iiinova — where your digital self keeps evolving

Internet in #Ukraine in September, as seen by watchthenet.com 🇺🇦 Russia went after the network itself: Kyiv data centres, an internet exchange, telecom HQs & the power grid The country as a whole barely moved. Individual networks went dark, and some still aren't back.

010

Andree Toonk @atoonk.bsky.social · 28/09/2026

This weekend’s project: DPDK + WireGuard 🤓 I wired wireguard-go up to my packetio library and got a single tunnel to ~30M pps clean, peaking 40M pps. That’s 70× what kernel WireGuard can do! Wrote it all up here if you’re into that kind of thing: toonk.io/wireguard-dp...

toonk.io

WireGuard at 40 Mpps with DPDK, in Go

Over the last few months, I’ve been spending a lot of time experimenting with high-performance packet processing in Go. A lot of that work turned into packetio, one Go API for sending and receiving pa...

0179

Andree Toonk @atoonk.bsky.social · 27/09/2026

Reports today of a strike on the Cosmonova data center in Kyiv (AS34867). Also visible on WatchTheNet.com: it went fully dark at 07:26 UTC for ~1.5h, with reachability dropping to zero. Back online since ~09:00 UTC 👇

010

Andree Toonk @atoonk.bsky.social · 27/09/2026

Beautiful Saturday afternoon in downtown Vancouver

000

Andree Toonk @atoonk.bsky.social · 26/09/2026

New on WatchTheNet: BGP data + replay, overlaid on our active probe data 🎥 Here's a demo video of today's Iraq country wide outage due to exam shutdown visualized. Pretty neat to watch BGP path hunting before it runs out of options and the networks drop offline.

110

Andree Toonk @atoonk.bsky.social · 24/09/2026

I'm as social media influencer now 😆

000

Andree Toonk @atoonk.bsky.social · 23/09/2026

Russian drones hit Kyiv this morning. Several regional ISPs went offline, and five hours later some still haven't come back. watchthenet.com/e/city/UA-30...

watchthenet.com

Watch the Net

011

Andree Toonk @atoonk.bsky.social · 21/09/2026

Reviewing outages from overnight, stumbled on the O2 outage in Czech Republic AS5610. Affecting about 1,5M IP addreses watchthenet.com/e/asn/CZ/AS5...

120

Andree Toonk @atoonk.bsky.social · 21/09/2026

Fun hobby project: "Watch the Net" 🌎 To detect Internet outages. Finally got around to making it available to everyone. It measures the "pulse of the Internet" with active probes and shows outages/reachability across countries, cities and ASNs. watchthenet.com

watchthenet.com

Watch the Net

230

Andree Toonk @atoonk.bsky.social · 21/09/2026

Beautiful sunny Sunday in Vancouver today! Also, someone noticed the @tailscale.com logo on my sweater, turns out he was a big fan 🤩

050

Andree Toonk @atoonk.bsky.social · 19/09/2026

Rough night in Ukraine seen from my probes Odesa: reachability dropped ~30% at 01:06 UTC and hasn't come back. Donetsk: -90% for three hours over night , and it came back ~25% lower than before.

031

Andree Toonk @atoonk.bsky.social · 18/09/2026

Pretty major Internet disruption in Donetsk Oblast, Ukraine right now. Reachability dropped sharply, likely due to widespread power outages.

100

Andree Toonk @atoonk.bsky.social · 17/09/2026

for a second there, i was led to believe all of Google was down. Turns out they just blocked my probe IP 🙁 For what it's worth AWS did that within a few hours (weeks ago) hehe well at least my new telegram notifier bot is working 🤓

110

Andree Toonk @atoonk.bsky.social · 17/09/2026

poking at AS1103. SURF, the Dutch university network, one of the first ASes I ever worked on. you can see the campuses wake up: responding IPs go up in the morning, every weekday. weekends, nothing. and since Sep 1 the peaks went up a lot more. students are back 😄

100

Andree Toonk @atoonk.bsky.social · 15/09/2026

My new morning routine: breakfast + coffee, then checking my Internet Weather map to see what broke overnight. ☕️ Really happy with how this is coming together. It’s become a pretty powerful tool, and a lot of fun to use 🤓 Might make this publicly available soon.

330

Andree Toonk @atoonk.bsky.social · 14/09/2026

Wow, what just happened to Internet in Portugal? AS3243 (MEO), Portugal’s main residential broadband ASN, took a huge hit and briefly dropped to essentially zero from my vantage point. Country-wide reachability fell significantly. Still ongoing. 👀

120

Andree Toonk @atoonk.bsky.social · 13/09/2026

I rented some of the biggest network-optimized EC2 instances AWS has, including the 600 Gbps c8gn.48xlarge, and pointed a DPDK packet generator at them. Then did the same for the rest of the c8gn family. Some interesting findings 🤓 learnings and link in the thread 🧵

210

Andree Toonk @atoonk.bsky.social · 13/09/2026

One lesson learned the hard way in my ec2 network testing: Turns out the "600 Gbps" on a c8gn.48xlarge deserves an asterisk. One NIC tops out at 304 Gbps, bw_out_allowance_exceeded ticking. AWS shaping me at 300G on a 600G instance?! Turns out, you need two network cards, 300G each!

010

Andree Toonk @atoonk.bsky.social · 13/09/2026

ooh wow just got a phone call from AWS regarding suspicious usage on my account. Actually really good! I guess that's what you get if you play with these instance types 🤓 c8gn.8xlarge 100 Gbps c8gn.12xlarge 150 c8gn.16xlarge 200 c8gn.24xlarge 300 c8gn.48xlarge 600

110

Andree Toonk @atoonk.bsky.social · 13/09/2026

apparently getting a c8gn.24xlarge ec2 instances in us-east-1 is impossible :( Giving up after 25min of terraform loops moving my network testing to ca-central-1

static.klipy.com

Shut Up And Take My Money!

ALT: Shut Up And Take My Money!

111

Andree Toonk @atoonk.bsky.social · 12/09/2026

TIL while continuing to work with DPDK on EC2: sending a packet through the ENA driver costs ~1,450 CPU cycles. On a ConnectX (mlx5) it's ~50. Same DPDK, ~30x the cost per packet. One core: 2.2 Mpps on ENA vs ~60 Mpps on mlx5. Pretty wild.

010

Andree Toonk @atoonk.bsky.social · 10/09/2026

Okay, found two more :) University of Victoria and DePaul both show the same back to school pattern. Responding IPs jump right as classes start. Internet Weather is apparently also a school calendar now. 😀

010

Andree Toonk @atoonk.bsky.social · 10/09/2026

Pretty cool to see the start of the school year show up in my Internet measurement project. The University of British Columbia (AS393249) is back this week, and you can clearly see it in responding IPs on campus. Quiet over the long weekend, a bump yesterday, and a peak today. 🎓

131

Andree Toonk @atoonk.bsky.social · 08/09/2026

I spent way too much time getting these numbers right, so I wrote them all up :) AF_XDP vs DPDK vs mlx5 Direct Verbs, same Go code, same 100G box. Up to 148M 64-byte packets/sec, with DPDK hitting line rate on 3 cores. toonk.io/packetio/

toonk.io

Four ways to do super fast packet processing in Go

Meet packetio, the Go packet I/O library I wish I'd had a years ago. AFXDP, DPDK, mlx5 Direct Verbs, and AFPACKET behind one API. The last few months I've reignited my strange hobby of doing network ...

100

Andree Toonk @atoonk.bsky.social · 08/09/2026

Last weekend I posted about doing 148M packets/sec from Go with DPDK The thing I was really working toward is now out: packetio. One Go API for DPDK, AF_XDP, mlx5 Direct Verbs, and AF_PACKET. Swap the backend, while keeping the packet processing code🤓 github.com/atoonk/packe...

github.com

GitHub - atoonk/packetio

Contribute to atoonk/packetio development by creating an account on GitHub.

032

Andree Toonk @atoonk.bsky.social · 08/09/2026

Also an interesting one from Iraq. ~75–80% of Internet reachability disappears for ~44 minutes at almost exactly the same time on exam days. Iraq shuts down Internet access during school exams to prevent cheating. Nicely visible in the measurements!

011

Andree Toonk @atoonk.bsky.social · 08/09/2026

Looks like Kazakhstan had a major ~16 minute internet outage today. Pretty cool to have this kind of real time visibility into Internet health just by continuously probing the Internet and measuring reachability.

000

Reposted by Andree Toonk

apenwarr @apenwarr.ca · 03/09/2026

Last last chance to find out about all the new stuff!

171

Andree Toonk @atoonk.bsky.social · 04/09/2026

Today I learned there's a city in Texas called "Nederland" and apparently they just lost 70% of their Internet 🤠

010

Andree Toonk @atoonk.bsky.social · 02/09/2026

Great example of a targeted attack using a BGP hijack to obtain a valid TLS certificate. Also shows how limited RPKI is against a determined attacker. They simply spoofed the AS path so the hijack looked RPKI-valid. Nice write-up by @eldomador.bsky.social www.kentik.com/blog/latest-...

kentik.com

Latest BGP Hijack Targets Hosting Software Vendor

This post analyzes the technical details of the BGP hijack against Softaculous Ltd, the company behind the Softaculous auto-installer and the Virtualizor VM management platform. The hijack enabled an ...

21910

Andree Toonk @atoonk.bsky.social · 31/08/2026

Ever wondered how to use DPDK from Go? 148M packets/sec. ~50 lines of Go code, 4 cores / go routines. No C to write. 🤓 check this example: gist.github.com/atoonk/63ad7... Same code runs on AF_XDP and AF_PACKET too switch backend by changing the import line. github.com/atoonk/packetio

gist.github.com

Go + DPDK in < 100 lines with packetio - Sending 148 million packets/sec

Go + DPDK in < 100 lines with packetio - Sending 148 million packets/sec - main.go

000

Andree Toonk @atoonk.bsky.social · 30/08/2026

There goes my sunday 🤣 If you like moving packets on Linux, these talks will be interesting for you.

010

Andree Toonk @atoonk.bsky.social · 30/08/2026

Touching grass yesterday . Been a busy week, great to disconnect. Enjoyed getting out visiting Squamish 🇨🇦

130

Andree Toonk @atoonk.bsky.social · 29/08/2026

Why aren’t all servers running Mellanox/NVIDIA ConnectX NICs? The more I learn about them, the more they just seem like the superior cards. Great performance, absurdly capable hardware steering, and great Linux/userspace coexistence. Go buy ConnectX cards!

100

Andree Toonk @atoonk.bsky.social · 29/08/2026

Can't believe I only this week tried Claude's remote-control feature. So much better than my various screen sessions, and ssh'ing all the time. Now I can keep an eye on my session just from my phone or browser. Much better user experience. Gotta keep those agents busy! 🤓

020

Andree Toonk @atoonk.bsky.social · 29/08/2026

whenever you type in "sudo dpdk-devbind.py --bind=vfio-pci 0000:01:00.0" You know you're entering an interesting, yet always painful, world... THERE HAS TO BE A BETTER WAY 🤓

110

Andree Toonk @atoonk.bsky.social · 27/08/2026

We've come a long way over the last few months. Today we're offically launching Tailscale PAM (beta). I'm super happy with this beautiful integration, amazing team work! 🧡

0193

Reposted by Andree Toonk

Tailscale @tailscale.com · 19/08/2026

Oh hey, that’s us. 👋 Tailscale landed on the Brex Benchmark of the 25 fastest-growing software vendors of summer 2026. Thanks to everyone who’s brought us along for the ride. www.brex.com/journal/brex...

0103

Andree Toonk @atoonk.bsky.social · 20/08/2026

Having a lot of fun keeping a finger on the pulse of the Internet. Turns out when you send enough probes, it starts to feel remarkably real-time. Watching Crimea go dark and now slowly come back online is pretty fascinating. Reminds me a little of the good old BGPMon days. 🤓

010

Andree Toonk @atoonk.bsky.social · 20/08/2026

Looks like Internet connectivity in Crimea dropped quite a bit! Lost 86% or so of responding hosts, 1,5hrs now.

120

Andree Toonk @atoonk.bsky.social · 19/08/2026

The last few months have been a whirlwind. We’ve been heads down integrating Border0 into @tailscale.com and I’m incredibly proud of what we’ve built in such a short time. Next week at TailscaleUp, we get to share it! I’ll be talking AND demo'ing PAM and what’s next. tailscale.com/tailscaleup?...

032

Andree Toonk @atoonk.bsky.social · 18/08/2026

Measuring continues, and picked up a few more outages. Looks like Comcast in Indiana had a hickup?

120

Andree Toonk @atoonk.bsky.social · 18/08/2026

Short demo my af_xdp based internet scanner 🤓 Running for 24hrs, by coincidence picked up the Hawaii Internet outage! Can find quickly what regions were affected and what ISP's were the main impacted ones. Pretty cool!

120

Andree Toonk @atoonk.bsky.social · 18/08/2026

ooh wow, looks my weekend hobby project: Internet weathermap / observatory, already picked up a big big Internet outage in Hawaii ?!

010

Andree Toonk @atoonk.bsky.social · 16/08/2026

Time to do some groceries while my agents are working 😁 Shopping in style today with my new @tailscale.com bag 🤓

0121

Andree Toonk @atoonk.bsky.social · 16/08/2026

With AF_XDP I can push 100M packets/sec from one Linux box. That’s enough to probe basically the entire public IPv4 Internet in under a minute 🤯 That’s kind of insane. I think I know what I want to build next... 🤓

050

Andree Toonk @atoonk.bsky.social · 15/08/2026

Fun read: testing AF_XDP on Google Cloud C4N great to a see wireblast mention! 🤓 Google's C4N offers up to 400 Gbps of network bandwidth and 95 million packets per second (MPPS) One core, nearly 6 Mpps. medium.com/google-cloud...

medium.com

One core, nearly 6 Mpps: testing AF_XDP on Google Cloud C4N

At Next ’26 this year, we announced our first network-focused machine type 🎉. Follows a quote from the official announcement:

021

Andree Toonk @atoonk.bsky.social · 11/08/2026

it’s midnight. I should probably go to bed. Instead I’m apparently building a dataplane + router in Go 😅 105 Mpps L3 forwarding in software so far... not bad...🤓

010

Andree Toonk @atoonk.bsky.social · 11/08/2026

First Wireblast bug report / feature request today 🎉 And just like that, Wireblast now supports jumbo frames🤓 Also made a quick TX/RX demo on the same box as someone asked for an example. You can see pretty clearly how the kernel starts tapping out at just a few million PPS :)

000