Tag
作者介绍了 RFC8950,该标准允许在 IPv6 网络上以 IPv6 下一跳通告 IPv4 路由(无需隧道),使骨干网可以仅运行 IPv6 而将 IPv4 作为边缘可选功能,并给出了基于 FRR 和 Containerlab 的实验演示。
RPKI-validated routes rose from 54% to over 70% of global internet routes in a year, driven largely by China's jump to 83% IPv4 coverage. Analysis shows invalid routes now barely propagate, reaching only about two BGP vantage points on average, confirming RPKI effectively blocks hijacks and misorigination.
SATIS Shield is a BGP-based blackholing service (AS23026) that lets single-router networks drop attack traffic upstream using shared threat intelligence, requiring only a private ASN and a GRE/WireGuard tunnel, priced at $59/month.
The team at goonhost.rocks implemented the IPv8 Internet-Draft across the Linux kernel, Musl libc, iproute2, FRRouting, and a Go zone server, then deployed it on a 10-node multi-AS testbed with 112k+ routes. It works in isolated lab conditions but breaks in real-world scenarios.
Cloudflare's investigation reveals that about 70% of observed BGP paths have a manipulated ORIGIN attribute, significantly impacting Internet traffic routing decisions.
This article explains how to use the Hurricane Electric BGP tool to find domains bound to neighbor IP segments, and filter those supporting TLS 1.3 and 1.2 for use as reality disguise domains, adapting traffic type based on site content (text-only or media).
The APNIC Blog investigates the operators of small RPKI publication servers, analyzing their characteristics and role in the global RPKI infrastructure.
A comprehensive beginner's guide to obtaining and configuring your own ASN and IP addresses, covering BGP setup, costs, and limitations.
A network engineer provides a free service offering full BGP feeds for IPv4 and IPv6, intended for lab use, with detailed configuration examples for Cisco IOS and IOS XR.
This article describes how Akvorado, a network flow analysis tool, scales its BMP Routing Information Base (RIB) by implementing sharding to handle tens of millions of routes, improving concurrent updates performance.
The author builds a personal Content Delivery Network (CDN) distributed across three servers worldwide by owning their own Autonomous System (AS) and using BGP anycast along with DNS, in order to optimize user connection latency. The article explains in detail the working principles of BGP anycast and traffic engineering methods.