IXP updates#

Various

• Why: Bundled here for one genuinely valuable postmortem: the 12 May control-plane incident at MIX, plus a fleet-wide VPLS→EVPN-VXLAN migration at MINAP — operational lessons that transfer to any switching environment.
• What: Rapid updates from Italian IXPs. The MIX incident: a dormant bug that silently disabled control-plane filters combined with high ARP traffic (a /21 expansion plus scanning activity) and illicit traffic on the peering LAN drove switch CPU very high; ~25 hours on calls with the vendor; incident not formally closed; next actions are BGP parameter revision on the L3 network and restoring border-router redundancy. MINAP (3^rd Italian IXP by traffic, peak 625 Gbps): all POPs upgraded to 100GE, migrated from VPLS to EVPN-VXLAN, sFlow implemented for members, OpenBGPD route server planned. TOP-IX/VSIX/GE-DIX: federation work, ISO 27001/14001, PMACCT-based stats, a GPU-accelerated biomedical data project, and a university "digital twin" test environment for an IXP.
• How: The incident mechanism (control-plane filtering silently lost + ARP amplification on a large broadcast domain) is the transferable part — as is the remediation sequence (BGP/L3 parameter review, border redundancy) and the decision to publish the timeline.
• Where applicable: Any L2 peering fabric and IXP operator; the EVPN-VXLAN migration mirrors the "EVPN outside the DC" talk above. Presentation is in Italian.