Tag Archive
routing
3 posts found
BGP Flowspec False Positives: When DDoS Filters Block Legitimate Traffic
Flowspec rules are coarse-grained. They catch attack traffic and legitimate traffic alike. How to monitor, whitelist, and protect your critical services from co…
TPROXY vs REDIRECT: Transparent Socket Interception on Linux
Intercepting routed TCP and UDP traffic on a Linux gateway without rewriting packet headers requires Netfilter TPROXY. Here is why REDIRECT breaks UDP and conne…
Why Your OpenWrt Transparent Proxy Leaks Packets
A routing policy collision caused my OpenWrt proxy to leak traffic. The fix required explicit IP rule priorities and unreachable fallback rules to prevent unmar…