An internet diversion that rerouted data traffic through Russia and China disrupted several Google services on Monday, including search and cloud-hosting services.
Service interruptions lasted for nearly two hours and ended about 5:30 pm EST, network service companies said. In addition to Russian and Chinese telecommunications firms, a Nigerian internet provider was also involved. Google confirmed Monday’s disruption on a network status page but said only that it believed the cause was “external to Google”. The firm had little additional comment.
The specific method employed, formally known as border gateway protocol hijacking, can knock essential services offline and facilitate espionage and financial theft. Most network traffic to Google services – 94% as of October 27 – is encrypted, which shields it from prying eyes even if diverted.
Alex Henthorn-Iwane, an executive at the network-intelligence company ThousandEyes, called Monday’s incident the worst affecting Google that his company has seen. He said he suspected nation-state involvement because the traffic was effectively landing at state-run China Telecom. A study by US Naval War College and Tel Aviv University scholars says China systematically hijacks and diverts US internet traffic.
Much of the internet’s underpinnings are built on trust, a relic of the good intentions its designers assumed of users. One consequence: Little can be done if a nation-state or someone with access to a major internet provider decides to reroute traffic.