Search for a command to run...
In South Africa, ISPs like Vodacom & Afrihost ignore critical network cooperation by allowing harmful traffic, creating serious concerns about their management & priorities
Driving SD-WAN Adoption in South Africa
No comments yet. Be the first to comment.
Enhancing Security and Compliance with ManageEngine ADAudit Plus
Why Pings Aren't Enough & NMS is Essential
What is SD-WAN (Software Defined Wide Area Networking)? | The Mechanics of this Groundbreaking New Network Technology
Embracing First Principles & the Scientific Method
Ever Wondered | "Is My Internet Really 99.9% Reliable?" đ€
The internet thrives on cooperation, where service providers ensure that their networks play nicely with others. But in South Africa, a growing list of ISPsâwith examples being Vodacom, Hero, Afrihost, Cool Ideas, and Voxâare failing at this fundamental principle. Allowing dirty traffic to originate from your network and attack peers isnât just bad etiquetteâitâs reckless mismanagement.
Being a good neighbour in the ISP world isnât optional; itâs essential for the health of the internet and your own infrastructure. Ignoring this responsibility is a glaring technical inadequacy that raises serious questions about the competence and priorities of these providers.
Here is the analytics from Cloudflareâs RADAR:
Dirty traffic refers to malicious packets originating from compromised or misconfigured devices on an ISP's network. These packets can include:
DDoS Traffic: Flooding target networks or servers to overwhelm them.
Spoofed Packets: Packets with forged headers to disguise their origin.
Malware Propagation: Attacks designed to infect other systems across the internet.
When this dirty traffic flows unchecked, it wreaks havoc on peer networks, disrupts global connectivity, and ultimately damages the originating ISPâs own infrastructure.
An ISPâs role isnât just about providing fast connectivity; itâs about safeguarding the ecosystem. Failing to implement basic protective measures like Source Address Validation (SAV) or neglecting the vulnerabilities in their own customer premises equipment (CPE) is inexcusable.
SAV ensures that packets originating from an ISPâs network are verified against legitimate IPs. This prevents the spoofing of source addressesâa common tactic in DDoS attacks.
Many ISPs provide routers and modems to customers but fail to secure or update them. These devices often become breeding grounds for botnets, contributing to the dirty traffic problem.
When ISPs overlook these responsibilities, they allow compromised devices to flourish, attacking peer networks while also harming their own.
Itâs not just neighbouring peers that suffer. Dirty traffic creates congestion and inefficiencies that degrade the originating ISPâs own network performance.
Increased Latency: Malicious traffic clogs pathways, slowing down legitimate data.
Overburdened Infrastructure: Firewalls, routers, and switches are strained, causing service disruptions.
Reputational Damage: ISPs gain a reputation as untrustworthy, losing business from informed customers.
The negligence of South African ISPs based on the RADAR data such as Vodacom, Hero, Afrihost, Cool Ideas, Vox, Dimension Data, Infogro and MTN has persisted for far too long. Allowing dirty traffic to attack peers is a sign of mismanagement and a lack of technical foresight. The fact that this has continued unchecked suggests systemic issues:
Lack of investment in modern mitigation tools.
Inadequate network monitoring to detect and stop malicious activity.
A reactive approach to network management instead of proactive safeguards.
For customers on these networks, itâs a wake-up call. Is your ISP providing a robust, secure serviceâor is it running a Mickey Mouse operation that prioritises cost-cutting over competence?
If your ISP is allowing malicious traffic to originate from its network, here are the critical questions to ask:
What monitoring tools are in place to detect malicious activity?
Are mitigation techniques like SAV and advanced firewalls being used?
How often is customer equipment audited and updated for vulnerabilities?
What steps is the ISP taking to cooperate with peers and ensure stability?
If your ISP canât provide clear answers, it may be time to reconsider whether they deserve your business.
ISPs have a duty not just to their customers but to the internet as a whole. By failing to control dirty traffic, they jeopardise the stability of the entire ecosystem. Itâs time for South African ISPs to step up, invest in proper safeguards, and clean up their networks.
The internet works best when everyone plays their part. Bad neighbours arenât just hurting their peersâtheyâre hurting themselves and their customers. If your ISP is one of them, itâs time to demand better.
Further reading about why Vodacom is so dirty: