Asymmetrical Traffic Flows and Complexity
One of my readers sent me a list of questions on asymmetrical traffic flows in IP networks, particularly in heavily meshed environments (where it’s really hard to ensure both directions use the same path) and in combination with stateful devices (firewalls in particular) in the forwarding path.
Unfortunately, there’s no silver bullet (and the more I think about this problem, the more I feel it’s not worth solving).
Read more ...How SAP, T-Mobile, and Intel Use Cloud Foundry’s Open Source Platform
BOSCH and Walmart use SAP Cloud Platform, built on Cloud Foundry.
Worth Reading: Distributed Memory Pooling
The post Worth Reading: Distributed Memory Pooling appeared first on rule 11 reader.
OpenStack and Cumulus Linux: A match made in networking heaven
A few weeks ago, we attended the OpenStack Summit where we had a wonderful time connecting with customers, partners and several new faces. With the excitement of the event still lingering, we thought this was a great time to highlight how OpenStack and Cumulus Linux offer a unique, seamless solution for building a private cloud. But first, here are a few highlights from the conference.
OpenStack Summit 2017, Boston
- Jonathan Bryce, Executive Director at OpenStack Foundation, opened the show talking about the substantial growth of OpenStack over the past several years and how they are just one part of the vibrant open infrastructure community. A large focus of the conference was how organizations are moving towards private cloud environments as they realize it’s a better long-term solution.
- Throughout the conference, containers and Kubernetes were the hottest topics. Many sessions throughout the four days focused on these technologies and how organizations are looking to use them as an abstraction layer to make infrastructure less visible or locked-in.
- Edward Snowden was one of the most favorited speakers. Presenting from Russia, Snowden focused on how IT professionals are in position to influence how cloud infrastructure is built, influence the future of the internet Continue reading
Arista Upgrades Merchant Silicon in its Spine & Leaf Routing/Switching
It compares its R-Series to Juniper's QFX 10000 Series.
NTT to Use Coriant Optical Network Platform in SDN-Powered Data Centers
Coriant snares new investment as the optical network is predicted to surge.
Top Tech Titans Head to Washington For White House Summit
CEOs from Amazon, Microsoft, and SAP, will discuss improving security and government infrastructure.
BlackBerry Cites Security Challenge Behind Proprietary Container Product
Analysts note that open source security concerns are more about deployment, not technology.
PCIe versus Ethernet in a Composable System
I posted a link to a worth reading story last week about Liqid’s composable hyperconverged system. A reader (Vova Moki) commented on the LinkedIn post with this question—
Although I don’t understand how much faster is the PCIe than regular NICs?
Excellent question! It certainly seems that 100g Ethernet should be much faster than PCIe; this article lists the highest speed of PCIe as 15.8G/s across 16 lanes, with faster speeds expected into the future. Further, PCIe runs on parallel lanes, which means it must be very difficult to build a switch for the technology. The simplest way to build such a switch would be to pull the signals off the 16 different lanes, serialize them into a single packet of some sort, and then push them back out into 16 lanes again (potentially in different order/etc.).
So why should composable systems use something like PCIe, rather than using 100g Ethernet. After all, the Ethernet NIC is essentially doing precisely what a PCIe switch would need to do by pulling the data off a PCIe bus, serializing the data, and sending it over a network to a switch, which can, with the right design, already switch these packets Continue reading
Worth Reading: Balancing Trademarks and Domain Names
The post Worth Reading: Balancing Trademarks and Domain Names appeared first on rule 11 reader.
Remotely Triggered Black Hole (RTBH) Routing
The following configuration is installed on the ce-router:
router bgp 65140The ce-router peers with the upstream service provider router ( Continue reading
bgp router-id 0.0.0.140
neighbor 10.0.0.70 remote-as 65140
neighbor 10.0.0.70 port 1179
neighbor 172.16.141.2 remote-as 65141
!
address-family ipv4 unicast
neighbor 10.0.0.70 allowas-in
neighbor 10.0.0.70 route-map blackhole-in in
exit-address-family
!
ip community-list standard blackhole permit 65535:666
!
route-map blackhole-in permit 20
match community blackhole
match ip address prefix-len 32
set ip next-hop 192.0.2.1
Cisco Port Security Basics and configurations
Today I am going to talk about the Switching topic and that topic is Port Security. Port security is required in the case you want to control the traffic by allowing Specific MAC address entries, which means if the invalid MAC addresses traffic comes, it will be blocked or dropped.
Lets talk about the port security and the modes of port security. So the question is why port security required, may be want to safe from the attacks as well.
Why Port Security is important ?
Well port security is generally used so that you can easily prevent the unwanted MAC address traffic from the external or the internal network.
Port security can be enabled in three different ways are defined as below:
Lets talk about the port security and the modes of port security. So the question is why port security required, may be want to safe from the attacks as well.
Why Port Security is important ?
Well port security is generally used so that you can easily prevent the unwanted MAC address traffic from the external or the internal network.
Port security can be enabled in three different ways are defined as below:
- Protect : In the protected state, switch port will drops packets with unknown source addresses until you remove a sufficient number of secure MAC addresses to drop below the maximum value.
- Restrict : In the restrict state, switch port will drops packets with unknown source addresses until you remove a sufficient number of secure MAC addresses to drop below the maximum value and causes the SecurityViolation counter to increment
- Shutdown : In the shutdown state, switch port will Continue reading
Bosh or Kubo? Tools for Deploying Containers Are Proliferating
The IT industry has a selection of tools for deploying containers. They can use a PaaS or a CaaS based on Kubernetes, Marathon, or Docker.