Networking blogs

Cloudflare's engineering and policy team posts on network infrastructure, security incidents, DDoS attacks, and internet protocols.

Top post: Why We Terminated Daily Stormer

Tailscale's company blog explains how its mesh VPN works, with deep technical posts on NAT traversal, plus product and pricing updates.

Top post: How NAT Traversal Works (2020)

Daniel J. Bernstein's site, with his cryptography and security software, such as qmail and djbdns, and papers and essays on security.

Top post: The IPv6 Mess

The blog of Let's Encrypt, the nonprofit certificate authority that issues free TLS certificates, covering policies, rate limits, and statistics.

Top post: Challenge types

Julia Evans writes about systems, networking, containers, and debugging, and makes illustrated zines on technical topics.

Top post: Get your work recognized: write a brag document

The Tor Project's official blog covers the anonymity network, Tor Browser, security advisories, and privacy tools.

Top post: Tor security advisory: “relay early” traffic confirmation attack

Robert Graham writes about cybersecurity, hacking, encryption and surveillance, often with a political angle.

Top post: How the Intercept Outed Reality Winner

Adam Langley, a Google security engineer, writes about TLS, certificates, browser security, and authentication such as WebAuthn.

Top post: Overclocking SSL

PortSwigger, maker of Burp Suite, publishes web security research on HTTP request smuggling, HTTP/2 flaws and browser-based attacks.

Top post: Burp

The Asia-Pacific internet registry's blog, with technical posts on routing, DNS, IPv6, and transport protocols.

Top post: BBR, the new kid on the TCP block

Avery Pennarun writes on networking, software engineering, tech debt, and how tech companies and executives work.

Top post: The world in which IPv6 was a good design (2017)

News and tutorial site on software defined radio, focused on cheap RTL-SDR dongles, software, and hobby projects.

Top post: Receiving NOAA Weather Images with SDR (2013)

Brian "Beej" Hall writes free programming guides on network programming, C, Unix IPC, and networking concepts.

Top post: Beej's Guide to Network Programming

Netcraft's news blog, reporting web server market share surveys, hosting trends, and TLS certificate issues.

Top post: IIS is 0.15% away from beating Apache as most popular web server

The SANS Internet Storm Center diary is a daily log by security handlers covering malware, vulnerabilities, internet threats, and practical security tips.

Top post: How to Find Hidden Cameras in Your Airbnb

Neal Krawetz writes on image forensics, fake photo detection, online abuse material detection, Tor and other security topics.

Top post: One Bad Apple

Ilya Grigorik, a Google web performance engineer, writes on networking, latency, storage engines, Ruby internals, and blockchain basics.

Top post: Minimum Viable Block Chain

Cisco's corporate blog covers networking products, security research, open-source releases, and company statements on legal and trademark matters.

Top post: Huawei and Cisco’s Source Code: Correcting the Record

Scott Helme, a security researcher, writes about HTTPS, certificates, browser security headers, and web security practices.

Top post: Using HKPK/HSTS security features to do bad things

Glenn Fiedler writes about game networking, physics integration, fixed timesteps, and floating point determinism for game programmers.

Top post: Fix Your Timestep

CircleID publishes articles by internet infrastructure experts on DNS, domain policy, IPv6, DNSSEC, and internet governance.

Top post: Why I Voted to Sell .ORG

FireEye and Mandiant's threat research blog reports on state-backed hacking groups, malware, and incidents like the SolarWinds compromise.

Top post: Highly Evasive Attacker Leverages SolarWinds Supply Chain

Thomas Ptacek, a security and cryptography practitioner, writes about DNSSEC, cryptography engineering, random number generation, and hiring.

Top post: The Hiring Post

Duo Security's company blog (now Cisco) publishes security research on SAML, authentication, npm malware, and update mechanisms.

Top post: Beer Drinkers Guide to SAML

Mark Nottingham, an HTTP standards contributor, writes about caching, HTTP status codes, API versioning, and reading RFCs.

Top post: Everything You Wanted To Know About Caching

Ben Cox writes about networking, internet measurement, and creative technical experiments such as DNS storage and SSH key analysis.

Top post: DNSFS – Store files in others' DNS resolver caches

A blog on the history and workings of computing, telecommunications, and surveillance technology, with well-researched long posts.

Top post: The Actual OSI Model

The official Skype blog, which posted product announcements, Linux and web client releases, outage notes and architecture updates.

Top post: Skype for Linux Alpha and Calling on Chrome and Chromebooks

Cisco Talos is Cisco's threat intelligence group, publishing analyses of malware, vulnerabilities, spyware and attacks on network devices.

Top post: New VPNFilter malware targets 100,000s of networking devices worldwide

The HAProxy company blog covers the open-source load balancer's releases, performance benchmarks, SSL stacks, rate limiting and enterprise edition.

Top post: The State of SSL Stacks

The company blog for ZeroTier, a software-defined networking product for building virtual networks between devices, with release notes and licensing news.

Top post: Pricing

The official blog of the Mastodon project, covering ActivityPub, server migration, moderation features, and statements on forks and Threads.

Top post: Mastodon: An overview of features for dealing with abuse and harassment

OpenDNS, a DNS service company, posted about DNSCrypt, its policies and product changes such as dropping ads.

Top post: OpenDNS launches DNSCrypt: secure DNS

Roy Fielding, who defined REST in his dissertation, writes about web architecture, REST APIs, and HTTP.

Top post: REST APIs must be hypertext-driven (2008)

RIPE Labs, from the European regional internet registry, publishes research on routing, DNS, IPv6, and internet measurement.

Top post: Build your own Anycast Network in Nine Steps (2016)

Moserware is a software developer's blog with long, illustrated explainers on networking, cryptography, and programming ideas.

Top post: The First Few Milliseconds of an HTTPS Connection (2009)

Jan Schaumann writes technical posts on DNS, email, URLs, Unix time, and operations lessons, often listing common false assumptions.

Top post: Complexities of e-mail validation logic

Vincent Bernat, a network and Linux engineer, writes detailed posts on Linux networking, Debian packaging, and Python tooling.

Top post: SSL/TLS & Perfect Forward Secrecy

Dan Kegel writes technical pages on network server scaling, non-blocking I/O, cross-compilers, Wine, and getting hired as a programmer.

Top post: The C10K problem

Company blog from Smallstep, which makes tools for running private certificate authorities, SSH certificates and PKI.

Top post: If you’re not using SSH certificates you’re doing SSH wrong (2019)

Geoff Huston, chief scientist at APNIC, writes about IPv4 exhaustion, the IPv6 transition, DNS, QUIC, and internet routing data.

Top post: IPv4 Address Report

The team behind HTTP Toolkit, an HTTP debugging proxy, writes about web security, certificates, HTTP protocols, and Android interception.

Top post: Apple already shipped attestation on the web, and we barely noticed

Mattias Geniar, a Belgian sysadmin and developer, writes about Linux, web servers, networking and security, and runs the Cron.weekly newsletter.

Top post: Terminal escape sequences – the new XSS for Linux sysadmins

Riot Games engineers write about the technology behind League of Legends and Valorant, including netcode, anti-cheat, servers, and testing.

Top post: Demolishing Wallhacks with Valorant's Fog of War

Michael Stapelberg, a Go and Linux developer and former Debian maintainer, writes about package managers, home networking, and hardware builds.

Top post: Winding down my Debian involvement

Craig Hockenberry, a Mac and iOS developer at Iconfactory, writes about Apple platforms, Twitter's history, and server traffic problems.

Top post: What happens when DNS in China is poisoned and pointed at your server

prgmr.com is a small VPS and colocation hosting company that publishes support diaries and notes on its services.

Top post: Xen-powered Virtual Private Servers. That don't assume you are stupid.

The official blog of Bluesky, covering the AT Protocol, federation, moderation, and the company's plans for a decentralized social network.

Top post: Jack Dorsey-endorsed “decentralized Twitter” protocol specified

Mux, a video infrastructure company, writes about streaming, low-latency HLS, browser video, and web development.

Top post: Everything I wish I knew before moving 50k LOC to React Server Components

IT Hare is a blog by a game-development veteran on low-level performance, networking, memory allocators and multiplayer game architecture.

Top post: Operation Costs in CPU Clock Cycles

Netflix's company blog from the early 2010s, covering product announcements, video encoding, ISP performance data, and net neutrality.

Top post: The Official Netflix Blog: Encoding for streaming

John Goerzen writes about Linux, Debian, Emacs, systemd, networking, and self-hosted tools such as Syncthing and mesh VPNs.

Top post: Count me as a systemd convert

Kevin Murphy reports news on the domain name industry, including ICANN decisions, registries, and top-level domain policy.

Top post: Future of .io domains uncertain as UK hands over Chagos islands

Akamai's corporate blog covering CDN operations, web security updates, and performance topics like Heartbleed patching, leap-second handling, and Brotli compression.

Top post: Heartbleed Update v3

Steve Friedl's Unixwiz site hosts illustrated technical guides on SSH, DNS, cryptographic hashes, SQL injection, and C declarations, plus consulting advice.

Top post: So you want to be a consultant?

webrtcHacks publishes technical analyses of WebRTC, covering video call implementations, encryption, privacy leaks, and how big companies use the technology.

Top post: How Zoom’s web client avoids using WebRTC

Rapid7's security research blog, covering vulnerabilities, Metasploit modules, and internet-wide scans of exposed devices and services.

Top post: There's a Hole in 1,951 Amazon S3 Buckets

Jef Poskanzer's personal site hosts free software such as thttpd and micro_httpd, the PBM image utilities, and assorted web experiments.

Top post: Acme Thttpd

Adrian Kennard (RevK) is CEO of UK ISP Andrews & Arnold and writes about networking, embedded hardware, and odd technical history.

Top post: ADSL works over wet string (2017)

Dyn, a DNS and internet infrastructure company, posts about DNS, dynamic DNS, traffic management, and internet routing.

Top post: Everything You Ever Wanted to Know About DNS TTLs