Using Kubernetes to scale physical networks: Introducing scalable BGP Hierarchical Route Reflectors with meshrr and Juniper cRPDIn a service provider network architecture, most rely on one set of elements to tie an entire autonomous system together. In many networks, they aren't given a lot of thought. I'm talking about BGP route reflectors, of course. I've built a demo solut...Feb 2, 2021 · 12 min readjason.rokea.ch
EdgeRouter Fail2Ban Persistence Through UpgradesMy last post detailed how to install and configure Fail2Ban on a Ubiquiti EdgeRouter to thwart brute force attacks against an OpenVPN server. Unfortunately, programs installed on EdgeRouters do not persist through upgrades because new images overwr...Oct 2, 2018 · 3 min readjason.rokea.ch
Mitigating an OpenVPN Brute Force Attack with Fail2Ban on EdgeRouterTonight, I noticed numerous attempts from a variety of sources to log in to my OpenVPN server that I run on my EdgeRouter (ER-X-SFP) at home. Unfortunately EdgeRouter doesn't support any sort of blacklisting for OpenVPN natively, but it does allow th...1JSep 9, 2018 · 2 min readjason.rokea.ch