TSPU Checker: How I Built a Tool for Diagnosing Blockages
In this article I will share how we developed a diagnostic tool from scratch to analyze TSPU operation in Russian networks. The script can identify blocking modes, check…
Network
Explore the latest trends, reviews, and news in network technologies. Stay updated on advancements in networking, including hardware, software, and security.
Simply About the Complex. All You Wanted to Know About SFP Modules. Part 5. SFP Modules with WDM/CWDM/DWDM Multiplexing Technologies
Greetings, colleagues! It’s @ProstoKirReal again. In previous articles, I discussed with you the operation and development history of SFP modules, their DAC and AOC alternatives,…
DNSSEC Validation in Go: I Wrote My Own Validator and Didn't Go Completely Crazy
I'm building VantageDNS, a privacy-focused recursive DNS resolver with filtering. The edge frontend is written in Go, has 10 nodes worldwide, and uses Miek's miekg/dns…
Why GearUP Booster Is Faster Than VPN and How Similar Game Boosters Work
There is a category of services such as GearUP Booster, ExitLag, NoPing, LagoFast and similar tools. They promise to lower ping, eliminate packet loss and allow playing…
Online migration of EVPN-VXLAN fabric between data centers: euNetworks → QupraDC without service downtime
Our network engineer Rene wrote a two-part article about how to properly launch a small site with minimal hardware, and then organize its seamless migration between data…
Balancing incoming traffic on bare metal: how to reliably expose Kubernetes externally with MetalLB, BGP and L2
External access to Kubernetes on bare metal is often a major headache: NodePort with random non-standard ports is not production-ready, and no cloud load balancer is…
Why ports became "doors" to the server, and who decided that SSH will be 22
In 1995, Tatu Ylonen wrote a post-length letter on Habr and for free got the ssh -p 22 user@host number, which every sysadmin now knows. But before that, ports were unidirectional,…
3 Tbps in plain terms: why DDoS became a threat to any business in 2026
In Q1 2026, Russia faced DDoS attacks exceeding 3 Tbps for the first time. Attacks have become shorter, smarter and more dangerous, and it is no longer possible to defend…
The Cost of a Single Typo: How Three Wrong Letters Foiled a Billion-Dollar Cyber Heist
SWIFT system hacks often seem like something out of Hollywood fantasy, but in 2016 the Lazarus group proved the opposite. In this article we break down step by step the…
QNAME Minimization in Practice: RFC 7816, Implementation, Pitfalls
When you open mail.google.com, your recursive resolver takes three to four steps: it queries the root server, then the TLD server, then the authoritative server for google.com,…
Browser Anonymity and Fingerprinting Risks
Many have long thought that browser privacy means incognito mode, a couple of ad blockers, and clearing cookies. While writing material about browser fingerprinting,…
NetCraft: Castle Capture, Orcs, and BGP. How We Developed a Strategy for Network Engineers
I am Dmitry Kiselev, head of the service support group for data transmission solutions at Infosystems Jet and creator of the internship program in the team. Today I will…
IT monopolies are racing to merge with the state: who is faster?
Over the past decades, we have somehow all gotten used to living in a cozy IT world – our own, closed world, practically devoid of flaws. And in this world, there was…
Features of Network Information Protection System Architecture Using Keycloak
The development of digital services, cloud platforms, distributed corporate systems, and API infrastructure significantly complicates the tasks of ensuring information…
ML IPS in Ideco NGFW: signature-less protection against zero-day attacks
In 2020, during the recommended "remote work," we at Ideco reshaped the entire product roadmap and quickly released Ideco UTM VPN Edition - a version with enhanced capabilities…
SD-WAN + NGFW: why the gap between network and security costs dearly
Integration of SD-WAN and NGFW has long been the norm among Western vendors, but in Russia, network and information security teams still often operate in different consoles.…
Failover Load Balancer 3proxy for n8n in Docker: Fixing DNS Timeouts and Access Errors
Setting up a failover load balancer 3proxy for n8n in Docker. We fix 26-second DNS lags through the internal resolver 127.0.0.11 and resolve the Permission denied issue…
Building a VPN Resistant to Spyware
In the previous article, we discussed some measures users can take against spyware that detects VPN usage and leaks data to "Big Brother."
