Network & Infrastructure
A mobile client changes networks and its application pauses even though the QUIC connection is designed to tolerate address changes. A stateful gateway may tie policy to the old flow tuple.
IPv6, TCP & Transport Engineering2 min read
Read article : QUIC connection migration and stateful boundary assumptions
Network & Infrastructure
An application using IPv6 works across one provider but fails across another when additional headers are present. Hardware parsing limits or explicit policy can produce path-specific behavior.
IPv6, TCP & Transport Engineering2 min read
Read article : IPv6 extension headers and inconsistent forwarding policy
Network & Infrastructure
A website appears available to users because clients rapidly fall back to IPv4. An IPv6-only monitor exposes failures that aggregate availability reporting has hidden.
IPv6, TCP & Transport Engineering1 min read
Read article : Dual-stack success can conceal a broken IPv6 service path
Network & Infrastructure
A newly connected host marks bulk traffic as high priority, starving a protected queue. The network may be trusting endpoint markings beyond the intended administrative boundary.
IPv6, TCP & Transport Engineering2 min read
Read article : DSCP trust boundaries and unexpected traffic-class escalation
Network & Infrastructure
A saturated circuit achieves expected goodput while voice and interactive sessions become unusable. Large unmanaged queues can add substantial delay without showing persistent packet loss.
IPv6, TCP & Transport Engineering1 min read
Read article : Bufferbloat: high throughput with unacceptable interactive latency
Network & Infrastructure
A valid packet arrives over a secondary provider and is dropped before reaching the application. Strict reverse-path validation may expect the source through another interface.
IPv6, TCP & Transport Engineering1 min read
Read article : Asymmetric routing and reverse-path checks on multihomed edges
Network & Infrastructure
A server intermittently refuses or delays new connections while existing sessions work. The incomplete handshake queue and the application accept queue can fail for different reasons.
IPv6, TCP & Transport Engineering1 min read
Read article : SYN backlog pressure versus an exhausted application accept queue
Network & Infrastructure
A WAN link averages well below its rate limit but drops short application bursts. Minute-level graphs hide traffic that exceeds the policer's instantaneous token budget.
IPv6, TCP & Transport Engineering1 min read
Read article : Microbursts through a policer despite low average utilization
Network & Infrastructure
A missing service record is created, yet some clients continue receiving a negative answer. Their resolvers can legitimately retain the earlier nonexistence response for its negative-cache lifetime.
DNS, DNSSEC & Service Discovery2 min read
Read article : Negative DNS caching after a corrected service record
Network & Infrastructure
A domain answers from its own authoritative servers when queried directly, but normal recursive resolution fails. The parent delegation may point at unreachable or outdated server addresses.
DNS, DNSSEC & Service Discovery2 min read
Read article : Broken delegation glue despite correct child-zone records
Network & Infrastructure
Some queries succeed while others time out because one delegated nameserver is not authoritative for the zone. Resolver server selection can make the fault appear random.
DNS, DNSSEC & Service Discovery2 min read
Read article : Lame delegations and intermittent resolver failures
Network & Infrastructure
A signed zone returns SERVFAIL through validating resolvers while direct authoritative queries appear normal. The parent's DS may no longer match the zone's active trust path.
DNS, DNSSEC & Service Discovery1 min read
Read article : DNSSEC DS mismatch after an unsynchronized signing change