Network Engineering

Peering, BGP, edge infrastructure and network security — written by the people building Peer1IX.

Encryption costs CPU, and tunnels can underperform. Practical ways to get more throughput from IPsec.

IPv6 adoption is rising across clouds and Indian networks. How to extend dual-stack routing across your hybrid environment.

A single VXC depends on one port at each end. How to design redundant private connectivity on the fabric.

The 100.64.0.0/10 range was set aside specifically for carrier-grade NAT. A short explainer and some common pitfalls.

When a BGP session will not come up or routes are missing, work through these checks in order.

Two ways to decide what goes into an IPsec tunnel. Why route-based designs are usually the better choice.

VXCs are simple, but a few design details — MTU, VLAN tags and routing — make the difference between smooth and painful.

Many customers share one fabric, yet every connection stays private. A short technical explainer on how VLAN tagging keeps virtual circuits…

Interconnect capacity for cloud security services must handle normal traffic and attack scenarios. How to size it.

NAT capacity is not just bandwidth. Sessions, ports per subscriber and address pools all need planning.

A virtual router can be more resilient than a physical one — if the design uses redundancy at every layer. What to configure.

Overlapping address space is one of the most common problems when connecting clouds. How to prevent it, and what to do when it happens.