Stop spoofed traffic at the door: Destination-side SAV
Guest Post: Roughly half of all ASes fail to filter for spoofed traffic as it enters their network border. A new tool helps admins test their own network in real time.
Category:
Tech matters
Building your own Fibre-to-Premises Network: The ECFiber Story
Guest Post: George Sadowsky outlines how to build and operate a FTTH network when existing infrastructure, topography, and low population all work against the need for fast Internet.
RIPE’s RPKI Validator is being phased out, so what are the other options?
There are plenty of alternatives for RPKI validation.
New RDAP profile to improve cross-RIR consistency
The NRO recently registered an RDAP profile with IANA for the RIR community.
An analysis of a large-scale HTTPS interception
Guest Post: An investigation into an HTTPS interception attack using a custom root CA.
Towards verifying programmable switches at runtime with P6
Guest Post: Bugs can occur at any stage in the P4 pipeline. Static analysis can be hit and miss — so researchers developed P6.
Notes from DNS-OARC 34
Geoff Huston shares his thoughts from the recent DNS-OARC 34.
DoH the right thing
Opinion: The NSA recently issued some advice on DoH. It wasn’t necessarily bad advice, but it was not well received.
How To: Run Krill behind an NGINX reverse proxy
Guest Post: Krill has a built-in HTTPS server but you can also run a production grade webserver as a reverse proxy for easy TLS configuration and additional restrictions.
IPv6 in 2020
Did the COVID-19 pandemic have any impact on the deployment and use of IPv6?