Increasing RPKI at a national level
A national RPKI awareness and deployment project being carried out in Colombia has so far increased the economy’s RPKI deployment to over 46%.
Search blog
Results for "IETF 100"
Hiding the DNS
A more detailed look at the efforts to hide the DNS behind HTTPS.
DDoS and the DNS
We don’t have to accept that the DNS has to be a victim of DDoS attacks.
Google fixes Public DNS Service
Google has fixed an IPv6 fragmentation handling problem in their Public DNS Service.
BGP Router ID structuring in IPv6 native networks
Guest Post: How to design and structure BGP Router IDs in IPv6-native networks.
Discovery of IPv6 router addresses using Subnet-Router Anycast addresses
Guest Post: Identifying active IPv6 addresses helps assess deployment, reveal gaps, and detect vulnerable devices. Subnet-Router Anycast (SRA) probing removes the need for prior knowledge of address allocation.
[Podcast] The Erik protocol: Improving RPKI data fetch
Job Snijders discusses the new ‘Erik’ protocol for faster RPKI repository synchronization.
RADIUS isn’t going away, so let’s fix it properly
Guest Post: “RADIUS is the protocol that will never die”. So given that RADIUS is staying, what do we need to do to make it secure for the next 30 years?
Ephemeral leaks and automated BGP route leak detection
Guest Post: Many BGP route leaks flagged by automated systems are short-lived artifacts of normal convergence. Doug Madory draws on Cloudflare Radar, RouteViews, and Jared Mauch’s leak detector to show how these ‘ephemeral leaks’ occur, why they rarely disrupt traffic, and why they still matter for routing security.
[Podcast] CIDR inside
Geoff Huston discusses the CIDR Report, a 30-year-long series of data about who is sending excess data in BGP. Does the CIDR Report still hold value?