Technology and Innovation

How Centralised is DNS Traffic Becoming?

Giovane Moura

• 24 Nov 2020

• 14 min read

There have been growing concerns over the last few years about the excessive concentration of control over the Internet's markets and infrastructure — what is commonly referred to as Internet centralisation. In this article, Giovane Moura talks about how he and his colleagues have been measuring ce…

15

0

Inferring the Deployment of Inbound Source Address Validation Using DNS Resolvers

Yevheniya Nosyk

• 29 Oct 2020

• 6 min read

Source Address Validation (SAV) is the best current practice (BCP 38/RFC 2827) aimed at filtering packets based on source IP addresses at the network edge. In this article, we show how to identify networks that do not deploy SAV for incoming traffic.

0

1

Journeying into XDP Part 1: Augmenting DNS

Tom Carpay

• 23 Oct 2020

• 16 min read

In this post, we at NLnet Labs look at how eXpress Data Path (XDP) can augment existing DNS software. We share our experiences of implementing Response Rate Limiting in XDP.

dns
research

2

0

The Lockdown Effect - Implications of the COVID-19 Pandemic on Internet Traffic

Oliver Gasser

• 21 Oct 2020

• 10 min read

Oliver Gasser and his colleagues have been investigating the impact of COVID-19 on Internet traffic as seen from a variety of vantage points. Here's an overview of their findings.

0

RIPE NCC Internet Country Report: Central Asia

Suzanne Taylor

• 22 Sep 2020

• 3 min read

We examine the Internet landscape in five different countries in Central Asia as the next in our series of RIPE NCC Internet Country Reports.

bgp
ris
dns
ipv6
ipv4
atlas
+9
+7

0

Overcoming the Limitations of UDP Options

Raffaele Zullo

• 10 Sep 2020

• 6 min read

A recent extension that aims to add support for transport options to the User Datagram Protocol (UDP) is already showing promise. Unfortunately, its deployment may be undermined by the way existing network devices process UDP length and checksum. In this post we at the Electronics Research Group,…

research

0

Measuring QoE by Measuring TCP Connection Establishment Delay in a Service Provider Network

Ali Norouzi

• 27 Aug 2020

• 6 min read

I’ve created a traffic analyser to help network engineers detect issues related to quality of experience.

research

7

0

Limiting the Power of RPKI Authorities

Kris Shrishak

• 27 Aug 2020

• 5 min read

In the beginning, Internet infrastructure was not originally designed with security in mind. Luckily, this mindset has changed over the years, mainly due to the growing number of attacks, and has prompted the design of security measures such as Domain Name System Security Extensions (DNSSEC) and Re…

0

DDoS Hide & Seek: On the Effectiveness of a Booter Services Takedown

Daniel Kopp

• 24 Aug 2020

• 9 min read

In this article, we investigated booter-based DDoS attacks in the wild and the impact of an FBI takedown targeting fifteen booter websites in December 2018. We investigated and compared attack properties of multiple booter services by launching DDoS attacks against our own infrastructure. To unders…

2

0

IPv4 Transfer Markets Misuse: A First Look

Vasileios Giotsas

• 14 Aug 2020

• 7 min read

The secondary IP address market has become a viable source of IPv4 address space, but it may also present opportunities to malicious networks to bypass reputation-based security mechanisms. In this article we summarise the results of our first detailed study of how transferred IPv4 prefixes are mis…

11

1

Technology and Innovation

All articles

Share

Share

Share

Share

Share

Share

Share

Share

Share

Share