Toots for antonio@social.prado.it account

"Since the initial disclosure of the vulnerabilities on November 2, 2023, we have been working with all major vendors on mitigating the problems in their implementations."

"We recommend that everyone installs the patches and updates their DNS software. We recommend to continue using DNSSEC, encourage the domains to get signed, and all the resolvers to enforce DNSSEC validation. DNSSEC is the only practical measure to block DNS cache poisoning attacks."

https://labs.ripe.net/author/haya-shulman/keytrap-algorithmic-complexity-attacks-exploit-fundamental-design-flaw-in-dnssec/

[#]DNSSEC #DNS #KEYTRAP

=> More informations about this toot | View the thread

Written by Antonio Prado on 2024-02-04 at 11:38

Is this plausible in your opinion? According to generative AI this is me.

Photo created from a recent portrait of mine and seasoned with:

"Close-up photo, detailed portrait of a stern, smiling 49-year-old computer geek, strong presence, cinematic 4K quality, epic composition, high level of detail, shot on Kodak film, cinematic atmosphere, reminiscent of HBO series, bright ambiance."

=> View attached media

=> More informations about this toot | View the thread

Written by Antonio Prado on 2024-01-12 at 20:37

Why you should employ ORF (Outbound Route Filtering) in the BGP session with your neighbor? Learn more in THE BOOK "BGP from theory to practice": https://a.co/d/hJe7BNb

[#]BGP #ORF #CISCO #JUNIPER

=> View attached media

=> More informations about this toot | View the thread

Written by Antonio Prado on 2023-12-08 at 16:36

If you run #BGP in an Enterprise Network, then you should give a look at the AS Translation mechanism.

Learn more in THE BOOK, BGP from theory to practice, available here: https://a.co/d/gW5JbLY

[#]MPLS #ISP #OSPF #MED #CISCO #JUNIPER

=> View attached media

=> More informations about this toot | View the thread

Written by Antonio Prado on 2023-11-27 at 16:39

[#]RIPE87, Randy Bush and Comic Sans: feeling at home

=> View attached media

=> More informations about this toot | View the thread

Written by Antonio Prado on 2023-11-15 at 19:19

[#]BGP from theory to practice, THE BOOK

What about #ASPA, is the topic in your skills suitcase?

Autonomous System Provider Authorization is bleeding edge technology able to identify misconfigurations and mitigate potential path disruptions.

Get the book and find out more!

https://a.co/d/hdYKx0h

=> View attached media

=> More informations about this toot | View the thread

Written by Antonio Prado on 2023-11-08 at 12:53

"BGP from theory to practice", THE BOOK is now available on Amazon.

We finally made it. Tiziano, Flavio, and I are especially proud of this achievement: making available to everyone a 600+ page monograph text on #BGP that examines the protocol in all its facets.

A must-have for all professionals in Internet, networking, and computing in general.

https://a.co/d/0zFRM2G

[#]MPLS, #NETWORKING, #SECURITY, #OSPF, #IPv4, #IPv6, #RPKI, #IXP, #DDoS, #DMVPN, #EVPN, #ISIS, #MANRS, #RFD

=> More informations about this toot | View the thread

Written by Antonio Prado on 2023-10-29 at 14:26

BGP, from theory to practice - THE BOOK

[#]BGP process model explained in detail.

"The best paths determined by the BGP selection process are not necessarily installed in the #IP routing table (#RIB, Routing Information Base) and then transferred to the #FIB (Forwarding Information Base) to be used in traffic forwarding. Indeed, if the same prefix is announced to the #router via BGP and also in other ways (dynamic routing protocol, static routing, directly connected prefix), the router chooses which advertisement to install in the RIB, based on a level of preference assigned by the router to each routing protocol. Please be aware that the level of preference (known in #Cisco documents as administrative distance, or in #Juniper documents as preference value), is a number assigned locally by the router to each routing protocol, and expressing a level of preference for the protocol. For instance, let’s assume that a prefix Pfx is announced to the router both by BGP and by #OSPF. Which of the two protocols does the router consider more reliable? In other words, what information <Pfx, Next-Hop> will be installed in the RIB, the one announced by OSPF or the one announced by BGP? The rule used by all manufacturers is preferring the advertisement of the protocol with the lowest preference level. Note that preference level values are assigned by manufacturers according to different logics, and so it is common to see completely different numbers, which can be varied through a configuration, if needed."

The book will be available in the next weeks; I'll give a heads-up when ready.

Meanwhile, download the Table of contents and the first chapter here:

https://book.reissromoli.com/product/bgp-from-theory-to-practice/

my co-authors:

Tiziano Tofoni

Flavio Luciani

Many thanks to Simone Morandini for his precious help!

=> View attached media

=> More informations about this toot | View the thread

=> This profile without reblog | Go to antonio@social.prado.it account

Proxy Information

Original URL: gemini://mastogem.picasoft.net/profile/109370345125641074/reblog
Status Code: Success (20)
Meta: text/gemini
Capsule Response Time: 1417.564349 milliseconds
Gemini-to-HTML Time: 3.417943 milliseconds

This content has been proxied by September (ba2dc).