Job Snijders @job@bsd.network
Pinned post
Job Snijders
boosted
Does anyone know anyone at Debian to help get this merged?
I wrote a tiny patch for Debian's "sqlite3-tools" package: with my patch the sqlite3_rsync utility (which is already included in the source tarball) will be build & installed. For completeness sake I also included a man page.
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1142081#15
I'm sharing my inaugural Global RPKI Report on the state of the RPKI from July to September 2026. This series covers scalability and reliability of the global RPKI distributed database, incidents in certification authority and trust anchor operations, developments in standardization forums, and news from the field itself. Enjoy! https://bsd.nl/publications/Global_RPKI_Report_2026_Q3.pdf
I wrote up some “good-to-know” things about ASPA and RTR v2, and explain that upgrading to RTR v2 is beneficial even if you don’t plan on doing ASPA verification. (RTR v2 fixes some nuisances for ROA payload distribution!) https://blog.qrator.net/en/ASPA-what-to-expect_229/
Job Snijders
boosted
vmm(4)/vmd(8) gain support for multi-processor VMs https://undeadly.org/cgi?action=article;sid=20260927115632
Job Snijders
boosted
OpenBSD gains new networking daemon - rtrd(8) https://undeadly.org/cgi?action=article;sid=20260927120124
As of today, UTF8 in the RPKI is no more https://mailarchive.ietf.org/arch/msg/sidrops/83P_HvjefnvL5jUxtedSMvUNUlc/
Job Snijders
boosted
Job Snijders
boosted
After briefly leaking the NLNOG Kahoot results, Job Snijders quickly regained his composure and presents a more philosophical talk on How to change the Internet?
We are enjoying the afternoon at #nlnog day 2026.
A few hours ago rpkiviews.org saw the global RPKI cross the magical milestone of ONE MILLION unique ROA payloads. 💪 🔐
New idea! A method to mitigate DoS attacks by using a well-known BGP community named "DOWNGRADE" as signal to neighboring networks to treat traffic destined towards "DOWNGRADE" tagged IP prefixes with low QoS precedence. Using "downgrade" is an alternative to RTBH filtering, because RTBH completes the DoS attack and makes defenders blind.
Internet-draft here https://datatracker.ietf.org/doc/html/draft-spaghetti-grow-downgrade-bgp-community
Love the JetKVM functionality, but it lacks WiFi and I dislike tripping over the cable. Who can recommend me a similar thing with built-in WiFi client?
Job Snijders
boosted
Meet the first cohort of the #SovereignTechStandards network! Antoine d’Aligny, @dansup, @minipgp6, @job, Kacper Dalach, @lolaodelola, Marten Seemann, @miri64, @jugglinmike, and Stephen Curran bring hands-on expertise from critical, open source infrastructure into standards development. Their work will help shape more secure and more interoperable technology.
(1/2)
Job Snijders
boosted
An RPKI ROV laggard no more, China's ROA coverage jumped from 4% to 81% since April, a major advance in the country's BGP security.
@job and I break down the numbers behind China's unprecedented ROA rollout, now covering nearly the entire country.
https://www.kentik.com/blog/china-rolls-out-the-roas/
Job Snijders
boosted
RFC2544 (Benchmarking Addresses) lays out
The network addresses 192.18.0.0 through 198.19.255.255 are have been
assigned to the BMWG by the IANA for this purpose.
Except, this was a typo, the actual address space was 198.18.0.0 through 198.19.255.255
It seems that at the moment Oracle owns 192.18.0.0/15 , and they are not announcing it, I suspect because there are a non zero amount of things that have accidentality put that in filters
Job Snijders
boosted
Open source maintainers build the critical digital infrastructure the world relies on, and open standards define how that infrastructure functions across systems. When the people who implement these technologies help write the standards, this results in better, more secure, and more interoperable technology: improving both our daily digital lives and our ability to understand and adapt technology.
(1/3)
Here is a 38 minute postcast on the Erik synchronisation protocol - might be fun to listen to better understand the data syncing problem space! https://blog.apnic.net/2026/06/11/podcast-the-erik-protocol-improving-rpki-data-fetch/
This is a graph of IP NETWORK TRAFFIC towards China, correlating netflow/BGP/RPKI data. You can see that the vast majority of traffic now is protected by RPKI ROAs.
Looking at merely prefix count or IP address count doesn’t always tell the full story, this Kentik data provides a third view, corroborating that China really went all-in on RPKI.
