Alex Band
mastodon 4.7.3Soldered together an Apple ][ in the 80s and never stopped tinkering since. Lives in Amsterdam. Enjoys boats, cats and pineapples. ⚓️🐈🍍
Responsible for keeping the lights on at @nlnetlabs@fosstodon.org, makers of fine open-source software for BGP routing and DNS. ![]()
The #DNS is super important for how the internet works, but it’s also getting more complicated as we go.
The @dnsoarc@mastodns.net community is where the brightest minds and all the operational experience come together. To make the most of this collective knowledge, we’ve launched an initiative to publish Best Current Practice (BCP) documents.
If you’re aware of a DNS topic that urgently needs a #BCP, or if you’re interested in contributing to its creation, please share your thoughts below or connect with us on our community server!
Routinator, our RPKI validation software, now sees more than 1000 Autonomous System Provider Authorization (ASPA) objects in the wild. These are published by operators to detect and prevent BGP route leaks.
ASPAs can be created in the hosted RPKI services of the RIPE NCC and ARIN, as well as our open-source RPKI Certification Authority software, Krill.
Open-source routing projects such as BIRD, OpenBGPD and FRRouting already offer support for ASPA, while major commercial vendor support is expected later this year.
#OpenSource #OpenStandards #IETF #RPKI #BGP #RoutingSecurity
Wat mij verbaast aan alle ophef rond #digitalesoevereiniteit is er nog niet zo lang geleden kamervragen zijn gesteld over het voornemen van SIDN om een een deel van het domeinregistratiesysteem naar AWS wilden verhuizen.
Nu weten we pas hoe afhankelijk de overheid zelf is van de Amerikaanse cloud; net als het overgrote deel van de Nederlandse internet-infrastructuur.
SIDN draait tenminste nog gewoon zelf hun #DNS infrastructuur met #OpenSource software van Hollandsche makelij…
Another day, another email that starts with “We are security researchers from $ChineseUniversity and have discovered…”
@sjosjo@mas.to Thanks. Luckily, from all of the service providers we depend on, changing domain registry is likely the easiest to do.