VXLAN on VMware NSX: VTEP, proxy, Unicast/Multicast/Hybrid mode
Virtual Extensible LAN (VXLAN) is a network which help to build an overlay network and it’s the base of network virtualization. In simple words, VXLAN encapsulates Ethernet frames on a UDP routable packet. With VXLAN a single L2 segment can span L3 boundaries. Moreover VXLAN overcomes VLAN limits: 802.1q standard define a maximum of 4094 […]HTIRW: The IETF Draft Process
In our deeper investigations of the IETF as a “sample standards body” in this (apparently forever running) series on how the Internet really works, let’s take a look at the IETF standards process. This is a rather sanitized, informal review — I may leave out some steps, or describe things in a way that doesn’t […]
Author information
The post HTIRW: The IETF Draft Process appeared first on Packet Pushers Podcast and was written by Russ White.
Kubernetes 101 – The constructs
In our last post, we got our base lab up and running. In this post, I’d like to walk us through the four main constructs that Kubernetes uses. Kubernetes defines these constructs through configuration files which can be either YAML or JSON. Let’s walk through each construct so we can define it, show possible configurations, and lastly an example of how it works on our lab cluster.
Pods
Pods are the basic deployment unit in Kubernetes. A pod consists of one or more containers. Recall that Kubernetes is a container cluster management solution. It concerns itself with workload placement not individual container placement. Kubernetes defines a pod as a group of ‘closely related containers’. Some people would go as far as saying a pod is a single application. I’m hesitant of that definition since it it seems too broad. I think what it really boils down to is grouping containers together that make sense. From a network point of view, a pod has a single IP address. Multiple containers that run in a pod all share that common network name space. This also means that containers Continue reading
Cisco ISLB Issue
Usually people are blogging on a certain topic because they want to share they knowledge with a certain protocol or product. Today I ll take another approach with that fact and I will actually do the exact opposite. I have an issue with ISLB which allows load balancing for my iSCSI sessions. Today I will elaborate […]WLAN Capacity Planning: From Concept to Practice [Video]
Last week I presented at the Wireless LAN Professionals Conference (#WLPC) in Dallas, TX. The topic of my presentation was putting the concepts of WLAN capacity planning into practice.
Agenda:
- Factors of Network Performance (and why variable contention delay is critical to WLANs)
- Iterative WLAN Design Methodology
- Hands-On with the Revolution Wi-Fi Capacity Planner
- Real-World Example and Walkthrough (including tying capacity planning to RF planning)
The video is now available online:
If you would like a review of capacity planning concepts prior to watching the hands-on example, my presentation from last year's WLPC 2014 is also available online.
Cheers,
Andrew von Nagy
EIGRP Named Mode
Original content from Roger's CCIE Blog Tracking the journey towards getting the ultimate Cisco Certification. The Routing & Switching Lab Exam
EIGRP Named Mode or Multi-AF Mode is a new development in EIGRP starting in Version 15.x Its reason for being is to simplify the EIGRP configuration into one place, as previously with EIGRP classic version the configuration was between the interface and the global process which made it harder to see all the configuration relating... [Read More]
Post taken from CCIE Blog
Original post EIGRP Named Mode
Change switch branding from H3C to HP
If you still have some original H3C branded switches in your network, it is possible to re-brand them to HP, so they will be recognized as the HP counter-part of the H3C model. To change the brand, use the brand … Continue reading
Check Cisco ASA Connections with Nagios
Once you’ve setup your Cisco ASA, you will want to monitor it to ensure that it’s operating normally. The plugin nm_check_asa_connections for Nagios, and compatible products, can warn your if the number of current connections gets too high. A very high connection count might indicate that there’s an attack under way on one of your servers, you have some hosts on your inside which are part of a botnet and is attacking someone else, or perhaps you’re just about to grow out of your current firewall and need an upgrade to a more powerful box.
Comware7: MAD BFD support on Management Ethernet port
Multiple-Active Detection (MAD) is used to detect a split brain in an IRF system. When the MAD BFD method is used, a dedicated Layer3 VLAN interface needs to be configured for the MAD BFD operation. This VLAN should be directly … Continue reading
Show 223 – Viptela and the Software Defined WAN
As the industry adoption of SDN gains rapid traction, the Wide Area Network is emerging as the leading use-case (read 2015 is all about SD-WAN). Aging architectures make the WAN the dinosaurs of enterprise infrastructure. While WAN optimization can address a short-term capacity problem, the bigger problems of high circuit costs, network rigidity and poor […]
Author information
The post Show 223 – Viptela and the Software Defined WAN appeared first on Packet Pushers Podcast and was written by Greg Ferro.
Check Cisco ASA Connections with Nagios
Once you’ve setup your Cisco ASA, you will want to monitor it to ensure that it’s operating normally. The plugin nm_check_asa_connections for Nagios, and compatible products, can warn your if the number of current connections gets too high. A very high connection count might indicate that there’s an attack under way on one of your servers, you have some hosts on your inside which are part of a botnet and is attacking someone else, or perhaps you’re just about to grow out of your current firewall and need an upgrade to a more powerful box.
Continue reading
Key questions to consider when evaluating hybrid cloud
This vendor-written tech primer has been edited by Network World to eliminate product promotion, but readers should note it will likely favor the submitter’s approach.
Hybrid cloud is the talk of IT, but to avoid costly, labor-intensive megaprojects you cannot escape, pay particular attention to minimizing implementation and management complexity. These questions will help you identify the best hybrid cloud architecture for your environment:
1. What are the top ways we will use our hybrid cloud in the next 12 to 18 months?
In the midmarket, the No. 1 answer is disaster recovery (DR). A secondary data center for DR is a luxury most companies can not afford. Now, public cloud services have put DR within reach of virtually all organizations. The key is to identify the enabling technology that minimizes complexity, maximizes automation and does not overtax the IT staff. Easy cloud DR solutions exist today for midsized shops; don’t be lead into a heavy professional services project.
To read this article in full or to leave a comment, please click here
Comware7: Routed port ACL packet-filter applies to switched traffic
There is a tricky “new” behavior in Comware7 Layer3 VLAN ACL processing: the applied ACL does not only filter the inter-vlan routed traffic (as would be expected), but it is applied to intra-vlan switched traffic as well by default. This … Continue reading
Debunking the myths about scale-up architectures
This vendor-written tech primer has been edited by Network World to eliminate product promotion, but readers should note it will likely favor the submitter’s approach.
When growing capacity and power in the data center, the architectural trade-offs between server scale-up vs. scale-out continue to be debated. Both approaches are valid: scale-out adds multiple, smaller servers running in a distributed computing model, while scale-up adds fewer, more powerful servers that are capable of running larger workloads.
Today, much of the buzz is around scale-out architectures, which have been made popular by companies like Facebook and Google, because this architecture is commonly viewed as more cost-effective and “infinitely” scalable.
To read this article in full or to leave a comment, please click here
Networking Field Day 9 Is Almost Here!
Confession: I fly out to San Jose, CA for Networking Field Day 9 tomorrow morning and I have yet to pack a single thing.
This last minute preparation thing seems to have become a habit. I’d like to tell you that it’s because I’m a seasoned traveller and I can calmly pack for a two week vacation in under 15 minutes, but really it’s just procrastination. It’s not even that I dislike travel; I quite enjoy going places and I definitely enjoy Networking Field Day so I know there’s something amazing waiting for me when I get there. I conclude then that my lackadaisical approach to travel packing is laziness in its purest form.
Networking Field Day 9
Any idea of being lazy at NFD9 though is laughable. As ever, we have a packed schedule meeting some really interesting vendors. There are some old faces and some new ones both in the attendees and the vendors!
Wednesday 10th February
- VeloCloud – “Cloud-Delivered Software Defined WAN”. If they give prizes for buzz-word density, VeloCloud just won. The only thing missing is “as a Service”. Humor aside, VeloCloud seem to have an interesting product; it sounds almost like Cisco Continue reading
8 Networking Trends to Watch in 2015
by Kevin Dooley originally published on the Auvik blog Let’s lay it on the table: I’m really bad at predicting long-termGet Started with CloudFlare ServerShield for Plesk
ServerShield makes it easy to activate CloudFlare and StopTheHacker.
CloudFlare has partnered with Parallels, the leading hosting solutions provider, to make server protection, content acceleration and malware removal easier than ever. We recently launched CloudFlare ServerShield® to all Plesk 12 users as an extension. ServerShield combines the performance and security features of CloudFlare with the malware scanning and removal solution of StopTheHacker. Whether you are a hosting provider looking to offer additional services to your customers, or a Plesk server user, you can access ServerShield with two easy clicks.
Already, a number of hosters and agencies have found ServerShield a key addition to their tools to help their customer sites’ security and performance. Rafal Kukla of Kukla Studio, a UK based design agency, has this to say:
“ServerShield made it straightforward to give my customers industry leading security and performance as well as reputation monitoring. Running a busy agency, I am focused on my customers' site design, ServerShield allows me to do that without sacrificing the fundamentals of site functionality. With one single click I can enable CloudFlare among all my customers instead of spending time configuring each site separately.”
We believe that this extension is incredibly timely Continue reading
Cutting The Cord – Ditching the CableTV Bundle!
I finally did it! I cut the cord on cable today (2/7/15). I have been considering cutting the cord for about a year or so now, but never was really motivated to cut it. My cable bill was high (over $200/mo), but I was in a bundled package with my cable, internet, and phone – […]
The post Cutting The Cord – Ditching the CableTV Bundle! appeared first on Fryguy's Blog.