BGP.guru

Important things to know when trying to test or use MPLS Traffic Engineering in a Mikrotik RouterOS 7.x network.

I ran into a small but important detail while working with Mikrotik DHCP server lease logging: scripts only fire on new lease, or lease expiry/termination.

I did a talk about my experience going down the Anycast rabbit hole side quest at The Long Con this weekend.

I’ve been testing out using RouterOS User Manager as a RADIUS server for a small network.

Introduction A simple test of the container functionality in RouterOS 7.

Introduction MikroTik has been known in the WISP wireless world for a long time for their wireless PTP and PTMP products.

Introduction This is a story about when I had duplicate MAC addresses on a network, and the particular way the chaos ensued.

Introduction This is an example policy/config I’ve been working on for several years.

Introduction One of the complexities that comes up when you manage a large number of routers is keeping their configs all in sync.

Introduction I recently acquired a Mikrotik CCR2004-1G-12S+2XS, which is a much faster, much more modern router than the CCR1036-8G-2S+ routers I was using previously.

This is a fifth in a blog series about DNS, specifically to address changes in exabgp 4.x, and how its built in healthcheck works.

Sometimes the easiest way to geo fence an application is to just whitelist certain ISP’s networks only.

I’ve written about OpenBSD and BGP Looking Glasses previously and before that.

I had a (perhaps common) misunderstanding about how MPLS applied labels.

Introduction I ran into an strange issue today.

Introduction MikroTik has been known in the WISP wireless world for a long time for their wireless PTP and PTMP products.

I was recently read into a Problem for which the particular vendor was downplaying the severity of the issue and the usual games of Enterprising ‘saving face.’

This blog post is about an actual real life, local network situation that happened several days ago.

I’ve spent some time trying to manually install Fastnetmon community edition on Ubuntu 18.04 Bionic Beaver.

I’ve been logging BGP route updates into MySQL for some time but this doesn’t scale well, and on my hobby VM system, requires that I dump the DB and start over once a day.

This year I’ve build two totally different MPLS Service Provider networks.

Genes Telecom is an established residential and business Service Provider in Northern Manitoba.

AS112 provides an anycasted reverse DNS sink hole for the private addresses set aside in RFC1918 and RFC6890.

AS112 provides an anycasted reverse DNS sink hole for the private addresses set aside in RFC1918 and RFC6890.

I wrote a small web application which I’m calling “PSaas” – Port Scan as a Service.

OSX has a built-in TFTP server, but starting it the OSX way may not be 100% obvious to you. sudo launchctl load -F /System/Library/LaunchDaemons/tftp.plist sudo launchctl start com.apple.tftpd The default TFTP path is /private/tftpboot.

Over the past four or so years I’ve been researching BGP routing in Canada.

This is a fourth in blog series about DNS, specifically awesome things that can be done with dnsdist.

I’ve often wished for a way of logging pings when troubleshooting connectivity problems.

As part of the ISP services I operate for myself, Recursive DNS server IP addresses are part of this.

I recently setup IPv6 first-hop redundancy in my colocated environment using MikroTik and VRRP.

DDoS attacks continue to be a wide-spread problem on the internet.

General AS Information Hextet Systems (as395089) is a hobby/research ASN that I operate.

One of the things I noticed when I received a 32-bit ASN was that I was unable to use my ASN in my BGP communities.

I ran into an obscure limitation in PowerDNS 4.0 authoritative server recently.

This is a second in blog series about DNS, specifically awesome things that can be done with dnsdist.

If you’re using Slack then you should already know how easy it is to integrate almost anything into slack using its web APIs.

I recently installed VMware ESXi 6.0 Update 02 aka VMware vSphere Hypervisor on a server, and using the new VMware Host Client at https://<hostip>/ui/ was able to fully set up a Debian 8/Jessie guest using only the trial license.

I first came across dnsdist in a NANOG post in the discussion of exploitation of a BIND DOS bug last summer.

Yesterday morning the company I own, Hextet Systems, was assigned AS 395089 from ARIN’s pool of ASNs.

I operate “IPv6 Tunnels for Nerds” from my routers and route various friends some IPv6 space over MikroTik EoIP Tunnels.

Earlier this month the local Internet Exchange I’m involved with received some reports of spam coming from the MBIX Peering LAN IP space.

Genes Telecom is an established residential and business Service Provider in Northern Manitoba.

The makers of League of Legends, Riot Games, have posted a very interesting engineering blog about how they’ve engineered their AS for optimal game performance.

Otherwise known as Filtering BGP Advertisements Using BGP Communities For Fun and Profit but that made the layout terrible.

“But can you make the alerts look nicer?”

I have been using Nagios extensively to monitor infrastructure that I am interested in for about 10 years now, and each time I build a net-new Nagios monitoring system I version the configuration.

I recently renamed my internal LAN domain name.

I’ve been waiting to add some features to ipquail.com for a while, but the way in which I was handling API endpoints at the moment needed to change before I could accommodate anything fancier – at the moment I was using simple Server Side Includes (“SSI”…

This post is a guest blog by Manitoba Internet Exchange Network Administrator, Jonathan Stewart.