Forward to Hell? On Misusing Transparent DNS Forwarders For Amplification Attacks

Maynard Koch — 12 Feb 2026

Based in Dresden, Germany

10 min read

12 Feb 2026

DNS infrastructure is infamous for facilitating reflective amplification attacks. Countermeasures such as server shielding, access control, rate limiting and protocol restrictions have improved the situation, but DNS-based reflective amplification attacks persist. Focusing on the threat vector intr…

Read article

View all

Latest articles

How Global Digital Cooperation Entered Its Implementation Phase

Desiree Miloshevic

• 16 Feb 2026

• 12 min read

With WSIS+20 concluded and the Global Digital Compact adopted, digital policy is moving into an implementation phase. This article traces what changed, what was delivered, and what comes next.

Peering Market at a Glance: Trends, Transformations, and the Regional Dynamics of Internet Interconnection

Flavio Luciani

• 10 Feb 2026

• 3 min read

Recent claims that IXPs "aren’t showing significant growth", that more interconnection is happening outside exchanges, and that peering can be more expensive than transit challenge long-standing assumptions about the role of IXPs. But do these claims hold up? A new paper from NAMEX explores the dat…

Internet Coordination in Times of War

Hisham Ibrahim

• 4 Feb 2026

• 4 min read

Periods of armed conflict often lead to renewed scrutiny of how the Internet functions and of the organisations involved in its coordination. In such moments, simplified or incorrect narratives that can frame technical coordination roles as political choices, or assign responsibilities to coordinat…

The RIPE Chair Team Reports - February 2026

Mirjam Kühne

• 3 Feb 2026

• 4 min read

As 2026 gets underway, the RIPE Chair Team shares updates on RIPE 92 preparations, active WG discussions, the new fellowship programme, governance document revisions, and key industry developments and events on the horizon.

DNSSEC and PQC: Practical Impact of Increased TCP in DNS

Eline Stehouwer

• 29 Jan 2026

• 17 min read

Post-quantum cryptography could make DNSSEC responses bigger, pushing more DNS traffic from UDP to TCP. In this guest post, Eline Stehouwer (SIDN Labs) explores what that means for authoritative name servers, replaying real .nl traffic across NSD, Knot, BIND and PowerDNS.

The IRR Landscape: Data Quality - the Good, the Bad, and the Outdated

Tobias Striffler

• 20 Jan 2026

• 21 min read

In the second of our IRR landscape series, we focus squarely on data quality: how accurate, current, and usable IRR routing data really is. Using freshness, DFZ alignment and RPKI conflicts, we spotlight where third-party IRRs drift and why cleanup matters.

KYC at the RIPE NCC: How We Keep Member Information Accurate

Gabor de Wit

• 19 Dec 2025

• 10 min read

Becoming a RIPE NCC member is straightforward, but keeping a trusted registry means doing careful checks behind the scenes. This article explains how we verify members at onboarding, monitor changes over time, and follow up on escalations.