Field notes
Writing from a live national backbone
BGP policy, DDoS, overlays, and NOC practice — with a photo on every post.
Security · 12 Aug 2026 · 6 min read
RPKI and BGP security on a national backbone
Prefix-lists and MD5 are table stakes. Here is how we enforce RPKI-based origin validation across upstream peering without breaking legitimate traffic.
Security · 28 Jul 2026 · 5 min read
DDoS mitigation when the customer is an ISP
Volumetric attacks on downstream ISPs are infrastructure problems. How WanGuard, FastNetMon, and custom automation sit on a multi-gigabit IIG core.
Networking · 18 Jun 2026 · 5 min read
VXLAN overlay for isolation without losing uptime
We deployed a VXLAN overlay across company infrastructure to isolate traffic and keep uptime guarantees at scale. What worked, and what we refused to over-engineer.
Systems & servers · 9 May 2026 · 4 min read
What a national backbone NOC actually needs
Escalation paths, traffic telemetry, and mentoring beat another unused dashboard. Notes from running 24/7 IIG operations.