Tfa contains the whole session dude.

I will definitely start to read this out loud to my 5 year old. He will love it. Thanks for sharing your finding.

Just FYI. Almost every launcher that offers commercial services has such a user manual. I was involved in preparing one such manual. A collection of these manuals can be quite entertaining for 5 year olds. You should be able to easily find them from the websites of the respective companies or agencies.

Thanks for the tip. I only knew about old manuals of the space shuttle.

You can also sign ssh host keys with an ssh ca.

See ssh_config and ssh-keygen man-pages...

In addition to equvinox (hey again): In enterprise networks you should rely on 802.1x or what's also valid use case is the use of ipsec to ensure the local client connection is "safe".

Some 802.1x have inherent mitm attacks that have been called out since 2004 and never got the v2 (https://www.rfc-editor.org/rfc/rfc6677.html). EAP-TLS however is the best practice here + VLANs.

What do you think about to just use open networks and the use of IPsec/wireguard?

> and thought to myself "they do textbooks?".

Indeed: https://systemsapproach.org/books-html/

If you are cheap on money, but you do have time, and like to get into networking, I can only highly recommend https://book.systemsapproach.org/

The link to https://book.systemsapproach.org/internetworking/routing.htm... is in the first paragraph.

I.e. bird detects interface failure but this affects only your side of decision making. For bidirectional failure detection you do BFD with BGB. BFD default timers are 3 times 30 ms, iirc.

You can configure your assigned network numbers that other AS are allowed to announce certain networks of your own. Not uncommon for in examples authoritative name server addresses.

TIL, I always thought IP:ASN mappings were 1:1.

With cloud providers and such the wording could also be "bring your own address".

Here you go: https://en.wikipedia.org/wiki/Resource_Public_Key_Infrastruc...

That, and ASPA, and https://manrs.org/

Links between, and in between data centers use so called jumbo frames with an mtu of over 9000. Not joking.

Worth mentioning that links at home can use them too, jumbo frame support was rare at one point but now you can get them on really cheap basic switches if you're looking for it. Even incredibly cheap $30 (literally, that's what a 5 port UniFi flex mini lists for direct) switches support them now. Not just an exotic thing for data centers anymore, and it can cut down on overhead within a LAN particularly as you get into 10/25/40/100 Gbps stuff to your own NAS/SAN or whatever.

The issue is; in the default free zone, every peer which gives you a full table, gives you 1 million routes. Core infrastructure is not getting refreshed every 5 year, I have heard so...