# LAN

Published articles for LAN.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Breaking Fault Lines: Unifying TEE-Assisted BFT Consensus in Partially Trusted Worlds

DevFeed: [Breaking Fault Lines: Unifying TEE-Assisted BFT Consensus in Partially Trusted Worlds](<https://devfeed.tech/articles/breaking-fault-lines-unifying-tee-assisted-bft-consensus-in-partially-trusted-worlds-119088.md>)

Original publisher: [Read original article](<https://arxiv.org/abs/2609.09742>)

Author: Xiaoqing Wen, Tong Liu, Jianyu Niu, Jialin Li, Cong Wang, Yinqian Zhang, Chen Feng

Published: 2026-11-05T05:00:00Z

Content type: article

Language: en

Sources: [arXiv: Distributed Computing](<https://devfeed.tech/sources/arxiv-distributed-computing.md>)

Topics: [Distributed Systems & Parallel Computing](<https://devfeed.tech/topics/distributed-systems-parallel-computing.md>), [consensus algorithm](<https://devfeed.tech/topics/consensus-algorithm.md>), [Confidential Computing](<https://devfeed.tech/topics/confidential-computing.md>), [performance-engineering](<https://devfeed.tech/topics/performance-engineering.md>)

Tags: [bft-consensus](<https://devfeed.tech/tags/bft-consensus.md>), [consensus](<https://devfeed.tech/tags/consensus.md>), [cs-dc](<https://devfeed.tech/tags/cs-dc.md>), [fault-tolerance](<https://devfeed.tech/tags/fault-tolerance.md>), [hardware](<https://devfeed.tech/tags/hardware.md>), [intel](<https://devfeed.tech/tags/intel.md>), [lan](<https://devfeed.tech/tags/lan.md>), [latency](<https://devfeed.tech/tags/latency.md>), [performance](<https://devfeed.tech/tags/performance.md>), [protocol](<https://devfeed.tech/tags/protocol.md>), [quorum](<https://devfeed.tech/tags/quorum.md>), [resilience](<https://devfeed.tech/tags/resilience.md>), [tee](<https://devfeed.tech/tags/tee.md>), [throughput](<https://devfeed.tech/tags/throughput.md>), [trust](<https://devfeed.tech/tags/trust.md>), [wan](<https://devfeed.tech/tags/wan.md>)

### AI overview

The paper derives a tight resilience bound for BFT deployments with arbitrary partial TEE coverage: f < max{n/3, m/2}, where n is total replicas and m are TEE-enabled replicas. It reports that TEEs improve fault tolerance only when they exceed two-thirds of the deployment. Its protocols combine TEE-only and mixed quorums and use a TEE-leader fast path based on hardware-enforced non-equivocation to reduce consensus and view-change latency. Raftel and its pipelined variant, chained-Raftel, are implemented on Intel SGX and evaluated in LAN and WAN settings. In WAN tests, Raftel reaches up to 625 TPS with latency below 670 ms, and exceeds HotStuff throughput by up to 308 TPS while approaching fully TEE-assisted protocols. These are abstract-level reported results; no evaluation details are provided here.

### Source excerpt

arXiv:2609.09742v3 Announce Type: replace Abstract: This paper revisits TEE-assisted BFT under a universal partial-TEE model, where an arbitrary subset of replicas execute inside TEEs while the remaining replicas operate without hardware trust guarantees. We show that heterogeneous trust changes the structure of quorum formation and fault tolerance. In particular, we derive a tight resilience bound f < max {n/3, m/2}, where n is the total number of replicas and m is the number of TEE-enabled replicas. The result reveals a sharp threshold phenomenon: TEEs improve fault tolerance only once they exceed two-thirds of the deployment. Guided by this characterization, we introduce two protocol principles: (1) a dual-quorum construction that safely combines TEE-only and mixed quorums, and (2) a TEE-leader fast path that leverages hardware-enforced non-equivocation to reduce both consensus and view-change latency. We realize these ideas in Raftel, which is, to our knowledge, the first HotStuff-style BFT protocol designed explicitly for arbitrary partial-TEE deployments, and in chained-Raftel, a pipelined variant that further accelerates mixed-trust execution. We implement both protocols atop Intel SGX and evaluate them in LAN and WAN environments. Our results show that Raftel achieves up to 625 TPS with sub-670 ms latency in WAN settings, outperforming HotStuff by up to 308 TPS in throughput while approaching the performance of fully TEE-assisted protocols.

## NaaS hasn't lived up to the hype. Is it still worth it?

DevFeed: [NaaS hasn't lived up to the hype. Is it still worth it?](<https://devfeed.tech/articles/naas-hasn-t-lived-up-to-the-hype-is-it-still-worth-it-112982.md>)

Original publisher: [Read original article](<https://www.networkworld.com/article/4242904/naas-hasnt-lived-up-to-the-hype-is-it-still-worth-it.html>)

Author: Maria Korolov

Published: 2026-11-02T13:37:45Z

Content type: comparison

Language: en

Sources: [Network World](<https://devfeed.tech/sources/network-world.md>)

Topics: [Cloud Networking](<https://devfeed.tech/topics/cloud-networking.md>), [Managed Services](<https://devfeed.tech/topics/managed-services.md>), [network device monitoring](<https://devfeed.tech/topics/network-device-monitoring.md>), [upgrade](<https://devfeed.tech/topics/upgrade.md>)

Tags: [2021](<https://devfeed.tech/tags/2021.md>), [2025](<https://devfeed.tech/tags/2025.md>), [2026](<https://devfeed.tech/tags/2026.md>), [access-points](<https://devfeed.tech/tags/access-points.md>), [adoption](<https://devfeed.tech/tags/adoption.md>), [aging](<https://devfeed.tech/tags/aging.md>), [cables](<https://devfeed.tech/tags/cables.md>), [connectivity](<https://devfeed.tech/tags/connectivity.md>), [coverage](<https://devfeed.tech/tags/coverage.md>), [deep](<https://devfeed.tech/tags/deep.md>), [edition-us](<https://devfeed.tech/tags/edition-us.md>), [end-of-life](<https://devfeed.tech/tags/end-of-life.md>), [enterprise](<https://devfeed.tech/tags/enterprise.md>), [enterprise-networking](<https://devfeed.tech/tags/enterprise-networking.md>), [equipment](<https://devfeed.tech/tags/equipment.md>), [gartner](<https://devfeed.tech/tags/gartner.md>), [hardware](<https://devfeed.tech/tags/hardware.md>), [it](<https://devfeed.tech/tags/it.md>), [lan](<https://devfeed.tech/tags/lan.md>), [language-en](<https://devfeed.tech/tags/language-en.md>), [latest](<https://devfeed.tech/tags/latest.md>), [leadership](<https://devfeed.tech/tags/leadership.md>), [networking](<https://devfeed.tech/tags/networking.md>), [storytype-feature](<https://devfeed.tech/tags/storytype-feature.md>)

### AI overview

NaaS adoption remains below Gartner's 2021 forecast: its 2026 networking hype cycle puts market penetration at 1%-5%. At Rivers School, Meter replaced a piecemeal LAN upgrade with a turnkey service: it surveyed, designed, installed, and now maintains Meter-owned equipment. The school reports better coverage, performance, security, visibility, and easier support, with included service calls and potential long-term savings. Outdoor coverage is limited because Meter bills by square footage. Gartner cautions that consumption pricing can be unpredictable, NaaS may cost more than capital-funded networks, and supplied hardware creates platform lock-in; a working network may not justify replacement. Analysts also cite campus hardware needs, reduced flexibility, unclear definitions, and risk of billing surprises. The excerpt distinguishes more-developed WAN offerings from full traditional WAN capabilities and notes that NaaS adoption and maturity figures vary by survey measure.

### Source excerpt

In 2021, Gartner expected a promising future for Network as a Service (NaaS). At the time, adoption accounted for less than 1% of enterprises, and Gartner expected that number to rise to 15% by 2024. Instead, in Gartner's latest hype cycle for networking, NaaS is still at 1% to 5% market penetration. That's short of Gartner's earlier expectations. In fact, Gartner places NaaS deep in the "trough of disillusionment" in its 2026 Hype Cycle for Enterprise Networking. Making the case for NaaS NaaS has been working out for the Rivers School, which has a 55-acre campus in eastern Massachusetts that's home to a preparatory school and a music conservatory, totaling more than 1,700 students combined. John Adams, Rivers' director of technology and innovation, came on board in the summer of 2024, and upgrading the school's aging LAN was his top priority. At the time, the school had a network with 115 Wi-Fi access points, plus switches, routers, cables, and two ISPs providing connectivity. "Our entire switch inventory needed to be replaced, and about one-third of the access points were end-of-life as well," Adams says. "I made a pitch to our senior leadership that we needed to make an update," he says. After the board approved the request and allocated a budget, Adams went out to research options. The initial plan was to upgrade the equipment the school already had starting with the most out-of-date hardware first, improve coverage and performance, improve the security, and to try to do it all without adding headcount. There was one employee managing the network, with nobody else on the five-person technology team qualified to help, so, ideally, the new system would also allow someone to step in and take on some of the work if necessary. Instead of a piecemeal update to the existing setup, Rivers opted for NaaS, picking one of the two major vendors in the space, Meter. The final decision was made in late spring of 2025, and the new network was up and running by the time classes

## CVE-2026-61546 - AnkiMCP: DNS rebinding reaches unauthenticated local AnkiMCP HTTP tools

DevFeed: [CVE-2026-61546 - AnkiMCP: DNS rebinding reaches unauthenticated local AnkiMCP HTTP tools](<https://devfeed.tech/articles/cve-2026-61546-ankimcp-dns-rebinding-reaches-unauthenticated-local-ankimcp-http-tools-105602.md>)

Original publisher: [Read original article](<https://cvefeed.io/vuln/detail/CVE-2026-61546>)

Author: CVEFEED.io; github.com

Published: 2026-10-28T22:17:15Z

Content type: article

Language: en

Sources: [Latest High/Critical Vulnerabilitiy Feed](<https://devfeed.tech/sources/latest-high-critical-vulnerabilitiy-feed.md>)

Topics: [frontend security](<https://devfeed.tech/topics/frontend-security.md>), [Domain Name System (DNS)](<https://devfeed.tech/topics/dns-resolution-process.md>)

Tags: [2026](<https://devfeed.tech/tags/2026.md>), [ai-assistants](<https://devfeed.tech/tags/ai-assistants.md>), [browser](<https://devfeed.tech/tags/browser.md>), [collection](<https://devfeed.tech/tags/collection.md>), [cve-2026-61546](<https://devfeed.tech/tags/cve-2026-61546.md>), [dns](<https://devfeed.tech/tags/dns.md>), [fixed](<https://devfeed.tech/tags/fixed.md>), [http](<https://devfeed.tech/tags/http.md>), [lan](<https://devfeed.tech/tags/lan.md>), [local](<https://devfeed.tech/tags/local.md>), [malicious](<https://devfeed.tech/tags/malicious.md>), [mcp](<https://devfeed.tech/tags/mcp.md>), [mcp-server](<https://devfeed.tech/tags/mcp-server.md>), [mcp-tool](<https://devfeed.tech/tags/mcp-tool.md>), [note](<https://devfeed.tech/tags/note.md>), [published](<https://devfeed.tech/tags/published.md>), [secret](<https://devfeed.tech/tags/secret.md>), [write](<https://devfeed.tech/tags/write.md>)

### AI overview

Before version 0.21.0, AnkiMCP disables FastMCP's DNS-rebinding protection globally, including for its default HTTP listener at 127.0.0.1:3141, and the described MCP endpoints have no authentication or strict Host/Origin allowlists. If a victim visits a malicious page while Anki and the listener are running, browser requests can be rebound to loopback to initialize MCP, enumerate tools, read the collection, and create or update notes and decks. Reach requires neither LAN access nor a local process. Available actions depend on enabled tool filters; destructive tools require opt-in. The reported harness exercised MCP dispatch using substituted Anki bridge responses and did not demonstrate destructive changes to a real collection. The issue is fixed in version 0.21.0.

### Source excerpt

CVE ID :CVE-2026-61546 Published : Oct. 28, 2026, 10:17 p.m. | 1 hour, 12 minutes ago Description :AnkiMCP is an Anki addon that implements an MCP server, enabling AI assistants to interact with the Anki flashcard application. Prior to version 0.21.0, `anki_mcp_server/mcp_server.py` globally disables FastMCP DNS-rebinding protection through `TransportSecuritySettings` with `enable_dns_rebinding_protection=False`, including for the default local Streamable HTTP listener. The defaults in `anki_mcp_server/config.py` enable `http_enabled` on `127.0.0.1:3141`, with an empty `http_path` selecting the root endpoint. No bearer token, API key, session secret, strict `Host` allowlist or strict `Origin` allowlist is enforced before `initialize`, `tools/list` and `tools/call` reach MCP dispatch. A victim who visits a malicious web page while Anki and the listener are running can have browser requests rebound to loopback, allowing the attacker to `initialize` MCP, enumerate tools, read the local collection, and perform enabled non-destructive note/deck creation or updates. The attacker needs neither LAN position nor a local process. Available operations depend on enabled tool filters; destructive tools are hidden unless `enabled_destructive_tools` is opted into, limiting deletion-level impact but not the exposed read/write operations. The reported harness confirms real MCP tool dispatch with substituted Anki bridge responses rather than demonstrating destructive changes to a real collection. Disabling protection for tunnels/proxies also disables it for the normal loopback configuration. This issue is fixed in version 0.21.0. Severity: 8.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

## Make a dedicated Wake-on-LAN server with Tailscale

DevFeed: [Make a dedicated Wake-on-LAN server with Tailscale](<https://devfeed.tech/articles/make-a-dedicated-wake-on-lan-server-with-tailscale-58015.md>)

Original publisher: [Read original article](<https://hackernoon.com/make-a-dedicated-wake-on-lan-server-with-tailscale?source=rss>)

Author: ameliepangolin

Published: 2026-09-22T08:00:19Z

Content type: tutorial

Language: en

Sources: [HackerNoon](<https://devfeed.tech/sources/hackernoon.md>)

Topics: [tailscale](<https://devfeed.tech/topics/tailscale.md>), [Network](<https://devfeed.tech/topics/network.md>), [Docker](<https://devfeed.tech/topics/docker.md>), [Raspberry Pi](<https://devfeed.tech/topics/raspberry-pi.md>), [container](<https://devfeed.tech/topics/container.md>), [Command-line interface](<https://devfeed.tech/topics/cli.md>), [Server](<https://devfeed.tech/topics/server.md>)

Tags: [command-line](<https://devfeed.tech/tags/command-line.md>), [docker](<https://devfeed.tech/tags/docker.md>), [ethernet](<https://devfeed.tech/tags/ethernet.md>), [good-company](<https://devfeed.tech/tags/good-company.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [lan](<https://devfeed.tech/tags/lan.md>), [local](<https://devfeed.tech/tags/local.md>), [mac-address](<https://devfeed.tech/tags/mac-address.md>), [network](<https://devfeed.tech/tags/network.md>), [osi-model](<https://devfeed.tech/tags/osi-model.md>), [raspberry-pi](<https://devfeed.tech/tags/raspberry-pi.md>), [raspberry-pi-wake-on-lan](<https://devfeed.tech/tags/raspberry-pi-wake-on-lan.md>), [remote-wake-on-lan-setup](<https://devfeed.tech/tags/remote-wake-on-lan-setup.md>), [server](<https://devfeed.tech/tags/server.md>), [servers](<https://devfeed.tech/tags/servers.md>), [tailscale](<https://devfeed.tech/tags/tailscale.md>), [tailscale-raspberry-pi](<https://devfeed.tech/tags/tailscale-raspberry-pi.md>), [tailscale-wake-on-lan](<https://devfeed.tech/tags/tailscale-wake-on-lan.md>), [tailscale-wol-remote-access](<https://devfeed.tech/tags/tailscale-wol-remote-access.md>), [upsnap-tailscale](<https://devfeed.tech/tags/upsnap-tailscale.md>), [wake-on-lan-from-anywhere](<https://devfeed.tech/tags/wake-on-lan-from-anywhere.md>)

### AI overview

A tutorial on using Tailscale with Wake-on-LAN to remotely wake sleeping or powered-off devices. It describes using a Raspberry Pi, a web app, or a Docker container to send wake-up signals across networks.

### Source excerpt

Learn how to combine Tailscale with Wake-on-LAN to wake sleeping PCs and servers remotely using a Raspberry Pi, UpSnap, or Docker.

## NTP, an atomic clock, and having a great time at the world's largest VCF

DevFeed: [NTP, an atomic clock, and having a great time at the world's largest VCF](<https://devfeed.tech/articles/ntp-an-atomic-clock-and-having-a-great-time-at-the-world-s-largest-vcf-55073.md>)

Original publisher: [Read original article](<https://www.jeffgeerling.com/blog/2026/vcf-midwest-21-ntp-time/>)

Author: jeff@jeffgeerling.com (Jeff Geerling)

Published: 2026-09-18T14:00:00Z

Content type: opinion

Language: en

Sources: [Jeff Geerling](<https://devfeed.tech/sources/jeff-geerling.md>)

Topics: [Homelab](<https://devfeed.tech/topics/homelab.md>), [Server](<https://devfeed.tech/topics/server.md>), [Network](<https://devfeed.tech/topics/network.md>), [macOS](<https://devfeed.tech/topics/macos.md>), [Ubiquiti](<https://devfeed.tech/topics/ubiquiti.md>), [Wi-Fi](<https://devfeed.tech/topics/wi-fi.md>)

Tags: [clock](<https://devfeed.tech/tags/clock.md>), [gnss](<https://devfeed.tech/tags/gnss.md>), [gps](<https://devfeed.tech/tags/gps.md>), [homelab](<https://devfeed.tech/tags/homelab.md>), [lan](<https://devfeed.tech/tags/lan.md>), [mac](<https://devfeed.tech/tags/mac.md>), [mac-os](<https://devfeed.tech/tags/mac-os.md>), [midwest](<https://devfeed.tech/tags/midwest.md>), [network](<https://devfeed.tech/tags/network.md>), [ntp](<https://devfeed.tech/tags/ntp.md>), [poe](<https://devfeed.tech/tags/poe.md>), [retro](<https://devfeed.tech/tags/retro.md>), [router](<https://devfeed.tech/tags/router.md>), [server](<https://devfeed.tech/tags/server.md>), [time](<https://devfeed.tech/tags/time.md>), [ubiquiti](<https://devfeed.tech/tags/ubiquiti.md>), [vcf](<https://devfeed.tech/tags/vcf.md>), [wi-fi](<https://devfeed.tech/tags/wi-fi.md>)

### AI overview

A personal report on exhibiting an NTP time-synchronization demonstration at VCF Midwest 21. The exhibit connected vintage Macs, an Xserve G5, a TrueTime Pi GNSS reference, and network equipment to illustrate Stratum 0 through Stratum 3 time services.

### Source excerpt

I'm back from VCF Midwest 21, arguably the largest vintage computer festival on the planet. After being blown away last year, I decided to get a table of my own this year, to demonstrate NTP Time on a bunch of old Macs, representing every era up to the pinnacle of the PowerPC, an Xserve G5 (serving duty as a Stratum 2 ntpd server). Attending as an exhibitor is a lot different. In some ways better (I got to interact face-to-face with at least 200 people--after that I ran out of my 'time tokens'), and in some ways worse (I only got to see about 10% of the exhibits--if that).

## Analysis of PPPP "encryption"

DevFeed: [Analysis of PPPP "encryption"](<https://devfeed.tech/articles/analysis-of-pppp-encryption-36629.md>)

Original publisher: [Read original article](<https://palant.info/2026/01/05/analysis-of-pppp-encryption/>)

Author: Wladimir Palant

Published: 2026-01-05T15:50:53Z

Content type: article

Language: en

Sources: [Almost Secure](<https://devfeed.tech/sources/almost-secure.md>)

Topics: [Encryption](<https://devfeed.tech/topics/encryption.md>), [Cryptography](<https://devfeed.tech/topics/cryptography.md>), [Network](<https://devfeed.tech/topics/network.md>), [Protocol (disambiguation)](<https://devfeed.tech/topics/protocol.md>), [Algorithms](<https://devfeed.tech/topics/algorithms.md>)

Tags: [analysis](<https://devfeed.tech/tags/analysis.md>), [ascii](<https://devfeed.tech/tags/ascii.md>), [cryptanalysis](<https://devfeed.tech/tags/cryptanalysis.md>), [encryption](<https://devfeed.tech/tags/encryption.md>), [lan](<https://devfeed.tech/tags/lan.md>), [network](<https://devfeed.tech/tags/network.md>), [pull-request](<https://devfeed.tech/tags/pull-request.md>), [theory](<https://devfeed.tech/tags/theory.md>)

### AI overview

This analysis examines weaknesses in PPPP "encryption." It explains that app keys are reduced to a four-byte effective key and that the scheme is vulnerable to known-plaintext attacks. For LAN camera discovery when the app and traffic are unknown, the article describes sending all possible encrypted search packets, with at most 157,092 ciphertexts, and notes a pull request to update the device-detection script.

### Source excerpt

My first article on the PPPP protocol already said everything there was to say about PPPP "encryption": Keys are static and usually trivial to extract from the app. No matter how long the original key, it is mapped to an effective key that's merely four bytes long. The "encryption" is extremely susceptible to known-plaintext attacks, usually allowing reconstruction of the effective key from a single encrypted packet. So this thing is completely broken, why look any further? There is at least one situation where you don't know the app being used so you cannot extract the key and you don't have any traffic to analyze either. It's when you are trying to scan your local network for potential hidden cameras. This script will currently only work for cameras using plaintext communication. Other cameras expect a properly encrypted "LAN search" packet and will ignore everything else. How can this be solved without listing all possible keys in the script? By sending all possible ciphertexts of course! TL;DR: What would be completely ridiculous with any reasonable protocol turned out to be quite possible with PPPP. There are at most 157,092 ways in which a "LAN search" packet can be encrypted. I've opened a pull request to have the PPPP device detection script adjusted. Note: Cryptanalysis isn't my topic, I am by no means an expert here. These issues are simply too obvious. Contents Mapping keys to effective keys Redundancies within the effective key ASCII to the rescue How large is n? How many ciphertexts is that? Understanding the response Mapping keys to effective keys The key which is specified as part of the app's "init string" is not being used for encryption directly. Nor is it being fed into any of the established key stretching algorithms. Instead, a key represented by the byte sequence b1,b2,...,bnb_1, b_2, \ldots, b_n is mapped to four bytes k1,k2,k3,k4k_1, k_2, k_3, k_4 that become the effective key. These bytes are calculated as follows (⌊x⌋\lfloor x \rfloor means r

## Arista EOS Spooky Action at a Distance

DevFeed: [Arista EOS Spooky Action at a Distance](<https://devfeed.tech/articles/arista-eos-spooky-action-at-a-distance-11147.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2025/03/arista-spooky-action-distance/>)

Published: 2025-03-17T08:10:00Z

Content type: article

Language: en

Sources: [ipSpace](<https://devfeed.tech/sources/ipspace-net-blog-2.md>)

Topics: [Integration testing](<https://devfeed.tech/topics/integration-testing.md>), [Ethernet](<https://devfeed.tech/topics/ethernet.md>), [qemu](<https://devfeed.tech/topics/qemu.md>), [Linux](<https://devfeed.tech/topics/linux.md>), [JSON](<https://devfeed.tech/topics/json.md>)

Tags: [blog](<https://devfeed.tech/tags/blog.md>), [blog-post](<https://devfeed.tech/tags/blog-post.md>), [ethernet](<https://devfeed.tech/tags/ethernet.md>), [integration-testing](<https://devfeed.tech/tags/integration-testing.md>), [ipv4](<https://devfeed.tech/tags/ipv4.md>), [json](<https://devfeed.tech/tags/json.md>), [lan](<https://devfeed.tech/tags/lan.md>), [linux](<https://devfeed.tech/tags/linux.md>), [netlab](<https://devfeed.tech/tags/netlab.md>), [qemu](<https://devfeed.tech/tags/qemu.md>), [testing](<https://devfeed.tech/tags/testing.md>), [tests](<https://devfeed.tech/tags/tests.md>), [validation](<https://devfeed.tech/tags/validation.md>), [virtualization](<https://devfeed.tech/tags/virtualization.md>)

### AI overview

This blog post investigates unexpected Arista EOS behavior found during netlab VRRP integration testing. In a minimal lab, shutting down one switch interface caused the other switch's Ethernet line protocol to go down and stopped responses from the VRRP backup. Packet capture indicated that the first switch sent a packet instructing the peer to emulate remote link loss.

### Source excerpt

This blog post describes yet another bizarre behavior discovered during the netlab integration testing. It started innocently enough: I was working on the VRRP integration test and wanted to use Arista EOS as the second (probe) device in the VRRP cluster because it produces nice JSON-formatted results that are easy to use in validation tests. Everything looked great until I ran the test on all platforms on which netlab configures VRRP, and all of them passed apart from Arista EOS (that was before we figured out how Sturgeon's Law applies to VRRPv3) - a "That's funny" moment that was directly responsible for me wasting a few hours chasing white rabbits down this trail. Read more ...

## Lab: IS-IS Designated Router Election

DevFeed: [Lab: IS-IS Designated Router Election](<https://devfeed.tech/articles/lab-is-is-designated-router-election-11151.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2025/03/isis-dis-election/>)

Published: 2025-03-13T07:03:00Z

Content type: tutorial

Language: en

Sources: [ipSpace](<https://devfeed.tech/sources/ipspace-net-blog-2.md>)

Topics: [IS-IS](<https://devfeed.tech/topics/is-is.md>)

Tags: [is-is](<https://devfeed.tech/tags/is-is.md>), [lan](<https://devfeed.tech/tags/lan.md>), [netlab](<https://devfeed.tech/tags/netlab.md>), [ospf](<https://devfeed.tech/tags/ospf.md>), [router](<https://devfeed.tech/tags/router.md>), [standards](<https://devfeed.tech/tags/standards.md>)

### AI overview

This lab article explains that IS-IS uses a Designated Intermediate System (DIS) router to originate the pseudo-node for a LAN segment. Unlike OSPF, the DIS does not need a backup because it is not responsible for flooding.

### Source excerpt

Like OSPF, IS-IS needs a router to originate the pseudo-node for a LAN segment. IS-IS standards call that router a Designated Intermediate System (DIS), and since it is not responsible for flooding, it does not need a backup. Want to know more? The Influence the Designated IS Election lab exercise provides the details (and some hands-on work).

## Capturing Traffic in Virtual Networking Labs

DevFeed: [Capturing Traffic in Virtual Networking Labs](<https://devfeed.tech/articles/capturing-traffic-in-virtual-networking-labs-11160.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2025/03/virtual-labs-traffic-capture/>)

Published: 2025-03-04T06:43:00Z

Content type: tutorial

Language: en

Sources: [ipSpace](<https://devfeed.tech/sources/ipspace-net-blog-2.md>)

Topics: [Network](<https://devfeed.tech/topics/network.md>), [Linux](<https://devfeed.tech/topics/linux.md>), [qemu](<https://devfeed.tech/topics/qemu.md>), [virtual machines](<https://devfeed.tech/topics/virtual-machines.md>), [container](<https://devfeed.tech/topics/container.md>), [Docker](<https://devfeed.tech/topics/docker.md>)

Tags: [capture](<https://devfeed.tech/tags/capture.md>), [container](<https://devfeed.tech/tags/container.md>), [containers](<https://devfeed.tech/tags/containers.md>), [docker](<https://devfeed.tech/tags/docker.md>), [lan](<https://devfeed.tech/tags/lan.md>), [linux](<https://devfeed.tech/tags/linux.md>), [netlab](<https://devfeed.tech/tags/netlab.md>), [networking](<https://devfeed.tech/tags/networking.md>), [qemu](<https://devfeed.tech/tags/qemu.md>), [virtual-machines](<https://devfeed.tech/tags/virtual-machines.md>), [virtualization](<https://devfeed.tech/tags/virtualization.md>)

### AI overview

A tutorial on capturing traffic in virtual networking labs. It explains how to capture traffic from Linux bridges and QEMU-connected virtual machines, use netlab capture as a wrapper around virsh, brctl, and tcpdump, and approach traffic capture for containers attached to Docker networks or Linux bridges.

### Source excerpt

When I announced the Stub Networks in Virtual Labs blog post on LinkedIn, I claimed it was the last chapter in the "links in virtual labs" saga. I was wrong; here comes the fourth part of the virtual links trilogy - capturing "on the wire" traffic in virtual networking labs. While network devices provide traffic capture capabilities (usually tcpdump in disguise generating a .pcap file), it's often better to capture the traffic outside of the device to see what the root cause of the problems you're experiencing might be. Read more ...

## Why VLAN 1 Should Not Be Tagged in a Trunk

DevFeed: [Why VLAN 1 Should Not Be Tagged in a Trunk](<https://devfeed.tech/articles/tagged-vlan-1-in-a-trunk-is-a-really-bad-idea-11139.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2025/02/tagged-vlan-1/>)

Published: 2025-02-11T07:05:00Z

Content type: article

Language: en

Sources: [ipSpace](<https://devfeed.tech/sources/ipspace-net-blog-2.md>)

Topics: [Network](<https://devfeed.tech/topics/network.md>), [Ethernet](<https://devfeed.tech/topics/ethernet.md>), [DHCP](<https://devfeed.tech/topics/dhcp.md>), [Cisco](<https://devfeed.tech/topics/cisco.md>)

Tags: [bridging](<https://devfeed.tech/tags/bridging.md>), [cisco](<https://devfeed.tech/tags/cisco.md>), [dhcp](<https://devfeed.tech/tags/dhcp.md>), [ethernet](<https://devfeed.tech/tags/ethernet.md>), [lan](<https://devfeed.tech/tags/lan.md>), [netlab](<https://devfeed.tech/tags/netlab.md>), [network](<https://devfeed.tech/tags/network.md>), [security](<https://devfeed.tech/tags/security.md>)

### AI overview

The article examines conflicting interpretations of VLAN 1 in trunks by Cumulus NVUE and Arista EOS. It recommends avoiding VLAN 1 in VLAN trunks and using it as the native VLAN when necessary, while explaining the historical and operational reasons behind this behavior.

### Source excerpt

It all started with a netlab issue describing different interpretations of VLAN 1 in a trunk. While Cumulus NVUE (the way the netlab configuration template configures it) assumes that the VLAN 1 in a trunk is tagged, Arista EOS assumes it's the native VLAN. At that point, I should have said, "that's crazy, we shouldn't allow that" and enforce the "VLAN 1 has to be used as a native VLAN" rule. Alas, 20/20 hindsight never helped anyone. TL&DR: Do not use VLAN 1 in VLAN trunks; if you have to, use it as a native VLAN. Read more ...

## The Ethernet/802.1 Protocol Stack

DevFeed: [The Ethernet/802.1 Protocol Stack](<https://devfeed.tech/articles/the-ethernet-802-1-protocol-stack-11119.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2025/01/ethernet-8021-protocol-stack/>)

Published: 2025-01-22T07:28:00Z

Content type: tutorial

Language: en

Sources: [ipSpace](<https://devfeed.tech/sources/ipspace-net-blog-2.md>)

Topics: [Ethernet](<https://devfeed.tech/topics/ethernet.md>), [Protocol (disambiguation)](<https://devfeed.tech/topics/protocol.md>)

Tags: [ethernet](<https://devfeed.tech/tags/ethernet.md>), [gigabit-ethernet](<https://devfeed.tech/tags/gigabit-ethernet.md>), [lan](<https://devfeed.tech/tags/lan.md>), [protocol](<https://devfeed.tech/tags/protocol.md>), [provisioning](<https://devfeed.tech/tags/provisioning.md>), [reconciliation](<https://devfeed.tech/tags/reconciliation.md>)

### AI overview

An explanation of the Ethernet and IEEE 802.1 protocol stack, including the MAC and LLC sublayers, physical-layer subdivisions, and the placement of discovery, link aggregation, spanning tree, VLAN, and provisioning protocols.

### Source excerpt

The believers in the There Be Four Layers religion think everything below IP is just a blob of stuff dealing with physical things: People steeped in a slightly more nuanced view of the world in which IP is not the centerpiece of the universe might tell you that the blob of stuff we need is two things: Read more ...

## Attacking UNIX Systems via CUPS, Part I

DevFeed: [Attacking UNIX Systems via CUPS, Part I](<https://devfeed.tech/articles/attacking-unix-systems-via-cups-part-i-41270.md>)

Original publisher: [Read original article](<https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I/>)

Author: Simone Margaritelli

Published: 2024-09-26T14:51:30Z

Content type: article

Language: en

Sources: [Evil Socket](<https://devfeed.tech/sources/evilsocket.md>)

Topics: [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Security](<https://devfeed.tech/topics/security.md>), [Unix](<https://devfeed.tech/topics/unix.md>), [Exploit](<https://devfeed.tech/topics/exploit.md>), [Linux](<https://devfeed.tech/topics/linux.md>), [systems](<https://devfeed.tech/topics/systems.md>)

Tags: [bugs](<https://devfeed.tech/tags/bugs.md>), [cups](<https://devfeed.tech/tags/cups.md>), [cups-browsed](<https://devfeed.tech/tags/cups-browsed.md>), [cve](<https://devfeed.tech/tags/cve.md>), [cve-2024-47076](<https://devfeed.tech/tags/cve-2024-47076.md>), [cve-2024-47175](<https://devfeed.tech/tags/cve-2024-47175.md>), [cve-2024-47176](<https://devfeed.tech/tags/cve-2024-47176.md>), [cve-2024-47177](<https://devfeed.tech/tags/cve-2024-47177.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [disclosure](<https://devfeed.tech/tags/disclosure.md>), [exploit](<https://devfeed.tech/tags/exploit.md>), [gnu-linux](<https://devfeed.tech/tags/gnu-linux.md>), [hacking](<https://devfeed.tech/tags/hacking.md>), [ipp](<https://devfeed.tech/tags/ipp.md>), [lan](<https://devfeed.tech/tags/lan.md>), [linux-security](<https://devfeed.tech/tags/linux-security.md>), [mdns](<https://devfeed.tech/tags/mdns.md>), [no-authentication](<https://devfeed.tech/tags/no-authentication.md>), [port](<https://devfeed.tech/tags/port.md>), [print-services](<https://devfeed.tech/tags/print-services.md>), [printer](<https://devfeed.tech/tags/printer.md>), [printers](<https://devfeed.tech/tags/printers.md>), [printing](<https://devfeed.tech/tags/printing.md>), [rce](<https://devfeed.tech/tags/rce.md>), [responsible-disclosure](<https://devfeed.tech/tags/responsible-disclosure.md>), [security](<https://devfeed.tech/tags/security.md>), [udp](<https://devfeed.tech/tags/udp.md>), [unauthenticated-access](<https://devfeed.tech/tags/unauthenticated-access.md>), [unix](<https://devfeed.tech/tags/unix.md>), [vulnerability-research](<https://devfeed.tech/tags/vulnerability-research.md>), [zeroconf](<https://devfeed.tech/tags/zeroconf.md>)

### AI overview

A security writeup describes multiple vulnerabilities in CUPS components affecting GNU/Linux and other UNIX systems. It reports that remote unauthenticated attackers may replace printer IPP URLs and trigger arbitrary command execution when a print job starts, with attacks possible over the public internet or via spoofed LAN advertisements.

### Source excerpt

Hello friends, this is the first of two, possibly three (if and when I have time to finish the Windows research) writeups. We will start

## Using wemulate with netlab

DevFeed: [Using wemulate with netlab](<https://devfeed.tech/articles/using-wemulate-with-netlab-10985.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2024/04/netlab-wemulate/>)

Published: 2024-04-02T05:49:00Z

Content type: tutorial

Language: en

Sources: [ipSpace](<https://devfeed.tech/sources/ipspace-net-blog-2.md>)

Topics: [Network](<https://devfeed.tech/topics/network.md>), [container](<https://devfeed.tech/topics/container.md>), [Linux](<https://devfeed.tech/topics/linux.md>), [Docker](<https://devfeed.tech/topics/docker.md>)

Tags: [bash](<https://devfeed.tech/tags/bash.md>), [container](<https://devfeed.tech/tags/container.md>), [containers](<https://devfeed.tech/tags/containers.md>), [distributed](<https://devfeed.tech/tags/distributed.md>), [docker](<https://devfeed.tech/tags/docker.md>), [ipv4](<https://devfeed.tech/tags/ipv4.md>), [lan](<https://devfeed.tech/tags/lan.md>), [linux](<https://devfeed.tech/tags/linux.md>), [netlab](<https://devfeed.tech/tags/netlab.md>), [networking](<https://devfeed.tech/tags/networking.md>)

### AI overview

This tutorial shows how to use wemulate with netlab to build a container-based virtual WAN network. It explains how wemulate connects container interfaces with Linux bridges, how to configure static IPv4 prefixes, and how to add jitter before testing connectivity between hosts.

### Source excerpt

An RSS hiccup brought an old blog post from Urs Baumann into my RSS reader. I'm always telling networking engineers that it's essential to set up realistic WAN environments when testing distributed software, and wemulate (a nice tc front-end) seemed like a perfect match. Even better, it runs in a container - an ideal component for a netlab-generated virtual WAN network. wemulate acts as a bump in the wire; it uses Linux bridges to connect two container interfaces. We'll use it to introduce jitter into an IP subnet: ┌──┐ ┌────────┐ ┌──┐ │h1├───┤wemulate├───┤h2│ └──┘ └────────┘ └──┘ ◄──────────────────────► 192.168.33.0/24 Read more ...

## How IX.BR Automates Quarantine LAN Testing

DevFeed: [How IX.BR Automates Quarantine LAN Testing](<https://devfeed.tech/articles/appreciation-of-automated-ix-quarantine-lan-testing-41612.md>)

Original publisher: [Read original article](<https://blog.benjojo.co.uk/post/ixbr-automated-quarantine>)

Author: ben@benjojo.co.uk

Published: 2024-02-01T11:27:29Z

Content type: article

Language: en

Sources: [Benjojo](<https://devfeed.tech/sources/benjojo-blog.md>)

Topics: [Network](<https://devfeed.tech/topics/network.md>), [Ethernet](<https://devfeed.tech/topics/ethernet.md>), [Internet Traffic](<https://devfeed.tech/topics/internet-traffic.md>), [DDoS](<https://devfeed.tech/topics/ddos.md>), [proxy](<https://devfeed.tech/topics/proxy.md>), [Software Testing](<https://devfeed.tech/topics/software-testing.md>)

Tags: [arp](<https://devfeed.tech/tags/arp.md>), [bgp](<https://devfeed.tech/tags/bgp.md>), [ethernet](<https://devfeed.tech/tags/ethernet.md>), [internet](<https://devfeed.tech/tags/internet.md>), [internet-traffic](<https://devfeed.tech/tags/internet-traffic.md>), [lan](<https://devfeed.tech/tags/lan.md>), [proxy](<https://devfeed.tech/tags/proxy.md>), [tests](<https://devfeed.tech/tags/tests.md>)

### AI overview

The article describes IX.BR São Paulo's automated quarantine LAN testing portal for internet exchange participants. It explains why quarantine testing matters, including the risks of Ethernet loops, management frames, and Proxy ARP on a shared Layer 2 exchange LAN.

### Source excerpt

Appreciation of automated IX Quarantine LAN testing Something that bgp.tools (my company) does a great deal is joining internet exchanges.

## Configuring VLANs, Firewall Rules, and WiFi Networks - UniFi Network Application

DevFeed: [Configuring VLANs, Firewall Rules, and WiFi Networks - UniFi Network Application](<https://devfeed.tech/articles/configuring-vlans-firewall-rules-and-wifi-networks-unifi-network-application-10703.md>)

Original publisher: [Read original article](<https://technotim.com/posts/vlan-firewall-unifi/>)

Author: Techno Tim

Published: 2023-03-04T15:00:00Z

Content type: tutorial

Language: en

Sources: [Techno Tim](<https://devfeed.tech/sources/techno-tim.md>)

Topics: [Network](<https://devfeed.tech/topics/network.md>), [Firewall](<https://devfeed.tech/topics/firewall.md>), [Security](<https://devfeed.tech/topics/security.md>), [Ubiquiti](<https://devfeed.tech/topics/ubiquiti.md>)

Tags: [firewall](<https://devfeed.tech/tags/firewall.md>), [homelab](<https://devfeed.tech/tags/homelab.md>), [lan](<https://devfeed.tech/tags/lan.md>), [network](<https://devfeed.tech/tags/network.md>), [security](<https://devfeed.tech/tags/security.md>), [unifi](<https://devfeed.tech/tags/unifi.md>), [wireless](<https://devfeed.tech/tags/wireless.md>)

### AI overview

This tutorial explains how to configure VLANs with the UniFi Network Application, including creating a network, setting up a wireless network that uses VLANs, and adding firewall rules. It also describes how VLANs can improve security, performance, management, and flexibility for home networks.

### Source excerpt

What is a VLAN and How Do They Help? Today we're going to cover setting up VLANs using UniFi's network controller.We'll set up a VLAN, from start to finish, which includes creating a new network, configuring a wireless network that uses VLANs, and then we'll set up firewall rules to make sure we're keeping our network safe. If you think VLANs are only for the enterprise, you're wrong, I will s...

## How to Configure Wake on LAN Across Windows, macOS, and Linux

DevFeed: [How to Configure Wake on LAN Across Windows, macOS, and Linux](<https://devfeed.tech/articles/the-ultimate-guide-to-wake-on-lan-for-windows-macos-and-linux-10705.md>)

Original publisher: [Read original article](<https://technotim.com/posts/wake-on-lan/>)

Author: Techno Tim

Published: 2023-02-19T15:00:00Z

Content type: tutorial

Language: en

Sources: [Techno Tim](<https://devfeed.tech/sources/techno-tim.md>)

Topics: [Network](<https://devfeed.tech/topics/network.md>), [Linux](<https://devfeed.tech/topics/linux.md>), [macOS](<https://devfeed.tech/topics/macos.md>), [Windows](<https://devfeed.tech/topics/windows.md>), [boot](<https://devfeed.tech/topics/boot.md>)

Tags: [guide](<https://devfeed.tech/tags/guide.md>), [hardware](<https://devfeed.tech/tags/hardware.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [lan](<https://devfeed.tech/tags/lan.md>), [linux](<https://devfeed.tech/tags/linux.md>), [macos](<https://devfeed.tech/tags/macos.md>), [network](<https://devfeed.tech/tags/network.md>), [networking](<https://devfeed.tech/tags/networking.md>), [pikvm](<https://devfeed.tech/tags/pikvm.md>), [utilities](<https://devfeed.tech/tags/utilities.md>), [windows](<https://devfeed.tech/tags/windows.md>)

### AI overview

A practical guide to configuring Wake on LAN across Windows, macOS, and Linux. It explains how WoL uses a magic packet to wake a machine and discusses the BIOS settings that may need to be enabled or disabled for different hardware and power states.

### Source excerpt

What is Wake on LAN and why is it so hard? After releasing my video on the PiKVM I realized that there was so much confusion about Wake on LAN, and rightfully so, that I decided to put together this guide on how to configure Wake on LAN on any machine. Wake on LAN (WoL) is a networking standard that allows a computer to be turned on by sending a network packet. The client sends a special packe...

## Capture the Flag events and eSports

DevFeed: [Capture the Flag events and eSports](<https://devfeed.tech/articles/capture-the-flag-events-and-esports-36719.md>)

Original publisher: [Read original article](<https://shostack.org/blog/capture-the-flag-events-and-esports/>)

Author: Jonathan Marcil

Published: 2019-09-11T00:00:00Z

Content type: opinion

Language: en

Sources: [Shostack & Friends Blog](<https://devfeed.tech/sources/shostack-friends-blog.md>)

Topics: [Sports](<https://devfeed.tech/topics/sports.md>)

Tags: [competition](<https://devfeed.tech/tags/competition.md>), [events](<https://devfeed.tech/tags/events.md>), [games](<https://devfeed.tech/tags/games.md>), [lan](<https://devfeed.tech/tags/lan.md>), [sports](<https://devfeed.tech/tags/sports.md>), [strategy](<https://devfeed.tech/tags/strategy.md>), [team](<https://devfeed.tech/tags/team.md>)

### AI overview

The article compares Capture the Flag events with eSports and argues that CTFs are intrinsically an eSport with strong educational value. It describes eSports audiences, broadcasts, competition, professional gaming, and amateur LAN and online events.

### Source excerpt

A breakdown of CTFs and eSports

## Networking for a Bare-Metal Kubernetes Cluster After AWS

DevFeed: [Networking for a Bare-Metal Kubernetes Cluster After AWS](<https://devfeed.tech/articles/part-2-on-aws-rolling-your-own-servers-with-k8s-29745.md>)

Original publisher: [Read original article](<https://goteleport.com/blog/kubernetes-networking-on-bare-metal/>)

Author: ev@goteleport.com (Ev Kontsevoy)

Published: 2019-05-14T15:39:34Z

Content type: tutorial

Language: en

Sources: [Teleport](<https://devfeed.tech/sources/teleport.md>)

Topics: [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [Network](<https://devfeed.tech/topics/network.md>), [Amazon Web Services](<https://devfeed.tech/topics/aws.md>), [cloud-infrastructure](<https://devfeed.tech/topics/cloud-infrastructure.md>), [container](<https://devfeed.tech/topics/container.md>), [Software-defined networking](<https://devfeed.tech/topics/sdn.md>)

Tags: [aws](<https://devfeed.tech/tags/aws.md>), [bare-metal](<https://devfeed.tech/tags/bare-metal.md>), [hardware](<https://devfeed.tech/tags/hardware.md>), [ip](<https://devfeed.tech/tags/ip.md>), [k8s](<https://devfeed.tech/tags/k8s.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [lan](<https://devfeed.tech/tags/lan.md>), [networking](<https://devfeed.tech/tags/networking.md>), [router](<https://devfeed.tech/tags/router.md>), [sdn](<https://devfeed.tech/tags/sdn.md>)

### AI overview

This article explains how to design a simple, non-redundant network for a small bare-metal Kubernetes environment in a colocation facility after leaving AWS. It discusses network complexity, legacy limitations, SDN concepts, public subnet routing, and separate private LANs for management, security, and performance.

### Source excerpt

This is part three of a three-part series on considerations that companies will want to address if they decide to build their own cloud environment.