211
End-to-end congestion control cannot avoid latency spikes (2022)
What are the fundamental limits of end-to-end congestion control in 5G networks?
New
The latest blog posts to take off on Hacker News. 1,406 posts.
212
Sans-IO: The secret to effective Rust for network services
Learn how Firezone uses the sans-IO pattern to build testable, deterministic Rust networking code. A deep dive into our connlib design.
213
214
Navigating Starlink's FCC Paper Trail
Guest Post: What I learned when I figured out how to navigate FCC filings.
215
Timeliness without datagrams using QUIC
Media over QUIC: Rethink your approach. *Unless you're doing something dope.
216
Remembering the LAN (2020)
Learn more about the early days of LAN.
217
Off-path TCP hijacking in NAT-enabled Wi-Fi networks
Guest Post: New off-path TCP hijacking attack in Wi-Fi networks that exploits vulnerabilities in the NAT mapping strategies of routers discovered.
218
We improved the performance of a userspace TCP stack in Go
Learn how we enhanced TCP performance in Coder to achieve 5X faster throughput by optimizing buffer sizes, implementing the HyStart algorithm, and minimizing packet loss, significantly improving remote development experiences.
219
IBDNS: Intentionally Broken DNS server
Afnic, the association in charge of the .fr top-level domain and several other French overseas and generic TLDs, announced today the release as free software of its tool named IBDNS, standing for Intentionally Broken DNS.
220
Is regulated BGP security coming?
What impact would regulating BGP routing security have on the global Internet?
221
222
BIMI and DMARC Can't Save You: The Overlooked DKIM Exploit
Analysts at Zone.eu, one the leading domain registrars and web hosting providers in Europe, have observed a vulnerability affecting the global e-mail ecosystem, stemming from unaddressed warnings in the DomainKeys Identified Mail (DKIM) standard that puts billions of users in risk. This is not an issue in a particular…
223
New UUID formats have been approved
This document presents new time-based UUID formats which are suited for use as a database key. A common case for modern applications is to create a unique identifier for use as a primary key in a database table. This identifier usually implements an embedded timestamp that is sortable using the monotonic creation time…
224
Attackers can decloak routing-based VPNs
We discovered a fundamental design problem in VPNs and we're calling it TunnelVision. This problem lets someone see what you're doing online, even if you think you're safely using a VPN.
225
DNS traffic can leak outside the VPN tunnel on Android
We were recently made aware of multiple potential DNS leaks on Android. They stem from bugs in Android itself, and only affect certain apps.
226
Xz sshd backdoor collecting usernames from logs
The amazingly scary xz sshd backdoor, Author: Bojan Zdrnja
227
Tailscale SSH is now Generally Available
Tailscale SSH is now generally available, offering seamless SSH authentication and authorization with SSO, MFA, and ACLs. Enjoy robust security, zero trust remote access, and tools like session recording and VS Code integration.
228
usbredir: A protocol for sending USB device traffic over a network connection
usbredir is the name of a network protocol for sending USB device traffic over a network connection. It is also the name of the software package offering a parsing library, a usbredirhost library and several utilities implementing this protocol.
229
The FCC needs to stop 5G fast lanes
The FCC is set to vote on April 25 to restore its authority over the companies we pay to get online, and reinstate federal net neutrality protections that were jettisoned by the Trump administration in 2017. Net neutrality protections are supposed to ensure that we, not the internet service providers
230
Stalwart mail server (self-hosted all-in-one mail server) now as an admin webui
We're thrilled to announce the release of Stalwart Mail Server version 0.7.0, a significant update that brings a wealth of features and improvements to enhance the performance and manageability of...
231
Total eclipse of the Internet: traffic impacts in Mexico, the US, and Canada
Cloudflare’s data shows a clear impact on Internet traffic from Mexico to the US, and Canada, following the path of totality of the total solar eclipse that occurred on April 8, 2024
232
Google Public DNS's approach to fight against cache poisoning attacks
Tianhao Chi and Puneet Sood, Google Public DNS The Domain Name System (DNS) is a fundamental protocol used on the Internet to translate hum...
233
About the Tailscale.com outage on March 7, 2024
On March 7, 2024, tailscale.com was unavailable for approximately 90 minutes due to an expired TLS certificate. We were able to identify and address the issue quickly, and the downtime was mostly limited to our marketing materials and documentation; still, we would like to explain exactly what happened, what the…
234
What is DECT-2020 New Radio (NR), and how big a deal is it? (2021)
Is it fair to describe DECT-2020 NR as a 5G wireless technology at all?
235
Flightradar24's new GPS jamming map
Learn how to view areas of GPS jamming affecting aircraft around the world and how GPS jamming affects aviation.
236
WebSockets vs. Server-Sent-Events vs. Long-Polling vs. WebRTC vs. WebTransport
Learn the unique benefits and pitfalls of each real-time tech. Make informed decisions on WebSockets, SSE, Polling, WebRTC, and WebTransport.
237
Cloudflare loses 22% of its domains in Freenom .tk shutdown
A staggering 12.6 million domains on TLDs controlled by Freenom (.tk, .cf and .gq) have been shut down and no longer resolve, leading to a significant reduc ...
238
JIT WireGuard
Our fancy WireGuard setup was accumulating stale peers. Here's what we did about it.
239
Opus 1.5 released: Opus gets a machine learning upgrade
This 1.5 release is unlike any of the previous ones. It brings many new features that can improve quality and the general audio experience. That is achieved through machine learning. Although Opus has included machine learning — and even deep learning — before (e.g. for speech/music detection ), this is the first time…
240
Improving Network Performance with Linux Flowtables
We’re building an open source alternative to AWS. For IPv4 assignment and firewall rules, we use Linux’s Netfilter / Nftables. This subsystem provides a powerful way to handle packets addressed to the host. We recently came across flowtables - a network acceleration feature in the Linux kernel that works like a…