• 8 min read
This article describes a newly discovered DNS protocol vulnerability that affects most recursive DNS resolvers. NXNSAttack allows the execution of random subdomain attacks using the DNS delegation mechanism, resulting in a big packet amplification factor.
Based in The Netherlands
Network Security Research Engineer at SIDN Labs, the research arm of SIDN, the .nl registry. I work on security and Internet measurement research projects. More
• 5 min read
DNS operators have very few intelligent real-time tools that enable them to monitor their anycast services, for instance during a DDoS attack. In this post, we describe the challenges associated with measuring anycast services and propose a tool called the BGP Tuner. By using our open-source tool, …
Suzanne Taylor is a Public Policy & Internet Governance Consultant. In her work with the RIPE NCC, she has engaged with a broad range of Internet stakeholders including the RIPE NCC membership, governments, law enforcement and intergovernmental organisations. From 2012 to 2016, she worked in communications at the RIPE NCC … More
• 11 min read
This is the fourth in an ongoing series in which we give a brief overview of the most pertinent digital policies currently being proposed, debated and implemented in the European Union.
I am the Chief Technology Officer (CTO) of the RIPE NCC, overseeing IT engineering, DNS, Internet measurement services—including RIPEstat, RIS and Atlas—and software development, which encompasses the RIPE Database, LIR Portal, and RPKI. I joined the RIPE NCC in 2012 as a Software Engineer and have since held various roles … More
• 8 min read
With RPKI experiencing a huge growth in its deployment and becoming a key part in the operations of the Internet, we have been investing a significant amount of resources in making its infrastructure resilient, secure, and highly available. Recent outages have raised concerns about the maturity lev…
Network architect, consultant, trainer, designer, engineer, administrator, programmer, technical writer ... been there, done (all of) that! And still having fun ... More
• 4 min read
In less than two years from now, the number of IPv4 prefixes in the global BGP routing table will hit the one million figure. Should you be worried? Most probably not, but better safe than sorry.
Based in Amsterdam
Nathalie was the Routing Security Programme Manager at RIPE NCC until 2023. She is chair of NLNOG. More
• 8 min read
“It's fine to celebrate success but it is more important to heed the lessons of failure.” (Bill Gates)
Based in Amsterdam, The Netherlands
I wrote the articles collected here during my time as community builder of the RIPE NCC and the maintainer and editor of RIPE Labs. I have since taken on a new role serving as the Chair of the RIPE Community. You can reach my new profile via the website link … More
• 8 min read
"For well over a decade I have been concerned about the blind trust that exists in the technical world." Merike Kaeo, a global expert in information security, explains why and what we should do about it.
DNS researcher at BII | 天地互连 (the Beijing Internet Institute) More
• 5 min read
The RIPE DNS working group will be holding online sessions every few weeks. We have already had the first session, a talk from Kim Davies at PTI/ICANN about some of the challenges of DNSSEC KSK management for the root zone. This session went very well, and we are looking forward to many more in the…
Based in Amsterdam
At the time of writing articles listed here, Massimo Candela was Senior Software Engineer with R&D at the RIPE NCC, working mainly on developing web applications that provide a visual and interactive representation of large amounts of network data. Tools he played a key role in developing are go-to resources … More
• 9 min read
This is a brief tutorial that explains how to monitor BGP prefixes easily and effectively. For this purpose, we will use an open-source application named BGPalerter which is ready to go and requires almost no configuration. Currently, we use this solution at NTT, one of the largest global providers…
Based in Amsterdam, The Netherlands
I wrote the articles collected here during my time as community builder of the RIPE NCC and the maintainer and editor of RIPE Labs. I have since taken on a new role serving as the Chair of the RIPE Community. You can reach my new profile via the website link … More
• 7 min read
"Business is one of the most effective forms of activism. Business is one of the most expressive forms of art." Melanie Rieback, CEO and Co-founder of Radically Open Security, the world’s first not-for-profit computer security consultancy company, explains what she means by this and why post-growth…
