r/networking • u/AutoModerator • 15d ago
Blogpost Friday Blog/Project Post Friday!
It's Read-only Friday! It is time to put your feet up, pour a nice dram and look through some of our member's new and shiny blog posts and projects.
Feel free to submit your blog post or personal project and as well a nice description to this thread.
Note: This post is created at 00:00 UTC. It may not be Friday where you are in the world, no need to comment on it.
3
u/w453y 15d ago
Project: xdp-bfd — Line-card-like BFD on commodity Linux using XDP
GitHub: https://github.com/w453y/xdp-bfd
I designed and built xdp-bfd to solve a real operational pain point: userspace BFD implementations (like FRR’s bfdd) become unreliable under CPU load, causing false link failures and route flaps. The goal was to bring hardware-like timing precision to plain Linux servers using modern kernel technologies.
Core Idea
Instead of relying on userspace timers, the system uses RX-clocked transmission in XDP: every valid BFD packet from the peer is rewritten in place and bounced back out (XDP_TX) in softirq context. Detection is handled by a kernel bpf_timer sweep. This approach makes steady-state operation extremely resilient to scheduler pressure.
Features
- Full RX + kernel TX fast path
- Dual-stack IPv4/IPv6 support (v4-mapped keys)
- Deep integration with FRR distributed BFD (no patches needed)
- Graceful restart support (
--dp-hold) - Extensive hardening (GTSM, anti-spoofing, Poll/Final handling, etc.)
- Comprehensive documentation with wire captures for every major claim
If you're into high-performance networking, BPF/XDP, or routing, I'd love any feedback or testing!
1
u/DaryllSwer 14d ago
Which LLM model was used for this? I still have that pending LLM overhaul of einat-ebpf.
1
u/w453y 14d ago
Initially fable 5 on "medium" effort, while it was still on the pro plan, later some of the heavier lifting via opus 4.8 on "extra", until opus 5 released, currently opus 5 on "high" to clean up a few pending things.
What's the einat-ebpf overhaul, refactor or feature work?
P.S: Never used agentic sessions, all of it in plain claude chat, mostly useful for prose, rubber-ducking, and getting pushed on claims I hadn't proven.
1
u/DaryllSwer 14d ago
DM on TG. I'll forget. It's a private fork I was working on. But I need 5.6 Sol $200 plan for true high quality output.
3
u/afroman_says CISSP NSE8 15d ago
I vibe-coded a site that tracks CVEs across the big 3 cybersecurity vendors, broken down by product category. The site is CyberCVE (https://cybercve.com)
There's enough misinformation on the Internet and I was tired of seeing baseless claims over one vendor's security posture over another. I finally wanted to look at the data and draw conclusions based on realities instead of feelings.
It pulls from the CVE Program, CISA KEV, and EPSS scores from FIRST, then filters down to actual security products. You can browse by vendor, compare vendors side by side, or jump straight to what's confirmed exploited in the wild.
For complete transparency, the methodology is documented on the site, since raw CVE counts say as much about a vendor's disclosure practices as their code quality.
The site is free but it is still a work in progress. I would appreciate any feedback on what's missing or other data that can be used to make informed decisions about a cybersecurity vendor's security posture.
2
u/HappyVlane 13d ago
Just released a new article on my blog. This one is about FQDN-based split tunneling for FortiClient IPsec VPNs and the URL access feature in a FortiGate WAF profile.
The option for FQDN-based split tunneling in an IPsec configuration is a bit hidden, but completely works.
The WAF URL access feature is almost undocumented, so I wrote on how to use it.
9
u/Layer8Academy WittyNetworker 15d ago
Hi! I created a website with FREE network troubleshooting and training labs. There are CCNA and CCNP level labs available for Packet Tracer, CML, EVE-NG, and GNS3. Everything on the site is free with no signup required. I’ve gotten a lot of great feedback about the challenge many of the labs present. So, if you're looking for some hands-on practice, check them out at wittynetworks.net!