1711
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 3,021 posts.
1712
Surpassing 10Gb/S over Tailscale
Discover how Tailscale achieved over 10Gb/s throughput on Linux using advanced UDP segmentation and checksum optimizations. Explore benchmarks, results, and the innovations powering wireguard go's latest performance leap.
1713
More than DNS: Learnings from the 14 hour AWS outage
A thorough review of a major cloud outage.
1714
IPv6 Day Has Started
SANS.edu Internet Storm Center. Today's Top Story: The Classics Return: Vulnerable E-Mail Scripts;
1715
Most use cases of ActivityPub would be better off as Atom or RSS feeds
Most use cases of ActivityPub would be better off as Atom or RSS feeds.
1716
Envoy: 7 months later
On September 14, 2016 we announced Envoy, our L7 proxy and communication bus. In a nutshell, Envoy is a “service mesh” substrate that…
1717
The PCAP – single file with 50 different protocols
For the last couple of years, I captured many different network and upper-layer protocols and published the pcaps along with some information and Wireshark screenshots on this blog . However, it always takes me some time to find the correct pcap when I am searching for a concrete protocol example . There are way too…
1718
A Guide for WireGuard VPN Setup with Pi-Hole Adblock and Unbound DNS
I’ve used Mullvad as my VPN provider for a few years. Their service is good, they provide keys for 5 devices, rely on the Wireguard protocol, and offer alternative configurations as well. Despite that, my needs have changed and I wanted to be able to have granular control over DNS queries and the ability to connect my…
1719
Weaponizing Middleboxes for TCP Reflected Amplification
Censors pose a threat to the entire Internet.
1720
Interoperability without sacrificing privacy: Matrix and the DMA
Matrix, the open protocol for secure decentralised communications
1721
Stop Breaking TLS
Rant ahead: I hate TLS “Inspection” software with a burning passion and I wish we collectively as an industry would just knock it the fuck off and stop pretending it’s some great security benefit. Every time I encounter it, in whatever form, it’s a gigantic headache that makes everyone’s life worse off and as far as I…
1722
1723
“I survived the TCP transition” (2013)
This year we invited Vint Cerf to tell the story.
1724
Using WebTransport
The WebTransport API offers low-latency, bidirectional, client-server messaging. Learn about its use cases, and how to give feedback about the future of the implementation.
1725
1726
A M.2 HDMI capture card
Have you ever looked at an NVMe drive and thought to yourself, 'Hey, this would be 31.7% cooler with HDMI ports?'
1727
Details of yesterday's Bunny CDN outage
To say we are disappointed would be an understatement, but we want to take this opportunity to learn, improve and build an even more robust platform.
1728
Ethernet History Deepdive – Why Do We Have Different Frame Types?
In my previous post Encapsulation of PDUs On Trunk Ports , I showed what happens to PDUs when you change the configuration of a trunk. You may have noticed that there are typically three different types of Ethernet encapsulations that we see:
1729
Submarine cable resilience
The estimated 1.5M kilometres of subsea communications cables underpins our global telecommunication services. This critical infrastructure faces serious challenges in the coming years.
1730
Superhighway84 – a Usenet-inspired decentralized internet discussion system
Superhighway84 is a USENET-inspired decentralized internet discussion system, featuring a retro text user interface and powered by IPFS and OrbitDB.
1731
1732
AWS NLBs and the mixed up TCP connections
One of my services was running into timeouts, because connections were being reset by clients. I had assumed that it couldn't be the Network Load Balancers (NLB
1733
TCP is harder than it looks
It's easy to write a TCP stack that works with most traffic. It's harder to write one that interoperates properly with every strange or buggy device that's out there.
1734
Things we finally know about network queues (2017)
How big should your queue be, and what should you do when it fills up? Many times, we implement or even deploy a networking system before w...
1735
How to get a free .arpa domain
Learn how to get a free .arpa domain by abusing IPv6 reverse DNS delegations on Hurricane Electric, configuring deSEC, and hosting a live website.
1736
It’s time to stop using SMS for security
By now most infosec professionals are aware of various ways SMS text messaging can be hijacked. For example so-called “SIM Swap” attacks…
1737
I'm blocking connections from AWS to my on-prem services
The direct result of bulletproof infrastructure / cloud providers which are "too big to fail" is the balkanized internet . I don't think this has fully come to pass, but it might be starting to happen or might come to pass soon.
1738
Discord Reduced WebSocket Traffic by 40%
How we rolled out zstandard and other improvements across our gateway cluster to reduce the amount of bandwidth that’s used by our clients.
1739
1740