Skip to main content
Software Engineering Daily

The Architecture of the Internet with Erik Seidel

51 min episode · 2 min read
·
Erik Seidel

Episode

51 min

Read time

2 min

Topics

Relationships, Software Development, Science & Discovery

AI-Generated Summary

Key Takeaways

  • BGP Route Propagation: Border Gateway Protocol sessions between edge routers exchange IP prefix road maps constantly. Tier one networks see high dynamics as customer changes propagate upward, while small regional networks maintain stable sessions with minimal prefix updates throughout the day.
  • Anycast DDoS Defense: Cloudflare spreads single IP addresses across 10,000+ servers in hundreds of data centers globally. When botnets attack with 100+ terabits per second, traffic naturally disaggregates across locations, reducing each site to absorbable gigabit-level chunks that enable effective filtering without congestion.
  • China Network Architecture: Mainland China requires separate infrastructure partnerships with China Telecom, Unicom, or Mobile due to Great Firewall packet inspection overhead and mandatory local network transit. Cloudflare cannot operate its standard global backbone there, making China an enterprise-only service requiring special contracts.
  • Peering Economics: Tier one networks like AT&T, Telia, and NTT reach the entire Internet without paying anyone through settlement-free peering agreements. Smaller networks buy transit services for full Internet routing tables containing one million IPv4 prefixes, while strategic peering reduces latency and costs.

What It Covers

Erik Seidel from Cloudflare explains Internet architecture fundamentals including BGP routing protocol, peering versus transit relationships, anycast DDoS mitigation, China's unique networking challenges, and how Cloudflare's 300+ global data centers handle millions of requests per second.

Key Questions Answered

  • BGP Route Propagation: Border Gateway Protocol sessions between edge routers exchange IP prefix road maps constantly. Tier one networks see high dynamics as customer changes propagate upward, while small regional networks maintain stable sessions with minimal prefix updates throughout the day.
  • Anycast DDoS Defense: Cloudflare spreads single IP addresses across 10,000+ servers in hundreds of data centers globally. When botnets attack with 100+ terabits per second, traffic naturally disaggregates across locations, reducing each site to absorbable gigabit-level chunks that enable effective filtering without congestion.
  • China Network Architecture: Mainland China requires separate infrastructure partnerships with China Telecom, Unicom, or Mobile due to Great Firewall packet inspection overhead and mandatory local network transit. Cloudflare cannot operate its standard global backbone there, making China an enterprise-only service requiring special contracts.
  • Peering Economics: Tier one networks like AT&T, Telia, and NTT reach the entire Internet without paying anyone through settlement-free peering agreements. Smaller networks buy transit services for full Internet routing tables containing one million IPv4 prefixes, while strategic peering reduces latency and costs.

Notable Moment

Seidel handled 100 terabit per second DDoS attacks without receiving alerts because Cloudflare's anycast architecture automatically distributed the massive traffic across global infrastructure. He only discovered attacks when investigating single congested links, demonstrating how effective geographic distribution neutralizes concentrated botnet assaults.

Know someone who'd find this useful?

Episode Transcript

The modern Internet is a vast web of independent networks bound together by billions of routing decisions made every second. It's an architecture so reliable, we mostly take it for granted. But behind the scenes, it represents one of humanity's greatest engineering achievements. Today's Internet is also dramatically more complex and capable than in its early years. Eric Seidel is a network engineer at Cloudflare, where he focuses on automating global network infrastructure. He joins the show to discuss his unique journey into tech, the fundamentals of how the Internet works, the border gateway protocol, peering versus transit, Cloudflare's architecture, networking in China, and much more. Gregor Vand is a security focused technologist, having previously been a CTO across cybersecurity, cyber insurance, and general software engineering companies. He is based in Singapore and can be found via his profile at van.hk or on LinkedIn. Hello and welcome to Software Engineering Daily. My guest today is Eric Seidel. So welcome, Eric. Hello. Nice to be here. Yeah. Great to have you here, Eric. We've met very briefly a couple years ago. I say back in Singapore. I'm still in Singapore. You're now in Austin. You were then and still are working for Cloudflare as a network engineer, and we're gonna be hearing all about how Cloudflare works as well as just kind of general principles of how the Internet works today, which is gonna be very interesting. But as per usual, we'd love to just hear a little bit about your background before sort of leading up to Cloudflare. I gather you have spent a lot of time in Asia, but also, like, China specifically, which is obviously very interesting from a Internet perspective. So, yeah, can you just give us a brief history? I think like a lot of people in the tech industry, and I found I'm not unique as this, I have a rather non I'm what you might call nontraditional, nonstandard background, very varied background. I came into the tech industry a little later. It's not my first go at tech or understanding tech or working with tech. I mean, I've been doing tech related jobs since I was a student worker back in university in the late nineties, early two thousands. And then I kind of drifted off away from, like, computing and Internet altogether and towards a lot of language learning. I was classic students, Latin, Greek. I mean, I was training to be a a classics teacher at one point actually. And then I ended up going to China for a while, teaching English there and learning the Chinese language. Spent a while there learning Chinese because I just really enjoyed a whole thing of learning languages. And then after a few years in China, I kind of drifted back towards tech. And within a year of coming back to America, I found in March 2020, about less than a year after I came back to America, I found myself at Cloudflare, and I've …

Get the full transcript (9,718 words) + summary by email — free

One-time email with the complete transcript and AI summary of this episode. No account needed.

One email, no spam. We’ll also show you what SignalCast does.

Browse all Software Engineering Daily transcripts →

You just read a 3-minute summary of a 48-minute episode.

Get Software Engineering Daily summarized like this every Monday — plus up to 2 more podcasts, free.

Pick Your Podcasts — Free

Keep Reading

More from Software Engineering Daily

We summarize every new episode. Want them in your inbox?

Similar Episodes

Related episodes from other podcasts

Explore Related Topics

This podcast is featured in Best Cybersecurity Podcasts (2026) — ranked and reviewed with AI summaries.

Read this week's Software Engineering Podcast Insights — cross-podcast analysis updated weekly.

You're clearly into Software Engineering Daily.

Every Monday, we deliver AI summaries of the latest episodes from Software Engineering Daily and 192+ other podcasts. Free for one show.

Start My Monday Digest

No credit card · Unsubscribe anytime