# Tech matters Published articles for Tech matters. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## \[Podcast\] 'Just say no' isn't as simple as you think DevFeed: [\[Podcast\] 'Just say no' isn't as simple as you think]() Original publisher: [Read original article]() Author: George Michaelson Published: 2026-09-16T23:23:11Z Content type: article Language: en Sources: [APNIC Blog]() Topics: [APNIC Labs](), [Protocol (disambiguation)](), [Server]() Tags: [apnic-labs](), [dns](), [measurement](), [podcast](), [protocol](), [tech-matters]() ### AI overview A PING podcast episode continues a discussion of surplus DNS queries observed in an APNIC Labs experiment. It examines how different ways of answering negatively affect query volume and the work required by servers, resolvers, and clients, and considers whether maintaining transport protocol state could reduce repeated-query work. ### Source excerpt A continuation of the discussion on surplus DNS queries seen at APNIC Labs, the implications of how you say 'no', and the transport used for the DNS ## Why developers should avoid relying on frontier-model APIs in trusted systems DevFeed: [Why developers should avoid relying on frontier-model APIs in trusted systems]() Original publisher: [Read original article]() Author: Niels Provos Published: 2026-09-16T05:42:22Z Content type: opinion Language: en Sources: [APNIC Blog]() Topics: [Artificial Intelligence](), [Frontier Model](), [agentic-coding](), [coding](), [Claude]() Tags: [agentic-coding](), [ai](), [anthropic](), [api](), [artificial-intelligence](), [coding](), [frontier-model](), [gateway](), [guest-post](), [security](), [tech-matters]() ### AI overview This opinion article argues that relying on frontier-lab APIs creates risks around pricing, availability, model behavior, and output integrity. It presents open-weight models as a way to retain control over critical dependencies, while distinguishing coding assistance from placing frontier models in live request paths. ### Source excerpt Guest Post: A frontier API can refuse, change, or vanish out from under you. Open weights keep the model you depend on yours. ## One or two nameservers? DevFeed: [One or two nameservers?]() Original publisher: [Read original article]() Author: Geoff Huston Published: 2026-09-15T06:01:49Z Content type: article Language: en Sources: [APNIC Blog]() Topics: [Internet](), [Query (disambiguation)](), [Server](), [Caching]() Tags: [2026](), [africa](), [article](), [china](), [dns](), [europe](), [experiment](), [india](), [internet](), [ipv4](), [ipv6](), [measurement](), [measurements](), [recursive-resolver](), [repeat](), [responses](), [server](), [tech-matters]() ### AI overview This article reports an experiment testing whether serving a DNS zone with two authoritative dual-stack nameservers changes repeated queries. Compared with one nameserver, two nameservers increased the single-query completion rate from 58% to 71% and reduced the average queries per test from 3.43 to 2.57. ### Source excerpt Do multiple dual-stack nameservers increase or decrease repeat DNS queries? The results of this experiment were a complete surprise. ## Building resilient self hosted services is not always easy DevFeed: [Building resilient self hosted services is not always easy]() Original publisher: [Read original article]() Author: George Michaelson Published: 2026-09-09T05:10:54Z Content type: opinion Language: en Sources: [APNIC Blog]() Topics: [Pi-hole](), [Resilience](), [Network Configuration](), [systems](), [Server]() Tags: [dns](), [infrastructure](), [network](), [resilience](), [router](), [self-hosted](), [server](), [systems](), [tech-matters]() ### AI overview The article reflects on the difficulties of running resilient self-hosted DNS services at home. It describes how reboots and router or DNS configuration changes can disrupt DHCP and the wider home network, arguing for independently configured redundant instances and a tested backup plan. ### Source excerpt Resiliency through more redundancy is important no matter the scenario. ## Welcome to APNIC 62 DevFeed: [Welcome to APNIC 62]() Original publisher: [Read original article]() Author: Timothy Hildred Published: 2026-09-08T03:33:07Z Content type: article Language: en Sources: [APNIC Blog]() Topics: [Internet](), [Networks](), [Cybersecurity](), [DNSSEC](), [threat detection](), [Threat Research](), [FIRST]() Tags: [apnic-62](), [community](), [conference](), [conferences](), [cybersecurity](), [dnssec](), [event](), [events](), [india](), [ipv4](), [ipv6](), [nixi](), [nro](), [policy-sig](), [tech-matters](), [threat-detection]() ### AI overview APNIC 62 in Mumbai previews technical, security, IPv6 deployment, DNSSEC, threat-detection, community, and policy sessions, alongside keynote talks, social events, newcomer activities, and NRO NC voting information. ### Source excerpt APNIC welcomes you to Mumbai, India for APNIC 62. Here is what you can look forward to over the coming days. ## What part of 'No!' is so hard for the DNS understand? DevFeed: [What part of 'No!' is so hard for the DNS understand?]() Original publisher: [Read original article]() Author: Geoff Huston Published: 2026-09-04T01:06:30Z Content type: article Language: en Sources: [APNIC Blog]() Topics: [servers](), [Caching](), [DDoS](), [Cybercrime](), [Availability](), [Bot](), [Script]() Tags: [apnic-labs](), [attacks](), [availability](), [bots](), [caching](), [ddos](), [dns](), [generate](), [measurement](), [random](), [server](), [servers](), [tech-matters]() ### AI overview The article explains how random name attacks overwhelm authoritative DNS servers by generating queries for nonexistent names, bypassing recursive resolver caches and potentially causing domain availability failures. It also describes APNIC Labs' measurement work on nonexistent-domain responses to improve DNS resilience. ### Source excerpt At APNIC Labs we've been experimenting with understanding how the DNS handles requests to resolve nonexistent names to make the DNS more resilient to random name attacks. ## \[Podcast\] Measuring the impact of locally served root zone DevFeed: [\[Podcast\] Measuring the impact of locally served root zone]() Original publisher: [Read original article]() Author: George Michaelson Published: 2026-09-03T01:05:09Z Content type: article Language: en Sources: [APNIC Blog]() Topics: [DNSSEC](), [Network](), [Security](), [Internet Engineering Task Force (IETF)](), [bug]() Tags: [bug](), [dns](), [dnssec](), [ietf](), [measurement](), [network](), [podcast](), [research](), [security](), [standards](), [tech-matters]() ### AI overview This podcast discusses research into locally served root zones, a DNS resolver model that pre-fetches and stores the root zone. The study examined BIND, Unbound, and Knot Resolver across multiple configurations, including in-band retrieval and HTTPS fetching. It identified an Unbound bug and found that root zone updates can generate substantial network traffic, potentially exceeding traffic from more frequent queries for uncached data. ### Source excerpt An analysis of the traffic impacts of locally served root zones, by Ilyas Rahimi at UvA. ## Beeline: Enforcing application-layer policies in eBPF DevFeed: [Beeline: Enforcing application-layer policies in eBPF]() Original publisher: [Read original article]() Author: Brandner Laurin Published: 2026-09-01T23:30:00Z Content type: article Language: en Sources: [APNIC Blog]() Topics: [eBPF](), [Cloud Native Ecosystem](), [Latency](), [networking]() Tags: [applications](), [cilium](), [ebpf](), [guest-post](), [http](), [latency](), [networking](), [tech-matters]() ### AI overview The article presents Beeline, a system that enforces application-layer (L7) policies directly in the kernel using eBPF. It explains the latency overhead of user-space service proxies and reports that Beeline improves request latency by 46%, while eliminating the service proxy from the critical path for 89% of L7 policies in the wild. ### Source excerpt Guest Post: While many L7 protocols are complex to parse, the logic needed to enforce L7 policies tends to be simple. For the vast majority (89%) of L7 policies in the wild, Beeline can eliminate the service proxy from the critical path. ## The invisible heartbeat of our networks DevFeed: [The invisible heartbeat of our networks]() Original publisher: [Read original article]() Author: Luca Cicchelli Published: 2026-08-31T23:03:47Z Content type: article Language: en Sources: [APNIC Blog]() Topics: [Networks](), [distributed-systems](), [Critical Infrastructure](), [Security](), [5G](), [Cybersecurity](), [cloud-infrastructure](), [AI Infrastructure]() Tags: [5g](), [ai](), [ai-infrastructure](), [critical-infrastructure](), [cybersecurity](), [data](), [distributed-systems](), [engineering](), [gnss](), [gps](), [guest-post](), [hardware](), [network](), [networking](), [networks](), [outage](), [outages](), [post](), [servers](), [systems](), [tech-matters](), [time](), [transactions]() ### AI overview The article examines how accurate time synchronization underpins modern networks and distributed systems. It uses the Telstra outage to show how misaligned time servers can disrupt communications and rail services, and discusses resilient time sources, terrestrial backups, local atomic clocks, and synchronization requirements for finance, 5G, cloud, and AI infrastructure. ### Source excerpt Guest Post: The recent Telstra outage highlighted a critical but often overlooked dependency in modern networks: Accurate time synchronization. ## The day after the zero-days DevFeed: [The day after the zero-days]() Original publisher: [Read original article]() Author: Niels Provos Published: 2026-08-28T04:42:57Z Content type: opinion Language: en Sources: [APNIC Blog]() Topics: [Vulnerabilities](), [Orchestration](), [Security](), [Artificial Intelligence](), [Code](), [spoofing](), [anthropic](), [Open Source](), [Frontier Model]() Tags: [agent](), [ai](), [anthropic](), [guest-post](), [model](), [open-source](), [security](), [spoofing](), [tech-matters](), [vulnerabilities](), [vulnerability](), [workflow]() ### AI overview The article reflects on three decades of vulnerability research, contrasting a historically manual TCP source-routing spoofing discovery with an AI-assisted discovery of a long-standing OpenBSD kernel bug. It argues that vulnerability discovery is primarily an orchestration problem, demonstrates the capability with the open-source IronCurtain framework and several language models, and warns that defenders and attackers should assume capability parity. ### Source excerpt Guest Post: Patching faster cannot keep up with AI-driven discovery. Leverage structural invariants to make bug classes irrelevant. ## The lingering legacy of 'reserved' ports DevFeed: [The lingering legacy of 'reserved' ports]() Original publisher: [Read original article]() Author: George Michaelson Published: 2026-08-27T23:29:48Z Content type: article Language: en Sources: [APNIC Blog]() Topics: [Protocol (disambiguation)](), [Network](), [Process](), [Operating system](), [Unix](), [ssh](), [Firewall](), [Internet]() Tags: [dns](), [firewall](), [history](), [internet](), [network](), [ntp](), [opinion](), [process](), [processes](), [ssh](), [systems](), [tech-matters]() ### AI overview An exploration of why reserved TCP and UDP ports persist, tracing conventions such as ports 22, 53, 80, and 443 to early Internet services on multi-user systems. It explains the relationship between ports, protocol-specific daemons, operating-system administration, and modern firewall and service-discovery practices. ### Source excerpt Modern service discovery mechanisms increasingly allow services to run on arbitrary ports, yet DNS may remain the one protocol that cannot fully escape its dependency on the long-established convention of port 53. ## The emerging role of AI in governance discussion DevFeed: [The emerging role of AI in governance discussion]() Original publisher: [Read original article]() Author: George Michaelson Published: 2026-08-26T04:50:50Z Content type: article Language: en Sources: [APNIC Blog]() Topics: [Internet Engineering Task Force (IETF)](), [Large Language Model](), [Artificial Intelligence](), [AI Strategy]() Tags: [ai](), [artificial-intelligence](), [content](), [eu](), [governance](), [ietf](), [large-language-model](), [llm](), [standards](), [tech-matters]() ### AI overview The article examines an ongoing IETF debate over the use and disclosure of LLM-generated text in drafts, standards work, and discussions. It also compares these concerns with EU efforts to promote transparency and labelling of AI-generated or AI-modified content. ### Source excerpt A growing debate within the IETF is exploring how AI-generated content should be used and disclosed in standards discussions. ## AI, IPv6, and the future Internet at IETF 126 DevFeed: [AI, IPv6, and the future Internet at IETF 126]() Original publisher: [Read original article]() Author: Anlei Hu Published: 2026-08-25T01:20:50Z Content type: article Language: en Sources: [APNIC Blog]() Topics: [Internet](), [Internet Engineering Task Force (IETF)](), [networking](), [Artificial Intelligence](), [AI Agent](), [Network](), [Security](), [Latency](), [telemetry]() Tags: [ai](), [dns](), [guest-post](), [ietf](), [infrastructure](), [internet](), [internet-infrastructure](), [ipv6](), [latency](), [low-latency](), [nat](), [network](), [networks](), [opinion](), [security](), [standards](), [tech-matters](), [telemetry]() ### AI overview The article reports on IETF 126 discussions about how AI is shaping Internet infrastructure. It presents IPv6 as important for the scale, globally unique addressing, and traceability required by distributed AI deployments and agents, while DNS remains central to service discovery. It also covers IPv4/IPv6 mapping, NAT-related identity and security concerns, SRv6, low-latency forwarding, IOAM telemetry, and proposals for DNS-based AI agent discovery. ### Source excerpt Guest Post: At IETF 126, discussions highlighted how AI is beginning to shape the future of Internet infrastructure. Participants identified IPv6 as a critical foundation for large-scale AI ecosystems and explored new approaches. ## Do IXPs make the Internet faster? It's complicated DevFeed: [Do IXPs make the Internet faster? It's complicated]() Original publisher: [Read original article]() Author: Dan Fidler Published: 2026-08-23T23:05:33Z Content type: article Language: en Sources: [APNIC Blog]() Topics: [Internet](), [networking](), [Latency](), [Network](), [Low Latency](), [Streaming](), [Caching](), [Cloud](), [Resilience](), [Routing (disambiguation)](), [datasets]() Tags: [australia](), [cloud](), [content](), [cost](), [events](), [global](), [infrastructure](), [internet](), [ixps](), [latency](), [local](), [low-latency](), [netflix](), [network](), [networks](), [performance](), [resilience](), [routing](), [streaming](), [tech-matters](), [technology](), [thailand](), [thainog]() ### AI overview IXPs do not make the Internet uniformly faster. Their impact depends on how performance is defined, where content is hosted or cached, the type of exchange, and the surrounding network conditions. The article examines latency, throughput, streaming quality, reliability, routing, and the changing meaning of keeping traffic local. ### Source excerpt IXPs shape latency, cost, resilience, and the spread of new technologies, not just Internet speed. As the Internet evolves, the role of IXPs continues to expand, as highlighted in this BPF 2026 panel discussion. ## \[Podcast\] DNS cold start DevFeed: [\[Podcast\] DNS cold start]() Original publisher: [Read original article]() Author: George Michaelson Published: 2026-08-19T20:30:00Z Content type: article Language: en Sources: [APNIC Blog]() Topics: [Caching](), [Cache](), [distributed-systems](), [Network](), [cpu](), [Computer science]() Tags: [cache](), [caching](), [cpu](), [data](), [distributed-systems](), [dns](), [network](), [podcast](), [tech-matters]() ### AI overview A podcast discussion examines DNS behavior during a cold start, when a resolver has no cached data. It explains how caching reduces network delays and explores DNS's hierarchical dependencies, comparing the startup challenge with black-start power generation. ### Source excerpt Geoff Huston discusses the unexpected behaviours of the DNS when you perform a query after 'cold start' with no cached data. ## Asia Pacific privacy laws are arriving. Your NREN holds more personal data than you think. DevFeed: [Asia Pacific privacy laws are arriving. Your NREN holds more personal data than you think.]() Original publisher: [Read original article]() Author: Tuwan Azgar Jaleel Published: 2026-08-19T05:10:00Z Content type: article Language: en Sources: [APNIC Blog]() Topics: [data](), [SIEM, Security, Observability](), [Network](), [telemetry]() Tags: [article](), [compliance](), [data](), [guest-post](), [how-to](), [legal](), [networks](), [nren](), [privacy](), [security](), [tech-matters](), [telemetry]() ### AI overview The article examines emerging Asia Pacific privacy laws and their implications for National Research and Education Networks (NRENs). It argues that although an NREN's open backbone may have relatively low exposure, surrounding services such as federated identity, eduroam, CSIRT operations, and network telemetry can process personal data and may create compliance obligations. The article emphasizes that requirements differ by jurisdiction and that NRENs should begin by understanding the data handled by their service portfolios. ### Source excerpt Guest Post: Privacy compliance starts with knowing your data. Many NREN services, including federated identity, eduroam, CSIRT operations, and network telemetry, process personal data and may already fall under emerging privacy laws. ## Time: The cornerstone of digital sovereignty and independence DevFeed: [Time: The cornerstone of digital sovereignty and independence]() Original publisher: [Read original article]() Author: Luca Cicchelli Published: 2026-08-18T01:45:10Z Content type: article Language: en Sources: [APNIC Blog]() Topics: [digital sovereignty](), [systems](), [1.1.1.1](), [spoofing](), [Cybersecurity](), [5G](), [Cloud](), [Artificial Intelligence]() Tags: [5g](), [ai](), [cloud](), [cybersecurity](), [digital-sovereignty](), [energy](), [gnss](), [guest-post](), [ixps](), [operational](), [spoofing](), [systems](), [tech-matters](), [time]() ### AI overview Time is presented as a foundational requirement for digital sovereignty and independent operation. The article explains how synchronized time supports telecommunications, finance, energy, cloud and AI systems, and transport, while dependence on GNSS introduces risks from interference, jamming, and spoofing. ### Source excerpt Guest Post: Though often overlooked, time underpins telecommunications, finance, energy, cloud, AI, and transport systems. As dependence on GNSS increases, organizations need resilient, traceable time sources to strengthen cybersecurity, improve operational continuity, and support digital sovereignty.