On Thu, Jul 29, 2021 at 9:07 PM Denys Fedoryshchenko < nuclear...@nuclearcat.com> wrote:
> On 2021-07-29 20:46, Randy Bush wrote: > >> Looks like it did shown on news only. > > > > :) > > > > i wondered > They have installed devices called "TSPU" on major operators. > Isolation of specific networks is done without changing BGP > announcements, obviously. > Denys, can you say anything about how these TSPU operate? I believe they at least swallow/stop TCP SYN packets toward some destinations (or across a link generally), but I'm curious as to what steps the devices take, to be able to judge impact seen as either: "broken gear" or "funky TPSU doing it's thing" thanks! -chris > And the drills do not mean at all "we will turn off the Internet for all > the clients and see what happens", journalists trivialized it. > Most likely, they checked the autonomous functioning of specific > infrastructurally important networks connected to the Internet, > isolating only them. > It's not so bad idea in general, if someone find another significant bug > in common software, to be able to isolate important networks from the > internet at the click of a button and buy time for patching systems. >
