galliher

6 ms·

1. 1.▲
   by galliher 2y ago

   It’s still imperfect AFAIK. Your provider may or may not have upstream routers speaking BGP and running RPKI validation at ASN boundaries which validate prefixes against certificates blessed by the appropriate RIRs (maybe analogous to CAs
2. 2.▲
   by galliher 2y ago

   > faster Check out {send,recv}mmsg before something io_uring-ish imho. One syscall/ctxt, many packets.
3. 3.▲
   by galliher 6y ago

   Agreed, it's flimsy. Certainly a bit more effort for them spoof it correctly though. Would need to watch traffic on the path back per flow to isolate the number of prior decrements to the TTL leading up to MitM, and then store that v
4. 4.▲
   by galliher 6y ago

   This is pretty clever! The reset within airtel_103.224.212.222_fullhd720.com.pcap arrives with IP time-to-live of fifty-seven while the segment carrying synchronize | acknowledge flags arrived with a time-to-live of forty-four. So without
5. 5.▲
   by galliher 9y ago

   The "Connection Tracking" portion of http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-net... provides some insight here and describes a method to avoid connection tracking in EC2's fire