#RUNBSD! But BoxyBSD now also starts to support #Linux! We're starting soon with the Linux support for already present users, offering free boxes:

* #AlmaLinux
* #Alpine
* #Debian
* #Devuan
* #CentOS
* #Fedora
* #Gentoo
* #OpenSuse
* #OpenEuler
* #RockyLinux

Just next to our core OS like #FreeBSD, #OpenBSD, #NetBSD, #MidnightBSD and #DragonflyBSD (and #illumos). This should also make the step easier to compare and test different scenarios where BSD provides a different behavior compared to Linux systems.

Thanks to @gyptazy for the implementation!

Talking about #BGP again.

Surprisingly, it wasn't DNS. It was BGP.
#BGP #ItWasBGP

#BGP #routage Hier, Cloudflare a cessé d'annoncer son préfixe 1.1.1.0/24 (pour une raison inconnue). Les nombreuses annonces « pirates » de ce préfixe ont alors été davantage visibles, amenant certains, apparemment à tort, à croire qu'elles étaient la cause de la panne du résolveur #DNS 1.1.1.1.

https://mastodon.gougere.fr/@bgp/114856050719978352

Car, oui, il y a encore des réseaux (Tata, par exemple) qui annoncent ce préfixe, qui ne leur appartient pourtant pas.

When your free service (@BoxyBSD) kicks you out of bed on a Saturday morning.

The monitoring just alerted me about a potential abuse at my free hosting project and indeed - much traffic from a single user but luckily legit traffic.

Better safe than sorry.

We're also #newhere

Who are we? An #internetprovider and IT company somewhere between sauna (Finland) and cheese (Switzerland) – offering internet and data center services in DE/AT/CH/LI and in BE/NL SE / FI.

And you’ll often find our folks at #RIPE events, #Chaos gatherings, and similar meetups.

We’d say #DSL #FTTH #FTTO #BGP #COLO #Transit #5G #Peering are probably the keywords.

So for the #IPv6 #MTU issues we seemed to stumble over at @ffhl, with our asymmetric #BGP routes to/from @FreifunkHamburg / @freifunkMUC I now wrote a small bash script to test a list of websites with varying, asymmetric MTUs: https://github.com/T-X/ipv6-path-mtu-discovery-verifier/. There is a suspicious amount of #Microsoft websites for the failed tests at the bottom.
Next steps would be to add analyzing of #tcpdump captures. But in a few samples it seemed like those sites did not receive / react to our #ICMPv6 Packet Too Big

#introduction

We are a US 501(c)(3) nonprofit supporting network operations, Internet research, and security communities with systems, data, and analysis.

We operate a global network of services including sensor and measurement nodes on over 100 different hosting providers.

We are known for our experience in #BGP, #DNS, information security, network measurement, and Internet infrastructure operations.

Any #network engineers out there looking for a job? I'm looking for one or two good engineers to help me build a global network to make our company #selfhosted. Currently have PoPs in 7 countries with plans to expand.

Need to know #bgp, #mpls, #ospf and #vxlan. #linux and #automation skills are useful too.

The position is #fullyremote with occasional travel for hardware installs and maintenance.

Send me your CV or just DM me if you're interested.

Cybersecurity takes a big hit in new Trump executive order https://arstechni.ca/Jmna #quantumcomputing #executiveorders #encryption #WhiteHouse #Security #Biz&IT #Policy #Trump #post #BGP

Cybersecurity takes a big hit in new Trump executive order - Cybersecurity practitioners are voicing concerns over a rece... - https://arstechnica.com/security/2025/06/cybersecurity-take-a-big-hit-in-new-trump-executive-order/ #quantumcomputing #executiveorders #encryption #whitehouse #security #biz⁢ #policy #trump #post #bgp

We love our independence, which is why we're now on our own Mastodon instance at social.nlnetlabs.nl! #OpenSource #DNS #BGP

I couldn't have written it better. Those, who are aware of the #AfriNIC dispute on #IPv4 address space should read this LinkedIn post.

I quote Ben Roberts, the originator of the post:

"An important Message to all AfriNIC Members who are holding IP resources from AfriNIC. There is currently a very important election process ongoing to elect a new Board of Directors. The outcome of this election is pivotal to the future of AfriNIC. Make your vote count.

All IP Resource Holders who are up to date on their bill payments are entitled to vote, but the voting takes place on 23rd Jun at a PHYSICAL MEETING in Mauritius.
ONLINE Voting is available but you MUST REGISTER to online vote BY TUESDAY 2nd JUNE (3 Days Time)

PROXY Voting is available to a proxy who will be present at the Mauritius meeting but for that you MUST REGISTER your proxy vote vote BY 9th JUNE

Further details...
https://lnkd.in/dcYzkuyy

-Registration of e-voters open from 28 April to 2 June 2025 and Proxy closure on 9 June 2025.

-The e-voting election period is from 16 June to 23 June 2025.

-For the purpose of having a smooth running of the voting on the Election
Day 23 June 2025, we encourage Members to clear any outstanding invoices and to ensure that they are in good standing status no later than 16 June 2025 at 23:59 MUT."

Read here for more details on the election process

Exodus of IPv4 from War-torn Ukraine
My latest for @kentikinc on how the war has shrunk the country's footprint in the global routing table, as Ukrainian providers lease IPv4 space to raise critical funds. #BGP

https://www.kentik.com/blog/exodus-of-ipv4-from-war-torn-ukraine/

In my presentation on our #DNSSEC signer Nameshed at the CENTR Jamboree, I emphasized the cross-pollination of experience and code between teams and projects, allowing us to make fast progress with battle tested code.

So when @terts opened the Nameshed #DNS project, he came across his ‘roto’ code - the scripting language he developed for our #BGP engine Rotonda. #OpenSource #rustlang

Does this make sense? Like would an IPv6 Router Advertisement contain essentially other internal gateways on the layer 3 network?

I'm thinking that not all clients should have to run BGP and peer just to get the gateways to the other subnets.

Looks like there's no way to wire up FRR to the RA options in OPNsense, and I'm not sure RAs support this (though it seems logical).

#BGP Vous connaissez le préfixe IP 67.204.16.0/22 ? C'est un des rares dans la table de routage mondiale qui a comme origine non pas un AS mais un ensemble d'AS (un AS_SET). Ce nouveau #RFC dit qu'il ne faut plus faire ça.

https://www.bortzmeyer.org/9774.html

Took a while but I've discovered what I want/need for IPv6 dynamic iBGP peering with Cilium just isn't possible without hacking around OPNsense a bit.

Well, at least I *know* now it's not doable. Tweaking settings semi-blindly and poking logs wasn't exactly fulfilling.

As is par for the course I've found the GitHub issue for it closed by a stalebot.

A new release of Rotonda, our composable, programmable #BGP engine, is now available. Version 0.4.0 'Bold and Undaunting Youth' features and #RPKI RTR component, as well as Route Origin Validation on incoming routes. https://github.com/NLnetLabs/rotonda/releases/tag/v0.4.0