IPFire on Raspberry Pi 3B
IPFire is a modular opensource firewall distribution with a primary objective of security. IPFire employs a Stateful Packet Inspection (SPI) firewall, which is built on top of netfilter (the Linux packet filtering framework). The modular designs allows to extend basic functionality by installation of add-ons that can be easily deployed with the IPFire package management system - pakfire. Updates are digitally signed and encrypted.
During the installation of IPFire, the network is configured into different, separate segments (zones). These different segments may be enabled separately, depending on your requirements. Each segment represents a group of computers who share a common security level.
Green represents a "safe" area. This is where all regular clients will reside. It is usually comprised of a wired, local network. Clients on Green can access all other network segments without restriction. Red indicates "danger" or the connection to the Internet. Nothing from Red is permitted to pass through the firewall unless specifically configured by the administrator. Blue represents the "wireless" part of the local network. Since the wireless network has the potential for abuse, it is uniquely identified and specific rules govern clients on it. Clients on this network segment must be explicitly allowed Continue reading
Google Relies on SDN, But Worries About the End of Moore’s Law
Google's compute infrastructure is straining to keep up with data demands. The company is looking for "novel ways" to do more data processing. That might include cluster computing.
Research: BGP Routers and Parrots
The BGP specification suggests implementations should have three tables: the adj-rib-in, the loc-rib, and the adj-rib-out. The first of these three tables should contain the routes (NLRIs and attributes) transmitted by each of the speaker’s peers. The second table should contain the calculated best paths; these are the routes that will be (or are) installed in the local routing table and used to build a forwarding table. The third table contains the routes which have been sent to each peering speaker. Why three tables? Routing protocols standards are (sometimes—not always) written to provide the maximum clarity to how the protocol works to someone who is writing an implementation. Not every table or process described in the specification is implemented, or implemented the way it is described.
What happens when you implement things in a different way than the specification describes? In the case of BGP and the three RIBs, you can get duplicated BGP updates. What do parrots and BGP have in common describes two situations where the lack of a adj-rib-out can cause duplicate BGP updates to be sent.
History Of Networking – Bill Yeager – Routing Software
Bill Yeager, an early networking pioneer who is credited with inventing the first multi-protocol router, joins Network Collective to talk about his work in the beginning days of networking.
Bill Yeager
Guest
Russ White
Host
Donald Sharp
Host
Outro Music:
Danger Storm Kevin MacLeod (incompetech.com)
Licensed under Creative Commons: By Attribution 3.0 License
http://creativecommons.org/licenses/by/3.0/
The post History Of Networking – Bill Yeager – Routing Software appeared first on Network Collective.
BiB 065: Barefoot Networks Announces A New 12.8Tbps Tofino ASIC
Barefoot Networks has announced the newest version of its Tofino programmable ASIC. Tofino 2 offers 12.8Tbps total throughput and promises greater efficiency thanks to its 7nm design.
The post BiB 065: Barefoot Networks Announces A New 12.8Tbps Tofino ASIC appeared first on Packet Pushers.
How Enterprises Can Use Digital Twins to Maximize Operational Efficiency
Digital replicas interact with real systems and mimic changes that occur - as they occur. Digital twin adoption is growing due to the low cost, high storage and compute capacity of IoT and cloud.
Odd Number of Spines in Leaf-and-Spine Fabrics
In the market overview section of the introductory part of data center fabric architectures webinar I made a recommendation to use larger number of fixed-configuration spine switches instead of two chassis-based spines when building a medium-sized leaf-and-spine fabric, and explained the reasoning behind it (increased availability, reduced impact of spine failure).
One of the attendees wondered about the “right” number of spine switches – does it has to be four, or could you have three or five spines. In his words:
Read more ...Kubernetes Discloses Major Security Flaw
It affects all Kubernetes-based products and services, and it gives hackers full administrative privileges on any compute node being run in a Kubernetes cluster.
December 4 – NRE Labs Outage Post-Mortem
I awoke yesterday to a very crisp Tuesday morning in Portland, Oregon. I had just poured myself a nice glass of Stumptown Nitro cold brew coffee, and wandered upstairs to my office for an 8AM conference call. I joined the meeting, and started going through my usual routine - part of which includes looking at the day’s NRE Labs stats. Here’s what I saw: Well, that kind of sucks.December 4 – NRE Labs Outage Post-Mortem
I awoke yesterday to a very crisp Tuesday morning in Portland, Oregon. I had just poured myself a nice glass of Stumptown Nitro cold brew coffee, and wandered upstairs to my office for an 8AM conference call. I joined the meeting, and started going through my usual routine - part of which includes looking at the day’s NRE Labs stats. Here’s what I saw: Well, that kind of sucks.December 4 – NRE Labs Outage Post-Mortem
I awoke yesterday to a very crisp Tuesday morning in Portland, Oregon. I had just poured myself a nice glass of Stumptown Nitro cold brew coffee, and wandered upstairs to my office for an 8AM conference call. I joined the meeting, and started going through my usual routine - part of which includes looking at the day’s NRE Labs stats. Here’s what I saw: Well, that kind of sucks.AT&T’s White Box Cell-Site Routers Go Into Production Carrying Live Traffic
In 2019 the company will deploy these routers at several thousand towers to support its mobile 5G network.
Container Adoption Has Nearly Doubled in Last Year, Says Portworx Survey
IT professionals list Microsoft Azure as the best cloud provider in terms of cost effectiveness, having the most advanced tools, reliability, and having the best support for container environments.
Microsoft Resellers Including Dell Win $3.2B Deal With US Navy
Almost 900 vendors competed for the 10-year award. The Navy selected six.
The Benin Chapter Wins Chapterthon 2018
The winner of this year’s Chapterthon was announced this Tuesday, 4 December during InterCommunity 2018.
Chapterthon is a global Internet Society (ISOC) Chapters and Special Interest Groups (SIGs) marathon, where all the Internet Society members can participate by developing a project within a timeline and budget to achieve a common goal. The project winner is selected by the community through online vote.
This year our community worked on the Internet of Things (IoT) – The future is ours to shape.
Every year, the Chapterthon brings enthusiasm and excitement amongst our community. During two and half months, 43 Chapters and Special Interest Groups (SIGs) from across the globe worked alongside to bring awareness on the Internet of Things (IoT) to their communities. They ran over 200 training sessions and workshops, engaging students, entrepreneurs, and local governments. They organized national campaigns, their projects were mentioned in local newspapers, and their message was brought to the most remote places. The Chapters also developed IoT applications that may in the future improve the lives of people in their communities, and amongst some of the projects are improved transport systems, agriculture, energy management, home protection, and healthcare.
The projects that received the highest number Continue reading
VodafoneZiggo Deploys Cisco SON With RAN Automation for 5G
Cisco’s SON technology works in multi-vendor deployments based on any combination of cellular technologies. It supports RAN nodes from any major vendor as well as multiple data-source vendors.
Barefoot Networks Debuts Tofino 2, Using 7nm Technology
This is Barefoot’s second generation release of its P4-programmable Tofino Ethernet switch ASIC family.