying for your monthly 95th is how circuits get built. Measure both, then size to the percentile with headroom for growth — and ask about bursting rather than paying for a permanently idle pipe.

Peering

Objects first, session second

Most peering requests fail on paperwork, not physics. Publish IRR objects or ROAs for every prefix, make sure your announcements match at every exchange, and keep the NOC contact current. That is the whole checklist.

Routing security

IRR and RPKI are different tools

IRR objects are registrations that filtering engines trust by convention. ROAs are signed statements about which ASN may originate a prefix. Use both — IRR alone leaves accidental hijacks open, RPKI alone leaves stale objects in filters.

Address space

Four questions before you lease IPv4

Was this block previously abused, and can you see the evidence? Who controls reverse DNS? Will ROAs and IRR objects be created? Can you get an LOA if you announce it yourself? Geofeed is the fifth — without it, geo databases improvise.

Security

What mitigation cannot fix

Filtering handles floods and request volume. It does not fix a compromised application, an unpatched CMS or a login endpoint with no rate limit. If the traffic is small and targeted, the bug is usually in your code.

Operations

Write the failure plan before you need it

Who calls whom, what gets blackholed, what the thresholds are, and who can decide at 3 a.m. An hour spent on this is worth more than any dashboard nobody watches.

Questions

Common enough to answer here

Will you look at our configuration?

Yes — policy, filters, communities and traffic engineering. If something is outside our scope, we will say so instead of billing hours on it.

Do you handle migrations?

Transit migrations, peering turn-ups and ASN build-outs, priced as engineering time with the scope agreed in writing first.

Do you offer IPv6?

Yes, alongside IPv4 with the same object hygiene — a /48 or larger is usually the sensible starting point.

Where can we verify your announcements?

bgp.tools and PeeringDB carry current data for AS209101; both are linked from the AS209101 page.

Next step

Tell us the shape of the problem

Ports and commits, address space, racks, or a routing question you want a second opinion on. You get an answer from an engineer, with numbers attached.