» Tag
networking
86 postsHTTP QUERY Method Arrives: Is Your Infrastructure Ready?
IETF's new QUERY HTTP method fixes the POST-for-search compromise, but CDN, WAF, and framework support still lag behind. A practical engineering guide to what's ready and what isn't.
NAT Slipstreaming v2.0 Bypasses NAT/Firewalls via the Browser
NAT Slipstreaming v2.0 abuses ALG connection tracking to let attackers remotely open any TCP/UDP port behind a victim's NAT via the browser.
Four Long-Standing Linux Kernel Local Root Flaws Disclosed
Four decade-old Linux kernel local root flaws — DirtyAH6, TUNderflow, PPPoEject, DiagSpill — are now public, with PoCs and stable-tree fixes released.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comA 24-Year-Old Linux Kernel TCP Bug Found via Stuck rsync Transfers
How Skroutz engineers traced mysterious rsync hangs to a 24-year-old TCP flow-control bug buried in the Linux kernel.
LLM-Assisted Formal Verification Uncovers Two Critical nftables Bugs
Basis used LLM-guided formal verification in Rocq to audit Linux's nftables optimizer, uncovering two critical bugs since 2022.
Broken .AL DNSSEC Rollover Caused Outage; 1.1.1.1 Adds Bypass Alerts
Cloudflare fixed a broken .AL DNSSEC rollover with a Negative Trust Anchor and introduced a new EDE code that flags bypassed DNS validation.
IETF Draft Lets IPv4 Run ARP-Free as a Service on IPv6-Only Nets
New IETF draft removes ARP and IPv4 subnets from IPv6-only networks, turning IPv4 into a pure host service via a sentinel gateway address.
IPv6-first EKS on AWS in 2026: what still forces NAT back in
A 2026 field report on running IPv6-first EKS on AWS: the remaining IPv4 traps in RDS, ECR, CloudFront and SDKs, and the real cost savings.
64 BFD sessions at 10ms saturate FRR bfdd's core; XDP handles it at 0 flaps
FRR's bfdd saturates one core at 64 BFD sessions while an XDP fast path carries the same load at 751ns/packet with zero flaps; three FRR bugs merged upstream.
Cloudflare's eBPF Series Part 2: Closing Gaps in Linux Networking APIs
Cloudflare's eBPF series part 2 details L4Drop, xdpcap, Tubular, and cbpfc — the tools built to overcome Linux networking API limits at scale.