Banner image

Network Operations

Latest articles

v6 neighbours

Closing the IPv6 First-Packet Gap with GRAND

Author image
Seyed Pouria Mousavizadeh Tehrani

11 min read

There is a subtle asymmetry in IPv6 Neighbour Discovery: a host knows how to reach its router before the router necessarily knows how to reach the host. GRAND fixes that asymmetry by making the host proactively advertise its address, and I implemented that mechanism in FreeBSD.

Article tags:

15 Please read the article before liking.
0
IRR3

The IRR Landscape: What RPKI Can Replace

Author image
Matthias Wichtlhuber

21 min read

In the third part of our IRR landscape series, we use traffic measurements from AMS-IX and DE-CIX to assess which parts of the IRR landscape can safely be replaced with RPKI. Third-party ROUTE(6) objects can largely be phased out, while third-party AS-SETs remain essential for BGP filter generation.

Article tags:

44 Please read the article before liking.
0
DNS Abuse and Criminal Infrastructure - Beyond Definitions and Blocklists

DNS Abuse and Criminal Infrastructure: Beyond Definitions and Blocklists

Author image
Andrew Campling

8 min read

Evidence suggests that criminals may control a substantial share of new gTLD registrations. Although the precise scale remains contested, the article asks whether current DNS Abuse measures adequately address wider misuse of domain names.

Article tags:

14 Please read the article before liking.
1
Deploying IPv6-first EKS

Deploying IPv6-first EKS on AWS: What Still Doesn't Work, and What It Saves

Author image
Spiro Stathakis

11 min read

In this field report on IPv6-first Amazon Elastic Kubernetes Service (EKS), the isp6 team shares which dependencies still drag IPv4 back in, what they learnt from /28s, and why the saving is large but not automatic.

Article tags:

22 Please read the article before liking.
0

All articles

Multiple LIRs cover image

Multiple LIR Accounts: Looking Back and Thinking Ahead

Author image
Marco Schmidt

13 min read

Why a feature introduced for a handful of members became one of the RIPE NCC's most complex operational challenges.

Article tags:

66 Please read the article before liking.
1
email

Two Providers, a Stubborn Plateau and a Very Long Tail: Email in the Tranco Top-1M

Author image
Artem Berezin

7 min read

Ten years of DNS measurements reveal three trends across the Internet's most popular domains: email continues to consolidate around two providers, DMARC enforcement has hit a plateau, and a surprisingly large long tail of infrastructure defies easy classification.

Article tags:

152 Please read the article before liking.
4
ARP retirement cake

What's ARP Got to Do with It?

Author image
Remco van Mook

9 min read

It's only ARP. It works. So how much can it really matter? The answer lies beyond ARP itself, in the IPv4 layer cake that grew around it over four decades. The IPv4 internet is not going away in bounded time, and nobody should pretend otherwise.

Article tags:

62 Please read the article before liking.
6
Bangladesh outage

Inside a Shutdown: BGP Evidence from an Operator Who Was There

Author image
Md.Kamruzzaman Khan

18 min read

When Bangladesh vanished from the global routing table in July 2024, public routing data captured the event as it unfolded. Drawing on first-hand observations from inside one affected network, this article explores what that data can and cannot tell us.

Article tags:

30 Please read the article before liking.
4
four missing pieces

Beyond Origin Validation: Four Classes of Routing Attack Nobody Is Validating

Author image
Antonio Prado

8 min read

RPKI has made real progress against prefix hijacking. But when you map every known class of BGP attack against the defences that exist, four of them turn out to sit entirely outside cryptographic validation: handled with local filters, static thresholds and reactive response.

Article tags:

137 Please read the article before liking.
1
tiny rpki servers

Who's Running All Those Tiny RPKI Servers?

Author image
Ties Dirksen

18 min read

Who runs the hidden infrastructure behind secure Internet routing? An internship report from SIDN Labs looks beyond the RIRs at the independently operated RPKI publication servers helping to secure BGP.

Article tags:

30 Please read the article before liking.
1

Showing 978 article(s)

Previous
1 2 3 ... 98
Next