Archive

Category Archives for "Networking"

Viptela SD-WAN Solution – Cisco Systems Company

Before starting with the SD-WAN solution. I would like to talk about Fabric a little bit, So Fabric is a cloud delivered network that is secure, scalable, open and simple to deploy and if we talk about the Viptela Fabric solution, it enables an Enterprise to extend its network footprint to all infrastructure elements using a single platform. This includes branches, campus, remote sites, Cloud and data center.

What is the basic feature of the Fabric enabled SD solution ?
So SD-WAN so called Software Defined WAN solution, where control plane or management plane is separated from the physical devices, while in the Viptela solution we have following architecture, where we have data-plane on the physical devices (obviously), Control Plane by VSmart or VBond Management tool, Management Plane via VManage and Orchestration plane.

So below is the high level architecture view of the Viptela Managed SD-WAN solution

Fig 1.1- Viptela SD-WAN Solution
The traditional WAN challenge is to connect various sites, branches, stores, remote-locations, campuses and DCs. This network to be sophisticated with routing, path selection, security, segmentation etc.

Connectivity to the cloud

In the today's era everyone wants to connect to the cloud and want to access the application on the Continue reading

What is Deadlock situation in MPLS Traffic Engineering ?

What is deadlock situation in MPLS Traffic Engineering ? What happens when deadlock occurs ? Is there any mechanism to prevent deadlock ? I will explain all the details in this post.     Deadlock occurs when LSP needs to move to the other link but due to lack of available bandwidth cannot move to […]

The post What is Deadlock situation in MPLS Traffic Engineering ? appeared first on Cisco Network Design and Architecture | CCDE Bootcamp | orhanergun.net.

Code Everywhere: Why We Built Cloudflare Workers

It all comes down to the speed of light. It always does. The speed of light limits the latency possible between someone using the Internet and the application they are accessing. It doesn’t matter if they are walking down the street hailing a car using a ride-sharing app, sitting in an office accessing a SaaS application on the web, or if their wearable device is reporting health information over WiFi. The speed of light is everywhere.

When you can’t fight the speed of light you only have one possible solution: move closer to where the end users are. In simplistic terms, that’s what Cloudflare has done by building its network of 117 data centers around the world. We’ve cut the latency between users and servers by moving closer.

But to date all we’ve moved closer are things like SSL handshakes, WAF processing of requests and caching of content. All those things help make Internet applications faster and safer, but there’s a huge missing component... code.

The code that makes Internet applications work is still sequestered in servers and cloud services around the world. And there are only a limited number of such locations even for large cloud Continue reading

Introducing Cloudflare Workers: Run Javascript Service Workers at the Edge

TL;DR: You'll soon be able to deploy Javascript to Cloudflare's edge, written against an API similar to Service Workers.

Try writing a Worker in the playground »

Introduction

Every technology, when sufficiently complicated, becomes programmable.

You see this everywhere, but as a lifelong gamer, my personal favorite example is probably graphics cards. In the '90s, graphics hardware generally provided a fixed set of functionality. The OpenGL standard specified that the geometry pipeline would project points from 3D space onto your viewport, then the raster pipeline would draw triangles between them, with gradient shading and perhaps a texture applied. You could only use one texture at a time. There was only one lighting algorithm, which more or less made every surface look like plastic. If you wanted to do anything else, you often had to give up the hardware entirely and drop back to software.

Of course, new algorithms and techniques were being developed all the time. So, hardware vendors would add the best ideas to their hardware as "extensions". OpenGL ended up with hundreds of vendor-specific extensions to support things like multi-texturing, bump maps, reflections, dynamic shadows, and more.

Then, in 2001, everything changed. The first GPU with a programmable Continue reading

WAN Optimization ( Silver Peak Vs Riverbed)

In today's world WAN optimisation is one of the critical pillar of the enterprise network and there are so many vendors working on the WAN optimization products. Cisco came with WAAS solution but not able to convince customers in the market. Riverbed and SilverPeak are the major leaders in the WAN optimization market.

Silver top’s WAN acceleration solution facilitates firms achieve the rewards of virtualization by means of overcoming network challenges that impact the overall performance of these packages throughout the WAN. extra especially, Silver height addresses latency, packet loss, and bandwidth demanding situations that cause digital packages (e.g. Citrix Xen App) and digital desktop Infrastructures (e.g. Citrix Xen computer, Microsoft computer Virtualization, and VMware VDI) to be unresponsive and/or unreliable across the WAN. 

Fig 1.1- WAN Optimization

How does Silver height fluctuate from other WAN acceleration carriers with regards to optimising digital applications and computer systems?

Many WAN acceleration vendors, including Silver Peak, offer “basic” optimization techniques that can improve the performance of Citrix and VDI. These include standard compression algorithms (e.g. LZ) and well-established TCP acceleration techniques (e.g. adjustable window sizes and selective acknowledgements). 

However, that is where the similarities end. In addition Continue reading

Datacenter Switching : Nexus ( FEX: Fabric Extenders )

Today I am going to talk about the FEX that you generally heard when you are going to connect your datacenter servers in the Nexus Switching environment. It is called as Bridge Port Extension. It means there is a Parent Switch and the port of that parent switch get connected to FEX( that is another Switch) but act as the Interface card for the Parent switch.
  • Parent Switch :Nexus 5K or Nexus 7K
  • FEX:Nexus 2K ( Another Switch but interconnected with Parent Switch and controlled)

Nexus 7K or 5k is act as Parent Switch but Nexus 2K act as FEX for Parent Switch. So all the function of the Nexus 2K is controlled by the Parent Switch and that is Nexus 7K or 5K. Simply says that Nexus 2000 Series FEX behaves logically like Remote line cards for parent Nexus 5K  or 7K Nexus Switch.

Lets talk how we can connect the FEX with the parent switch in the datacenter environment.

Fig 1.1- FEX Connectivity


Let's talk about the basic Configurations to configure the FEX.

Step-1 :
Enable the FEX feature

N5K-1(config)# feature fex

Step-2 :Create a FEX instance (Note: Its up to you to choose Continue reading

NMAP Quick Reference

NMAP is a tool for network discovery and auditing. This is not a comprehensive tutorial, only a quick reference source. Consult the man pages and/or documentation for indepth explanation of commands. Port Scan Top Ports Scan the top N number of ports cmd nmap --top-ports 10 www.google.com UDP...

Microburst: Intent-Washing (See Apstra Fight Back!)

Apstra – the intent-based networking company – was thrilled, perhaps in a somewhat ironic sense, when Cisco announced just before Cisco Live 2017 US that the future was intent-based networking. I hear informally that their appointment book for meetings at Cisco Live was positively spilling over within just a couple of days. Intent-based networking had just been validated by the big guy in the room!

Apstra Logo

A few months later, and the evidence of intent-washing is all too clear, as some other vendors have begun labeling their SDN products intent-based so they can claim table stakes in the next big thing. In fact, I’m sure from Asptra’s perspective, Cisco was, and is, stepping on their toes too, and doing its own intent-washing to stay on message. If I were Apstra, I’d be none pleased to see my message devalued like this, but what can a company in this position do?

Apstra can fight back with a video featuring the bearded legend himself, Derick Winkworth (@cloudtoad), that’s what they can do. This is not to be missed:

This is pure gold. We shall never forget.

If you liked this post, please do click through to the source at Microburst: Intent-Washing Continue reading

Canonical’s eyes are on IoT

When Mark Shuttleworth founded Canonical in 2004, the idea behind the company was simple – promote the use of Ubuntu Linux as a desktop operating system. Fourteen years later, things have gotten a lot more complicated, as the prominent open source software vendor eyes the IoT market.Canonical’s still flying the flag for desktop Linux, but the company’s real business is in the cloud – it claims that Ubuntu accounts for about 60% of all Linux instances in the major public clouds – and it’s hoping to make its mark in the next-buzziest part of the technology sector, the Internet of Things.+ALSO ON NETWORK WORLD: Nvidia gets broad support for cutting-edge Volta GPUs in the data center + A lack of cloud skills could cost companies moneyTo read this article in full or to leave a comment, please click here

Using Wifi to Grow Grapes

Recently, California farmer Craig Thompson got a pretty nifty upgrade for his irrigation: a broadband-connected Hydrawise control system that would automatically manage and monitor the irrigation of his olive and grape fields and collect data to alert him if there was a problem. He woke up the next morning to fields he could have assumed were appropriately hydrated, but the Hydrawise system quickly proved its worth when he looked at the data coming out of it. He found that the water pressure had been much lower than expected. With that information, he was able to figure out that one of the drip irrigation wires was loose. This small detail revealed from his Wifi-enabled device could have meant the difference between success and failure for his entire season.

A Growing Market

Many farmers across the world are realizing the benefits of streamlining their businesses with broadband-enabled devices. According to a 2017 report by MarketsandMarkets, the precision farming market is expected to grow from USD 3.20 Billion in 2015 to USD 7.87 Billion by 2022. It goes way beyond irrigation: there are farms using broadband-enabled devices for security, employee management, fertilizer and spray control, real-time access to specialists and Continue reading

Cloudflare Apps Platform Update: September Edition

This is the September edition of our blog series showcasing the latest platform improvements in developer analytics, user feedback, release notes, and more!

Since launch, we’ve received hundreds of feature requests from developers and users alike. Feedback has been the source of some our most popular features. This month’s post is celebration of the innovation achieved when great ideas are shared.

Let’s dive in!

? Developer Analytics

Continuing with the theme of feedback, App developers can now track their apps’ popularity and growth:

App usage by month.

The usage charts help identify which changes have a positive impact on your app.

If you’ve created a paid app you can also track its financial performance:

App revenue & churn.

? User feedback

Charts and graphs are great for tracking trends, but what do your users actually think of your app? Wonder no longer; users can now leave comments when adding and removing apps from their site. Each comment includes sentiment tags and an optional message from the user.

Comments left by users before and after installing an app.

? Page Selectors

Cloudflare users have always been able to select which routes their apps are active, though apps this was too course Continue reading

ICANN Postpones DNSSEC Root KSK Rollover – October 11 will NOT be the big day

People involved with DNS security no longer have to be focused on October 11. News broke yesterday that ICANN has decided to postpone the Root KSK Rollover to an unspecified future date.
To be clear:

The Root KSK Rollover will NOT happen on October 11, 2017.

ICANN’s announcement states the the KSK rollover is being delayed…

…because some recently obtained data shows that a significant number of resolvers used by Internet Service Providers (ISPs) and Network Operators are not yet ready for the Key Rollover. The availability of this new data is due to a very recent DNS protocol feature that adds the ability for a resolver to report back to the root servers which keys it has configured.

Getting More Information

Discussion on the public DNSSEC-coord mailing list indicates more info may be available in a talk Duane Wessels is giving at the DNS-OARC meeting tomorrow (Friday, September 29). The abstract of his session is:


A Look at RFC 8145 Trust Anchor Signaling for the 2017 KSK Rollover

RFC 8145 (“Signaling Trust Anchor Knowledge”) was published in April 2017. This RFC describes how recursive name servers can signal, to authoritative servers, the trust anchors that they have configured for Continue reading