Flawed routers flood University of Wisconsin internet time server (2003)
summary
The University of Wisconsin-Madison experienced a massive, unintentional denial-of-service attack caused by a design flaw in hundreds of thousands of Netgear residential routers. These devices were hard-coded to query a specific university time server using an aggressive polling interval and a fixed source port. This incident highlights the dangers of embedding globally routable IP addresses in consumer hardware and the need for better adherence to network protocol standards.
key points
- The flood originated from legitimate Netgear devices that polled the university's NTP server every second when failing to receive a response, resulting in traffic exceeding 250,000 packets per second.
- Investigation revealed that Netgear had hard-coded the university's server IP address and a specific source port (23457) into the firmware of multiple product lines, including the RP614 and MR814.
- Potential solutions ranged from deploying a BGP anycast time service to distribute the load or sacrificing a large block of IP addresses to suppress the requests via global routing tables.
who should read it
Network administrators, firmware developers, and Internet architects interested in protocol implementation and the operational impact of hard-coded network configurations.
discussion positive
consensus
Commenters appreciate the clarity and technical depth of the old-fashioned diagrams and graphs used in thewrite-up, contrasting them with modern, flashier but less informative visualisations. There is a shared nostalgia for simpler monitoring tools like rrdtool and Cacti, which are viewed as more stable than modern alternatives like Grafana. The overall sentiment is one of respect for technical precision and a preference for simplicity over aesthetic complexity.
top insight
The transition from RRA files and rrdtool to modern time-series databases like InfluxDB and Grafana reflects a broader shift in infrastructure monitoring. While newer tools offer more flexibility, they introduce significant configuration overhead and 'moving goals' that can frustrate experienced engineers. This highlights a tension between modern scalability and theout-of-the-box simplicity of legacy systems.
Generated by an LLM from the article and thread. Check the sources before relying on it.