BYOIP News
BGP, RPKI, ROAs and routing hygiene developments.
Cloudflare adds BGP route filters for GRE and IPsec tunnels
Cloudflare's 15 October release adds import and export filters for tunnel BGP routes. Magic Transit users should check prefix exceptions and route limits.
Read the storyCloudflare makes BGP over GRE and IPsec generally available
Cloudflare's 5 October release makes BGP over GRE and IPsec available for production on Unified Routing accounts. BGP over CNI remains in closed beta.
Read the storyStudy finds RPKI-related events account for a small share of BGP updates
An 11-year study summarised on APNIC's blog associates well below 1% of observed BGP updates with RPKI events, while finding that the share is growing.
Read the storyVirtualizor reports package-signing changes after August BGP hijack
A 29 September vendor update reports package and API-response signing after an August routing hijack. The incident illustrates the limits of origin validation.
Read the storyARIN funds an RPKI operational health dashboard for its region
Virginia Tech received a US$17,350 ARIN Community Grant, announced 22 September, to build an RPKI Operational Health Dashboard for the ARIN service region.
Read the storyAPNIC members can publish ASPAs in MyAPNIC, with monitoring in DASH
APNIC says ASPA support in MyAPNIC and its Registry API was deployed in June 2026. The 9 July post is the announcement, and a 22 October FAQ covers which networks count as providers.
Read the storyCloudflare makes Unified Routing generally available for Magic Transit and WAN
Unified Routing reached GA on 18 September. BGP over GRE and IPsec followed on 5 October; existing accounts should review feature coverage and upgrade guidance.
Read the storyCloudflare adds managed firewall rulesets to Unified Routing
Cloudflare's 25 September update adds managed rulesets to Unified Routing. Beta status and account entitlement matter for Magic Transit and WAN users.
Read the storyOracle adds FastConnect traffic draining for planned maintenance
OCI's 16 September release adds traffic draining for private FastConnect circuits and link controls for direct connections. Review routing policy before use.
Read the storyKazakhstan's ROA coverage nears 80%, while route validation lags
A RIPE NCC report puts Kazakhstan's IPv4 ROA coverage near 80%, up from around 13% a year earlier. Validation has not followed, and the distinction matters.
Read the storyAPNIC and NIXI target route origin validation in India
A September agreement focuses on ROV deployment, IPv6 skills and an RPKI repository mirror pilot. Operators should distinguish the programme from completed deployment.
Read the storyRPKI can replace some IRR data, but AS-SET dependencies remain
Research using AMS-IX and DE-CIX route-server data distinguishes replaceable route objects from AS-SET dependencies that operators still need to preserve.
Read the story