Best of NetworkingAugust 2025

  1. 1
    Article
    Avatar of hnHacker News·39w

    A German ISP tampered with their DNS - specifically to sabotage my website

    A German developer created a website to expose blocked domains by the CUII (Copyright Clearinghouse for the Internet), a private organization that decides what websites German ISPs should block. After publishing an article about CUII's mistakes, Telefonica (o2's parent company) modified their DNS blocking mechanism, making it harder to detect blocked domains. The timing suggests this was done specifically to sabotage the transparency tool, as Telefonica first tested their own domain on the website, then changed their blocking method two hours later.

  2. 2
    Video
    Avatar of primeagenThePrimeTime·42w

    Why your website should be under 14kB in size

    TCP slow start algorithm begins by sending only 10 packets (approximately 14KB) before waiting for acknowledgment, then doubles the packet count with each successful round trip. This means websites under 14KB can load significantly faster than those requiring multiple round trips, with potential savings of 600+ milliseconds on high-latency connections like satellite internet. The rule applies even to HTTP/2 and HTTP/3/QUIC protocols, making it crucial for optimizing critical above-the-fold content and initial page loads.

  3. 3
    Video
    Avatar of youtubeYouTube·40w

    From TCP to HTTP | Full Course by @ThePrimeagen

    A comprehensive course walkthrough on building an HTTP server from scratch using Go, starting with TCP fundamentals and progressing through HTTP protocol parsing. The tutorial covers reading data from files and network connections, understanding TCP vs UDP differences, parsing HTTP request lines and headers, and implementing a complete HTTP message parser without using built-in libraries. Includes practical exercises with test-driven development and real-world protocol implementation details.

  4. 4
    Article
    Avatar of khokbmumuz4w1vbvtnmldClaudette·42w

    Ethical Hacking Roadmap

    A comprehensive roadmap for learning ethical hacking, covering essential foundations like networking and operating systems, programming languages (Python, Bash, JavaScript), key tools (Nmap, Burp Suite, Metasploit), lab setup with virtual environments, and safe practice platforms like TryHackMe and Hack The Box. The guide emphasizes building knowledge systematically from basic concepts to hands-on practice.

  5. 5
    Article
    Avatar of tailscaleTailscale·40w

    Making a Wake-on-LAN server using Tailscale, UpSnap, and Raspberry Pi

    Learn how to set up a remote Wake-on-LAN server using Tailscale's VPN network, UpSnap web application, and a Raspberry Pi. The guide covers the technical limitations of Wake-on-LAN over Layer 3 networks, provides step-by-step instructions for installing Tailscale and etherwake on a Raspberry Pi, and demonstrates how to deploy UpSnap as both a standalone application and Docker container. The solution enables waking sleeping devices from anywhere without opening network ports, using Tailscale's secure mesh network and optional MagicDNS for easy browser access.

  6. 6
    Article
    Avatar of hnHacker News·39w

    Anything can be a message queue if you use it wrongly enough

    A satirical technical exploration of using Amazon S3 as a message queue to route IPv6 packets between machines, bypassing expensive NAT Gateway costs. The author implements 'Hoshino', a proof-of-concept tool that creates TUN devices to intercept network packets, stores them in S3, and retrieves them on destination machines. While technically functional for basic connectivity like ping and HTTP requests, the approach proves hilariously expensive due to S3 API call costs, making it far more costly than traditional networking solutions.

  7. 7
    Article
    Avatar of hnHacker News·39w

    sping Documentation

    Sping is a modern terminal-based HTTP/TCP latency monitoring tool that provides real-time visualization with interactive charts, outlier detection using Median Absolute Deviation analysis, and comprehensive phase timing breakdowns. It supports HTTP, HTTPS, and TCP protocols with features like customizable color palettes, authentication, threshold alerts, and multiple output formats including JSON for automation. The tool offers detailed connection phase analysis (DNS, connect, TLS, request, response) and includes advanced monitoring capabilities with percentile statistics and export functionality.

  8. 8
    Article
    Avatar of omgubomg! ubuntu!·38w

    NetPeek is a New, User-Friendly Network Scanner for Linux

    NetPeek is a new open-source network scanner for Linux that provides a user-friendly GTK4/libadwaita interface as an alternative to command-line tools like nmap. Built in Python, it offers basic network scanning features including device discovery, port scanning, multi-threaded operations, and support for various IP input formats. The tool aims to make network scanning accessible to users who prefer GUI applications over terminal-based solutions.