New! Security Analytics provides a comprehensive view across all your traffic
An application proxying traffic through Cloudflare benefits from a wide range of easy to use security features including WAF, Bot Management and DDoS mitigation. To understand if traffic has been blocked by Cloudflare we have built a powerful Security Events dashboard that allows you to examine any mitigation events. Application owners often wonder though what happened to the rest of their traffic. Did they block all traffic that was detected as malicious?
Today, along with our announcement of the WAF Attack Score, we are also launching our new Security Analytics.
Security Analytics gives you a security lens across all of your HTTP traffic, not only mitigated requests, allowing you to focus on what matters most: traffic deemed malicious but potentially not mitigated.
Detect then mitigate
Imagine you just onboarded your application to Cloudflare and without any additional effort, each HTTP request is analyzed by the Cloudflare network. Analytics are therefore enriched with attack analysis, bot analysis and any other security signal provided by Cloudflare.
Right away, without any risk of causing false positives, you can view the entirety of your traffic to explore what is happening, when and where.
This allows you to dive straight into analyzing the results Continue reading
Special Report: Privacy in the Data-Driven Enterprise
An entire week of coverage devoted to the question: How do we give privacy back to the people when customer data is now the coin of the realm and the fuel that powers business?Review: S5648X-2Q4Z Switch – Part 2: MPLS
After receiving an e-mail from a newer [China based OEM], I had a chat with their founder and learned that the combination of switch silicon and software may be a good match for IPng Networks.
I got pretty enthusiastic when this new vendor claimed VxLAN, GENEVE, MPLS and GRE at 56 ports and line rate, on a really affordable budget ($4’200,- for the 56 port; and $1’650,- for the 26 port switch). This reseller is using a less known silicon vendor called [Centec], who have a lineup of ethernet silicon. In this device, the CTC8096 (GoldenGate) is used for cost effective high density 10GbE/40GbE applications paired with 4x100GbE uplink capability. This is Centec’s fourth generation, so CTC8096 inherits the feature set from L2/L3 switching to advanced data center and metro Ethernet features with innovative enhancement. The switch chip provides up to 96x10GbE ports, or 24x40GbE, or 80x10GbE + 4x100GbE ports, inheriting from its predecessors a variety of features, including L2, L3, MPLS, VXLAN, MPLS SR, and OAM/APS. Highlights features include Telemetry, Programmability, Security and traffic management, and Network time synchronization.
After discussing basic L2, L3 and Overlay functionality in my [previous post], I left Continue reading
Tier 1 Carriers Performance Report: November, 2022
The post Tier 1 Carriers Performance Report: November, 2022 appeared first on Noction.
Video: IPv6 Traffic Filtering Details
Did you like the traffic filtering in the age of IPv6 video by Christopher Werny? Time for part two: IPv6 traffic filtering details.
You need Free ipSpace.net Subscription to watch the video.
Ubiquiti Wireless Multiple VLANs with Juniper Switch
https://codingpackets.com/blog/ubiquiti-wireless-multiple-vlans-with-juniper-switch
Asking Meaningful Questions: What Problem Are We Trying To Solve?
At some point in your career, you’ll likely participate in a project that is a technical and implementation success but is still a failure. That’s because the wrong solution was implemented. For example, after weeks or months of hard work you might successfully deploy a client-based VPN solution, but because of application latency requirements a […]
The post Asking Meaningful Questions: What Problem Are We Trying To Solve? appeared first on Packet Pushers.
Demo Bytes: vSphere UPT On The NVIDIA BlueField DPU
NVIDIA’s BlueField Data Processing Unit (DPU) can offload, accelerate, and isolate software applications such as networking, storage, and security from a server’s CPU. In this Demo Byte, we walk through using VMware’s vSphere UPT feature on a BlueField DPU to bring vMotion capabilities to the DPU. Our guest is Wes Kennedy, Senior Technical Marketing Engineer […]
The post Demo Bytes: vSphere UPT On The NVIDIA BlueField DPU appeared first on Packet Pushers.
ChatGPT and Creating For Yourself
I’m sure you’ve been inundated by posts about ChatGPT over the past couple of weeks. If you managed to avoid it the short version is that there is a new model from OpenAI that can write articles, create poetry, and basically answer your homework. Lots of people are testing it out for things as mundane as writing Amazon reviews or creating configurations for routers.
It’s not a universal hit though. Stack Overflow banned ChatGPT code answers because they’re almost always wrong. My own limited tests show that it can create a lot of words from a prompt that seem to sound correct but feel hollow. Many others have accused the algorithm of scraping content from others on the Internet and sampling it into answers to make it sound accurate but not the best answer to the question.
Are we ready for AI to do our writing for us? Is the era of the novelist or technical writer finished? Should we just hang up our keyboards and call it a day?
Byte-Sized Content
When I was deciding what I wanted to do with my life after college I took the GMAT to see if I could get into grad school for Continue reading
Keep An Eye on Digital Experience When Transforming Network Security
By focusing on digital experience and understanding the source of any impacts to users, organizations can deliver both secure and performant access to the applications that enable their productivity.Hedge 157: Vendor Lock-in with Frank Seesink
Vendor lock-in has been an issue in networking for the entire time I’ve been working in the field—since the late 1980s. I well remember the arguments over POSIX compliance, SQL middleware standards, ADA, and packet formats. It was an issue in electronics, which is where I worked before falling into a career in computer networks, too. What does “vendor independence” really mean, and what are the ways network operators can come close to having it? Frank Seesink joins Russ White and Tom Ammon to rant about—and consider—solutions to this problem.
Arista EOS Configuration Automation
I keep getting questions along the lines of “is network automation practical/a reality?” with arguments like:
Many do not see a value and are OK with just a configuration manager such as Arista CVP (CloudVision Portal) and Cisco DNA.
Configuration consistently is a huge win regardless of how you implement it (it’s perfectly fine if the tools your vendor providers work for you). It prevents opportunistic consistency, as Antti Ristimäki succinctly explained:
How to Navigate the Lack of Industry Standards & Data Overload
By starting at the fundamental technical level, organizations can build a cyber security stack that offers visibility as the solution.Alex Kim: Why I joined Cloudflare
This post is also available in 한국어, 简体中文, 繁體中文 and 日本語.
I am excited to announce that as of November 1, I have joined Cloudflare as Country Manager of South Korea to help build a better Internet and to expand Cloudflare’s growing customer, partner, and local teams in Korea. We just opened a new entity (after making Seoul our 23rd data center, more than 10 years ago) and I am the first official employee of Cloudflare Korea LLC in Seoul, which is truly a great moment and privilege for me.
A little about me
I was born in Korea and was educated in Korea until middle school, then I decided to move to Toronto, Canada to study film making to become a movie director. I finished high school and obtained a university degree in Toronto, during which I had the opportunity to be exposed to various cultures, as well as learn and become well-versed in the English language. I think it was a great time to learn how diverse people in the world are. My dream of becoming a movie director has changed over time for many reasons, but I think it is no coincidence that I Continue reading