ENES

Anycast

One IP address announced from many places, so each user reaches the nearest one.

Three servers in São Paulo, Madrid and Tokyo all announce the same address 1.1.1.1; users in Buenos Aires, Lisbon and Seoul are each routed to the nearest one

Normally an IP address belongs to one machine in one place (unicast). With anycast, the same address is announced from many locations at once: São Paulo, Madrid, Tokyo, dozens more. Each of those sites tells its neighbors through BGP "I can deliver to 1.1.1.1", and every router on the internet simply picks the best route it knows. The result is that a user in Buenos Aires lands on the São Paulo servers and a user in Lisbon on the Madrid ones, without either of them doing anything special.

This is how the DNS root servers survive: the 13 root "letters" are served from well over a thousand anycast sites worldwide. Public resolvers like Cloudflare's 1.1.1.1 and Google's 8.8.8.8 work the same way, and so do many CDN networks. Anycast also spreads a DDoS attack across every location instead of concentrating it on one, so each site absorbs only its local share; and if a site goes down, it stops announcing the route and traffic flows to the next closest one within seconds or minutes.

The catches come from the fact that BGP picks routes by policy and path length, not by real distance or load. A user can be sent to a farther site because of how their provider peers, and route changes in the middle of a session can move a client to a different location. That is harmless for short exchanges like DNS over UDP, but long TCP connections may break if they switch servers mid-way, so operators keep state minimal, share it between sites or use anycast only to pick an entry point and then hand off.

Keep in mind

Go deeper

Related terms

More in Networks