May 19, 2020OpenBSD 6.7Are you looking for a simple operating system tailored to help you participate in all aspects of the global Internet? Allow me to pitch a project that produces free and modern implementations of the most popular Internet protocols! Even though OpenBSD’s origin story goes back almost 25 years, there is…2 min read2 min read
Nov 13, 2019Interview with Gerdien Dalmulder (Freedom Internet)I conducted an interview with Gerdien Dalmulder, spokesperson for Freedom Internet. The interview can also be enjoyed on Youtube! Job — Not many people know this, but The Netherlands was the second country on this planet to connect to the Internet. In those early days there was a fascinating initiative…3 min read3 min read
Nov 4, 2019Interview with Paolo Lucente from the pmacct projectI conducted an interview with Paolo Lucente (NTT, IETF) about the origins of the pmacct project. The interview can be also be enjoyed on youtube. Job — pmacct is a wonderful open source tool that allows you to correlate what happens in your routing and where data is flowing. It…Startup2 min readStartup2 min read
Nov 29, 2018A proposal for a new RPKI validator: OpenBSD rpki-client(8)[ Edit #1 — DONE! We reached the $20,000 fundraiser goal! Thank you NetNod, IIS.SE, SUNET & 6connect for supporting this effort! Edit #2 — June 17th, 2019 source code delivery day: portable version, OpenBSD version, and my commit message ] BGP routing security is in vogue! We’re seeing a…Security4 min readSecurity4 min read
Oct 8, 2018Leading in routing security: Using RPKI at Internet Exchange PointsLeading in routing security: Using RPKI at Internet Exchange Points I'd like to offer some notes on the advantages of secure route servers and why a “secure by default” approach benefits everyone, including organisations not connected to the Internet Exchange Point (IXP). …Cybersecurity3 min readCybersecurity3 min read
Dec 19, 2017A New Source For Authoritative Routing Data: ARIN WHOISI'd like to share an update on some routing security activities that ARIN, NTT Communications, YYCIX (Calgary Internet Exchange), the NLNOG Foundation, and the arouteserver project have been collaborating on. Quite some puzzles pieces were brought together! :) Traditionally, there are two commonly-used methods to signal to your peers or upstream…Tech4 min readTech4 min read
Dec 14, 2017What to do about BGP hijacksSome carriers view measures to improve routing security as a hinderance rather than as a safeguard to enable business. …1 min read1 min read
Jul 6, 2017Heads-up: RFC 8212 on default EBGP route handling behaviorAfter a bit of tug-of-war common sense prevailed and RFC 8212 “External BGP (EBGP) Route Propagation Behavior without Policies” was published at https://tools.ietf.org/html/rfc8212. This industry has a long history of improving default behavior: DEC MOP is no longer enabled by default, telnet was swapped out in favor of SSH, and…Tech3 min readTech3 min read
