[DBWG] AFRINIC / RPKI publication server congestion?

[Michel Odou]

Dear Job,

We are taking a look at this. It is some sort of DNS amplification 
attack. We are working on short-term mitigation solutions for now.

Regards,
Michel

On 04/04/2026 19:11, Job Snijders via DBWG wrote:
> Dear all,
> 
> I see on multiple vantage points trouble synchronising to Afrinic’s RPKI services via both RRDP (delivered via Cloudflare) and Rsync (delivered by Afrinic directly). Both are timing out. This leads me to believe there might be congestion at the origin servers (and thus the CDN has trouble fetching the resources and also times out)
> 
> The problem seems to have started last night around 03:00 UTC. See attached screenshot for a graph of ICMP monitoring.
> 
> Are people aware and looking into this?
> 
> Kind regards,
> 
> Job
> 
> 
> 
> 
> _______________________________________________
> DBWG mailing list
> DBWG at afrinic.net
> https://lists.afrinic.net/mailman/listinfo/dbwg

-- 
Michel ODOU
Head of IT & Security
African Network Information Centre (AFRINIC) Ltd.
t: +230 403 51 00 | f: +230 466 6758 | w: https://www.afrinic.net