2020–2022
1,193 posts
2022 412
December 2022
- Three of the best: Development
- Three of the best: Geoff Huston
- Three of the best: IPv6
- Three of the best: Measurement
- Three of the best: Guest Posts
- Is WebAuthn worth the investment?
- OMNI interface MTU assurance and IP Parcels
- [Podcast] Journeying into XDP: Cardinality and Keys
- Event Wrap: Viet Nam Internet Day 2022
- Event Wrap: 38th TWNIC OPM
- Maintaining APNIC EC election integrity
- RPKI in APNIC’s network: A case study
- Event Wrap: BtCIRT Cybersecurity Bootcamp
- Event Wrap: IGF 2022
- (Discussions in the IETF on) reconsidering multicast
- Event Wrap: IDNIC AMM 2022
- Event Wrap: KHNOG 4
- Be careful with that ping, FreeBSD
- Opinion: Is secured routing a market failure?
- Why kids need to be involved in Internet governance discussions
- Monitoring, awareness, and community at the centre of NTT’s RPKI deployment
- IPv6 extension headers in routing security
- Event Wrap: LkNOG 6
- IP fragmentation and the DNS — mitigation
- Mentorships, fellowships and the road to professional success
- APNIC fee schedule increase for all Account Holders from 1 January 2023
- Maldives IXP — A deployment story
- New alert options for DASH
- Securing NTP against MITM attacks
- Event Wrap: ICANN DNS Symposium 2022
- Enabling passive measurement of Zoom performance in production networks
- [Podcast] The most important work in the Internet?
- Event Wrap: Pacific Telecommunications Security Expert Forum (PTSEF)
- Event Wrap: BIGF 2022
- DNS at IGF 2022
- How does Starlink compare to broadband?
- On the 49th anniversary of documenting TCP/IP
- Event Wrap: Peering Asia 4.0
- EC Response to 2022 APNIC Survey published
- Improving SSH’s security with SSHFP DNS records
- Event Wrap: IETF 115
- Event Wrap: Samoa IT Association (SITA) Tech Expo
- Event Wrap: UMS Cybersecurity Awareness Seminar 2022
- Random notes from IETF 115
November 2022
- HTTP/3 and QUIC — prioritization and head-of-line blocking
- ISACs’ possible role in software supply chain assurance
- Fact checking Starlink’s performance figures
- Event Wrap: Indonesia Academic CSIRT Conference
- Event Wrap: mnNOG 4
- Event Wrap: NetThing 2022
- IXP Scrubber: Learning from blackholing traffic for ML-driven DDoS detection at scale
- Inaugural ISIF Asia IPv6 Deployment grant recipients announced
- Yes, de-aggregation can be bad. No, it’s not ‘game over’
- [Podcast] COLIBRI: Brokering bandwidth across the path in SCION
- Event Wrap: RIPE 85
- Congestion control algorithms are not fair
- Looking at centrality in the DNS
- Deploying IPv6-mostly access networks
- Event Wrap: DNS-OARC 39
- Service exhaustion floods — HTTP/HTTPS flood, HTTP pipelining, and SSL renegotiation DDoS attack
- What you need to know about migrating to the cloud
- Event Wrap: HKNOG 11.0
- When it comes to IPv6, we need to be promoting location, location, location
- The fibre optic path
- Extended DNS error support for Unbound
- Continuous in-network round-trip time monitoring
- Event Wrap: btNOG 9
- Journeying through tunnels: The story behind award-winning satellite link research
- [Podcast] Whither RPKI?
- Why protocol specifications don’t always work
- A few more of my favourite things about the OpenBSD Packet Filter tools
- System administration work during the COVID-19 lockdown: Insights and practical recommendations
- What can be learned from BGP hijacks targeting cryptocurrency services?
- Opinion: Going dark
- Comparing TCP and QUIC
- A few of my favourite things about the OpenBSD Packet Filter tools
October 2022
- Reducing the control loop in congestion control
- Event Wrap: VNIX-NOG 2022
- Software assurance: Approaching allowlisting for code
- Browser-powered desync attacks: A new frontier in HTTP request smuggling
- Event Wrap: PacSON 2022
- Getting serious about the Internet and energy
- [Podcast] Your network is more ready than you think for the quantum Internet
- Notes from DNS-OARC 39
- APrIGF 2022: Inclusion of persons with disabilities in the ICT job sector
- ACC-Turbo mitigates pulse-wave DDoS attacks using programmable switches
- Introducing Orbit
- Using TLS for active server fingerprinting
- Is it possible for encryption to harm cybersecurity?
- Event Wrap: inSIG 2022
- Management interfaces — attack surface hidden in plain sight
- Log4Shell through the scope of a reactive network telescope
- Formally verifying protocols from textual specifications
- APRICOT 2023 Call for Papers now open
- A new DDoS attack vector: TCP Middlebox Reflection
- Multivendor (async) gRPC dial-out collector
- Upcoming changes to MyAPNIC
- Status of RPKI in Australia and New Zealand
- IPv6 extension headers revisited
- [Podcast] Be careful what you wish for
- Taurus: A data plane architecture for per-packet machine learning
- APNIC 54 election analysis completed
- Predicting IPv4 services across all ports
- Apply now for an APRICOT 2023 Fellowship
- Event Wrap: MyNOG 9
- The 2022 National Internet Segment Reliability Research
- Dealing with the undercurrent of unwanted traffic
- Opinion: Walking the policy tightrope
- A complex network analysis of global Internet public peering
- KINDNS initiative to improve mutual understanding and security of DNS among operators
- Why are 5G and Wi-Fi underdelivering on performance in the wild: A China perspective
- Routing security in Singapore
- Threat Integration: Lessons of indicator and incident exchange
September 2022
- DNS evolution: Innovation or fragmentation?
- Interdomain BGP policies — do not transit
- IP fragmentation and the DNS — Vulnerable DNS servers
- [Podcast] Taking a systems approach to developing new protocols
- The elephant effect
- Event Wrap: AusNOG 2022
- Event Wrap: Global Digital Dialogue 2022
- Address space fragmentation
- Interdomain BGP policies — where traffic should enter a network
- Interdomain BGP policies — where traffic should exit a network
- Underload: The future of congestion control
- Event Wrap: ITCN Expo 2022
- Event Wrap: APAN 54
- PeeringDB 2022 user survey
- IP fragmentation and the DNS — the state of IP fragmentation
- Let go of traditional strategies when it comes to IPv6 address planning
- Can the IETF standardize in human rights?
- APNIC 54: Thank you and farewell
- Singapore’s father of IDNs
- [Podcast] Can technology curb centralization in the Internet?
- The future is still IPv6
- Where did my packet go? Measuring the impact of RPKI ROV
- 2022 APNIC Survey report released
- APNIC 54 starts today!
- Clustering network attacks using medium-interaction honeypots
- A short history of Singapore’s role in the cable world
- Sender pays
- How APNIC is implementing your feedback
- Under the hood of DANE mismanagement in SMTP
- NUSNET’s IoT and 5G enabling a borderless university
- A second look at QUIC use
- APRICOT returns face-to-face in Manila
- Networking Wireless@SG
- The rise and rise of SGIX
- SGSeries: Singapore at a glance
- Internet Edge IP SLA deep dive
- Event Wrap: PacNOG 30
- Four policy proposals up for community discussion at APNIC 54
- DoH, DoT, and plain old DNS
- Help secure global routing at APNIC 54
- Online voting for the NRO NC election 2022 opens today
August 2022
- Measuring hyper-specific prefixes in the wild
- [Podcast] Rethinking how we measure video performance
- Get involved at APrIGF 2022
- The DNS and Internet fragmentation
- Boost cooperation between technical and non-technical disciplines at APNIC 54
- It’s time to reconsider selective FEC with high-priority resources in HTTP/3
- IPv6 celebrates its 5th anniversary as an Internet Standard
- Event Wrap: DNS-OARC 38
- Tackling DNS abuse through education, collaboration and innovation
- Stay informed about resource allocations and more at APNIC 54
- The state of IPv6 ten years after World IPv6 Launch
- Event Wrap: IDNOG 7
- Semantic Networking discussions at the IETF
- Affect real change at the APNIC 54 OPM
- Analyzing MPTCP adoption in the Internet
- DNSSEC validation: Performance killer?
- UDP-based amplification — the dangerous DDoS attack vector
- One in eight DNS A queries, two in three AAAA fail in the wild
- [Podcast] DNS spoofing is a non-issue if we all do DNSSEC
- TLS 1.3: A story of experimentation and centralization
- PKIX launches third IXP
- Shadowserver now scanning IPv6
- The future of automated incident response
- Event Wrap: PhNOG 2022
- Realizing transport-layer slicing using segment routing
- The HTTPS record passes a key milestone
- APNIC Helpdesk’s five most asked questions
- Strength together > weakness apart
- Notes from IETF 114
- Incident response lessons from FIRSTCON22
- Bigger, faster, better
- Notes from DNS-OARC 38
- [Podcast] QUIC, and not so complex
- Event Wrap: SANOG 38/npNOG 6
- Measuring the practical effect of DNS root server instances: A China-wide case study
- Making CSIRTs even better
July 2022
- What are symmetric and asymmetric IP routing
- Addressing the challenges of modern DNS
- Four million views… and counting!
- Security by diversity: Designing secure, reliable and robust systems
- Behind the network that images the whole world every day
- Governance in the public cloud
- Event Wrap: bdNOG 14
- Router security in 2021
- What if Certificate Transparency carried the same burdens as OCSP and CRLs?
- Event Wrap: VNNIC Internet Conference 2022
- Why the NRO is defending AFRINIC
- New dashboard tracks Indian IXP community activity
- [Podcast] Making the Internet QUICer
- Industry, popularity effect if customers leave cloud providers following a DDoS attack outage
- 13 propositions on an Internet for a burning world (12-13)
- Making security simpler for organizations big and small
- 13 propositions on an Internet for a burning world (9-11)
- “For Want of a Nail” is strong in your login
- Women in ICT: Internet governance
- The NIR structure: Annual fees and voting entitlement
- Journeying into XDP: XDPerimenting with DNS telemetry
- AERO/OMNI/DTN routing and route optimization
- A look at QUIC use
- Unpacking zero-knowledge middleboxes
- 13 propositions on an Internet for a burning world (5-8)
- [Podcast] Taking a clean slate to designing the Internet of the future
- MARIIX improves local Internet for growing Pacific hub
- 13 propositions on an Internet for a burning world (1-4)
- Unpacking RFC 9199: Considerations for large authoritative server operators
June 2022
- How I set up my own Autonomous System
- Event Wrap: Indonesia MCIT webinar on 5G, IoT, and IPv6
- Investigating DNS abuse in Japan
- Free Range Routing
- Event Wrap: CommunicAsia 2022
- What is ‘working latency’?
- Routing status added to DASH
- Event Wrap: Africa Internet Summit 2022
- Is zero trust living up to expectations?
- Ferret: Automatically finding RFC compliance bugs in DNS nameservers
- [Podcast] Why the saga of IPv6 may never end
- Event Wrap: PITA Business Forum & Exposition 2022
- Surviving the flood — how data centres and the Internet must face climate change
- Event Wrap: BPF 2022
- AERO, OMNI and DTN: An internetworking architecture for mobility
- Know thy lag: In-network gameplay detection and latency monitoring
- A Message to the AFRINIC Community from the RIRs
- An introduction to IRR explorer
- OpenLI: An open-source alternative for meeting Lawful Interception requirements
- Register now for APNIC 54, APrIGF 2022 and APSIG 2022, Singapore
- Content vs carriage — who pays?
- Stalloris: RPKI downgrade attack
- Event Wrap: NZNOG 2022
- DNS abuse trends
- Take the 2022 APNIC Survey
- Google and subsea fibre
- Event Wrap: INTERPOL Cybercrime Conference for LEAs and Judicial Authorities
- Event Wrap: RIPE 84
- 100Gbps of CERN data over IPv6 on the Janet network
- How IoT devices can endanger your IPv6 privacy
- [Podcast] Leave your preconceptions at the door: Challenges and opportunities for the Internet routing system
- SLTMobitel Mobile targets 100% IPv6 mobile user capability by 2024
- Nominations now open for NRO NC Election 2022
- IPv6: Connecting the next 40%
- RFC 9099 — Operational security considerations for IPv6 networks
- Event Wrap: 3rd ICANN APAC-TWNIC Engagement Forum
- Event Wrap: APEC TEL 64
- IPv6: What’s changed in five years?
- How does IPTV work?
- Suspicious traffic alerts released to DASH
- The politics of submarine cables in the Pacific
- More mysterious DNS root query traffic from a large cloud/DNS operator
- Event Wrap: AusCERT 2022
May 2022
- Running Krill under APNIC
- Cutting down on IP address waste
- Event Wrap: INNOG 5
- Wireshark’s little known Snort post-dissector
- Making a Krill sandbox
- Register now for the Network and Information Security Workshop, Singapore
- [Podcast] Why a resolverless DNS makes sense
- BNG Blaster – The open network tester for the IP networking community
- Monitoring customer networks using a Raspberry Pi
- APNIC 54 Call for Papers open now
- TCPLS: Modern Transport Services with TCP and TLS
- Running Docker / Alpine Linux in an IPv6-only environment
- IXP seeks to sustainably lower the cost of Internet in Afghanistan
- Register now for Network Management and Monitoring Workshop, Bangkok
- Bypassing CDN WAFs with alternate domain routing
- Event Wrap: YIGF Nepal 2022
- OMNI and the 6M’s of modern internetworking
- Event Wrap: ARIN 49
- The path to resolverless DNS
- ULA is broken (in dual-stack networks)
- [Podcast] Do government networks have a role to play in deploying RPKI?
- Open DNS resolvers, from bad to worse
- John Gilmore on ARP, RARP, BOOTP, DHCP, and Sun
- Vale Frank March 1944-2022
- Reducing bias of networking A/B tests
- Event Wrap: AusNOG 2021
- Using ccTLD data to study the impact of local IXPs
- The future (and history) of IPSec
- ditto prevents traffic-analysis attacks in WANs
- Public cloud and technical culture
- The transition to IPv6: Are we there yet?
- How NAT traversal works — Concerning CGNATs
- Testing LEO and GEO satellite services in Australia
April 2022
- Shedding light on power plant control networks
- Tracing the DDoS attack ecosystem from the Internet core
- How effective is HTTPS/TLS usage in the consumer IoT ecosystem?
- How NAT traversal works — NAT notes for nerds
- Testing, awareness key to realizing IPv6 single-stack at NTT DOCOMO
- Hop-by-hop extension headers
- The Hijackers Guide to the Galaxy: Off-path taking over Internet resources
- Rethinking submarine fibre cable projects in the South Pacific
- Event Wrap: 20th ITCN Asia and Telecom Conference and Expo
- Event Wrap: APAC DNS Forum
- Event Wrap: MMIX AGM 2022
- Event Wrap: IETF 113
- How NAT traversal works — The nature of NATs
- Zero trust applied to 5G cloud infrastructure
- Can we provide SLOs in an open Internet in a scalable manner?
- Creating an Extensible Internet
- An update on the historical resources transition
- OMNI: Integrity, efficiency and security
- Event Wrap: PacSON Virtual Webinar
- How NAT traversal works — Figuring out firewalls
- Notes from AusNOG 2021
- Route management prevalidation
- Deploying RPKI at Comcast
- IRR hygiene in the RPKI era
- How to: Installing an RPKI validator
- DOA: Using RPKI to drive out bad traffic
- RPKI — 2021 retrospective
- The fragility of transient identifiers
March 2022
- How to: Detect and prevent common data exfiltration attacks
- Event Wrap: vPhNOG3
- Threat hunting with Yara: The red pill approach
- A first look at DNS over QUIC
- DNS topics at IETF 113
- How to properly interpret a traceroute or MTR
- Notes from the IEPG meeting at IETF 113
- APNIC announces ‘hybrid’ APNIC 54 conference in Singapore
- DNSSEC algorithms for TLDs (and everyone else)
- Threat hunting with Yara: Dealing with wildcard hexadecimal patterns
- What’s going on with certificate revocation?
- APNIC Registry API
- Identifying Autonomous Systems of state-owned Internet operators
- Resourcing in 2021
- perfSONAR: Open, extensible, worldwide
- 2022 ISIF Asia Grants now open for applications
- Threat hunting with Yara: Measuring distance between any three elements
- Join us for an RPKI Deployathon in April
- The parallel lives of Autonomous Systems: ASN allocations vs BGP
- The multiple meanings of ’nameserver’ and ’DNS resolver’
- How complex is the DNS?
- Measuring the potential benefit of egress traffic engineering with Segment Routing
- Threat hunting with Yara: The three body problem
- Authenticated bootstrapping of DNSSEC delegations
- One in six ASes exhibit consistent tagging behaviour
- Event Wrap: NANOG 84
- Publishing IPv6 NTP servers with DHCPv6
- APRICOT 2022 is a wrap!
- Apply now for an APNIC Fellowship 2022
- APNIC 2021 Annual Report now available
- APNIC 54 Update
- [Podcast] Taking IPv6 by the horns
- New Maldives IXP marks start of joint initiative to support Asia Pacific IXP development
February 2022
- When volcanoes go bang, submarine cables do … what?
- Welcome to APRICOT 2022!
- Small / Home Office network IPv6 wish list
- Can we make wide-area network routers less busy?
- The end of ISDN
- Notes from DNS-OARC 37
- Resurrection of injection attacks
- Another year of the transition to IPv6
- Authentication and authorization using SSO
- PeeringDB’s 2021 user survey results and 2022 product roadmap
- OMNI: An adaptation layer for the Internet
- Join the AGM at APNIC 53
- Securing an RDAP service with OpenID Connect and Keycloak
- Why are authentication and authorization so difficult?
- Three policy proposals up for community discussion at APNIC 53
- Journeying into XDP: Fully-fledged DNS service augmentation
- Disaster recovery with DNSSEC
- Opinion: DNS4EU
- Stopping DNS-based DDoS attacks in their tracks
- APNIC Products: 2021 in review
- Measuring a decentralized network
- Consider failure probability and severity to improve segment routing
- Source Address Validation: Use cases and gap analysis
- Update your patch management this new year
- Measuring DNS-over-HTTPS performance around the world
- DNS malware misuse and current countermeasures
- 2021 ISIF Asia grant recipients announced
January 2022
- Address semantics
- Defeating IPv6 prefix rotation privacy
- Dishing up Krill
- Mesh networks and semantic routing
- 2.6 million addresses support QUIC
- Beyond bufferbloat: End-to-end congestion control cannot avoid latency spikes
- Data-plane security applications in adversarial settings
- Improving network performance with Dynamic Congestion Control Tuning
- Investigating hidden root certificates in the wild
- DNS vulnerability, configuration errors can cause DDoS
- IP addressing in 2021
- Tonga and fragility of long-haul networks
- PeeringDB 2021 product report
- Event Wrap: Bhutan Cybersecurity Week 2021
- Increasing the robustness of Neighbor Discovery for IPv6
- HTTPA seeks to improve HTTPS trust issues
- Web cache deception escalates!
- Event Wrap: Women in Networking Series
- BGP in 2021 — BGP updates
- APNIC Academy: 2021 in review
- How to analyse a cyber attack chain: A cyber drill scenario from BGD e-GOV CIRT
- We need to rethink the resilience of the global Internet infrastructure
- Nominations to the APNIC EC now open
- How to: Employing network validation, part 2
- Three of the best: IPv6
- BGP in 2021 – The BGP Table
- Three of the best: RPKI
- Three of the best: George Michaelson
- Three of the best: How to
2021 386
December 2021
- Three of the best: Podcasts
- Three of the best: Development
- Three of the best: Security
- Three of the best: Geoff Huston
- Women in ICT: What are the challenges in submitting conference papers?
- A banana for scale: Why people don’t understand big numbers
- Event Wrap: IGF 2021
- Preparing for the next large-scale IoT botnet attack
- Notes from ICANN’s DNS Resolver Symposium
- How widely adopted is anycast in the DNS?
- Identifying unexpected Internet services
- Seven years in the life of Hypergiants’ off-nets
- The space between IPv6 allocations: part 2
- Opinion: IPv4 address markets
- Event Wrap: KHNOG 3
- Satellite constellations are coming. Are we prepared on Earth to receive all the data?
- Toward managing network traffic by domain name
- Better route monitoring with BMP
- Event Wrap: PacNOG 29
- Event Wrap: Youth IGF India 2021
- How to: Employing network validation
- The space between IPv6 allocations: part 1
- Event Wrap: DNS-OARC 36
- Event Wrap: IIGF 2021
- Akamai shows support is key to growing IPv6
- Improving the resiliency of RPKI Relying Party software
- Internet’s technical success factors revealed
- Efficient multipath transport with QUIC in large-scale video services
- Notes from DNS-OARC 36
- Event Wrap: RIPE 83
- Event Wrap: inSIG 2021
- ICARUS: Beware of flying satellites
- NPM, encryption, and the challenges ahead: Part 2
- Notes from RIPE 83
- Working latency — the next QoE frontier
- Help develop the DNS Data Dictionary
- Event Wrap: DINR 2021 Virtual Workshop
November 2021
- ARP problems in EVPN
- Modern OSes are prone to side-channel-based DNS cache poisoning attacks
- Event Wrap: IETF 112
- NPM, encryption, and the challenges ahead: Part 1
- Should you update your Route Flap Damping parameters?
- The impact of Private Relay on network operators and ISPs
- Adoption of DNS security mechanisms related to ease-of-use, cost
- Event Wrap: Peering Asia 2021v
- Meta-Peering: Towards automated ISP peering
- AnyOpt: Predicting and optimizing IP anycast performance
- Should information flows be controlled by the Internet plumbers?
- Help IPGO go digital
- More notes from IETF 112
- Event Wrap: Youth Internet Governance Forum Viet Nam 2021
- Event Wrap: UMS Cybersecurity Awareness Seminar
- Notes from DINR 2021
- Insights from operating an IP Exchange Provider
- DNS at IETF 112
- Vulnerabilities show why STARTTLS should be avoided if possible
- The who’s who of whois clients
- OSPFv3: Building the topology
- Event Wrap: mnNOG 3
- Event Wrap: btNOG 8
- Micro BGP Suite: the Swiss Army Knife of routing analysis
- Notes from NANOG 83
- Checking prefix filtering in IXPs with BIRD and OpenBGPD
- All the Gs, part 3: 5G and the future
- What every IT person needs to know about OpenBSD Part 3: That packet filter
- RSA vs ECDSA for DNSSEC
- ALPACA attack: Analysing and mitigating cracks in TLS authentication
- DNS-over-TCP considered vulnerable
- Event Wrap: Philippine International Cybersecurity Conference 2021
- WiFiMon: Monitoring Wi-Fi network performance from the end-user perspective
- What every IT person needs to know about OpenBSD Part 2: Why use OpenBSD?
- All the Gs, part 2: 2G to 4G
- CCID5: Evaluating BBR for Datagram Congestion Control Protocol
- Remote technical assistance now available to APNIC Members on APNIC Academy
- DNSSEC provisioning automation with CDS/CDNSKEY in the real world
- DNS openness
October 2021
- Have you heard? APNIC has a new podcast
- Mobile phone capabilities are key to improving connectivity in developing economies
- What every IT person needs to know about OpenBSD Part 1: How it all started
- Event Wrap: Cybersecurity Asia 2021 Conference
- How to connect to the Internet with your own IP addresses and ASNs
- All the Gs, part 1: Governing the radio spectrum
- Event Wrap: Broadband India Forum Session on IPv6
- Event Wrap: Y4iT 2021
- Caching is key to interpreting root DNS anycast performance
- Evaluation of anti-DDoS features in full-service resolvers
- Asia Pacific IPv6 deployment grants now available
- Opinion: The Internet’s next fifty years
- Intel Owl v3.0.0 speeds up threat intelligence retrieval
- How to: Threat hunting and threat intelligence
- Sigma: A generic log signature format
- Event Wrap: APrIGF 2021
- Event Wrap: VNIX-NOG 2021
- Event Wrap: 36th TWNIC OPM
- Threat hunting 101: Hunting with Yara rules
- DNSSEC with RSA-4096 keys
- Asia Pacific organizations becoming more proactive in cybersecurity, reducing dwell time
- Exploring an idea: Can spreading out repositories speed up RPKI?
- DNSSEC KSK Ceremony 43
- Can the DNS support encryption without enabling centralization?
- Event Wrap: IDNIC Special Meeting/APJII National Meeting 2021
- APRICOT 2022 Call for Papers now open
- DNS security and key ceremonies
- The relevance of heavy hitters and the rise of big-fast flows
- Introducing REx: A new approach for the Internet Directory
- Opinion: Learning from Facebook’s mistakes
- Weaponizing middleboxes for TCP reflected amplification
- Event Wrap: Asia Pacific Youth IGF 2021
- A new Internet architecture
- Who emailed who? Institutional privacy risks in the DNS
- The role of IP addresses in security processes
September 2021
- The elusive nature of QoS in the Internet
- Event Wrap: ITU Global Cyberdrill 2021
- Affordable Internet for the community by the community
- Event Wrap: HKNOG 10.0
- DoHoT: better security, privacy, and integrity via load-balanced DNS over HTTPS over Tor
- CERTainty in response to cyberattacks
- Basic routing concepts, part 4: NATs aren’t evil
- Event Wrap: Threat Con 2021
- Exploring APNIC’s 2021 themes: APNIC Agility
- Micro BGP Suite
- Did you validate your routing policies?
- Event Wrap: SEA IGF 2021
- Event Wrap: Pacific IGF 2021
- The role of service providers in transforming security
- Whois data incident review report at APNIC 52
- PeeringDB 2021 User Survey
- Observing DNSSEC key life cycles
- That’s a wrap, APNIC 52!
- Opinion: Regulating Big Tech?
- Free legal clinic available to Asia Pacific network operators
- Basic routing concepts, part 3: Trust but verify BGP
- Event Wrap: YouthxPolicyMakers Internet Governance Workshop
- Tokyo 2020: Athletes set streaming records as network engineers jump hurdles
- Event Wrap: APEC TEL 63
- Another DNS OARC meeting
- APNIC 52 starts today!
- The prevalence of DNS over HTTPS
- Basic routing concepts, part 2: BGP is just harnessing gossip
- JSContact-tools
- Need to measure QUIC packet loss? There’s a spin bit cousin for that
- Another five reasons to peer
- Five reasons to peer
- Event Wrap: 2021 CNCERT International Partnership Conference
- New Machine Learning applications that boost Internet security
- Event Wrap: Cambodia CERT Seminar
- Event Wrap: PANDI Meeting 12
- Land of the rising (regional) IXP
- How do we improve Internet connectivity outside major cities? A Japanese approach
- Basic routing concepts, part 1: Prefixes
August 2021
- TLS with DANE
- Let’s ‘all’ suppress Router Advertisements
- Event Wrap: ASEAN-JAPAN Cyber Security Seminar
- Kernel stacks and 5G
- A brief history of the RFC format
- Seven policy proposals up for discussion at APNIC 52
- Multi-Signer DNSSEC models
- The game theory behind running CUBIC and BBR on the Internet
- What is hitting our honeypots?
- Running code at IETF
- Whatever it is, you need more
- Improving accessibility at APNIC
- Twitter has introduced ROA. What does this change?
- The results of the first IETF Community Survey
- Hybrid cloud: What is it, and should you use it?
- DNS cache snooping attacks
- What’s ‘interop testing’ and why is it so tricky?
- Event Wrap: APAN 52
- Event Wrap: Youth IGF Bangladesh 2021
- RPKI: (My)Lab environment
- Reducing the threat of day one exploits
- Satellite communication and regulation
- More notes from IETF 111
- What’s your wish list for the perfect RPKI validator?
- Event Wrap: CommunicAsia 2021
- DNS talk @ IETF 111
- Decrypting TLS traffic with PolarProxy
- Dissecting the performance of production QUIC
July 2021
- Where text protocols came from, and why they’re not going anywhere
- How can organizations support cybersecurity in the Pacific?
- It’s time to replace MD5 with TCP-AO
- Opinion: Why is this unusual?
- Event Wrap: LkNOG 5 and SANOG 37
- Solo effort to clean up RPKI invalids across a region
- Event Wrap: vPhNOG 2.0
- Responses to Mozilla’s Trusted Recursive Resolver public consultation
- Solar storms and the Internet
- Another chapter in the decline of the traditional telcos
- Cloud vs enterprise data centres: What’s the difference?
- Cryptography, rituals and transparency: The world of key ceremonies
- RPKI invalids are not going away
- The RIPE NCC’s experience introducing ROV to its own network
- Some handy ROA advice from Randy Bush
- Event Wrap: ASEAN Cybersecurity Forum
- Does training impact RPKI usage?
- Event Wrap: PacNOG 28
- RPKI ReadTheDocs
- RPKI rollout at Hurricane Electric
- Exploring APNIC’s 2021 themes: Capacity for Internet development
- A survey on securing inter-domain routing: Part 2
- A survey on securing inter-domain routing: Part 1
- Event Wrap: NANOG 82
- Adventures in open DNS resolution: How to use threat intelligence for the public good
- Docker IPv6 networking, routing, and NDP proxying
- Security round up (April-June 2021)
- TCP Fast Open? Not so fast!
- Opinion: CDNs and centrality
- Event Wrap: bdNOG 13
- RENs: Pioneers of the Internet in the Asia Pacific
June 2021
- Encryption breaking vs subversion: Know the difference
- Hello World: Enabling Internationalized Domain Names
- Deploying a RIPE Atlas software probe via PPP
- IPv6 adoption in 2021
- How to: Edge router and BNG optimization
- Event Wrap: Annual FIRST Conference 2021
- Back to basics: Monitoring and Managing networks
- Cache me outside: A new look at DNS cache probing
- What are ping and traceroute, really?
- Assessing DNSSEC with EdDSA
- Whois data incident resolved
- icanhazip: How a simple IP address tool survived a deluge of users
- Are large DNS messages falling to bits?
- Understanding Saudi Arabia’s IPv6 boom
- Future Internet at terabit speeds: SCION in P4
- Everything you wanted to know about LEO satellites, part 4: Why direct to site?
- Securing your network using Shadowserver reports
- No, the Internet was not ‘down’
- Nominations now open for the NRO NC Election 2021
- A quick reminder: It’s NOGFEST!
- Expanding APNIC Academy in 2021
- Opinion: Is big necessarily bad?
- Event Wrap: ICANN DNS Symposium 2021
- Storing and retrieving IP prefixes efficiently
- Expanded ISIF Asia Grants and Awards Program now open for applications
- Everything you wanted to know about LEO satellites, part 3: Bandwidth, system capacity and inter-satellite routing
- Internet in a box (iBox): Simulating the Internet
May 2021
- APNIC 52 Call for Papers open now
- Remote attestation enabling posture assessment for automated GRC
- What is ‘M of N’ in public/private key signing?
- Everything you wanted to know about LEO satellites, part 2: Constellations, gateways and antennas
- Event Wrap: RIPE 82
- What can you expect from your Incident Response Team?
- Event Wrap: BKNIX Peering Forum 2021 and ThaiNOG Day
- Notes from DNS-OARC 35
- A tool to detect BGP lies
- New DDoS classifiers for the DDoS Clearing House
- Everything you wanted to know about LEO satellites, part 1: The basics
- The IETF is not the ‘standards police’
- How RRDP was implemented for OpenBSD rpki-client
- Trusted assurance simplified
- NIST RPKI Deployment Monitor update
- Vocus RPKI implementation
- Programmatically analyse packet captures with GoPacket
- Transport protocols and the network
- Seeking Expressions of Interest: Online Fellowship Mentors
- Exploring APNIC’s 2021 themes: Online Participation
- Study on the Internet’s technical success factors
- Trust, but verify: An engaged community is the best defence
- Growing a game of community engagement
- OARC 35 is coming to APAC
- Event Wrap: 2nd ICANN APAC-TWNIC Engagement Forum
- Event Wrap: Philippine e-Tech Show 2021
- ZHtrap botnet uses honeypot to harvest infected devices
- How can we improve the root? Run it locally
April 2021
- Gimme a slice!
- Spoofing packets: What is it, and why do people do it?
- Cleaning up your RPKI invalid routes
- IPv4 in the headlines
- Some security issues with RPKI and how to fix them
- A major BGP route leak by AS55410
- IPv6 fragmentation loss in 2021
- New update to DASH
- Starlink’s high-speed satellite Internet: What’s the catch?
- Event Wrap: PITA Business Forum and Exposition
- Event Wrap: bdSIG 2021
- Event Wrap: ARIN 47
- Anycast performance monitoring with Anteater
- The importance of network operators in Nepal during COVID-19
- Skidmap and malicious DNS data mining
- Where does zero trust begin and why is it important?
- Introducing TCPLS: A game of transport protocols
- What basics do you need to know for SDN?
- Measuring DNS over TLS from the edge
- Understanding the European Resolver Policy
- Using DASH to identify economies by suspicious traffic
- Common pitfalls in RPKI deployment and how to avoid them
- Building an open source anycast CDN
- Introducing DNS Shotgun
- Web co-location and its impact on the privacy benefits of domain name encryption
- Is RDAP ready to replace whois?
- DNS at IETF 110
March 2021
- Event Wrap: IETF 110
- Exploring APNIC’s 2021 themes: Next Generation Registry
- Event Wrap: ITU RPM-ASP WTDC-21
- Congestion Control at IETF 110
- How Facebook achieves disruption-free updates with zero downtime
- RPKI services now available to APNIC historical resource holders
- Forwarding and routing with packet subscriptions
- Zen: A general framework for compositional network modelling
- Measuring ROAs and ROV
- Call for Policy Document Review Working Group
- PeeringDB 2020 Survey Results and 2021 Product Roadmap
- Transforming information security to secure businesses
- RPKI relying party synchronization behaviour
- How do we count ASNs?
- What, exactly, are ASNs?
- Invitation to a ‘lounge event’ — Presentation of I&JPN Toolkits
- Event Wrap: APEC Tel 62
- The prevalence, persistence, and perils of lame delegations
- Event Wrap: FIRST 1st Regional Virtual Lightning Talk Session
- Which RPKI-related RFCs should you read?
- A brief history of router architecture
- Join the APNIC Policy SIG Community Consultation
- Some DNS myths and misconceptions
- Notes from NDSS DNS Privacy Workshop 2021
- CERT Tonga mitigates risk with awareness
- Config2Spec: Mining network specifications from network configurations
- That’s a wrap, APRICOT 2021!
- MANRS Fellowship Program 2021
- Apply now for an APNIC 52 Online Fellowship!
- Event Wrap: APAN 51
- The year that was: A word cloud look at NANOG in 2020
- APNIC 2020 Annual Report now available
- Event Wrap: MANRS Tech Talk
- What will happen when the routing table hits 1024k?
- Event Wrap: NANOG 81
- Event Wrap: DNS-OARC 34
- Asia Pacific Networks in 2020
- Welcome to APRICOT 2021!
February 2021
- Geofeeds and shepherding: Where is that network?
- Putting DNSSEC signers to the test: Knot vs Bind
- Notes from NANOG 81
- Tracking RPKI repository performance with a RIPE Atlas measurement bundle
- What are the Internet’s technical success factors?
- Unintended consequences of submarine cable deployment on Internet routing
- Stop spoofed traffic at the door: Destination-side SAV
- EC Response to 2020 APNIC Survey published
- Building your own Fibre-to-Premises Network: The ECFiber Story
- Join the AGM at APNIC 51
- RIPE’s RPKI Validator is being phased out, so what are the other options?
- APNIC Help Centre now live
- New RDAP profile to improve cross-RIR consistency
- An analysis of a large-scale HTTPS interception
- Event Wrap: SANOG 36
- Event Wrap: MMNOG 4
- Event Wrap: IBCAST 2021 Pakistan
- Towards verifying programmable switches at runtime with P6
- Notes from DNS-OARC 34
- DoH the right thing
- How To: Run Krill behind an NGINX reverse proxy
- MANRS launches 2021 Ambassador Program
- IPv6 in 2020
- BGP, RPKI, and MANRS: 2020 in review
- How Chromium reduced Root DNS traffic
- The Internet of Trash
- Expressions of interest welcomed for APNIC 51 Cooperation SIG
- A comprehensive audit of the AFRINIC Whois Database
- Reduce requests to critical DNS zones with LocalRoot
- Network operators cooperate to secure Pakistan’s Internet
January 2021
- Discussing the future of RPKI
- Developing a common interface between transport and application layers
- xBGP: a step toward a fully extensible BGP
- Share your views on Internet number resource management
- Open Internet, open standards and why they matter
- Tackling the Catch-22 of IPv6 enterprise uptake
- Whac-A-Mole: Six years of DNS spoofing
- Mongolia hits 100% ROA coverage
- Event Wrap: LKNOG 4
- Using multiple rates and multiple channels to improve wireless performance
- IDNIC releases new routing information tool: KADABRA
- Is WiFi too polite?
- Addressing 2020
- Event Wrap: CSIRT.ID virtual seminar
- Public Internet vs Non-public Internet
- APRICOT and APNIC conference locations rotation on hold while events remain online
- How critical are submarine cables to end-users?
- Event Wrap: CNCERT International Partnership in Emergency Response Conference
- China Telecom’s IPv6 efforts are beginning to show in the numbers
- Nominations to the APNIC EC now open
- Developing new metrics for tracking IMRS traffic
- New tool to sniff out DNS usage
- BeauCoup: Answering many network traffic queries, one memory update at a time
- BGP in 2020 — BGP Update Churn
- BGP in 2020 – The BGP Table
- Three of the best: How to
- Three of the best: Geoff Huston
2020 395
December 2020
- Three of the best: RPKI
- Three of the best: Automation
- Three of the best: Development
- Three of the best: Security
- Three of the best: IPv6
- Event Wrap: BSides Brisbane
- Event Wrap: MANRS Tech Talk: Is RPKI reliable enough?
- How to: Run delegated RPKI in Krill
- How to detect IoT devices in a network
- Event Wrap: ITU Global CyberDrill 2020
- Event Wrap: Connections 2020
- Event Wrap: IDNIC AMM 2020
- Reduce the effects of NAT for your IP blocklists
- The challenges of operating a root name server
- First M-Root anycast instance deployed under new MoU
- DoppelGANger: A new tool for sharing time series data with GANs
- How secure is your industrial network?
- DSC and DNSTAP allow you to monitor all the DNS
- Event Wrap: PacNOG 27
- Event Wrap: Cyber Pacific Dialogue
- Improving the privacy of DNS and DoH with oblivion
- Event Wrap: OIC-CERT Conference 2020
- Event Wrap: GFCE Annual V-Meeting 2020
- Event Wrap: APSIG 2020
- APNIC now testing ‘signed TAL’
- MAnycast²: Using anycast to measure anycast
- Measuring the impact of DNS Flag Day 2020
- DNS-over-HTTPS in Unbound
- How APNIC scaled RDAP cloud architecture
- The impact of COVID-19 on last-mile latency
- Event Wrap: Digital Pacific Conference 2020
- Event Wrap: 32nd Annual FIRST Conference 2020
- Introducing JDR: Explore, inspect, and troubleshoot RPKI
- APNIC expands RDAP to the cloud with new clusters
- Enhancing anti-phishing systems through ecosystem-level monitoring
- Fostering community key outcome from technical training in PNG
- Event Wrap: IETF 109
- Event Wrap: Peering Asia 3.5v
- Data exfiltration via IPv6
- Unpacking a flattened Internet
- Philippines’ PLDT takes lead in IPv6
- Detecting phishing websites via compression-based algorithms
- APRICOT 2021 Call for Papers open
- DNSSEC: The long and bumpy road of algorithm deployment
November 2020
- Event wrap: vIGF 2020
- Can networks run themselves? Imagining Networking 3.0
- Engineering for a rainy day
- Event Wrap: bdIGF 2020
- Event Wrap: TWIGF 2020
- Which practices help us maintain a secure cyberspace in the Asia Pacific?
- Thoughts from IETF 109
- EPIC: Exploring challenges and opportunities in next-generation Internet architectures
- How centralized is DNS traffic becoming?
- The two types of AS0
- Strict Transport Security vs. HTTPS Resource Records: the showdown
- APNIC now supports RFC-aligned ‘publish in parent’ self-hosted RPKI
- Moving RPKI beyond routing security
- Event Wrap: Youth IGF India 2020
- RIPE Atlas marks 10 years with Software Probes Deployathon
- How to use blocklists effectively
- Caching with delayed hits
- PINT: Probabilistic In-band Network Telemetry
- Improving packet capture performance: output
- Vale Dr. Chung Laung (Dave) Liu 1934-2020
- FlashRoute: a new tool for traceroute scans
- DNSBLs for email filtering – an introduction
- PCF designs provably resilient flexible routing
- Shigeki Goto awarded Japan’s Order of the Sacred Treasure
- RPKI manifests securely declare contents
- Routing on multiple optimality criteria
- Event Wrap: mnNOG 2
- Improving packet capture performance: processing
- PCE, SDN, and their entanglement: A personal journey!
- Event Wrap: 2020 FIRST & AfricaCERT Virtual Symposium for Africa and Arab Regions
- Event Wrap: 2020 Sri Lanka CERT Cyber Security Week
- Is outsourcing email always the best option?
- Transport protocols in the age of In-Network Computing
- Event Wrap: NANOG 80
- Event Wrap: NetHui 2020
- PeeringDB satisfaction survey
- TCP path brokenness and transport layer evolution
- What is OpenTelemetry?
- Improving packet capture performance: measuring the problem
October 2020
- An update on developments with DNS-over-HTTPS
- RPKI Q&A — Why don’t we outsource validation?
- Find bugs in your DNS zone files before deployment
- Application firewall coming to Linux devices near you
- DNS evolution: Trust, privacy and everything else
- Join the APNIC PDP community consultation
- RPKI Q&A — The trouble with rsync
- RPKI Q&A — Is 100% ROV achievable?
- A new way to measuring QoE using TCP connection establishment delay
- Event Wrap: bdNOG 12
- Event Wrap: btNOG 7
- Journeying into XDP: Augmenting the DNS
- Here’s a TIP: automate your threat intelligence
- Automation and data science are long-term investments when it comes to cybersecurity
- The answer’s in the post
- Don’t just automate, address the root cause
- Event Wrap: inSIG 2020
- Event Wrap: ConnecTechAsia 2020
- Event Wrap: 34th TWNIC OPM
- Machine Learning is no automatic security fix
- Event Wrap: VNIX-NOG 2020
- The promises and peril of machine-learning for cybersecurity
- 98% of Taiwan’s IP address holders have signed RPKI ROAs
- Virtual leap makes Tongan Women in ICT busier than ever
- Event Wrap: NetThing 2020
- Event Wrap: APrIGF 2020
- NetDice verifies your SLAs using probabilistic analysis
- Connecting Bhutan’s remote locations with TV White Space
- Mantis: Reactive programmable switches
- DDoS hide and seek: on the effectiveness of a booter service takedown
- Event Wrap: HKNOG 9.0
- Security round up (July-September 2020)
- Multi-domain information exposure using ALTO: The good, the bad and the solution
- Event Wrap: TWNIC RPKI Day
- ALTO: Application-Layer Traffic Optimization protocol
- Enabling privacy-aware zone exchanges among authoritative and recursive DNS servers
- Are you filtering for inbound spoofed packets? Chances are you’re not
- Web cache attacks in the tangled web
- Evolving threats in maritime VSAT security
September 2020
- Connect to IPv6 everywhere with VIIRB
- A tale of VoIP, NAT and some confused engineers
- Scaling the root of the DNS
- Have your say on Dynamic Coalition for Internet Standards, Security and Safety
- Women in ICT: Overcoming challenges builds better professionals
- APNIC EC appoints Nicole Chan to NRO NC
- IPv6 adoption can accelerate in a pandemic
- Control congestion, lower latency with new L4S AQM scheduler
- Event Wrap: APTLD 78
- Career advice for the Internet sector
- Why IRC is still good in $CURRENT_YEAR
- 2020 ISIF Asia Grant recipients announced
- NeST: a simple,efficient tool to study congestion control
- DNS Flag Day 2020: what you need to know
- How COVID-19 changed the cyber threat landscape in Taiwan
- How accurate are IP geolocation services?
- Why bigger isn’t always better when it comes to TLS key size
- DNS Query Privacy revisited
- APNIC 50: that’s a wrap!
- How DASH helps monitor network health
- Help APNIC create better products and services
- 2020 APNIC Survey Report released
- Welcome to APNIC 50
- Hands on with APNIC’s NetOX
- Where are DNS registries at with deploying ROAs?
- Overcoming the limitations of UDP Options
- How can APNIC help with IPv4 transfers?
- Dropping invalids in Mongolia
- Journeying into XDP: Part 0
- Policy prop-132 (AS0 for unallocated space) deployed in service
- New look for DSC, more than a DNS stats collector
August 2020
- M-Root deployment to expand under new collaboration agreement
- RFC 8890: The Internet is for End Users
- How to stop ‘troubleshooting in the dark’
- Security Round Up (April-June 2020)
- Limiting the power of RPKI authorities
- Event Wrap: pkSIG 2020
- Netflix over IPv6: a longitudinal study
- Opinion: The making of an RFC in today’s IETF
- Online voting for NRO NC election 2020 opens today
- Event Wrap: INNOG 3 and IRINN OPM 2020
- A brief history of recent advances in IPv6 security, Part I: Addressing
- Chromium’s impact on root DNS traffic
- What is the role of IXPs in Oceania?
- Characterizing transnational Internet performance in China
- RPKI slowly catching on in Australia and New Zealand
- Notes from OARC 32b
- Event Wrap: China IGF 2020
- Even network engineers can learn Git
- Event Wrap: IAA — Life under lockdown: how to stop heists, hijacks and hostages
- Event Wrap: KHNOG 2
- Event Wrap: APAN 50
- Why don’t we have DNS-security policy for context-full threat protection?
- Testing transition mechanisms in IPv6-only networks
- IPv6 security on the stack level
- Opinion: Defining Cyber Governance
- Successful Oceania event caps off the NFH series
- APNIC Foundation 2019 Annual Report available
- Reducing latency at CDNs with Bidirectional Anycast/Unicast Probing
- Retrofitting Internet Exchange Points with Software Defined Networking
- Characterizing CNAME cloaking-based tracking
- APNIC launches vulnerability reporting program
- IPv4, IPv6, and a sudden change in attitude
July 2020
- Event Wrap: PhNOG Virtual 2020
- How far are we from a web with HTTPS everywhere
- Solving the expiring Root CA certificate-mageddon; partly at least
- How to: IPsec VPN configuration
- Event Wrap: PacNOG 26
- Why inter-domain multicast now makes sense
- Easy BGP Monitoring with BGPalerter
- Event Wrap: UN INCB — Expert Group Meeting on Drug Trafficking
- Event Wrap: BIF Digital Dialogue series on Internet Governance
- Taking a closer look at the NTP pool using DNS data
- Event Wrap: InterCommunity 2020 — Securing Internet routing
- IPv4 transfers now available between APNIC and LACNIC regions
- Opinion: Do we need to change the way we promote IPv6 in the cloud era?
- Taking a look under the ISP bonnet
- Event Wrap: IX 2020 — Internet Security & Mitigation of Risk Webinar
- A first look at the misuse and abuse of the IPv4 transfer market
- India’s Digital Dialogue Series on Internet Governance
- A look at Route Flap Damping in the wild
- IPv6 and the DNS
- Networking from Home heads East
- Identifying malicious IoT botnet activity using graph theory
- Intergovernmental engagement during COVID-19
- APNIC Membership hits 8,000
- Understanding the landscape around network automation
- Take the 2020 APNIC Survey
- Press send to help secure email around the globe
- Why has DNSSEC increased in some economies and not others?
- APNIC Community Honeynet Project: behind the scenes
- HTTPS — How it protects browser users on the Internet today
- Event Wrap: ROW #9
- How to detect if your domains are being abused for phishing attacks
- Reclaiming unused IPv4 address space
- One year of BGP (in)security
- Event Wrap: PITA Technical and Business Session
- DNS RPZ: Using the DNS as a layer of defence
- Wirediff: a new tool to diff network captures
June 2020
- Event Wrap: DNS OARC 32a
- Event Wrap: RIPE 80
- Event Wrap: GFCE-V Meeting 2020
- Network Monitoring as a Service (NMaaS)
- The BGP Tuner: intuitive anycast management
- SR TI-LFA: Segment Routing and Topology Independent Loop-Free Alternates
- Mytel launches IPv6 in Myanmar
- Ansible playbook for spin up droplets in DigitalOcean
- Measuring IPv6
- A new way to measure Route Origin Validation
- How do you configure DNS resolvers?
- Networking from Home in South Asia
- New submarine cable to strengthen Pakistan ICT community
- Where is the DNS heading?
- Trust, neutrality, keys to sustainable Internet exchange, Pakistan
- What drives technology adoption in the Internet?
- The Internet landscape in Pakistan
- What can the DNS tell us about the effect of working from home on the Internet?
- Nepal’s Worldlink treks towards IPv6 summit
- MANRS fellowship program now open
- Improving coverage of Internet outage detection
- Mapping the Internet from router level
- Engineering students in Philippines take lead educating next generation of IPv6 deployers
- When South East Asia Networked from Home…
- Modern router architecture and IPv6
- Nominations now open for NRO NC Election 2020
- Overcoming the challenges of IPv6 support in BIND
- IPv6 and Rust
- Why is a /48 the recommended minimum prefix size for routing?
- A developer’s take on IPv6 and DHCP
May 2020
- Why should I run my own DNS resolver?
- Does the QUIC handshake require compression to be fast?
- How to: Set up a testbed for validating RPKI/ROA using PMACCT and correlating traffic with BGP
- APNIC 50 to become online-only event
- Why network engineers should code
- New IP and emerging communications technologies
- Geoff Huston’s NFH keynotes announced
- RHOMBUS: a new IoT malware
- NXNSAttack: upgrade resolvers to stop new kind of random subdomain attack
- Getting IPv6 private addressing right
- KISS your networks better
- An update from the IGF MAG
- SRv6 micro-instructions
- Introducing the Networking from Home events
- Cooperating and defending against COVID-19 scammers
- Strengthening the foundation for PNG’s digital future
- APNIC 50 Call for Papers open
- Measuring the benefits of registering in the RPKI
- Reflections of intent
- SRv6: Deployed use-cases
- Common setups to secure your networks from home
- Measuring the IPv6 network periphery
- Should I run RPKI-RTR in the cloud?
- Lessons from deploying DNSSEC in Mongolia
- What is SRv6 network programming?
April 2020
- How to: Build an XDP based BGP peering router
- Blind trust
- How do you know what time it is?
- Detecting Linux kernel process masquerading with command line forensics
- 3BB helps grow IPv6 capability in Thailand
- APNIC 50 Update
- RPKIVIZ: Visualizing the RPKI
- Balancing security, privacy and convenience
- RPKI and Trust Anchors
- Support unsung hero to keep Internet secure
- Kernel bypass networking with FD.io and VPP
- Get your training fix with APNIC’s new Virtual Training Program
- Open sourcing the network model
- Develop your own mini-Internet to teach students virtually about network operations
- What’s in a name?
- Rise of the invalids
- Telstra AS1221 strengthens its BGP security with RPKI implementation
- Local awareness and assistance is key to RPKI success
- The wrong certificate: Apache, Let’s Encrypt and OpenSSL
- Validating RPKI validators
- Security improvements to APNIC websites
- Community comes together to make deploying RPKI easier
- CDNs and cloud providers join MANRS to improve routing security
- 2020 ISIF Asia Grants applications open
- Lessons from securing a remote workforce
- A new infrastructure to serve RDAP
March 2020
- Open-source solution enables operators to comply with Lawful Interception standards
- What’s the deal with IPv6 link-local addresses?
- Protecting log records at 35,000 feet
- Advanced Kea DHCP features
- Announcing the Asia Pacific Internet Development Trust (APIDT)
- Announcement regarding IPv4 Address Block 43/8
- The best laid plans…
- An Opinion Piece on Internet Security
- The different ways of minimizing ANY
- Providing New Zealand with congestion free Internet
- Tell us what you want to read
- The hairy issue of end-to-end encrypted instant messaging
- Visualizations of periodic IoT traffic
- Event Wrap: SITA IT Security Seminar
- Supporting responsible state behaviour online, one byte at a time
- APNIC and COVID-19
- Revocation: is there a better way to secure certificates?
- Looking at your network from the outside in
- Co-location helps nurture clueful hobby engineer community
- Event Wrap: PhNOG 2020
- What are the best practices for the Internet?
- Why is so much Internet traffic leaving Pakistan?
- Letting go of clean design
- Mentoring, inclusive work environments nurture next tech leaders
- How to: Getting started with Kea DHCP for IPv4 / IPv6
- Organizational security implications for IPv6
- Drilling for the KSK
- New course and eduroam available through the APNIC Academy
- Teamwork shines through at 3rd APNIC Hackathon
- DNSSEC validation revisited
February 2020
- Event Wrap: GFCE Pacific Regional Meeting 2020
- How to: Deploy DoT and DoH with dnsdist
- Event Wrap: JANOG 45
- Event Wrap: NZNOG 2020
- Fit-for-purpose financing to grow your access network business
- Deploying DNSSEC in a large enterprise
- Network topology design at 27,000 km/hr
- Loko: Predictable latency in small networks
- Thank you Melbourne!
- Community elects three EC members
- Refreshing APNIC’s Strategic Direction
- APNIC 2019 Annual Report now available
- Stats and games at JANOG 45
- Resourcing 2019: by the numbers
- 3rd APNIC Hackathon – “No hay dos sin tres”
- APRICOT 2020 starts today!
- AUSeries: ‘It takes a community.’ Building the Internet in Australia
- AUSeries: Connecting the ‘forgotten’ billion to the Internet
- AUSeries: A lifetime protecting the Internet protocol
- At the bottom of the sea: a short history of submarine cables
- AUSeries: Superheroes answer Australia ICT’s call to fix diversity issue
- AUSeries: Internet development comes in all forms
- ICTs and international security: the third way
- Notice of AGM 2020 at APNIC 49
- More than 90% of LTE users in China have been allocated IPv6 addresses
- ConQuest: fine-grained queue analysis
- Three policy proposals up for community discussion at APNIC 49
- Steering hyper-giants’ traffic at scale
January 2020
- Event Wrap: SANOG 35
- Why dynamic DNS mapping prevents DNSSEC deployment
- Event Wrap: DragonCon 2019
- Traffic analysis still possible when using DoT and DoH
- Is RPKI ready for the big screen?
- RSS++: a new model for elastic high-speed networking
- Advanced BGP and ROV workshop, Malaysia
- APNIC Training: 2019 in review
- Event Wrap: MMIX and MMNOG Forum 2020
- Modelling BBR’s interactions with loss-based congestion control
- 10 years of Internet number resourcing in the Asia Pacific
- Bufferbloat may be solved, but it’s not over yet
- Event Wrap: 33rd TWNIC IP OPM and TWNOG 4.0
- Event Wrap: bdNOG 11
- Addressing 2019
- Hack your IPv6 enterprise network to deploy it securely!
- SHA-1 chosen prefix collisions and DNSSEC
- Event Wrap: IGF 2019
- Event Wrap: npNOG 5
- Everyone deserves security
- Event Wrap: PacNOG 25
- Event Wrap: AFRINIC 31
- MyAPNIC is changing
- BGP in 2019 – BGP Churn
- BGP in 2019 – The BGP Table
- An RFC a day reveals an Internet in the making
- When to use and not use BBR
- What is the DNS anyway?
- Funding to connect the remaining unconnected in Asia Pacific
- Monitoring JavaScript with VisibleV8
- Nominations to the APNIC EC now open
- Three of the best: Development
- Event Wrap: inSIG 2019 and bdIGF 2019
- Three of the best: Cybersecurity
- Three of the best: How to