The Week in Internet News: China’s New Cyberspace Head Talks Up New Controls
“Cleansing” cyberspace: Zhuang Rongwen, recently appointed as director of the Cyberspace Administration of China, has vowed to promote “positive energy” on the Internet while suppressing “negative elements,” including “wrong ideological trends” that attack the Communist Party there, reports the South China Morning Post. Zhuang called on all Internet users to join party members to fight a people’s war to rehabilitate the “cyber ecology.”
Told ya so: Meanwhile, another article in the South China Morning Post, this one an opinion piece, defends recent Chinese crackdowns on the Internet by looking at recent U.S. congressional inquiries into ways to “contain the freewheeling online space.” The piece looks at recent outbreaks of fake news and hate speech online. Some U.S. politicians “are starting to sound a lot like China’s leaders when warning of the insidious dangers of an untamed, unregulated internet,” says the writer, a former Washington Post correspondent.
AI arms race: Speaking of fake news, it’s continued spread has triggered an Artificial Intelligence arms race, says Popular Mechanics. Using AI, the spreaders of fake news reports are becoming more difficult to spot. Meanwhile, other companies will increasingly use AI to spot fake news. Perhaps an AI vs. Continue reading
Encrypt it or lose it: how encrypted SNI works
Today we announced support for encrypted SNI, an extension to the TLS 1.3 protocol that improves privacy of Internet users by preventing on-path observers, including ISPs, coffee shop owners and firewalls, from intercepting the TLS Server Name Indication (SNI) extension and using it to determine which websites users are visiting.
Encrypted SNI, together with other Internet security features already offered by Cloudflare for free, will make it harder to censor content and track users on the Internet. Read on to learn how it works.
SNWhy?
The TLS Server Name Indication (SNI) extension, originally standardized back in 2003, lets servers host multiple TLS-enabled websites on the same set of IP addresses, by requiring clients to specify which site they want to connect to during the initial TLS handshake. Without SNI the server wouldn’t know, for example, which certificate to serve to the client, or which configuration to apply to the connection.
The client adds the SNI extension containing the hostname of the site it’s connecting to to the ClientHello message. It sends the ClientHello to the server during the TLS handshake. Unfortunately the ClientHello message is sent unencrypted, due to the fact that client and server don’t share Continue reading
Encrypting SNI: Fixing One of the Core Internet Bugs
Cloudflare launched on September 27, 2010. Since then, we've considered September 27th our birthday. This Thursday we'll be turning 8 years old.
Ever since our first birthday, we've used the occasion to launch new products or services. Over the years we came to the conclusion that the right thing to do to celebrate our birthday wasn't so much about launching products that we could make money from but instead to do things that were gifts back to our users and the Internet in general. My cofounder Michelle wrote about this tradition in a great blog post yesterday.
Personally, one of my proudest moments at Cloudflare came on our birthday in 2014 when we made HTTPS support free for all our users. At the time, people called us crazy — literally and repeatedly. Frankly, internally we had significant debates about whether we were crazy since encryption was the primary reason why people upgraded from a free account to a paid account.
But it was the right thing to do. The fact that encryption wasn't built into the web from the beginning was, in our mind, a bug. Today, almost exactly four years later, the web is nearly 80% encrypted thanks to Continue reading
Have You Done Enough to Ensure Wireless Network Security?
Whether on a corporate or public Wi-Fi network, there are precautions you can apply to keep your network and systems better protected and your information secured.
QoS Policy and its propagation via BGP (QPPB)
The post QoS Policy and its propagation via BGP (QPPB) appeared first on Noction.
VXLAN Broadcast Domain Size Limitations
One of the attendees of my Building Next-Generation Data Center online course tried to figure out whether you can build larger broadcast domains with VXLAN than you could with VLANs. Here’s what he sent me:
I'm trying to understand differences or similarities between VLAN and VXLAN technologies in a view of (*cast) domain limitation.
There’s no difference between the two on the client-facing side. VXLAN is just an encapsulation technology and doesn’t change how bridging works at all (read also part 2 of that story).
Read more ...AWS Cloud – Part 1
| Cloud networking has become buzz now days, Cloud networking is term use to define the group of network resources and services available which can be shared among various client and customers.This can be a private cloud or a public cloud . The entire network is on cloud, which can be used to provide connectivity between application ,resources ,services deployed in the cloud. There are multiple cloud provider in market today, some of the well known cloud provider are Amazon AWS,Microsoft Azure,Google cloud Platform,IBM and multiple other vendors. According to a recent Cloud Security Alliance (CSA) report ,Amazon Web Services is the most popular public cloud platform (41.5% ) . |
Here we will go through the basics Amazon Virtual Private Cloud or VPC :Its virtually isolated networks ,they cannot communicate to each other ,to external world,internet ,to a VPN without explicitly granting that ability.we create VPC per account per region basis.Lets first understand about the few terms related to AWS .
Amazon EC2 : :Amazon Elastic Compute Cloud (Amazon EC2) provides scalable computing capacity in the Amazon Web Services (AWS) cloud. Using Amazon EC2 eliminates your need to invest in hardware up front, so you can develop and deploy applications Continue reading
From VNC to reverse shell
From VNC to reverse shell
Personal websites are weird. We are mostly past the era of having them, as things like twitter and hosted blog services like Medium have taken them over, but I’m a hold out. I run both my own blog, and have a landing page
Cloudflare Turns 8 — here’s what we mean by a “better Internet”
I have always loved birthdays. It is a chance to get together with loved ones, a chance to have fun and a chance to reflect on anything you want to keep doing or change in the upcoming year. At Cloudflare, we’ve embraced celebrating our birthday as well.
This week, Cloudflare turns 8 years old. It feels like just yesterday that Matthew, Lee, Matthieu, Ian, Sri, Chris, Damon and I stepped on stage at Techcrunch Disrupt to launch Cloudflare to the world. Since then, we have celebrated our birthday every year by giving a gift back to our customers and the Internet. This year, we plan to celebrate each day with a new product benefiting our community. Or in other words, it is a weeklong birthday celebration. Like I said, I love birthdays!
The Cloudflare team when we launched the service at Techcrunch Disrupt during September 27 to 29, 2010 – Matthieu, Chris, Sri, Ian, Lee, Matthew, Michelle and Damon.
While I can’t share exactly what we’re releasing every day — after all who doesn’t like a surprise? — I wanted to share some thoughts on how we decide what to release birthday week.
Our mission at Cloudflare is to help Continue reading
Weekend Reads 092118
If you manage Internet number resources in the APNIC Whois Database, you are requested to provide contact information so that people can contact you for network abuse or troubleshooting. You and your colleagues might have created person objects for this purpose. However, from time to time a person performing a role may change. If you have a lot of resource contacts to manage, updating person contacts can Continue reading
CCIE – Should I Renew?
It is 6 years since I passed the CCIE Lab Exam. The dreaded email has arrived:
CCIE: Your CCIE status is ‘suspended’ and you need to recertify in twelve months.
Time to re-evaluate what the CCIE means to me. Should renew it? Should people start out on the CCIE track now? My opinions have shifted over the years.
Should I Renew?
I’ve been through this cycle a few times now. I’m getting closer to Emeritus, but it’s still a few years away.
My career has shifted over the last few years. I work for a Network Vendor, but networking is only part of what I do. I am a Product Manager, focused on automation. I spend very little time looking at network devices, or CLI. I spend my time talking to customers, updating roadmaps, writing Python, reviewing Pull Requests.
My future will be working with technologies like Serverless Computing, IoT, and Edge.
CCIE R&S doesn’t cover any of that.
It is unlikely that I will ever work as a traditional hands-on network engineer again. Not impossible, but unlikely. I doubt that any future employer will care about whether I have a current CCIE certification. At this point my experience Continue reading
CCIE – Should I Renew?
It is 6 years since I passed the CCIE Lab Exam. The dreaded email has arrived:
CCIE: Your CCIE status is ‘suspended’ and you need to recertify in twelve months.
Time to re-evaluate what the CCIE means to me. Should renew it? Should people start out on the CCIE track now? My opinions have shifted over the years.
Should I Renew?
I’ve been through this cycle a few times now. I’m getting closer to Emeritus, but it’s still a few years away.
My career has shifted over the last few years. I work for a Network Vendor, but networking is only part of what I do. I am a Product Manager, focused on automation. I spend very little time looking at network devices, or CLI. I spend my time talking to customers, updating roadmaps, writing Python, reviewing Pull Requests.
My future will be working with technologies like Serverless Computing, IoT, and Edge.
CCIE R&S doesn’t cover any of that.
It is unlikely that I will ever work as a traditional hands-on network engineer again. Not impossible, but unlikely. I doubt that any future employer will care about whether I have a current CCIE certification. At this point my experience Continue reading
Cleared JNCIE-DC
After close to a year of study and after one failed attempt I cleared it in the second attempt. Here is my experience in short and tips to prepare for the exam
Reading Resources
-> Juniper Dayone – Anything and everything related to DC
-> QFX Series Book
https://www.safaribooksonline.com/library/view/juniper-qfx5100-series/9781491949566/app03.html
-> JNCIP – ADCX/TDCX/DCX
-> Datacenter Network / EVPN – Overview
https://www.safaribooksonline.com/library/view/evpn-in-the/9781492029045/ch04.html
Lab Resources
-> If you are into any serious preparation you need to consider the below git resource, its awesome and you can practice pretty much everything even on a laptop and also in your flights/travel.
https://github.com/Juniper/vqfx10k-vagrant
You need to know a bit of vagrant and need to have VirtualBox and ansible installed, not hard by any means, all it takes is a days dedication to make your laptop ready for these, let me know if you want me to write a blog post for the setup.
-> I had Dell R810 Server, https://r2079.wordpress.com/2018/01/05/my-dc-virtual-lab-setup-insights/ , I did most of my practice on this one.
-> I also had the privilege of using hardware resources and examined the ideal configuration for a production network and learned few things from them.
Portworx Stuffs Stateful Container Storage Updates Into Enterprise Platform
The PX-Enterprise 1.6 updates take into account the distributed storage nature of modern applications running across different clouds and container environments.
SDxCentral Weekly Wrap: Sept. 21
Nokia Slashes 500 Jobs; Oracle Cloud Exec on Extended Leave; SK Telecom Picks 5G Vendors Nokia will cut 500 jobs in Illinois by year-end as part of a restructuring plan. Oracle executives declined to elaborate about the company’s cloud chief taking an extended leave from work. SK Telecom ignored Chinese vendor Huawei and picked Nokia,... Read more →
Exfo Service Assurance VNFs Give ‘Eyes’ to ONAP With Amdocs NFV Integration
Exfo is onboarding its service assurance VNFs into the Amdocs NFV software and services portfolio, which is powered by ONAP.
Writing Is Hard
Writing isn’t the easiest thing in the world to do. There are a lot of times that people sit down to pour out their thoughts onto virtual paper and nothing happens. Or they spend hours and hours researching a topic only to put something together that falls apart because of assumptions about a key point that aren’t true.
The world is becoming more and more enamored with other forms of media. We like listening to podcasts instead of reading. We prefer short videos instead of long articles. Visual aids beat a wall of text any day. Even though each of these content types has a script it still feels better having a conversation. Informal chat beats formal prose every day.
Written Wringers
I got into blogging because my typing fingers are way more eloquent than the thoughts running through my brain. I had tons of ideas that I needed to put down on paper and the best way to do that was to build a simple blog and get to it. It’s been eight years of posting and I still feel like I have a ton to say. But it’s not easy to make the words flow all the time.