DSE security knowledge hub

IT
Knowledge

Page 109 of the DSE IT knowledge center, with source-backed guidance and practical next steps.

DSE-authoredOfficial sourcesReviewed guidance
Search the library
Explore this topic

IT knowledge center

Production-minded guidance for endpoints, servers, updates, cloud services, administration, and supportable operations.

Start with the cornerstone guide
DSE post stream

IT

1,513 articles
DSE visual briefNetworks & infrastructure

Accept DNS configuration from IPv6 router advertisements only within option lifetimes

An RDNSS option’s Lifetime is the maximum time its advertised recursive-server addresses may be used; a zero lifetime removes them immediately. A DNSSL option applies the same lifetime semantics to its advertised DNS search suffixes, including immediate withdrawal at zero.

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the briefing
DSE visual briefNetworks & infrastructure

Advertise OSPF maximum metrics when a router must remain non-transit

An OSPF router that must remain reachable but avoid transit advertises MaxLinkMetric on every non-stub link in its router-LSA. MaxLinkMetric is the 16-bit all-ones value 0xffff and signals that the advertised link should not carry transit traffic.

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the explainer
DSE visual briefNetworks & infrastructure

Allocate BGP Large Community fields before encoding policy

A BGP Large Community is a 12-octet value containing a four-octet Global Administrator and two four-octet operator-defined local fields. The Global Administrator should be an ASN whose owner defines the two local fields; reserved ASNs are not recommended for that role.

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the guide
DSE visual briefNetworks & infrastructure

Apply BGP path selection before advertising a chosen route

BGP first assigns each feasible received route a policy-derived preference, then selects one best route per destination for the Loc-RIB. A route with an unresolvable NEXT_HOP is excluded from selection, and the chosen route is re-evaluated when next-hop reachability or IGP cost changes.

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the playbook