181
182
Streaming Video and Audio with Low Delay
Data sent over the Internet will traverse a large number of smaller links. The combination of these links forms a path from the sender to the receiver. Sometimes data is lost when it traverses this path. For video and audio streams such losses can lead to playback glitches if not corrected.
183
Progressive web apps are coming to iOS 11.3: Cupertino, we have a problem
IMPORTANT: iOS 11.3 final version is now published. Check my updated article on the topic: Progressive Web Apps on iOS are here
184
185
The Matrix.org 2018 year in review
Matrix, the open protocol for secure decentralised communications
186
187
Generate ASCII RFC-like header diagrams for your own custom protocols
Protocol is a command-line tool to display ASCII RFC-like protocol header diagrams for both existing network protocols or user-defined ones (using a very simple syntax). Protocol is written in Python and it's open-source software.
188
Reverse Shell from an OpenVPN Configuration File
While doing background research on OpenVPN I stumbled upon an interesting question on Stack Exchange.
189
The rise of multivector DDoS attacks
It's been a while since we last wrote about Layer 3/4 DDoS attacks on this blog. This is a good news - we've been quietly handling the daily onslaught of DDoS attacks. Since our last write-up, a handful of interesting L3/4 attacks have happened. Let's review them.
190
Introduction to HAProxy ACLs
A practical guide to HAProxy ACLs. Learn the syntax and follow step-by-step examples to block traffic, redirect users, choose backends, and enhance security.
191
Discovering Issues in HTTP/2 with Chaos Testing
via Chaos Engineering we discovered that there are situations where HTTP/2 will perform worse than HTTP/1.
192
Apparent use of Sandvine devices for malicious or dubious ends in two countries
This report describes our investigation into the apparent use of Sandvine/Procera Networks Deep Packet Inspection (DPI) devices to deliver nation-state malware in Turkey and indirectly into Syria, and to covertly raise money through affiliate ads and cryptocurrency mining in Egypt.
193
194
Eve Online Chat Is Moving to Ejabberd
I am player at heart. I do not have time to play much, but since my young years, I have always been fascinated by gameplay mechanisms, to…
195
Anatomy of a DNS Lookup – Part II
and determined that most programs reference /etc/resolv.conf along the way to figuring out which DNS server to look up.
196
Wireguard VPN: Typical Setup (2017)
I recently discovered the awesome Wireguard VPN tunnel and I was sold. Wireguard is a simple, kernel-based, state-of-the-art VPN that also happens to be ridiculously fast and uses modern cryptographic principles that all other highspeed VPN solutions lack.
197
The real reason for large DDoS attacks? It's IP Spoofing, not memcached
A week ago we published a story about new amplification attacks using memcached protocol on UDP port 11211. A few things happened since then: Github announced it was a target of 1.3Tbps memcached attack. OVH and Arbor reported similar large attacks with the peak reported at 1.7Tbps.
198
Fixing an old hack – why we are bumping the IPv6 MTU
Back in 2015 we deployed ECMP routing - Equal Cost Multi Path - within our datacenters. This technology allowed us to spread traffic heading to a single IP address across multiple physical servers.
199
The hidden cost of QUIC and TOU (2016)
Some new proposed protocols will encrypt the transport layer headers. Encryption is good, so more encryption must be better, right? Unfortunately there's going to be a huge hidden cost that'll be paid by anyone troubleshooting networking problems.
200
201
Dweb: Building a Resilient Web with WebTorrent
The web is healthy when the financial cost of self-expression isn’t a barrier. This installment of the Dweb series describes WebTorrent – an implementation of the BitTorrent protocol that runs ...
202
RPKI – The required cryptographic upgrade to BGP routing
We have talked about the BGP Internet routing protocol before. We have talked about how we build a more resilient network and how we can see outages at a country-level via BGP. We have even talked about the network community that is vital to the operation of the global Internet.
203
Cloudflare Browser Check
Secure DNS Transport using DoH (DNS over HTTPS) or DoT (DNS over TLS) and SNI with ECH
204
Encrypt it or lose it: how encrypted SNI works
Today we announced support for encrypted SNI, an extension to the TLS 1.3 protocol that improves privacy of Internet users.