The Architecture of the Internet with Erik Seidel
Episode
51 min
Read time
2 min
Topics
Relationships, Software Development, Science & Discovery
AI-Generated Summary
Key Takeaways
- ✓BGP Route Propagation: Border Gateway Protocol sessions between edge routers exchange IP prefix road maps constantly. Tier one networks see high dynamics as customer changes propagate upward, while small regional networks maintain stable sessions with minimal prefix updates throughout the day.
- ✓Anycast DDoS Defense: Cloudflare spreads single IP addresses across 10,000+ servers in hundreds of data centers globally. When botnets attack with 100+ terabits per second, traffic naturally disaggregates across locations, reducing each site to absorbable gigabit-level chunks that enable effective filtering without congestion.
- ✓China Network Architecture: Mainland China requires separate infrastructure partnerships with China Telecom, Unicom, or Mobile due to Great Firewall packet inspection overhead and mandatory local network transit. Cloudflare cannot operate its standard global backbone there, making China an enterprise-only service requiring special contracts.
- ✓Peering Economics: Tier one networks like AT&T, Telia, and NTT reach the entire Internet without paying anyone through settlement-free peering agreements. Smaller networks buy transit services for full Internet routing tables containing one million IPv4 prefixes, while strategic peering reduces latency and costs.
What It Covers
Erik Seidel from Cloudflare explains Internet architecture fundamentals including BGP routing protocol, peering versus transit relationships, anycast DDoS mitigation, China's unique networking challenges, and how Cloudflare's 300+ global data centers handle millions of requests per second.
Key Questions Answered
- •BGP Route Propagation: Border Gateway Protocol sessions between edge routers exchange IP prefix road maps constantly. Tier one networks see high dynamics as customer changes propagate upward, while small regional networks maintain stable sessions with minimal prefix updates throughout the day.
- •Anycast DDoS Defense: Cloudflare spreads single IP addresses across 10,000+ servers in hundreds of data centers globally. When botnets attack with 100+ terabits per second, traffic naturally disaggregates across locations, reducing each site to absorbable gigabit-level chunks that enable effective filtering without congestion.
- •China Network Architecture: Mainland China requires separate infrastructure partnerships with China Telecom, Unicom, or Mobile due to Great Firewall packet inspection overhead and mandatory local network transit. Cloudflare cannot operate its standard global backbone there, making China an enterprise-only service requiring special contracts.
- •Peering Economics: Tier one networks like AT&T, Telia, and NTT reach the entire Internet without paying anyone through settlement-free peering agreements. Smaller networks buy transit services for full Internet routing tables containing one million IPv4 prefixes, while strategic peering reduces latency and costs.
Notable Moment
Seidel handled 100 terabit per second DDoS attacks without receiving alerts because Cloudflare's anycast architecture automatically distributed the massive traffic across global infrastructure. He only discovered attacks when investigating single congested links, demonstrating how effective geographic distribution neutralizes concentrated botnet assaults.
Episode Transcript
The modern Internet is a vast web of independent networks bound together by billions of routing decisions made every second. It's an architecture so reliable, we mostly take it for granted. But behind the scenes, it represents one of humanity's greatest engineering achievements. Today's Internet is also dramatically more complex and capable than in its early years. Eric Seidel is a network engineer at Cloudflare, where he focuses on automating global network infrastructure. He joins the show to discuss his unique journey into tech, the fundamentals of how the Internet works, the border gateway protocol, peering versus transit, Cloudflare's architecture, networking in China, and much more. Gregor Vand is a security focused technologist, having previously been a CTO across cybersecurity, cyber insurance, and general software engineering companies. He is based in Singapore and can be found via his profile at van.hk or on LinkedIn. Hello and welcome to Software Engineering Daily. My guest today is Eric Seidel. So welcome, Eric. Hello. Nice to be here. Yeah. Great to have you here, Eric. We've met very briefly a couple years ago. I say back in Singapore. I'm still in Singapore. You're now in Austin. You were then and still are working for Cloudflare as a network engineer, and we're gonna be hearing all about how Cloudflare works as well as just kind of general principles of how the Internet works today, which is gonna be very interesting. But as per usual, we'd love to just hear a little bit about your background before sort of leading up to Cloudflare. I gather you have spent a lot of time in Asia, but also, like, China specifically, which is obviously very interesting from a Internet perspective. So, yeah, can you just give us a brief history? I think like a lot of people in the tech industry, and I found I'm not unique as this, I have a rather non I'm what you might call nontraditional, nonstandard background, very varied background. I came into the tech industry a little later. It's not my first go at tech or understanding tech or working with tech. I mean, I've been doing tech related jobs since I was a student worker back in university in the late nineties, early two thousands. And then I kind of drifted off away from, like, computing and Internet altogether and towards a lot of language learning. I was classic students, Latin, Greek. I mean, I was training to be a a classics teacher at one point actually. And then I ended up going to China for a while, teaching English there and learning the Chinese language. Spent a while there learning Chinese because I just really enjoyed a whole thing of learning languages. And then after a few years in China, I kind of drifted back towards tech. And within a year of coming back to America, I found in March 2020, about less than a year after I came back to America, I found myself at Cloudflare, and I've …
Get the full transcript (9,718 words) + summary by email — free
One-time email with the complete transcript and AI summary of this episode. No account needed.
One email, no spam. We’ll also show you what SignalCast does.
You just read a 3-minute summary of a 48-minute episode.
Get Software Engineering Daily summarized like this every Monday — plus up to 2 more podcasts, free.
Pick Your Podcasts — FreeKeep Reading
More from Software Engineering Daily
A Rust Framework to Simplify Distributed Systems
Sep 10 · 50 min
Syntax
988: Cloudflare’s Next.js Slop Fork
Mar 18
More from Software Engineering Daily
SED News: The NVIDIA-Hugging Face Deal, China’s Proxy Economy, the Open Weight Surge
Sep 8 · 52 min
Eye on AI
#320 Carter Huffman: Exploring The Architecture Behind Modulate's Next-Gen Voice AI
Feb 11
More from Software Engineering Daily
We summarize every new episode. Want them in your inbox?
A Rust Framework to Simplify Distributed Systems
SED News: The NVIDIA-Hugging Face Deal, China’s Proxy Economy, the Open Weight Surge
Moving Beyond RAG with Precomputed Context
The Death of Online Anonymity
TypeScript 7 and What Comes Next
Similar Episodes
Related episodes from other podcasts
Syntax
Mar 18
988: Cloudflare’s Next.js Slop Fork
Eye on AI
Feb 11
#320 Carter Huffman: Exploring The Architecture Behind Modulate's Next-Gen Voice AI
The Lean Startup
Aug 28
“AI Will Break the Internet” — Cloudflare CEO’s Big Prediction
Eye on AI
Sep 8
86% of What Coding Agents Do Is Just Reading — Not Solving | Alexander Whedon of Subquadratic
a16z Podcast
Sep 5
Aaron Levie on Why Open AI Wins
Explore Related Topics
This podcast is featured in Best Cybersecurity Podcasts (2026) — ranked and reviewed with AI summaries.
Read this week's Software Engineering Podcast Insights — cross-podcast analysis updated weekly.
You're clearly into Software Engineering Daily.
Every Monday, we deliver AI summaries of the latest episodes from Software Engineering Daily and 192+ other podcasts. Free for one show.
Start My Monday DigestNo credit card · Unsubscribe anytime