Networking Aspects of Running VMs in Containers
The vrnetlab project and its containerlab fork implement a wonderful idea: let’s package virtual machines (primarily network devices that cannot be containerized) as containers to use reliable orchestration tools like containerlab to provision network topologies.
That approach might have a few drawbacks (depending on how the container images are built), but the obvious elephant in the room is: how do you make the virtual network plumbing work?
HS141: EA vs AI
What does Enterprise Architecture (EA) mean when AI is everywhere in the stack? Enterprise Architecture is about nailing down relationships and functions while AI pushes back with dynamic processes and probabilistic results. Join Johna and John as they discuss the possibilities for EA: does it prevail, adapt, or die? Episode Links: Watch this episode on... Read more »
PP124: How Coruna, DarkSword, and Other Exploits Slice Up Apple iPhones
Coruna and DarkSword are exploit frameworks that have successfully targeted Apple iPhones to steal cryptocurrency and harvest data including messages, email, location data, and browsing history. On today’s show we trace the provenance of these exploits (Coruna was originally developed by a contractor for the US government), their rapid evolution in the cyber underworld, and... Read more »How to Set TorBox wlan1 as WAN on RPi 3B
The goal of this guide is to explain how to configure TorBox to use a […]
The post How to Set TorBox wlan1 as WAN on RPi 3B first appeared on Brezular's Blog.
Aching for Engagement
I’ve noticed something in the last few weeks that might drive me crazy. I’m sure you noticed it too. There are people talking about things and they’re ready to join your community. Just click on this notification to learn more!
Paying Attention
Earlier this year I talked about how everything seems to be geared to disrupt our attention. At that time, I thought it would get better by just ignoring the notifications and removing them from my devices to reduce it to the minimum. I think the providers read my post because they found even more ways to get to me. I think they have it out for me.
Attention is a resource like money or oil or the amount of hydrogen atoms in the sun. It has a finite limit and we only have so much to work with. Every disruption causes us to switch contexts and try to manage it. As I mentioned, I went about removing as much of that distraction as I could. Because having my focus be on a task and not on a cute popup banner is important for work and the other things that I do.
Thankfully, the social media apps found a Continue reading
SONiC Deep Dive: BGP Peer Configuration – BGP Unnumbered
After
enabling IPv6 on the Ethernet0 interface, we can configure BGP peering. Instead of statically defining a peer IP address and AS number, the
BGP neighbor is defined at the interface level. This tells BGP to expect a neighbor
and initialize the BGP peering over Ethernet0. Because our intent is to transport IPv4 traffic
over the IPv6 network, we activate both the IPv4 and IPv6 address families. We
also configure the peer as an external BGP (eBGP) neighbor by using a command remote-as external. This tells BGP that the peer must use an AS
number different from the local AS number.
Because the network uses IPv6 as the
transport for IPv4 traffic, IPv4 Network Layer Reachability Information (NLRI) exchanged
through BGP use IPv6 next-hop addresses. BGP therefore needs the Extended Next
Hop Encoding capability to support IPv4 routes with IPv6 next hops. In this
configuration, the capability is explicitly enabled with the capability extended-nexthop
command.
In FRRouting, the v6only option controls which IP version is used for interface-based BGP Unnumbered peering. Without v6only, FRR uses the interface's IPv6 link-local address for peering only when no suitable IPv4 address is configured on the interface. With v6only, FRR skips Continue reading
MUST READ: Git – Going Pro
I sure wish Tony Mattke had started publishing his Git-related blog posts in 2017 when I was still struggling with the basics. In his latest Going Pro article he covers:
- Using SSH keys with Git and GitHub
- Pre-commit hooks
- GitHub Actions and linting
- GitHub Branch protection
- PR reviews
- gh CLI
Absolutely worth every second you’ll spend reading the article!
NB589: OpenAI Makes Cyber Mess, Wants World to Clean It Up; Cisco Strategizes Infrastructure Identity
Take a Network Break! We start with listener followup about how Device Bound Session Credentials could thwart session cookie theft, and then highlight a string of critical vulnerabilities in IBM’s AIX. On the news front, Nvidia has reportedly bought Hugging Face for $12.9 billion, Nvidia and AWS team up on GPUs and physical AI, and... Read more »New Tool – Traceroute / Ping Visualizer
New on the Network Tools page: a Traceroute / Ping Visualizer. Paste raw output from traceroute, Windows tracert, or ping and it turns the wall of text into something you can actually read at a glance — a per-hop latency chain or a per-packet chart, with timeouts, latency jumps, and dropped packets flagged automatically.
What It Does
It auto-detects which of the four formats you pasted — Linux/Mac traceroute, Windows tracert, Linux ping, or Windows ping — and renders the right visualization:
Introducing Adaptive Intelligence: Undermining the economics of every bot attack
Modern bot threats are increasingly driven by determined, sophisticated attackers. Often it is not even one person, but a group trading techniques with each other or a commercial service sold to anyone willing to pay. For many of them, getting past bot detection is a full-time job they genuinely enjoy. Block them and they get to work, finding a workaround. AI has simplified this further, making it even easier to set up complex configurations for attackers, lowering the overhead of an attack.
This shift puts defenders at an economic disadvantage. Responding and adapting to new attacks takes care, evidence, and effort to ensure efforts to block attackers don’t impact real users on the way. Attackers have no such concerns and are primarily constrained by their time and their pool of proxies, and ensuring their infrastructure providers don’t shut down their accounts.
Their advantage is the cost of adaptation. Attackers can adapt as often and continuously as they need, while most defenses are deployed in discrete, managed releases. Cloudflare analyzes more than a trillion requests a day for signs of automated abuse, so we see how fast attackers change tactics. That gap in responsiveness is widening.
The inconvenient truth: bot Continue reading
Misteri Fenomena Kaan Ix Crystal Nexus di Gua Sistema Hydrobaric
Dalam periode terbaru, fenomena alam yang memukau kembali menjadi sorotan dunia speleologi dan geologi, khususnya terkait dengan gua Kaan Ix Crystal Nexus. Gua ini dikenal sebagai salah satu keajaiban alam yang menyimpan banyak misteri unik di kedalaman sistem gua subterranean yang kompleks. Fenomena yang terjadi di gua ini tidak hanya menarik perhatian para ilmuwan, tetapi juga pelancong dan pencinta petualangan yang mencari pengalaman eksklusif di lokasi yang belum banyak dijelajahi. Artikel ini akan membahas secara mendalam tentang kaan ix crystal nexus serta fenomena hidrobarik dan kristal yang menjadikannya produk alam yang sangat langka dan misterius.
Pendahuluan: Mengenal Kaan Ix Crystal Nexus
Sistem gua Kaan Ix Crystal Nexus terkenal sejak awal tahun ini sebagai lokasi gua yang kaya dengan struktur kristal hidrobarik yang unik, yang terbentuk melalui proses geologis dan hidrologis yang masih dipelajari secara intensif. Gua ini terletak di wilayah tropis dengan kondisi pengaruh hidrobarik tinggi dan iklim mikro yang stabil, memungkinkan kristal-kristal berkualitas tinggi tumbuh dalam kondisi sempurna.
Fenomena-fenomena yang ditemukan di Kaan Ix berbeda dari gua pada umumnya karena adanya keseimbangan unik antara tekanan air, mineralisasi, dan kondisi lingkungan yang sangat spesifik. Keberadaan kristal hidrobarik di dalam gua ini membuka lembaran baru dalam riset ilmiah seputar dinamika pembentukan Continue reading
Mengenal Careproctus Rastrinus: Ikan Deepsea Unik dan Langka
Ikan deepsea careproctus rastrinus merupakan salah satu spesies ikan yang menarik perhatian para ilmuwan kelautan dan penggemar biologi kelautan. Spesies ini dikenal karena kemampuannya bertahan hidup di lingkungan laut dalam yang ekstrem, di mana tekanan air sangat tinggi dan cahaya hampir tidak ada. Hingga saat ini, pemahaman tentang careproctus rastrinus semakin berkembang seiring dengan kemajuan teknologi eksplorasi bawah laut. Artikel ini akan membahas secara lengkap mengenai karakteristik, habitat, adaptasi, serta pentingnya ikan deepsea careproctus rastrinus bagi ekosistem laut dalam saat ini.
Sejarah Penemuan dan Klasifikasi Careproctus Rastrinus
Careproctus rastrinus termasuk dalam famili Liparidae, yang sering dikenal dengan sebutan “snailfish.” Spesies ini pertama kali diketahui dari hasil survei laut dalam yang dilakukan di perairan zona hadal, yaitu zona kedalaman lebih dari 6.000 meter, dimana sebagian besar kehidupan laut belum banyak dipahami secara detil. Awal tahun ini, ekspedisi ilmiah di Samudra Pasifik berhasil mengumpulkan data dan sampel penting yang memperdalam pengetahuan tentang careproctus rastrinus.
Dari segi taksonomi, careproctus rastrinus dibedakan berdasarkan morfologi tubuhnya yang lunak dan berdaging, serta bentuk siripnya yang khas. Ikan ini memiliki kepala besar dengan mata kecil, yang menjadi adaptasi terhadap minimnya pencahayaan di habitat asli mereka. Perkembangan teknologi sonar dan robot bawah laut memungkinkan para peneliti Continue reading
Just Saying No!@e
What part of “No!” is so hard for the DNS understand? When we look at the way the DNS behaves when it is given a negative answer, we see that many DNS resolvers struggle with this and repeat the query. Here we will look at the different ways to say "No" and the number of repeat queries that are seen with each of these negative responses.Why Is My Switch Still Red? The Future of Network Switches
Rethinking Network Switches The rate of technological change today can seem overwhelming but if you are old enough, you start to realize its pretty much more of the same. My biggest fear with tech change is that I don't want it to happen TO me. I may not be in a position to be in READ MORE
The post Why Is My Switch Still Red? The Future of Network Switches appeared first on The Gratuitous Arp.
Hedge 317: AI Tools and Coding
How effective are AI tools–even agentic AI tools placed into a system–at building and testing software? Derick Winkworth and Donald Sharp Join Russ to discuss various projects they’ve worked on using AI tools, lessons they’ve learned, and how developers can make effective use of AI.
download
TNO070: Spec Driven Design (SDD) for NetOps and NetEng
NetOps engineer Lasse Haugen sits down with Scott Robohn at AutoCon 5 to explore the power of Spec Driven Design (SDD) for transforming network engineering workflows from chaotic experimentation to structured, reliable automation. Together they define what SDD is, use cases for NetOps and NetEng, how it has changed NetOps, and more. AdSpot Sponsor: NANOG,... Read more »HN839: Why Flows, Packets, and DDI are All Critical for Operational Effectiveness (Sponsored)
If you think of BlueCat as just an IPAM or DDI company, think again. BlueCat acquired LiveAction in 2024, and since then, they’ve been working to integrate LiveAction’s network observability capabilities with the DDI portfolio. In this sponsored episode, Ryan Grande, Field CTO at BlueCat, is here to dig into how network observability and DDI... Read more »BotBase for Operators: A clearer path to joining Cloudflare’s directory of bots and agents
Last month, on our second Content Independence Day, we announced a couple of features designed to give website owners more visibility and control over automated traffic: BotBase added a searchable directory of known bots to the Cloudflare dashboard, while Business Insights helped owners understand how crawlers interact with their content. We know that the ecosystem of bots is vast, making it all the more important for site owners to be able to manage bot traffic sustainably.
But this ecosystem goes both ways. While website owners need to decide which automated traffic they allow, bot operators need a clear way to identify themselves, explain what their bots do, and keep that information current. BotBase works best when both sides can participate.
When we launched BotBase, we said we would build tools to bring bot operators into this ecosystem. Until now, their experience largely ended at submission. After pressing submit, an operator had no easy way to check the submission's status, understand why it was rejected, or update an existing entry. Today, we start to change that with the launch of BotBase for Operators, tackling what bot operators need first: transparency.
A new home for bot submissions
Imagine you’re a bot operator Continue reading