#nat

Weekend Reads

• Inside an Internet shutdown https://labs.ripe.net/author/mdkamruzzaman-khan-2/inside-a-shutdown-bgp-evidence-from-an-operator-who-was-there/
• Inferring shared IP addresses https://burdantes.github.io/assets/pdf/multi_user_ip-sigcomm.pdf
• BGP origin attribute manipulation https://blog.cloudflare.com/bgp-origin-attribute/
• IP reassembly congestion DoS attacks https://cispa.saarland/group/rossow/papers/FragJam-usenix2026.pdf
• Operators on academic BGP security solutions https://pure.mpg.de/rest/items/item_3719779_1/component/file_3719780/content

#InternetShutdown #NAT #BGP #DoS #RPKI

I do want need the ssl proxy on the edge - going to have to reconfig/splice a machine in , I need to paint a desktop and compact setup, get more structured wiring going on#nat in 4 steps #transparent bridge #sslstrip #caching proxy

Instead of a #portforward / #nat you shall just open ports with IPv6. If you have a dynamic prefix this is an example of how such rule looks like. So it will even continue to work when you receive a new prefix. Just make sure your DNS keeps pointing to the right address and BAM, you're a server operator, even on a dynamic prefix. Have phun with #OpenWrt and #IPv6