Archive

Category Archives for "Networking"

Demo: Multi-site Active-Active with NSX, F5 Networks GSLB, and Palo Alto Networks Security

I wrote this post prior on my personal blog at HumairAhmed.com. You can also see many of my prior blogs on multisite and Cross-vCenter NSX here on the VMware Network Virtualization blog site. This post expands on my prior post, Multi-site Active-Active Solutions with NSX-V and F5 BIG-IP DNS. Specifically, in this post, deploying applications in an Active-Active model across data centers is demonstrated where ingress/egress is always at the data center local to the client, or in other words localized ingress/egress. Continue reading

Intel plans hybrid CPU-FPGA chips

Two years ago, Intel spent $16.7 billion to acquire FPGA chip vendor Altera. So, what’s it going to do with that big purchase? The company is finally ready to say. A field-programmable gate array, or FPGA, is an integrated circuit that can be customized to perform specific functions. Whereas the x86 executes only the x86 instruction sets, an FPGA can be reprogrammed on the fly to perform specified tasks. That’s why x86s are considered general compute processors and FPGAs are viewed as customizable. Also on Network World: What you need when the big breakout for the Internet of Things arrives The company’s strategy is interesting in that it effectively puts Intel in competition with itself. If you want to do massive floating-point computation, Intel has the Xeon Phi line of add-in cards that compete with Nvidia and AMD GPUs. Now the FPGAs are also targeting those use cases. To read this article in full or to leave a comment, please click here

Intel plans hybrid CPU-FPGA chips

Two years ago, Intel spent $16.7 billion to acquire FPGA chip vendor Altera. So, what’s it going to do with that big purchase? The company is finally ready to say. A field-programmable gate array, or FPGA, is an integrated circuit that can be customized to perform specific functions. Whereas the x86 executes only the x86 instruction sets, an FPGA can be reprogrammed on the fly to perform specified tasks. That’s why x86s are considered general compute processors and FPGAs are viewed as customizable. Also on Network World: What you need when the big breakout for the Internet of Things arrives The company’s strategy is interesting in that it effectively puts Intel in competition with itself. If you want to do massive floating-point computation, Intel has the Xeon Phi line of add-in cards that compete with Nvidia and AMD GPUs. Now the FPGAs are also targeting those use cases. To read this article in full or to leave a comment, please click here

IDG Contributor Network: Wi-Fi analytics SaaS can make retail cool

Retail hasn’t lost its “cool.” [aaaayyyyy]It’s just reinventing it. We know this but Amazon’s recent purchase of Whole Foods sure gave everyone a wake-up call to “innovate or get left-in-the-dust.”I know, you’re in charge of IT, not corporate strategy… but bear with me. This ends up being an IT thing.As Forbes recently detailed, while Amazon unveiled its plans for Whole Foods (which includes decreased prices and the addition of industry-disrupting in-store technology), the market reacted. That same afternoon, stocks of several major brick-and-mortar retailers and grocery stores experienced significant drops in stock price.To read this article in full or to leave a comment, please click here

IDG Contributor Network: Wi-Fi analytics SaaS can make retail cool

Retail hasn’t lost its “cool.” [aaaayyyyy]It’s just reinventing it. We know this but Amazon’s recent purchase of Whole Foods sure gave everyone a wake-up call to “innovate or get left-in-the-dust.”I know, you’re in charge of IT, not corporate strategy… but bear with me. This ends up being an IT thing.As Forbes recently detailed, while Amazon unveiled its plans for Whole Foods (which includes decreased prices and the addition of industry-disrupting in-store technology), the market reacted. That same afternoon, stocks of several major brick-and-mortar retailers and grocery stores experienced significant drops in stock price.To read this article in full or to leave a comment, please click here

Every Connection Matters – Shape Tomorrow and Help Close Digital Divides

We are currently living a special moment in time, a sort of paradox.

Today, almost half of the world’s population already has Internet access. This figure is much higher than anything we could have anticipated 10 years ago, an achievement we should be happily celebrating.

But a recent report by the Internet Society, Paths To Our Digital Future, shows there are no guarantees when it comes to the Internet’s future.  To achieve a digital future where people come first will require new thinking, new approaches, and new tools for this rapidly changing world around us.

And with this we find ourselves facing an even greater challenge. This is no longer the Internet of 10% of the world’s population. It is the Internet of 50% of the people around the world; in some countries, Internet penetration is now close to 100%.

The Internet has become essential, and the opportunity gap between those who are connected and those who are not grows each day. We cannot afford to remain indifferent to this Internet revolution.

If we don’t connect the remaining 50%, this gap could have long-term consequences for the opportunities that present themselves later in life.

After the United Nations adopted Continue reading

Cumulus content roundup: October

Welcome back to the Cumulus content roundup! This month, we think it’s time to get our hands dirty and play around with the latest technology. From video tutorials to how-to blogs to thought-provoking articles, this issue brings together all the resources you need to start experimenting with new configurations, networking practices and more. So, what are you waiting for? Let’s get off of the couch (or stay on the couch, if that’s where you work) and start upgrading that datacenter!

What’s new from Cumulus:

Web-scale networking how-to videos: This month, we launched a series of how-to videos to show you the ropes of web-scale networking. What’s the difference between configuring an IP address with Cisco or Cumulus Linux? How do I automate my datacenter? Watch our tutorials to answer these questions!

Cumulus Express — proof that our customers’ success is our success: Announcing Cumulus Express has done great things for Cumulus Networks, but the greatest asset we have is listening to our customers. Read on to see how paying attention to what people want returns the best rewards.

Contain yourself! Best practices for container networking: This webinar covers everything that you need to know about container architecture, the challenges they Continue reading

BrandPost: Your Network. Anytime. Anywhere.

The digital economy never sleeps and it never stops moving. The same can be said for many small business owners who work around the clock to keep up with rising customer demands and skyrocketing competition. The speed of business in the digital economy has required those business owners to step outside of their comfort zone and into the complex and confusing world of small business IT. Although this is a difficult step for many, they can’t deny how important it is to the survival of the company. It’s the only way they can ensure their business operates effectively. A thriving, always-available network is simply the lifeblood of any modern business.To read this article in full or to leave a comment, please click here

Microburst: A New Post Type on MovingPackets.Net

A problem I frequently face is that I want to share thoughts and comments on something, but I don’t have the time free to write up a full post. The solution, I hope, is a new post type which I’m calling a Microburst.

Moving Packets - Microburst

A Microburst could be anything from one line to a few paragraphs; basically enough for me to convey a thought without having to go into as much depth as I would usually like to do. For that reason in particular, I think it’s important that I can distinguish my regular, shallow posts from these special, short, shallow posts. Handy, right?

The first Microburst appeared a few days ago, and more will be coming soon. Gird your loins, etc.

If you liked this post, please do click through to the source at Microburst: A New Post Type on MovingPackets.Net and give me a share/like. Thank you!

SSH HashKnownHosts File Format

The HashKnownHosts option to the OpenSSH client causes it obfuscate the host field of the ~/.ssh/known_hosts file. Obfuscating this information makes it harder for threat actors (malware, border searches, etc...) to know which hosts you connect to via SSH.

Hashing defaults to off, but some platforms turn it on for you:

 chris:~$ grep Hash /etc/ssh/ssh_config   
HashKnownHosts yes
chris:~$

Here's an entry from my known_hosts file:

 |1|NWpzcOMkWUFWapbQ2ubC4NTpC9w=|ixkHdS+8OWezxVQvPLOHGi2Oawo= ecdsa-sha2-nistp256 AAAAE2Vj<...>ZHNLpyJsv  

There's one record per line, with the fields separated by spaces. The first field is the remote host (SSH server) identifier.

In this case, the leading characters |1| in the host identifier are the magic string (HASH_MAGIC). It tells us that the field is hashed, rather than a plaintext hostname (or address). The remaining characters in the field comprise two parts: a 160-bit salt (random string) and a 160-bit SHA1 hash result. Both values are base64 encoded.

The various OpenSSH binaries that use information in this file feed both the remote hosts name (or address) and the salt to the hashing function in order to produce the hash result:


So, lets validate a host entry against this record the hard way. The entry above is for an IP address: Continue reading

IDG Contributor Network: Minimum viable operations: Failure IS an option in a networked world

In the world of ever-more complex systems, there is nothing more fragile than an attempt to make nothing fail. A system that assumes that everything must work is a system designed to fail. The reality of the world is that things will fail, and those cannot bring down the whole business. As British Airways has amply demonstrated, a fragile system where everything fails is not good for business.Many years ago I wrote some posts on the challenges of five nines in a distributed world, and as systems become ever more about delivering functionality through a combination of services, micro-services and networks so the importance of designing for failure becomes ever more important, and the foundation of designing for failure is assuming it will happen.To read this article in full or to leave a comment, please click here

IDG Contributor Network: Minimum viable operations: Failure IS an option in a networked world

In the world of ever-more complex systems, there is nothing more fragile than an attempt to make nothing fail. A system that assumes that everything must work is a system designed to fail. The reality of the world is that things will fail, and those cannot bring down the whole business. As British Airways has amply demonstrated, a fragile system where everything fails is not good for business.Many years ago I wrote some posts on the challenges of five nines in a distributed world, and as systems become ever more about delivering functionality through a combination of services, micro-services and networks so the importance of designing for failure becomes ever more important, and the foundation of designing for failure is assuming it will happen.To read this article in full or to leave a comment, please click here