Batten down the DNS hatches as attackers strike Feds

If enterprise IT folks haven’t taken a look at their DNS ecosystem recently now may be a good time. This week the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) told all federal agencies to bolt down their Domain Name System in the face of a  series of global hacking campaigns. More about DNS:To read this article in full, please click here

Batten down the DNS hatches as attackers strike Feds

If enterprise IT folks haven’t taken a look at their DNS ecosystem recently now may be a good time. This week the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) told all federal agencies to bolt down their Domain Name System in the face of a  series of global hacking campaigns. More about DNS:To read this article in full, please click here

Batten down the DNS hatches as attackers strike Feds

If enterprise IT folks haven’t taken a look at their DNS ecosystem recently now may be a good time. This week the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) told all federal agencies to bolt down their Domain Name System in the face of a  series of global hacking campaigns. More about DNS:To read this article in full, please click here

HPE predicts storage-class memory will replace NAND flash

Storage-class memory (SCM), RAM that has the ability to retain its contents like NAND flash memory but the speed of DRAM, will eventually supplant flash as the high-speed storage medium of choice.That’s the prediction of Ivan Iannaccone, vice president and general manager of HPE’s 3PAR storage unit. But he adds that it will take some time.“It’s not going to happen overnight; it’s just a matter of time for it to become economically viable, but it will eventually take over. Maybe in 10 years,” he told me.[ Read also: Why disk beat tape in the backup wars | Get daily network and data center insights: Sign up for Network World newsletters ] On a per-byte basis, SCM is around four times more expensive than flash. Currently only two vendors make it: Intel and Samsung. Intel sells it under the Optane brand and targets it at enterprises, and Intel’s Optane HPE uses it in its storage arrays.To read this article in full, please click here

HPE predicts storage-class memory will replace NAND flash

Storage-class memory (SCM), RAM that has the ability to retain its contents like NAND flash memory but the speed of DRAM, will eventually supplant flash as the high-speed storage medium of choice.That’s the prediction of Ivan Iannaccone, vice president and general manager of HPE’s 3PAR storage unit. But he adds that it will take some time.“It’s not going to happen overnight; it’s just a matter of time for it to become economically viable, but it will eventually take over. Maybe in 10 years,” he told me.[ Read also: Why disk beat tape in the backup wars | Get daily network and data center insights: Sign up for Network World newsletters ] On a per-byte basis, SCM is around four times more expensive than flash. Currently only two vendors make it: Intel and Samsung. Intel sells it under the Optane brand and targets it at enterprises, and Intel’s Optane HPE uses it in its storage arrays.To read this article in full, please click here

HPE predicts storage-class memory will replace NAND flash

Storage-class memory (SCM), RAM that has the ability to retain its contents like NAND flash memory but the speed of DRAM, will eventually supplant flash as the high-speed storage medium of choice.That’s the prediction of Ivan Iannaccone, vice president and general manager of HPE’s 3PAR storage unit. But he adds that it will take some time.“It’s not going to happen overnight; it’s just a matter of time for it to become economically viable, but it will eventually take over. Maybe in 10 years,” he told me.[ Read also: Why disk beat tape in the backup wars | Get daily network and data center insights: Sign up for Network World newsletters ] On a per-byte basis, SCM is around four times more expensive than flash. Currently only two vendors make it: Intel and Samsung. Intel sells it under the Optane brand and targets it at enterprises, and Intel’s Optane HPE uses it in its storage arrays.To read this article in full, please click here

Cisco patches serious SD-WAN software security holes

Cisco has patched security vulnerabilities in four packages of SD-WAN Solution software that address buffer overflow, arbitrary file override and privilege access weaknesses that could have led to denial-of-service attacks or access problems.The first patch, called “Critical” by Cisco, fixes a vulnerability in the vContainer of the Cisco SD-WAN Solution that could let an authenticated, remote attacker cause a denial of service (DoS) and execute arbitrary code as the root user, the company wrote in a security advisory. To read this article in full, please click here

Cisco patches serious SD-WAN software security holes

Cisco has patched security vulnerabilities in four packages of SD-WAN Solution software that address buffer overflow, arbitrary file override and privilege access weaknesses that could have led to denial-of-service attacks or access problems.The first patch, called “Critical” by Cisco, fixes a vulnerability in the vContainer of the Cisco SD-WAN Solution that could let an authenticated, remote attacker cause a denial of service (DoS) and execute arbitrary code as the root user, the company wrote in a security advisory. To read this article in full, please click here

Cisco patches serious SD-WAN software security holes

Cisco has patched security vulnerabilities in four packages of SD-WAN Solution software that address buffer overflow, arbitrary file override and privilege access weaknesses that could have led to denial of service attacks or access problems.The first patch, called “Critical” by Cisco, fixes a vulnerability in the vContainer of the Cisco SD-WAN Solution that could let an authenticated, remote attacker cause a denial of service (DoS) and execute arbitrary code as the root user, the company wrote in a security advisory. To read this article in full, please click here

Cisco patches serious SD-WAN software security holes

Cisco has patched security vulnerabilities in four packages of SD-WAN Solution software that address buffer overflow, arbitrary file override and privilege access weaknesses that could have led to denial-of-service attacks or access problems.The first patch, called “Critical” by Cisco, fixes a vulnerability in the vContainer of the Cisco SD-WAN Solution that could let an authenticated, remote attacker cause a denial of service (DoS) and execute arbitrary code as the root user, the company wrote in a security advisory. To read this article in full, please click here

Ericsson Returns to Top-line Growth in 2018, Hones In on 5G

CEO Börje Ekholm trumpeted the fact that Ericsson returned to full-year organic sales growth in 2018 for the first time since 2013.

Short Take – Duplicate BGP Updates

Russ White

The post Short Take – Duplicate BGP Updates appeared first on Network Collective.

Introducing the Workers Cache API: Giving you control over how your content is cached

At Cloudflare, we aim to make the Internet faster and safer for everyone. One way we do this is through caching: we keep a copy of our customer content in our 165 data centers around the world. This brings content  closer to users and reduces traffic back to origin servers.

Today, we’re excited to announce a huge change in our how cache works. Cloudflare Workers now integrates the Cache API, giving you programmatic control over our caches around the world.

Why the Cache API?

Figuring out what to cache and how can get complicated. Consider an e-commerce site with a shopping cart, a Content Management System (CMS) with many templates and hundreds of articles, or a GraphQL API. Each contains a mix of elements that are dynamic for some users, but might stay unchanged for the vast majority of requests.

Over the last 8 years, we’ve added more features to give our customers flexibility and control over what goes in the cache. However, we’ve learned that we need to offer more than just adding settings in our dashboard. Our customers have told us clearly that they want to be able to express their ideas in code, to build Continue reading

Moving Forward to an Internet That’s Interplanetary in Scope and Function

The IPNSIG (InterPlanetary Networking Special Interest Group) has been a Chapter of the Internet Society since February 2014. We are pleased to announce that we recently created a blog dedicated to everyone interested in IPN and DTN, and computer networking in general. It is a first step in providing nonspecialists with easy-to-understand explanations of what IPN is and how it works. Each week, we will post news about the exciting world of IPN, summaries of academic research, or links to IPN in the mainstream media. We’ll also be announcing upcoming IPNSIG events and activities.

Our mission
We aim to realize a functional and scalable system of interplanetary data communications before the year 2020. We will accomplish this objective by engaging the public’s interest in funding and executing the research and technology development necessary to make InterPlanetary Networking (IPN) a reality. We will educate them about the critical need for a reliable, scalable space data network to enable cost-effective exploration and eventual commercial use of the inner solar system. We will excite them about the potential role these same network systems technologies can play in solving communication problems here on earth.

What is IPN?
It is a solution to the constrained Continue reading

AI-Driven Wireless Is Key to the Digital Workplace

Linux Foundation backs a group to boost edge networking

The Linux Foundation announced the foundation of a new umbrella group called LF Edge designed to help unify a fragmented edge-computing marketplace and offer a common framework for future edge projects.The initial announcement lists five open source projects that will serve as the nucleus of the LF Edge framework. Those projects are: EdgeX Foundry – Originated at Dell/EMC, EdgeX Foundry is a platform-agnostic software framework that allows for plug-and-play integration of microservices and is designed to run on any industrial edge gateway, creating a bridge layer between sensors and the cloud. Home Edge Project – Contributed by Samsung, the Home Edge Project looks like an attempt to do for consumer IoT what EdgeX Foundry is doing for industrial IoT – a run-anywhere services layer for home-based IoT devices. Akraino Edge Stack – Taking up the cloud end of the stack is Akraino Edge Stack, which is designed to automate provisioning and offer flexibility and scalability at the back end to businesses trying to run edge services with a cloud back end. The original code was contributed by AT&T. Project EVE – A contribution of IoT software maker Zededa, Project EVE is so named because it’s an edge-virtualization engine. The Continue reading

More on Leaky Abstractions

When I was writing the Back to Basics blog post I reread the Law of Leaky Abstractions masterpiece. You’ll love it – the first example Joel uses is TCP.

However, what really caught my eye was this bit:

The law of leaky abstractions means that whenever somebody comes up with a wizzy new code-generation tool that is supposed to make us all ever-so-efficient, you hear a lot of people saying “learn how to do it manually first, then use the wizzy tool to save time.”

You should apply the same wisdom to shiny new gizmos launched by network virtualization vendors… oh wait, you can’t, they are mostly undocumented black boxes. Good luck ;)

Sadly, the Law of Leaky Abstractions blog post was written in 2002… and nothing changed in the meantime, at least not for the better.

Getting start with RSVP

We’ve spent a great deal of time in the last few posts talking about MPLS both with LDP and with static LSP configurations. While these approaches certainly work, they aren’t the only options to use for label distribution and LSP creation. If we take static LSPs off the table (since they’re the equivalent of static routes and not scalable) we really have two main choices for label distribution – LDP and RSVP. LDP is typically considered to be the easiest of the two options but also offers a limited set of functionality. RSVP offers many more features but also requires more configuration. When you’re designing an MPLS network you’ll have to decide which protocol to use based on your requirements. In many cases a network may leverage both in different areas. In this post the aim is just to get RSVP up and running – we’ll dig into the specifics in a later post.

So let’s get right into a simple lab where we leverage RSVP instead of LDP. Like the previous post, we’ll leverage the same lab environment…

Let’s assume as before that the base configuration of the lab includes all the routers interfaces configured, OSPF enabled on all Continue reading

Intel Still Doesn’t Have a CEO, Reports Q4 Revenue Miss

Intel has been on the hunt for a new CEO for more than seven months. Pundits expected the chipmaker to announce a new chief executive before or on its earnings call today. 

Cisco’s AppDynamics software ties in SDN, serverless for greater app management

Cisco’s AppDynamics business rolled out a raft of enterprise technologies it says will help customers better manage everything from software-defined networks and serverless computing environments to application performance.The wide-ranging announcement – easily AppDynamics largest technology upgrade since being acquired by Cisco two years ago – targets enterprise customers looking to monitor performance and automate the response to  problems in business applications.  [ Learn more about SDN: Find out where SDN is going and learn the difference between SDN and NFV. | Get regularly scheduled insights by signing up for Network World newsletters. ]To read this article in full, please click here