Archive

Category Archives for "Packet Pushers Podcast"

One-liner iptables rule to Filter NTP Reflection on Linux Hypervisor

Anybody annoyed enough with massive NTP monlist floods over the weekend? If you did like I did, I believe what immediately came to your mind was, “this shouldn’t have happened if they just had put a ‘default ignore’ line in their ntp.conf file!” But unfortunately there are some people who’re not like you, including casual […]

Author information

Tamihiro Yuzawa

Tamihiro Yuzawa

Tamihiro Yuzawa is a network engineer at Sakura Internet, one of Japan's major data center service providers. Before he joined Sakura in 2007, he spent five years at a busy CRM service provider. Both companies have allowed him to stay mostly within the intersection of these circles, and he is pretty much determined to remain in a serious relationship with both Dev and Ops.

The post One-liner iptables rule to Filter NTP Reflection on Linux Hypervisor appeared first on Packet Pushers Podcast and was written by Tamihiro Yuzawa.

Where Are All the Operators in the IETF Standards Process?

Network operators – service providers, enterprises, engineers, architects, data-centers, campuses, etc. – are responsible for keeping the packets flowing across their network(s). The Internet Engineering Task Force (IETF) designs, develops, and documents the standard protocols network operators use in and on their networks. In a perfect world, operators would be part of the IETF process […]

Author information

Chris Grundemann

Director, Deployment and Operationalization at Internet Society

Chris Grundemann (JNCIE #449) is a passionate Internet Technologist and a strong believer in the Internet's power to aid in the betterment of humankind. In his current role as Director of Deployment and Operationalization (DO) at the Internet Society, Chris is focused on helping to get key Internet technologies, such as IPv6 and DNSSEC, deployed around the globe. He has over a decade of experience as both a network engineer and architect designing, building, and operating large IP, Ethernet, and Wireless Ethernet networks. Chris has 11 patents pending and is the author of Day One: Exploring IPv6 and Day One: Advanced IPv6 Configuration, as well as several IETF Internet Drafts, a CircleID blog, a personal weblog, and various other industry papers and blogs. He is the Continue reading

CEF Secret Attributes, Part 3

In Part 1 we saw we can mark prefixes in CEF with certain attributes that might give us interesting things to play with. In Part 2 we found we could track traffic patterns with the traffic_index tag. We will now turn our attention to the qos-group parameters. Let’s say we would like four categories of […]

Author information

Dan Massameno

Dan Massameno is the president and Chief Engineer at Leaf Point, a network engineering firm in Connecticut.

The post CEF Secret Attributes, Part 3 appeared first on Packet Pushers Podcast and was written by Dan Massameno.

Review: OpenStack Deployment

Deploying OpenStack Ken Pepple OpenStack is a wide ranging initiative started by Rackspace and NASA in 2010 designed to provide open source software to build and manage IaaS cloud services. What’s often missing in open source projects like OpenStack is a definitive guide to the release schedule, the different pieces, how the different pieces interact, […]

Author information

Russ White

Russ White
Principle Engineer at Ericsson

Russ White is a Network Architect who's scribbled a basket of books, penned a plethora of patents, written a raft of RFCs, taught a trencher of classes, and done a lot of other stuff you either already know about, or don't really care about. You want numbers and letters? Okay: CCIE 2635, CCDE 2007:001, CCAr, BSIT, MSIT (Network Design & Architecture, Capella University), MACM (Biblical Literature, Shepherds Theological Seminary). Russ is a Principal Engineer in the IPOS Team at Ericsson, where he works on lots of different stuff, serves on the Routing Area Directorate at the IETF, and is a cochair of the Internet Society Advisory Council. Russ will be speaking in November at the Ericsson Technology Day. he recently published The Art of Network Architecture, is currently working on a new book in the area Continue reading

The Coffee Break – Show 1

This is “The Coffee Break”. A podcast on state of the networking business where we discuss vendors moves and news, analysis on product and positioning, and look at the business of networking. It's like a soundtrack for the network industry.

In the time it takes to have coffee break. Or so.

Author information

Greg Ferro

Greg Ferro is a Network Engineer/Architect, mostly focussed on Data Centre, Security Infrastructure, and recently Virtualization. He has over 20 years in IT, in wide range of employers working as a freelance consultant including Finance, Service Providers and Online Companies. He is CCIE#6920 and has a few ideas about the world, but not enough to really count.

He is a host on the Packet Pushers Podcast, blogger at EtherealMind.com and on Twitter @etherealmind and Google Plus.

The post The Coffee Break – Show 1 appeared first on Packet Pushers Podcast and was written by Greg Ferro.

The Coffee Break – Show 1

This is “The Coffee Break”. A podcast on state of the networking business where we discuss vendors moves and news, analysis on product and positioning, and look at the business of networking. It's like a soundtrack for the network industry. In the time it takes to have coffee break. Or so.

Using VRFs to maintain security zones in an Layer 3 datacenter network

The number of overlay technologies available today for the datacenter are numerous and highly functional. The flexibility they provide enables security zone enforcement and physical portability of hosts more seamlessly (among other benefits). However, a few risks in deploying popular layer 2 overlay technologies are vendor-lockdown, scalability, specialized hardware required to mitigate bottleneck points, and […]

Author information

Paul Zugnoni

Paul Zugnoni has been in networking for 15 years, primarily working on publicly facing data center networks. He has enjoyed roles including network engineer, data center planner, traveling cable monkey, consultant, manager, peering coordinator, network architect, and spanning-tree therapist.

The post Using VRFs to maintain security zones in an Layer 3 datacenter network appeared first on Packet Pushers Podcast and was written by Paul Zugnoni.

Introducing Community Channel – Insert Your Podcast Here

A place for anyone to start a podcast with the Packet Pushers.

Author information

Greg Ferro

Greg Ferro is a Network Engineer/Architect, mostly focussed on Data Centre, Security Infrastructure, and recently Virtualization. He has over 20 years in IT, in wide range of employers working as a freelance consultant including Finance, Service Providers and Online Companies. He is CCIE#6920 and has a few ideas about the world, but not enough to really count.

He is a host on the Packet Pushers Podcast, blogger at EtherealMind.com and on Twitter @etherealmind and Google Plus.

The post Introducing Community Channel – Insert Your Podcast Here appeared first on Packet Pushers Podcast and was written by Greg Ferro.

Show 178 – Cisco Nexus 1000v and Microsoft Hyper-V

Cisco Nexus 1000V virtual switch for Microsoft Hyper-V and integrates with your existing Nexus 1000V deployment. In this episode we talk with Appaji Malla and Balaji Sivasubramanian from the Hyper-V Product team on the architecture of the product and platform.

Author information

Greg Ferro

Greg Ferro is a Network Engineer/Architect, mostly focussed on Data Centre, Security Infrastructure, and recently Virtualization. He has over 20 years in IT, in wide range of employers working as a freelance consultant including Finance, Service Providers and Online Companies. He is CCIE#6920 and has a few ideas about the world, but not enough to really count.

He is a host on the Packet Pushers Podcast, blogger at EtherealMind.com and on Twitter @etherealmind and Google Plus.

The post Show 178 – Cisco Nexus 1000v and Microsoft Hyper-V appeared first on Packet Pushers Podcast and was written by Greg Ferro.

Review: Cloud Architecture Patterns

Cloud Architecture Patterns Bill Wilder Networks support applications. Okay, that might seem a little obvious, but it needs to be said from time to time. In that vein, I often find it useful to get a better grip on the applications people are putting on networks, and how they expect the network to behave. In […]

Author information

Russ White

Russ White
Principle Engineer at Ericsson

Russ White is a Network Architect who's scribbled a basket of books, penned a plethora of patents, written a raft of RFCs, taught a trencher of classes, and done a lot of other stuff you either already know about, or don't really care about. You want numbers and letters? Okay: CCIE 2635, CCDE 2007:001, CCAr, BSIT, MSIT (Network Design & Architecture, Capella University), MACM (Biblical Literature, Shepherds Theological Seminary). Russ is a Principal Engineer in the IPOS Team at Ericsson, where he works on lots of different stuff, serves on the Routing Area Directorate at the IETF, and is a cochair of the Internet Society Advisory Council. Russ will be speaking in November at the Ericsson Technology Day. he recently published The Art of Network Architecture, is currently working on a new book in the area Continue reading

FAT or Entropy Label?

In this article we are going to see two features that improve the load-balancing in the MLPS Core. Why? In the networking when dealing with redundancy of links or paths we are facing the polarization issue. This problem happens when one of the link is congested. Let’s take the example of LAGs, if the hashing […]

Author information

Youssef El Fathi

Youssef El Fathi

Youssef is a network engineer working for a french service provider. He is also a dual CCIE (RS, SP). You can find him on Twitter.

The post FAT or Entropy Label? appeared first on Packet Pushers Podcast and was written by Youssef El Fathi.

Restoring Trust in the Internet – Part 1

The Internet has a trust problem. With the recent revelations of government surveillance, traffic interception and modification, compromised products, and suspect algorithms, we have serious problems. Greg and Ethan spoke to this briefly on Show 175 regarding the pwning of several firewall products by the NSA, but the issue goes much further than just compromised […]

Author information

Jonathan Strine

Jonathan Strine

Jonathan Strine is a Network Engineer who's been in the IT industry since the turn of the century and holds a CCNP, CCDP, and is preparing for the CCIE lab. His experience covers a variety of industries. He currently works for Cisco where he gets to play with new equipment in the lab all day. Well, some days at least. His and his wife's long term goal is to downsize to a 500 sq-ft house and live simply. To contact him directly and securely, please see his current PGP Keys.

The opinions and views expressed are solely his and not necessarily those of his current or previous employers.

The post Restoring Trust in the Internet – Part 1 appeared first on Packet Pushers Podcast and was written by Jonathan Strine.

One leg too few? Architectural Best Practice on SSL VPNs

A couple of times in the past month I’ve been asked where a SSL VPN appliance should be deployed in relation to the firewall. In both cases it was relating to the Juniper Secure Access / MAG platform, but best practice should apply equally to any IPSEC or SSL VPN platform, so I thought it […]

Author information

Glen Kemp

Enterprise Security Architect. Designing & deploying “keep the bad guys out” technologies. Delivering elephants and not hunting unicorns.

Please free to add me on , follow me on Twitter or check out my other blogs on Juniper J-Net, sslboy.net and SearchNetworking.

The post One leg too few? Architectural Best Practice on SSL VPNs appeared first on Packet Pushers Podcast and was written by Glen Kemp.

Show 177 – Current Practices

More Engineers talking about their day-to-day problems. We found Justin Seabrook Rocha and Shawn McGuire lurking in the #PacketPushers ITC channel complaining about stuff. Now they are doing it in front to a microphone. Bring the real world to your real world. Guests Shawn McGuire bigbash on the #Packetpushers channel on irc.freenode.net Twitter : @mcguiresm Blog: http://8bitsbytes.com […]

Author information

Greg Ferro

Greg Ferro is a Network Engineer/Architect, mostly focussed on Data Centre, Security Infrastructure, and recently Virtualization. He has over 20 years in IT, in wide range of employers working as a freelance consultant including Finance, Service Providers and Online Companies. He is CCIE#6920 and has a few ideas about the world, but not enough to really count.

He is a host on the Packet Pushers Podcast, blogger at EtherealMind.com and on Twitter @etherealmind and Google Plus.

The post Show 177 – Current Practices appeared first on Packet Pushers Podcast and was written by Greg Ferro.

The Secret Sauce for Network Services

Tunneling is the Duct Tape of Networking..It is interesting to realize that a big chunk of network features in Data Center, Service Providers and Enterprises use tunneling in one form or another..It would be fun to imagine a “world” without tunnels! Most known MPLS applications are tunneling techniques, for instance in a VPLS/L3VPN Scenario the […]

Author information

Karim Jamali

Karim Jamali

Karim is a network engineer, blogger, and CCIE #25064. His main focus areas are Data Center, Virtualization and Security..Karim has been working in the industry for more than 6 years covering both pre-sales & post-sales functions.

The post The Secret Sauce for Network Services appeared first on Packet Pushers Podcast and was written by Karim Jamali.

Please Fill Out Our 2014 Audience Survey

Packet Pushers is a big part of Greg’s & Ethan’s lives and the show is continuing to grow in 2014. We learn a lot, laugh a lot, and work hard to bring you the show every week and fresh content on the blog site. Despite enjoying editing and writing along with producing the podcast, the […]

Author information

Ethan Banks

Ethan Banks, CCIE #20655, has been managing networks for higher ed, government, financials and high tech since 1995. Ethan co-hosts the Packet Pushers Podcast, which has seen over 2M downloads and reaches over 10K listeners. With whatever time is left, Ethan writes for fun & profit, studies for certifications, and enjoys science fiction. @ecbanks

The post Please Fill Out Our 2014 Audience Survey appeared first on Packet Pushers Podcast and was written by Ethan Banks.

BGP Path Hunting/Exploration

 Only one change or link flap can cause one hour or more traffic drop.  It is weird, right? But this is true. In this article BGP Path Hunting/ Path Exploration behavior will be shown, BGP route flap dampening and its variants will be explained and how only one interface flap can cause very long down […]

Author information

Orhan Ergun

Orhan Ergun, CCIE, CCDE, is a network architect mostly focused on service providers, data centers, virtualization and security.

He has more than 10 years in IT, and has worked on many network design and deployment projects.

In addition, Orhan is a:

Blogger at Network Computing.
Blogger and podcaster at Packet Pushers.
Manager of Google CCDE Group.
On Twitter @OrhanErgunCCDE

The post BGP Path Hunting/Exploration appeared first on Packet Pushers Podcast and was written by Orhan Ergun.

Show 176 – Intro to Python & Automation for Network Engineers

Network engineers keep hearing about Software Defined Networking (SDN) and wonder, “Will I have to become a programmer to keep my job?” The answer is, “Probably not.” However, there’s still an awful lot to be said for network engineers becoming familiar with the tools of network automation. There’s a gain in productivity to be had […]

Author information

Ethan Banks

Ethan Banks, CCIE #20655, has been managing networks for higher ed, government, financials and high tech since 1995. Ethan co-hosts the Packet Pushers Podcast, which has seen over 2M downloads and reaches over 10K listeners. With whatever time is left, Ethan writes for fun & profit, studies for certifications, and enjoys science fiction. @ecbanks

The post Show 176 – Intro to Python & Automation for Network Engineers appeared first on Packet Pushers Podcast and was written by Ethan Banks.