BGP.guru

BGP.guru

A Nerd blog.

10 Aug 2014

BGP Hijacking In News Again

Canadian ISP hijacks 51 prefixes to redirect cryptocurrency miners via unfiltered AS6939 peer: bogon routes, more-specifics targeting Digital Ocean/AWS, and lessons in prefix filtering failures.
03 Aug 2014

Deploying Fail2Ban using SaltStack

Automating fail2ban deployment with SaltStack: using state files and custom jail.local configs to protect SSH on public-facing Debian systems, with centralized ban time management across DigitalOcean droplets.
28 Jul 2014

Well Executed Network Upgrades

Migrating from Cisco 3750G to Brocade ICX6610 core: six months of planning, lab testing spanning-tree interop, port-for-port migration strategy, VRRP implementation, and minimal post-change issues.
23 Jul 2014

Deploying a Nameserver at DigitalOcean in 2 minutes

Rapid deployment of slave nameservers on DigitalOcean VMs using SaltStack automation: scripted setup from initial VM creation through salt-minion configuration and state.highstate execution across multiple regions.
10 Jul 2014

Brocade ICX Basics

Brocade ICX6430/6610 fundamentals: VLAN-centric port configuration (versus Cisco's port-centric approach), default-vlan-id behavior, dual-mode for voice/data, and key differences between access/trunk/dual-mode port types.