Noction Flow Analyzer v23.05 is here. This version comes with a number of new features...
Diverting DDoS traffic using the FlowSpec redirect via VRF capability. Configuration example.
In the previous article, we described different DDoS attacks and their impact on network infrastructure. We focused on...
BGP traffic rerouting, Flowspec, and the DDoS Scrubbing Centers
When it comes to distributed denial-of-service (DDoS) attacks, they are far from a downward trend. Although the...
Optimizing BGP convergence
When there is a change in the reachability of one or more prefixes, BGP needs to do some work to adapt to that change...
BGP and OSPF. How do they interact?
OSPF and BGP: Differences and Interactions When it comes to routing protocols, two of the most popular are OSPF (Open...
IPv6 Link-Local Next Hop Capability for BGP
When it comes to IPv6, there are several categories of IPv6 addresses, each with its own use case. For example, IPv6...
The Number of the Beast or the Practical usage of the Blackhole Community
BGP blackhole filtering is a routing technique used to drop unwanted traffic. Black holes are placed in the parts of a...
BGP community-based traffic engineering
BGP community attribute is a transitive optional attribute that we use for tagging (marking) a set of prefixes sharing...
IP Transit and the Tiers of Transit Providers
The Internet consists of Internet Service Providers (ISPs) of all shapes and sizes. ISPs have two options when it...
The tightening of Internet control in Russia and potential Internet isolation tech intricacies
The Internet is for everyone, yet not everyone accepts that. In light of the news about Cogent Communications and...
BGP Anycast Best Practices & Configurations
What is Anycast? Anycast is not a new version of IP or the latest networking technology. The RFC 1546 describing...
BGP YANG Model and Configuration
YANG Data Modeling Language Yet Another Next Generation (YANG) RFC 6020 is standard-based data modeling language for...
The dark side of BGP community attributes
A while ago, RIPE Labs published the two-part article BGP Communities - A Weapon for the Internet. That may have been...
BGP peer groups, dynamic update peer groups and BGP templates
As a router gains more and more BGP neighbors, two issues arise. The first one is that with many neighbors, whenever...
BGP errors, BGP error codes, and BGP error handling
In this blog post we’ll be looking at BGP errors. For that, our first question should be: is there an error, or is...
BGP – the right tool for so many jobs
Like other very successful protocols such as HTTP and DNS, over the years BGP has been given more and more additional...
BGP security: an overview of the RPKI framework
The Resource Public Key Infrastructure (RPKI) system is a way to couple an IP address range to an autonomous system...
The 768k or Another Internet Doomsday? Here’s how to deal with the TCAM overflow at the 768k boundary.
On August 8th, 2014 some ISPs experienced a phenomenon called the “512k Day”. The global BGP routing table, which...
BGP Labeled Unicast (BGP-LU)
This blog post discusses BGP Labeled Unicast (BGP-LU) which is used in multi-regional networks to carry the label...
Recursive Lookup in BGP
The aim of this article is to discuss the importance of Recursive Lookup in BGP. First of all we need to understand...
Accumulated IGP and BGP
RFC 7311 defines an optional non-transitive BGP attribute called the Accumulated IGP Metric Attribute (AIGP). As we...