The key to any secure network in stopping 100% of UDP-based DNS amplification DDoS attacks is simple: follow BCP38. You ask, “but it’s 2014, and BCP38 came out in 2000, why bring it up?” Well, simply not enough networks are following the Best Common Practice. Why I Bring Up BCP38 This last week saw the […]
Stopping Amplification DDoS Attacks – BCP38 Basics Read More »
A few months back, I wrote an article called DNS for Network Engineers. Basically, it is a back-to-basics look on what each of the DNS record types were, and a few examples of what they looked like using Dig. Well, the feedback I received was a desire for more Dig. So I give you: Learning
DNS Part 2: Learning Dig Read More »
OSPFv3 AF Authentication is finally fixed! Unless you are a regular follower of this blog, you may not have heard that Cisco’s OSPFv3 with Address Families (AF) Authentication support was broken. By broken I mean it took down OSPFv3 adjacencies. Not good. Read here for that article. Anyway, I have been using the IOS-XE version
Cisco OSPFv3 AF Authentication Fixed! Read More »