Analysis of building a network using only IX route servers (no transit or bilateral peering) reveals 56.6% IPv4 and 61% IPv6 prefix coverage from outbound routes, but only ~14% inbound reachability via ICMP ping testing across 100+ internet exchanges. The article demonstrates significant diminishing returns after the top 5 exchanges and highlights the asymmetry between BGP route visibility and actual traffic acceptance.
This article reverse-engineers the UniFi inform protocol (port 8080) and discovers that while the AES-128-CBC encrypted payload requires per-device keys, the first 40 bytes of every packet are unencrypted and contain the device's MAC address at bytes 8-13. This plaintext MAC allows routing of inform traffic without decryption, enabling multi-tenant UniFi controller hosting on shared infrastructure.