DNS-over-TCP considered vulnerable
Guest Post: There are several ways attackers can force TCP to fragment for inclusion in IP fragmentation attacks.
Tag: TCP
The relevance of heavy hitters and the rise of big-fast flows
Guest Post: Eleven-year study characterizes the rise of heavy hitters and big-fast TCP flows.
What’s ‘interop testing’ and why is it so tricky?
What happens when two people correctly read the same RFC yet their implementations of that protocol still differ?
More notes from IETF 111
Geoff Huston discusses currently active IETF areas that are not DNS related.
It’s time to replace MD5 with TCP-AO
Guest Post: Secure your routers and upgrade to TCP Authentication Option.
TCP Fast Open? Not so fast!
Guest Post: As TCP becomes more important to DNS, overhead is becoming an issue.
Are large DNS messages falling to bits?
Guest Post: How much of a problem are large DNS responses over UDP, in the wild?
Programmatically analyse packet captures with GoPacket
Guest Post: How to build a Golang custom packet processor using the GoPacket library to passively watch API traffic.
Transport protocols and the network
Encrypted transport headers, transport protocol meddling, and content vs carriage.
Anycast performance monitoring with Anteater
Guest Post: The open-source DNS tool Anteater allows real time monitoring of operator infrastructure, using their own traffic.