» Tag
networking
68 postsHTTP QUERY Method Arrives: Is Your Infrastructure Ready?
IETF's new QUERY HTTP method fixes the POST-for-search compromise, but CDN, WAF, and framework support still lag behind. A practical engineering guide to what's ready and what isn't.
NAT Slipstreaming v2.0 Bypasses NAT/Firewalls via the Browser
NAT Slipstreaming v2.0 abuses ALG connection tracking to let attackers remotely open any TCP/UDP port behind a victim's NAT via the browser.
A 24-Year-Old Linux Kernel TCP Bug Found via Stuck rsync Transfers
How Skroutz engineers traced mysterious rsync hangs to a 24-year-old TCP flow-control bug buried in the Linux kernel.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comLLM-Assisted Formal Verification Uncovers Two Critical nftables Bugs
Basis used LLM-guided formal verification in Rocq to audit Linux's nftables optimizer, uncovering two critical bugs since 2022.
Broken .AL DNSSEC Rollover Caused Outage; 1.1.1.1 Adds Bypass Alerts
Cloudflare fixed a broken .AL DNSSEC rollover with a Negative Trust Anchor and introduced a new EDE code that flags bypassed DNS validation.
IETF Draft Lets IPv4 Run ARP-Free as a Service on IPv6-Only Nets
New IETF draft removes ARP and IPv4 subnets from IPv6-only networks, turning IPv4 into a pure host service via a sentinel gateway address.
IPv6-first EKS on AWS in 2026: what still forces NAT back in
A 2026 field report on running IPv6-first EKS on AWS: the remaining IPv4 traps in RDS, ECR, CloudFront and SDKs, and the real cost savings.
64 BFD sessions at 10ms saturate FRR bfdd's core; XDP handles it at 0 flaps
FRR's bfdd saturates one core at 64 BFD sessions while an XDP fast path carries the same load at 751ns/packet with zero flaps; three FRR bugs merged upstream.
XDP BFD Integrates with Stock FRR, Eliminates Flaps Under Stress
XDP-based BFD now integrates with stock FRR bfdd, cutting flaps to zero under stress and uncovering upstream FRR and kernel bugs along the way.
bfdd vs XDP-based BFD Fast Path Under CPU Stress: 44 vs 0 Flaps
Under CPU stress, FRR's bfdd flapped 44 times in 120 seconds while an XDP-based BFD fast path stayed at zero flaps, matching line-card-level reliability.