[Podcast] Measuring the impact of locally served root zone
An analysis of the traffic impacts of locally served root zones, by Ilyas Rahimi at UvA.
An analysis of the traffic impacts of locally served root zones, by Ilyas Rahimi at UvA.
Beeline: Enforcing application-layer policies in eBPF
Guest Post: While many L7 protocols are complex to parse, the logic needed to enforce L7 policies tends to be simple. For the vast majority (89%) of L7 policies in the wild, Beeline can eliminate the service proxy from the critical path.
Recommended Draft RIR Governance Document, Rationale report, and next steps
The NRO NC has published the Recommended Draft RIR Governance Document, including a redline version and rationale document.
The invisible heartbeat of our networks
Guest Post: The recent Telstra outage highlighted a critical but often overlooked dependency in modern networks: Accurate time synchronization.
The day after the zero-days
Guest Post: Patching faster cannot keep up with AI-driven discovery. Leverage structural invariants to make bug classes irrelevant.
The lingering legacy of ‘reserved’ ports
Modern service discovery mechanisms increasingly allow services to run on arbitrary ports, yet DNS may remain the one protocol that cannot fully escape its dependency on the long-established convention of port 53.
Online voting for NRO NC election 2026 opens today
Cast your vote for the seat open for election on the NRO NC. All voting closes on Thursday, 10 September 2026 at 14:30 (UTC +5:30).
EC Chair’s Preview: September EC Meeting and APNIC 62
Get an overview of the topics the EC are considering ahead of the September meeting at APNIC 62.
The emerging role of AI in governance discussion
A growing debate within the IETF is exploring how AI-generated content should be used and disclosed in standards discussions.
Beyond origin validation: Four classes of routing attack nobody Is validating
Guest Post: RPKI has made real progress against prefix hijacking. But when you map every known class of BGP attack against the defences that exist, four of them turn out to sit entirely outside cryptographic validation — handled with local filters, static thresholds and reactive response.