#bgp

#BGP Nouveau service pour visualiser le routage Internet, BGPmap https://bgpmap.net Ici, comment aller vers cette instance fédivers :

We recently published our LLM policy, requiring all code and documentation contributions to be authored by a human. We do accept reports of vulnerabilities found with LLMs. It has drawn a lot of feedback, both positive and negative. In this article we want to explain the background and motivation behind our choices. #OpenSource #DNS #BGP #RPKI #softwaredevelopment https://blog.nlnetlabs.nl/maintaining-the-love-for-coding-in-the-time-of-ai/

If you've been staring too long into messages like

%BGP-6-MSGDUMP_LIMIT: unsupported or mal-formatted message received from [....] FFFF FFFF FFFF FFFF FFFF FFFF FFFF FFFF 0456 0200 0004 3F90 0E00 1A00 0201 1020 011A 6800 2C00 0200 0000 0000 0001 7900 2028 0495 2440 0101 0040 022A 020A 0000 [...]**MSG 21505 TRUNCATED**

...look no further. Look here instead: https://lukasz.bromirski.net/post/cisco-bgp-decoder/

#bgp #ciscoiosxesoftware

rpki-client 9.9 released https://www.undeadly.org/cgi?action=article;sid=20260824085031 #openbsd #openbgpd #rpkiclient #bgp #routing #rpki #security #cryptography #networking #freesoftware #libresoftware

𝗕𝗚𝗣 𝘄𝗮𝘀 𝗯𝘂𝗶𝗹𝘁 𝗼𝗻 𝘁𝗿𝘂𝘀𝘁. 𝗜𝘁 𝗻𝗲𝗲𝗱𝘀 𝗽𝗿𝗼𝘁𝗲𝗰𝘁𝗶𝗼𝗻. Take control of your routes and keep your traffic where it belongs. In this article, you’ll learn how to: 🔹 Validate who is authorized to announce your prefixes 🔹 Reduce exposure to route leaks and hijacks 🔹 Detect suspicious routing changes before they escalate 👉 https://technicalciso.com/bgp-blind-spots-part-2/ #CyberSecurity #BGP #NetworkSecurity #NetworkEngineering #InternetSecurity #InfoSec

Huh. #freetransit just sent me a mail I need to create an ASPA record? Never heard of that before o.o #bgp

I can't do #aspa validation myself yet. Because apparently, neither Fort nor StayRTR support it yet fully? #bgp

I broke my route validation in my AS by adding the aspa block to my bird config :( Apparently bird will transport-error (or stayrtr will drop the connection) then. And now I'm in a fucking sync-running/transport-error loop, even though I removed the aspa block. And I have to go to work and can't fix it. Saaaaaaad. :( #bgp

AS201379, part 5: joined EVIX (an IXP whose fabric is VXLAN tunnels, so no port and no new machine), got IPv4 onto an IPv6-only network, and cleaned up four routers' worth of config drift. Fourteen BGP sessions, all FreeBSD, all still fitting on one Grafana screen. https://blog.hofstede.it/running-your-own-as-an-ixp-over-vxlan-ipv4-on-the-overlay-and-a-config-spring-clean/ #FreeBSD #BGP #IPv6 #Networking

I really don’t need any more peers for my AS201379! (Okay, maybe a few more...) Started back in December 2025, and now this "little" infrastructure is running: 14 individual eBGP sessions 3 Internet Exchanges Multiple transit providers 110+ direct peers All 100% IPv6 (2a06:9801:1c::/48) because legacy IP belongs in the last century. Powered entirely by FreeBSD 4 routers on 15.1-RELEASE running FRR and PF. #BGP #IPv6 #FreeBSD #Routing #Networking #sysadmin

bgpipe v0.22 is out! 🚀 New: MRT table dump support. A full RIB snapshot from RouteViews or RIPE RIS now streams as BGP updates, each tagged with the peer it came from. Which means every stage you already use just works on them: bgpipe --rpki -- read rib.bz2 -- rov -- grep 'tag[rov/status] == INVALID' That is RPKI validation of an entire routing table. 4.1M routes in 7s, validated in 8s. https://bgpipe.org #BGP #RPKI #networking

Weekend Reads

• Inside an Internet shutdown https://labs.ripe.net/author/mdkamruzzaman-khan-2/inside-a-shutdown-bgp-evidence-from-an-operator-who-was-there/
• Inferring shared IP addresses https://burdantes.github.io/assets/pdf/multi_user_ip-sigcomm.pdf
• BGP origin attribute manipulation https://blog.cloudflare.com/bgp-origin-attribute/
• IP reassembly congestion DoS attacks https://cispa.saarland/group/rossow/papers/FragJam-usenix2026.pdf
• Operators on academic BGP security solutions https://pure.mpg.de/rest/items/item_3719779_1/component/file_3719780/content

#InternetShutdown #NAT #BGP #DoS #RPKI

Any #PortlandME fedi people involved with #DNS, #BGP, #infosec, or #blues?

Should I try the DN42 thing? (I don't know anything about BGP and barrely know how to use git. ) #DN42 #BGP

#BGP #RPKI "With eight Firehol level 1 blocklist matches out of only 79 prefixes, repo.rpki.space stands out immediately. Inspection of BGP Tools DNS records for this server reveals a high density of mailing domains, strongly suggesting that spam mailing infrastructure is hosted across the prefixes in question. " An interesting survey of "small" RPKI servers. https://labs.ripe.net/author/ties-dirksen/whos-running-all-those-tiny-rpki-servers/

DE-CIX LG (https://lg.de-cix.net/) says that "IRRDB lookup: AS-SET does not include origin AS (63034:1101:10)" But in *which* AS-SET is my AS supposed to be??? And why don't other looking glasses complain? #ripe #bgp

I’m tinkering with a free #BGP peering service (by own VMs) for hobbyist AS owners, including free upstream connectivity at various locations. It’s still in the early stages, but I’d love to hear what features the community would find most useful. Wondering how and why? With @BoxyBSD@mastodon.bsd.cafe and @BoxedTux@mastodon.social, I’m already running platforms that provide free VPS instances for educational purposes, learning and testing for years now. I guess, providing real AS and peering services (maybe even sponsoring LIR in cooperation [but this would cost money]) could also be very interesting for several ones, apart from the DN42 network. Happily looking for feedback… #isp #network #networking #ipv6 #as #autonomoussystem #ipv4 #free #opensource #devops

Is there a globally available BGP Tunnel Provider who has POPs in Ashburn (USA), Singapore and Frankfurt? ... And uses Green Energy solely? I couldn't find such a provider. I'm aware of ifog.ch but I could not find any information about their power source. Boost appreciated :) #bgp #server #internet #hosting #tunnel

I run https://blog.hofstede.it aiming for maximum digital sovereignty! DNS: My own authoritative servers (PowerDNS) with DNSSEC signing. HW: Own physical server in a German colocation Net: My own Autonomous System (AS201379) for full BGP control Stack: 100% FOSS (FreeBSD, Caddy, Forgejo, Pelican) Web: <600kb total size, 0 trackers, 0 external deps. All assets hosted locally. I don't even log IPs. Data I don't store is data I can't accidentally leak. Keeping data is a burden! #SelfHosting #FreeBSD #BGP #FOSS #DigitalSovereignty

https://bgp.tools/as/201379#connectivity 6 Upstreams, 105 direct peers 🙂 My AS201379 / 2a06:9801:1c::/48 has some really solid European connectivity now. Entirely powered by FreeBSD and FRRouting, no proprietary routers and no legacy-IP (formerly known as IPv4). #bgp #networking #bgp #freebsd #frr #ipv6