Archive

Category Archives for "Networking"

IDG Contributor Network: IoT in agriculture: farming gets ‘smart’

We continue our theme of looking at different industry verticals, big and small, that are getting the IoT treatment. Previously we have looked at the largest IoT deployment, the Smart Electric Grid, as well as some innovative IoT implementations that are transforming healthcare. Today, it is time to look at Agriculture. While it might not seem to be a ‘cool enough’ vertical to get the ‘Smart Treatment’, this couldn’t be further from the truth.Why is it vital to even implement Smart Farming? Two reasons – carbon dioxide and human population growth. The increase in CO2 in the atmosphere leads to lower production, while the steady growth in human population leads to increased demand. Many predict that unless we increase our food production, we are very close to a global food shortage. Since it is not easy to dramatically increase arable land size, one way to achieve our goal is to improve the yield per unit area (or lower waste). Here is where IoT comes in.To read this article in full, please click here

New Space Race Could Beam Broadband Everywhere

A new space race is developing, bringing with it the potential to spread broadband to unserved areas of the world.

A handful of satellite companies, including SpaceX, are planning to deploy large-scale, low-orbit constellations that could bring high-speed broadband service to wide geographic areas. SpaceX’s main competitor is one-time partner OneWeb, which like its rival, is planning a huge network of satellites that could blanket most of the Earth with high-speed broadband service.

Other companies are competing as well. While SpaceX and OneWeb plan to launch thousands of satellites in the coming years, Canadian firm Telesat is also planning to offer global coverage through a polar-orbit constellation of just 117. Space Norway plans to cover the Arctic area, and LeoSat plans to specialize in high-speed encrypted services for large businesses.

These proposed services would be in addition to incumbent satellite Internet providers like HughesNet and Exede Internet, which focus on serving the United States.

Proponents of the proposals say they have the potential to offer broadband at speeds that rival wired fiber service. The new providers could achieve faster speeds and lower latency than current generation satellite Internet service using a combination of low orbits, a large number Continue reading

Datanauts 130: The Good, Bad And Ugly Of The VAR Life

If you work for a Value Added Reseller (VAR) as an engineer, the value being added is YOU.

What is VAR life? Projects, customer meetings, deadlines, bills of materials, RFP responses, and trying to turn the promises of sales unicorns into an actual design you can install for the customer.

We’ve worked for VARs at one time or another, as has our guest Eric Gullickson, who is now Enterprise Architect at Vortex Optics. We thought we d run down the good, the bad, and the ugly of the VAR life on this episode of the Datanauts podcast.

We start the show by distinguishing the different roles a VAR can have. Then we dive into the good, which includes access to new technology, paid certifications, a flexible work schedule, and exposure to a wide variety of businesses and operating environments.

For the bad, the Datanauts and Eric discuss the blunt reality that you have to generate profit, and you may find yourself having to navigate the competing interests of manufacturers, sales, distributors, and customers.

On the ugly side, we swap stories about greasy salespeople, bad project management, and other nightmares.

Show Links:

Eric Gullickson.com

Eric Gullickson on Twitter

The Continue reading

Episode 26 – Networking War Stories Part Deux

To celebrate the first anniversary of Network Collective, we invite a stellar panel of guests to share their networking war stories.  We discuss challenging outages, difficult problems, and what we’ve learned along the way.


Terry Slattery
Guest
Ethan Banks
Guest

Jordan Martin
Host
Eyvonne Sharp
Host
Russ White
Host


Outro Music:
Danger Storm Kevin MacLeod (incompetech.com)
Licensed under Creative Commons: By Attribution 3.0 License
http://creativecommons.org/licenses/by/3.0/

The post Episode 26 – Networking War Stories Part Deux appeared first on Network Collective.

City & Guilds Group deploys SD-WAN to improve Office 365 performance

There are many reasons to deploy a software-defined WAN (SD-WAN), including saving a boatload of money, improving network agility, and increasing WAN resiliency. However, those all pale in comparison to the ROI that a business would see by making its employees more productive.One of the biggest drags on worker productivity is poor application response time. In 2016, ZK Research conducted a study that found on average, workers were 14 percent less productive than their optimal state because of poor application performance. (Note: I am an employee of ZK Research.) There’s nothing that frustrates a worker more than clicking on an icon and sitting around waiting for it to open or update, but that’s exactly what happens to global organizations that need to access resources over a long distance.To read this article in full, please click here

City & Guilds Group deploys SD-WAN to improve Office 365 performance

There are many reasons to deploy a software-defined WAN (SD-WAN), including saving a boatload of money, improving network agility, and increasing WAN resiliency. However, those all pale in comparison to the ROI that a business would see by making its employees more productive.One of the biggest drags on worker productivity is poor application response time. In 2016, ZK Research conducted a study that found on average, workers were 14 percent less productive than their optimal state because of poor application performance. (Note: I am an employee of ZK Research.) There’s nothing that frustrates a worker more than clicking on an icon and sitting around waiting for it to open or update, but that’s exactly what happens to global organizations that need to access resources over a long distance.To read this article in full, please click here

The Renaissance of Quechua Language in Cyberspace

Half of the world’s languages are expected to disappear by the end of the century. This is a huge cultural loss to humanity. When we think about endangered languages, we usually consider them as part of traditions that link us to the past. From a forward-looking perspective, they mean more than cultural heritage. When a language dies, a unique vision of the world is gone forever.

Does the language we speak online matter? Studies show that it deeply affects people’s experience of the Internet. It determines how much information we can access, who we choose to connect with and how we behave in our community. Keeping languages alive is essential to shape our future. The Internet offers the greatest chance to have a public voice in response to cultural globalization, a languages renaissance.

UNESCO is convinced that multilingualism on the Internet has a key role to play in fostering pluralistic, open and inclusive knowledge societies.

A project called Siminchikkunarayku, supported by The Internet Society Peru Chapter and the Beyond the Net Funding Programme, aims to build the linguistic corpus of the southern Quechua language by collecting and digitizing 10,000 hours of speeches. The Quechua is a family Continue reading

Announcing Cumulus NetQ 1.3 — now with Kubernetes!

Today, we are thrilled to announce the availability of Cumulus NetQ 1.3. With this release, Cumulus extends its leadership in container networking insight by integrating NetQ with Kubernetes, along with our previously supported integration with Docker Swarm.

This announcement aligns perfectly with Cumulus’ mission of driving web-scale networks for the digital age with automation and agility by implementing networking with S.O.U.L. Simple. Open. Untethered. Linux. NetQ is woven deep into that S.O.U.L. strategy, which we’ll get to later in a separate blog post. For now, there is a lot to dig into here with this Kubernetes integration with NetQ, so let’s begin.

The growth & challenges with containers

Container technology is all the rage in the CD/DevOps world. Nearly 70% of the companies queried in a Portworx 2017 container adoption survey invested financially in containers at some level in 2017, leaping from 52% in 2016. 451 Research predicts containers will grow to become a $2.7BN market by 2020. That’s 3.5 times greater than the $762 million container market in 2016, with a CAGR of 40%.

The popularity of these Linux-based containers stems from their ability to dramatically improve flexibility when running Continue reading

Pragmatic Data Center Fabrics

I always love to read the practical advice by Andrew Lerner. Here’s another gem that matches what Brad Hedlund, Dinesh Dutt and myself (plus numerous others) have been saying for ages:

One specific recommendation we make in the research is to “Build a rightsized physical infrastructure by using a leaf/spine design with fixed-form factor switches and 25/100G capable interfaces (that are reverse-compatible with 10G).”

There’s a slight gotcha in that advice: it trades implicit complexity of chassis switches with explicit complexity of fixed-form switches.

Read more ...

mmproxy – Creative Linux routing to preserve client IP addresses in L7 proxies

mmproxy - Creative Linux routing to preserve client IP addresses in L7 proxies

In previous blog post we discussed how we use the TPROXY iptables module to power Cloudflare Spectrum. With TPROXY we solved a major technical issue on the server side, and we thought we might find another use for it on the client side of our product.

mmproxy - Creative Linux routing to preserve client IP addresses in L7 proxies
This is Addressograph. Source Wikipedia

When building an application level proxy, the first consideration is always about retaining real client source IP addresses. Some protocols make it easy, e.g. HTTP has a defined X-Forwarded-For header[1], but there isn't a similar thing for generic TCP tunnels.

Others have faced this problem before us, and have devised three general solutions:

(1) Ignore the client IP

mmproxy - Creative Linux routing to preserve client IP addresses in L7 proxies

For certain applications it may be okay to ignore the real client IP address. For example, sometimes the client needs to identify itself with a username and password anyway, so the source IP doesn't really matter. In general, it's not a good practice because...

(2) Nonstandard TCP header

A second method was developed by Akamai: the client IP is saved inside a custom option in the TCP header in the SYN packet. Early implementations of this method weren't conforming to any standards, e.g. using option field 28 Continue reading

Two-Factor Authentication with VMware NSX-T

In a previous post, I covered how to integrate NSX-T with VMware Identity Manager (vIDM) to achieve remote user authentication and role-based access control (RBAC) for users registered with a corporate Active Directory (AD) http://blogs.vmware.com/networkvirtualization/2017/11/remote-user-auth…-rbac-with-nsx-t.html/

 

On this post, I’m showing how add two-factor authentication (2FA) for NSX-T administrators/operators on top of that existing integration. Two-factor authentication is a mechanism that checks username and password as usual, but adds an additional security control before users are authenticated. It is a particular deployment of a more generic approach known as Multi-Factor Authentication (MFA).

Throughout this post, I’m providing step-by-step guidance on how to use VMware Verify as that second authentication. I will also highlight what would be different if using third party mechanisms. At the end of the post, you will find a demo showing how to do the configuration and how users authenticate once 2FA is enabled.

 

What is VMware Verify? Let me quote what my colleague Vikas Jain wrote on this post: “VMware Verify uses modern mobile push tokens, where users get a push notification on their mobile device that they can simply accept or deny. When the user’s device does not have cellular reception, Continue reading