A researcher published 11 unpatched Tailscale and headscale findings, led by an SSH forwarding bug that turns one compromised device into root on its peers. Here's what you can change today.
Eight eMudhra intermediate CAs shipped with single-byte private keys. Browsers were covered within hours. Your scripts, appliances and decrypting firewall were not.
How vPC, MLAG, MC-LAG, VLT, VSX, and CLAG all spoof one LACP System ID across two switches, how each pair keeps the lie consistent and fails, and why the industry ignored the IEEE standard that already solved multi-chassis.
Your YubiKey fires a Yubico OTP on any short touch because slot 1 ships that way from the factory. Two commands fix it, and one of them has a catch worth knowing about first.
netlab turns nine lines of YAML into a running, converged lab. Install it, build your first FRR topology, and stop hand wiring labs.
What IEEE 802.1AX mandates, what it deliberately leaves to the vendor, and why a single flow on a 4x10G bundle still tops out at 10G.
Taran Deshpande's CHI-NOG 13 live demo. An AI agent designs an SRv6 L3VPN lab, BGP comes up with zero prefixes, and the agent loops back and debugs its own configs. Why the failure loop beats one shot prompting, and the token question nobody could answer.
The founder of United IX came back to CHI-NOG to say his 2015 commercial IX argument no longer holds. Open Pipes, one nonprofit umbrella for many exchanges, and a new community fabric already racked at 350 E Cermak.
Your first useful Docker Compose stack, with Pi-hole. Volumes, environment variables, healthchecks, and how to keep your home lab from being a single point of forgetting.
Git workflows that scale to teams. Pull request etiquette, branch protection, signed commits, and how to make CI work for your network configs the way it works for code.
From zero to your first running container. Why Docker beats running things directly on the host, the difference between images and containers, and the one-line Compose file that gets you started.
Every security vendor wants SSL decryption at the edge, but HTTPS interception breaks the TLS trust chain and invites MitM attacks. The case for inspecting at the endpoint instead.
AI and ML can spot threats faster and lighten the security team's load, but they're only as good as their training data. Use them as one layer, never the only one.
After a failover to ASA 9.4, AnyConnect clients got a self-signed certificate because the ASA prefers elliptic curve ciphers. A custom ssl cipher list fixes it.
A field guide for vendors presenting at Tech Field Day events. Read the bios, kill the NASCAR slide, send the deck afterward, and stop treating delegates like sales leads.
Tim Cook built Apple's supply chain into a fortress. Apple's software got measurably worse on his watch. John Ternus has one chance to fix it.
A certificate expired on May 9, 2023 and vEdge 100, 1000 and 2000 routers started losing service. Cisco fumbled a 10 year cert again, eight years after the WLC one.
Two days of workshops and operator talks in Chicago. RPKI hands-on labs, Nokia AI fabric design, and conversations with engineers who actually operate networks.
RouterJockey merch is back. 'PCAP or it didn't happen' t-shirts, polos, notebooks. Higher quality than the 2015 store, fewer products, more care.
NFD40 delegate lineup and agenda: AI networking, network automation, silicon, and vendor pitches from Arista, Cisco, Nokia, Netris, and others.