Hacker News Reader

Comment by gruez | Hacker News Reader

ASN/IP block level based aggregation will provide the information needed without requiring traffic data on a ip/site level. Moreover, there's no reason to keep any of this information on a per-customer basis.

View on HN

In the era of virtual servers, cloud infrastructure, CDNs, etc., ASNs and IP blocks are not necessarily that helpful. Which is kind of back to my original point: it's not 2005 anymore.

Start with a problem you actually have, rather than beginning with the destination "We're going to snoop on all the customers" and then trying to think of a reason why that's a good idea.

Maybe you'll get to the same destination but I very much doubt it. Of course, if your starting goal was to snoop on the customers and you were just looking for an excuse...

> In the era of virtual servers, cloud infrastructure, CDNs, etc., ASNs and IP blocks are not necessarily that helpful.

The above statement makes no sense at all. The whole Internet is built on connections between autonomous systems and all traffic is IP based. There is nothing but ASNs and IPs and information about them and the flows between them is extremely helpful in operating an ISP.

Taken out of context, sure. An ASN identifies an autonomous system and is used for routing in the core of the Internet. But if you have the ASN of an AWS data center, knowing it tells you nothing about the client of AWS that the traffic you're routing belongs to (though AWS recently added BYOASN). Ditto, by and large, CIDR blocks of publicly allocated address space. Individual IPs are more informative, and domain names even more informative than that.

I also don't disagree about the usefulness of this kind of information, my argument is that ISPs can't always get by on coarsely aggregated data alone.

Reply on news.ycombinator.com