Kubernetes Security And Networking 1: Why Security Matters And Course Overview
This course looks at securing Kubernetes, with an emphasis, though not exclusively, on network security. Topics we’ll cover in the series include: Role-based access control Securing control planes and worker nodes API security and policy management Dealing with vulnerabilities Security capabilities of a service mesh Security-enabled Container Network Interfaces (CNIs) Securing the ingress controller Scanning […]
The post Kubernetes Security And Networking 1: Why Security Matters And Course Overview appeared first on Packet Pushers.
Full Stack Journey 074: Going The Distance – What Running Can Teach Us About Careers
On today's Full Stack Podcast, Scott is joined by Krithika Chandramouli, a software engineer at Meta, to discuss how the lessons she learned while preparing to run her first-ever half-marathon also apply to careers. They dive into the relationship between consistency and one's progress toward a goal, and how understanding the "why" behind a goal can help motivate you.
The post Full Stack Journey 074: Going The Distance – What Running Can Teach Us About Careers appeared first on Packet Pushers.
Full Stack Journey 074: Going The Distance – What Running Can Teach Us About Careers
On today's Full Stack Podcast, Scott is joined by Krithika Chandramouli, a software engineer at Meta, to discuss how the lessons she learned while preparing to run her first-ever half-marathon also apply to careers. They dive into the relationship between consistency and one's progress toward a goal, and how understanding the "why" behind a goal can help motivate you.
Adding Stuff to Netbox with Pynetbox
As a warning to everyone, I am not a developer. I am a network engineer who is trying to do some automation stuff. Some of what I’m doing sounds logical to me, but I would not trust my own opinions for production work. I’m sure you can find a Slack channel or Mastodon instance with people who can tell you how to do things properly.
I think there’s a theme in the last few posts. I can’t quite put my finger on it, though. 
We’ve talked about querying Netbox, but it’s pretty useless without data actually in it. Let’s look at how to get stuff in there using pynetbox.
Here’s the environment I’m running. All this code is in my Github repo.
Python : 3.9.10
Pynetbox : 7.0.0
Netbox version : 3.4.2 (Docker)
Adding sites is pretty logical first step in a new Netbox install. They don’t have any required fields that have to be created first, so let’s start there. I’ve got a YAML file called sites.yml that contains the site data I want to import. Here’s what that looks like.
### sites.yml
- name: NYC
description: New York City
Continue readingAdding Stuff to Netbox with Pynetbox
As a warning to everyone, I am not a developer. I am a network engineer who is trying to do some automation stuff. Some of what I’m doing sounds logical to me, but I would not trust my own opinions for production work. I’m sure you can find a Slack channel or Mastodon instance with people who can tell you how to do things properly.
I think there’s a theme in the last few posts. I can’t quite put my finger on it, though. 🙂 We’ve talked about querying Netbox, but it’s pretty useless without data actually in it. Let’s look at how to get stuff in there using pynetbox.
Here’s the environment I’m running. All this code is in my Github repo.
Python : 3.9.10
Pynetbox : 7.0.0
Netbox version : 3.4.2 (Docker)
Adding sites is pretty logical first step in a new Netbox install. They don’t have any required fields that have to be created first, so let’s start there. I’ve got a YAML file called sites.yml that contains the site data I want to import. Here’s what that looks like.
### sites.yml
- name: NYC
description: New York Continue readingSwitching from a FinOps Observability to a FinOps Orchestration Mindset
Businesses should think of FinOps as a process that requires constant data-driven action by stakeholders who possess both the financial and technical expertise to optimize cloud spending without disrupting cloud workload performance or reliability.Three new winners of Project Jengo, and more defeats for the patent troll
Project Jengo is a Cloudflare effort to fight back against patent trolls by flipping the incentive structure that has encouraged the growth of patent trolls who extract settlements out of companies using frivolous lawsuits. We do this by asking the public to identify prior art that can invalidate any of the patents that a troll holds – not just the ones that are asserted against Cloudflare.
Since we launched Project Jengo over five years ago, we’ve given out over $135,000 to individuals who helped us find prior art to invalidate patents owned by patent trolls. By invalidating those patents – many of which are so blatantly marginal or broad that they never should have been granted in the first place – we hope to decrease the amount of harassment and frivolous lawsuits that patent trolls bring against innovative technology companies.
Today, we’re excited to announce three new Project Jengo winners. These individuals have helped us push forward our effort to take down patent trolls, and continue to fight trolling in favor of innovation.
The patent troll
The current case involves a patent troll called Sable Networks who asserted four patents that generally describe a flow-based router or a mechanism Continue reading
Learning: How to Google Like a Pro
A skill that more people should have
Network Automation Expert Beginners
Some network automation skeptics came to that place the hard way: they got burned by half-baked semi-tested systems. This is what one of my good friends had to say in a LinkedIn comment:
I am suspicious of automation, as I’ve unfortunately seen too many outages caused by either human error or faulty automation. Every time it required human CLI/GUI intervention to correct it. The problem is that the more automation we push, the fewer people know how to use the “old school” way to administer stuff.
Network automation is not the only IT discipline that could cause hard-to-correct errors requiring manual intervention. I’m positive everyone knows at least one horror story resulting in manual tweaking of the Windows registry, or a sequence of arcane SQL commands1.