The Internet Almost Died in 1997

On April 25, 1997, the internet almost ceased to exist. Not because of a cyberattack. Not because of a natural disaster. Because one person at a small Internet Service Provider in Florida made a configuration mistake.

The ISP was MAI Network Services, a mid-tier provider most people had never heard of. A technician there misconfigured a router, which then announced to the rest of the internet that it was the best path to reach every destination on the entire network. Every IP address. Every website. Every email server. All of it.

The internet believed it.

The way the internet routes data is built on trust. Routers use a protocol called BGP — Border Gateway Protocol — to tell each other which networks they can reach. Think of it like a postal system where every post office announces which addresses it can deliver to. When MAI's router said "send everything through me," other routers accepted that claim and updated their own routing tables. Those routers told their neighbours. Within minutes, a massive chunk of global internet traffic was trying to squeeze through a single small ISP in Florida.

The result was catastrophic. MAI's routers couldn't handle the load and collapsed. But because other routers had already updated their tables, traffic that should have gone elsewhere was now pointed at a dead end. Large portions of the internet went dark for roughly two hours. Email stopped. Websites vanished. Online services that businesses were just beginning to depend on simply ceased to function.

Here's what makes this story terrifying rather than just interesting: there was no central kill switch. No one could just press a button and undo the damage. The internet is a network of independent networks, and each one had to individually recognise the bad routes and filter them out. That meant human beings at ISPs around the world had to manually intervene, one network at a time.

The fundamental vulnerability that caused the 1997 outage still exists today. BGP still runs on trust. Any ISP can still announce bad routes, and the rest of the internet will still believe them. It has happened again and again — Pakistan accidentally took down YouTube globally in 2008 while trying to censor it domestically. A Russian telecom hijacked Google's traffic in 2017. In 2021, Facebook accidentally withdrew its own routes and vanished from the internet for six hours.

The network that was designed to survive nuclear war — ARPANET, the military precursor to the modern internet — was built to route around physical destruction. What its designers never anticipated was that the real threat wouldn't be bombs. It would be a technician in Florida having a bad day.

The internet's greatest vulnerability isn't sophisticated hackers. It's a typo.