Operations | Monitoring | ITSM | DevOps | Cloud

The State of Routing Security: Progress, Challenges, and Measurement

Kentik's Director of Internet Analysis, Doug Madory, explores the current landscape of BGP routing security. He discusses key progress made in Route Origin Validation (ROV), common pitfalls like AS-SET nesting, and ongoing challenges faced by the networking industry. With real-world examples and detailed traffic analysis from Kentik's extensive NetFlow data, Doug shares his insights and recommendations for NetOps professionals who want to improve their routing security practices. Watch this webinar replay to learn the latest methods for securing the global internet.

The Scourge of Excessive AS-SETs

An AS-SET is a special object that represents a group of ASNs and forms the basis for IRR-based route filtering. However, many AS-SETs in circulation today have grown so big that they effectively whitelist much of the routing table, rendering them ineffective. According to recent analysis, there are currently 2,192 AS-SETs which expand to over 1,000 ASNs each! In this blog post, we’ll describe what an AS-SET is, its role in route filtering, and how to deal with excessively large AS-SETs.

Optimize AWS Transit Gateway Usage

AWS Transit Gateway simplifies network architecture by connecting multiple VPCs and on-premises networks through a centralized hub—but it's easy to incur unnecessary costs if not managed properly. Learn how Kentik provides deep visibility into your AWS Transit Gateway usage, quickly highlighting expensive or inefficient traffic patterns. Using Kentik's Data Explorer, we show how to identify unnecessary intra-VPC traffic that's adding costs and potentially degrading performance.

The Hidden Cost of DIY AI in Network Operations

While AI offers powerful benefits for network operations, building an in-house AI solution presents major challenges, particularly around complex data engineering, staffing specialized roles, and maintaining models over time. The effort required to handle real-time telemetry, retrain models, and manage evolving environments is often too great for most IT teams.

AI That Matters: Driving Real Outcomes in Network Operations

AI can be a transformative tool in network operations — but only when it’s tied to clear, measurable outcomes. Rather than chasing hype, IT and NetOps teams should focus on solving specific operational challenges like reducing MTTR, cutting costs, and stabilizing infrastructure. AI has real potential when strategically applied, and when aligned with business goals, it becomes a powerful ally in modern network operations.

Cloud Pathfinder: A Key to Cloud Network Intelligence

Cloud Pathfinder simplifies cloud troubleshooting by visually mapping connectivity paths between cloud endpoints and integrating the power of AI, identifying where and why traffic is being blocked. By analyzing cloud configuration metadata, it provides instant, actionable insights into routing and security issues — saving engineers hours of manual work.

Beyond Their Intended Scope: DDoS Mitigation Leak

In this edition of Beyond Their Intended Scope, we take a look at last week’s BGP leak by a DDoS mitigation company which impacted networks around the world. We look at the impacts in both BGP and traffic data, and discuss how RFC 9234’s “Only to Customer” BGP Path Attribute could have helped.

Announcing Cloud Pathfinder: Network GPS for Infrastructure Teams

Today, we’re excited to launch Cloud Pathfinder, an AI-powered path assessment service built into Kentik Journeys. Read on to learn how Cloud Pathfinder gives you instant, turn-by-turn insight into cloud routing—mapping out every hop, gateway, VPC/VNet, and attachment along the way.