Govern 32-bit BGP communities as transitive routing policy tags
The BGP COMMUNITIES attribute is optional and transitive and contains a variable-length set of four-octet community values.
Read the guideDSE security knowledge hubNetworks & Infrastructure
Networks & Infrastructure
Knowledge
Page 138 of the DSE Networks & Infrastructure knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Networks & Infrastructure knowledge center
Guidance for resilient networks, Wi-Fi, firewalls, cabling, power, exposure reduction, and connected-device planning.
DSE post stream
1,594 articlesNetworks & Infrastructure
Ignore ICMP Source Quench as a congestion-control signal
A host must not send ICMP Source Quench, and TCP must silently discard any Source Quench it receives. A router must ignore every received ICMP Source Quench message. UDP, SCTP, DCCP, and any other transport instance must silently ignore or discard a received Source Quench.
Read the playbook
Keep confederation-internal AS paths from leaking beyond the confederation
A confederation member uses its confederation identifier with outside peers and its Member-AS number with peers inside the same confederation.
Read the briefing
Map each six-bit DSCP to a configured per-hop behavior
The DS field uses a six-bit DSCP to select per-hop behavior; the remaining two bits are excluded from that selection. A compliant node must match the entire six-bit DSCP and support a configurable mapping from codepoints to per-hop behaviors.
Read the checklist
Negotiate Add-Path before advertising multiple paths for one prefix
The ADD-PATH capability declares, separately for each AFI/SAFI, whether the sender can receive paths, send paths, or do both. A speaker may send multiple paths for an AFI/SAFI only when it advertised send capability and its peer advertised receive capability for that same AFI/SAFI.
Read the explainer
Negotiate ECN before treating congestion marks as transport signals
TCP negotiates ECN with ECE and CWR set on the initiating SYN and only ECE set on the responding SYN-ACK; neither endpoint may set ECT on data until both directions complete ECN setup. A receiver echoes a received CE mark with ECE acknowledgments until it receives CWR from the sender.
Read the guide
Negotiate each BGP address family before exchanging reachability
MP_REACH_NLRI advertises reachable prefixes and their next hop, with AFI and SAFI identifying the address-family semantics. MP_UNREACH_NLRI withdraws multiple routes for the AFI and SAFI carried in that attribute.
Read the playbook
Parse IPv6 extension headers without assuming a fixed upper-layer offset
IPv6 optional internet-layer headers form a Next Header chain, and the first value that is not an extension header identifies the following upper-layer header.
Read the briefing
Parse extended ICMP objects only after the original datagram and length fields
The defined ICMPv4 and ICMPv6 error messages gain an original-datagram length field so an appended extension structure can be located after that field.
Read the checklist
Prevent route-reflector loops with cluster and originator attributes
A route reflector creates ORIGINATOR_ID from the original speaker’s BGP Identifier, and a router should ignore a route whose ORIGINATOR_ID equals its own identifier.
Read the explainer