Good Open-Source Governance: Thoughts on ‘Focus & the Big Tent’ Panel at OpenDaylight Summit 2015
Five characteristics for good project governance.
Is DDoS Mitigation as-a-Service becoming a defacto offering for providers?
Republished from Corero DDoS Blog
It’s well known in the industry that DDoS attacks are becoming more frequent and increasingly debilitating, turning DDoS mitigation into a mission critical initiative. From the largest of carriers to small and mid-level enterprises, more and more Internet connected businesses are becoming a target of DDoS attacks. What was once a problem that only a select few dealt with is now becoming a regularly occurring burden faced by network operators.
In my daily engagements with various customers of all shapes and sizes, it’s truly interesting to see how the approach to DDoS mitigation is changing. Much of this is the result of DDoS mitigation services shifting from a “nice to have” technology to a “must-have”, essential in order to maintain business continuity and availability.
When I built DDoS mitigation and detection services for Verizon back in 2004, the intent was to offer value-add revenue producing services to offer subscribers, in an effort to build out our security offerings. For many years, this concept was one that pretty much every provider I worked with was looking into; build a service with the intent of generating new revenue opportunity from customers when traditional avenues such as Continue reading
Show 261: Lessons Learned From SD-WAN Deployments (Sponsored)
Talari CTO and co-founder John Dickey joins Ethan Banks and Greg Ferro, along with four IT leaders from various organizations, in a sponsored podcast about real-world SD-WAN deployments and use cases.
The post Show 261: Lessons Learned From SD-WAN Deployments (Sponsored) appeared first on Packet Pushers.
The Threat of Telecom Sabotage
Earlier this week, an article in New York Times captured the world’s imagination with the prospect of secret Russian submarines possessing the ability to sabotage undersea communication cables (with perhaps Marko Ramius at the helm, pictured above). While it is a bit of a Hollywood scenario, it is still an interesting one to consider, although, as we’ll see, perhaps an unrealistic one, despite the temptation to exaggerate the risk.
Submarine cable cuts occur with regularity and the cable repair industry has considerable experience dealing with these incidents. However, the vast majority of these failures are the result of accidents occurring in relatively shallow water, and not due to a deliberate actor intending to maximize downtime. There is enormous capacity and resiliency among the cables crossing the Atlantic (the subject of the New York Times article), so to even make a dent, a saboteur would need to take out numerous cables in short order.
A mass telecom sabotage event involving the severing of many submarine cables (perhaps at multiple hard-to-reach deep-water locations to complicate repairs) would be profoundly disruptive to international communications — Internet or otherwise. For countries like the U.S. with extensive local hosting, the impact Continue reading
QOTW: The Occupation of the Wise
Sertillanges, The Intellectual Life
The post QOTW: The Occupation of the Wise appeared first on 'net work.
CCIE Plaque has finally arrived!
After passing the CCIE Lab Exam in Routing & Switching v5 on August 27th 2015 my CCIE Plaque has finally arrived. After all the late nights and weekends of studying and the cost of the training, bootcamps, travel and the lab exam fee, what do you get for passing? Well apart from your digits which […]
The post CCIE Plaque has finally arrived! appeared first on Roger Perkin - Networking Articles.
Optimizing Traffic Engineering with NorthStar Controller on Software Gone Wild
Content providers were using centralized traffic flow optimization together with MPLS TE for at least 15 years (some of them immediately after Cisco launched the early MPLS-TE implementation in their 12.0(5)T release), but it was always hard to push the results into the network devices.
PCEP and BGP-LS all changed that – they give you a standard mechanism to extract network topology and install end-to-end paths across the network, as Julian Lucek of Juniper Networks explained in Episode 43 of Software Gone Wild.
Read more ...Wi-Fi’s Whipping Boy Complex
If you’ve ever attended a large conference or exhibition, chances are everyone whined about the Wi-Fi. But the truth is, a lot of the time, it’s not Wi-Fi’s fault at all. While there is a litany of Wi-Fi-specific deployment options...Despite Loss, Extreme Networks Says It’s Turned the Corner
Bright days ahead, CEO Ed Meyercord says.
The Path for Cloudpath = Multi-Vendor Wi-Fi Security
Author: Greg Beach, Ruckus VP, Product Management Looks like we created a Ruckus last week with our Cloudpath acquisition. Many customers and partners jumped on board to praise the deal, which we believe will simplify Wi-Fi onboarding and security for...Creative foot-shooting with Go RWMutex
Hi, I'm Filippo and today I managed to surprise myself! (And not in a good way.)
I'm developing a new module ("filter" as we call them) for RRDNS, CloudFlare's Go DNS server. It's a rewrite of the authoritative module, the one that adds the IP addresses to DNS answers.
It has a table of CloudFlare IPs that looks like this:
type IPMap struct {
sync.RWMutex
M map[string][]net.IP
}
It's a global filter attribute:
type V2Filter struct {
name string
IPTable *IPMap
// [...]
}
CC-BY-NC-ND image by Martin SoulStealer
The table changes often, so a background goroutine periodically reloads it from our distributed key-value store, acquires the lock (f.IPTable.Lock()), updates it and releases the lock (f.IPTable.Unlock()). This happens every 5 minutes.
Everything worked in tests, including multiple and concurrent requests.
Today we deployed to an off-production test machine and everything worked. For a few minutes. Then RRDNS stopped answering queries for the beta domains served by the new code.
What. That worked on my laptop™.
Here's the IPTable consumer function. You can probably spot the bug.
func (f *V2Filter) getCFAddr(...) (result []dns.RR) {
f. Continue readingCentina Systems Takes Aim at Operationalizing NFV & SDN
Texas company joins the fray in providing service assurance in virtual environments.
Worth Reading: Cloud Access Security Brokers
The post Worth Reading: Cloud Access Security Brokers appeared first on 'net work.