I'm using AnchNet's services.
And We've asked AnchNet when I recieved a e-mail from our BGPMon.
They said their staff was configured a wrong config on router.
Also they don't know 1.1.1.0/24 is used by CloudFlare&APNIC.
So they used this prefix to test.
Does anyone else find it sort of beautiful watching replays of events like this? It's amazing to watch how the routers organise themselves, making and breaking connections when needed.
Ah! That may have been the reason why my site wasn't resolving earlier today. It was the weirdest situation with people from all over the planet complaining without any apparent pattern, a RIPE check of the site from 10 different locations showed no issues in connectivity.<p>Thanks for posting this.
Large companies misuse "unassigned" space all the time. I have heard engineers at my work propose using the non public routed DOD /8 before. Not on my watch!
Network engineer here: I'm going to guess that this is a mistaken effort on the part of a Chinese ISP or the GFW to hijack traffic to 1.1.1.1 internally within China, but probably not intended to propagate beyond the major Chinese international-transit-ISP's connections to the global Internet. BCP38 is your friend.
How effective is this? Looking at <a href="https://bgp.he.net/ip/1.1.1.1" rel="nofollow">https://bgp.he.net/ip/1.1.1.1</a>, 1.1.1.0/24 is apparently "ROA Signed and Valid". I don't know a lot about BGP. Does this mean hijacking this subnet is a bit harder than unsigned ones because some or all ISPs verify this announcement? Or is it faster/easier to detect?<p>Maybe a wider question: is there some way to prevent BGP hijacking?
Interesting!<p>My ping to that address went terrible for a brief window today - <a href="https://i.imgur.com/KjCcBeT.png" rel="nofollow">https://i.imgur.com/KjCcBeT.png</a><p>Wonder if this was the cause.<p>*edit: I'm in Cape Town and the ping looks what was routing to a DC down the road decided to go to Europe instead.
Would this affect certificate-validating clients doing DNS-over-HTTPS to 1.1.1.1 — doesn’t it have an ipAddress certificate and demand HTTPS resolution only?
Are people here really using 1.1.1.1 as a DNS server...? Do people here _really_ think that Cloudflare isn't giving your data away to _someone_? I have been using DNS servers from OpenNIC for sometime now, and I will continue to.