Giving a Monkey a Loaded Gun
Automating the configuration, provisioning, and management of particular workflows for cloud gets a lot of attention these days. While automation makes perfect sense for deploying workloads faster, there are also other areas where automation can be leveraged to improve the overall operational efficiency of the IT Ops team.
One of these areas is automating the validation of configuration changes. This could mean validating changes deployed via the CLI for existing networks or validating changes made by SDN controllers for those new shiny physical AND virtual networks. It doesn’t matter. Connectivity tests can also be automated. Much more can be automated than configuration and policy for data centers.
I remember doing annual power shutdowns of the data center and IDFs where I worked years ago. I remember doing OS upgrades on critical network devices. I also remember the chaos and the amount of people that needed to be on a bridge validating “everything looked okay” when the devices came back online. Was everything always okay? Hardly, but it wasn’t until business started on the following Monday, those one off issues were uncovered and fixed. If there were tools verifying routing tables, Continue reading
I remember doing annual power shutdowns of the data center and IDFs where I worked years ago. I remember doing OS upgrades on critical network devices. I also remember the chaos and the amount of people that needed to be on a bridge validating “everything looked okay” when the devices came back online. Was everything always okay? Hardly, but it wasn’t until business started on the following Monday, those one off issues were uncovered and fixed. If there were tools verifying routing tables, Continue reading
Cisco COO Claims Amazon as Huge Customer and Other Insights
In this transcript from Seeking Alpha, Gary Moore, Chief Operating Office of Cisco claims that " eight of the global ten over-the-top providers like Amazon are huge Cisco customers". For network architect & strategy types, it's worth reading to see how Cisco intends to extract more revenue from your budget. In particular there are several references to Cisco "analytics service offerings" which Mr Moore states are opportunities for upsell in SmartNet maintenance. It might be worth looking into those products to prepare a "defense against the dark arts" from Cisco account managers.
The post Cisco COO Claims Amazon as Huge Customer and Other Insights appeared first on EtherealMind.
Understand Etherchannel Load Balancing.
Let’s try to define what EtherChannel is and why it exists nowadays as a powerful feature.
Author information
The post Understand Etherchannel Load Balancing. appeared first on Packet Pushers Podcast and was written by Michał Janowski.
Glue Networks at ONUG 2014
Glue Networks had a presence at the last ONUG, where Tom Hollingworth was able to get an overview from Glue’s founder, Jeff Gray:
As you can see, Glue’s product targets the WAN, and specifically addresses the difficult provisioning tasks that most shops do manually. These include but are not limited to:
- Provisioning (and deprovisioning) of QoS resources for various applications like SAP and Lync based off of need and time of day.
- Bringing up remote sites in a standardized, cookie-cutter manner
- Creating and changing PfR (performance routing) configurations on the WAN.
Jeff visited our Tech Field Day round table at ONUG 2014 and gave us a more detailed introduction to the product:
First, some things I think this product does (or will do) well. The configuration of PfR or QoS en masse is a low-hanging use case I’ve mentioned before and even if I can do it using scripts today, having a single tool that does it in a simple way will provide value. These specific configurations are difficult and error-prone, so anything that tackles this is going to be useful.
I also did enjoy hearing about the options for getting the config onto the device. Jeff listed three options for Continue reading
Glue Networks at ONUG 2014
Glue Networks had a presence at the last ONUG, where Tom Hollingworth was able to get an overview from Glue’s founder, Jeff Gray: As you can see, Glue’s product targets the WAN, and specifically addresses the difficult provisioning tasks that most shops do manually. These include but are not limited to: Provisioning (and deprovisioning) of QoS resources for various applications like SAP and Lync based off of need and time of day.Glue Networks at ONUG 2014
Glue Networks had a presence at the last ONUG, where Tom Hollingworth was able to get an overview from Glue’s founder, Jeff Gray: As you can see, Glue’s product targets the WAN, and specifically addresses the difficult provisioning tasks that most shops do manually. These include but are not limited to: Provisioning (and deprovisioning) of QoS resources for various applications like SAP and Lync based off of need and time of day.Illuminating The Etumbot APT Backdoor
The Arbor Security Engineering Response Team (ASERT) has released a research paper concerning the Etumbot malware.
Etumbot is a backdoor used in targeted attacks since at least March 2011. Indicators suggest that Etumbot is associated with the Numbered Panda group, also known as IXEHSE, DynCalc, and APT12. Although previous research has covered related malware, little has been publicly discussed regarding Etumbot’s capabilities.
Indicators suggest that the Etumbot dropper is delivered via spear phishing and is contained inside an archive file intended to be of interest to the target. The attackers use the Unicode Right to Left Override technique and document icons to disguise malicious executable content as document files. Once the dropper is executed, the backdoor is activated and a distraction file of interest to the target is opened for viewing. ASERT has observed several Etumbot samples using distraction documents involving Taiwanese and Japanese topics of interest, and has also observed recent development activity which indicates that attack campaigns are ongoing.
Once installed, the backdoor connects to it’s Command & Control server and receives an encryption key. RC4 encryption, along with HTTP transactions intended to blend in with typical traffic are used for backdoor communications. Etumbot’s core functionality Continue reading
Platforms, Code, and Why I do it
If you read this site often, you already know I’ve been doing quite a bit of work with Ansible specifically as it pertains to networking. While I will be showing another video very soon in a follow up post, I wanted to take a step back and cover a few things before doing so. The focus here is less about the technology and more my general mindset around automation PLATFORMS, code, open source, and why I do it. Just something I’d like to share because I’m occasionally asked questions around these topics.
Culture
It’s not about the tool, in my case Ansible, it’s about the process, methodology, and ideas that go into thinking differently. For me personally, Ansible just had a lower barrier for entry, but I’ve grown to quite like it. Actually, I liked it from the get-go. In order to effectively embrace platforms like Ansible, there needs to be a change in culture first. It was amazing to see the emphasis on culture during the recent DevOps days in Pittsburgh. I tuned in and out during the live stream and it seemed every time I had a chance to watch, it Continue reading
It’s not about the tool, in my case Ansible, it’s about the process, methodology, and ideas that go into thinking differently. For me personally, Ansible just had a lower barrier for entry, but I’ve grown to quite like it. Actually, I liked it from the get-go. In order to effectively embrace platforms like Ansible, there needs to be a change in culture first. It was amazing to see the emphasis on culture during the recent DevOps days in Pittsburgh. I tuned in and out during the live stream and it seemed every time I had a chance to watch, it Continue reading
Response: Bare-metal Switches And SDN controllers At Facebook
Facebook has telling people more about it's in-house designed and developed whitebox Ethernet switching based on Broadcom silicon (not sure if it's Trident2 or Arad), their own Linux distribution and OpenCompute standards.
The post Response: Bare-metal Switches And SDN controllers At Facebook appeared first on EtherealMind.
Coffee Break – Show 8
This is “The Coffee Break”. A podcast on state of the networking business where we discuss vendors moves and news, analysis on product and positioning, and look at the business of networking. In the time it takes to have coffee break. Thanks to Steven Hill from Current Analysis for joining us this week. Show Links […]
Author information
The post Coffee Break – Show 8 appeared first on Packet Pushers Podcast and was written by Greg Ferro.
Coffee Break – Show 8
[player] This is “The Coffee Break”. A podcast on state of the networking business where we discuss vendors moves and news, analysis on product and positioning, and look at the business of networking. In the time it takes to have coffee break. Thanks to Steven Hill from Current Analysis for joining us this week. Show […]
The post Coffee Break – Show 8 appeared first on Packet Pushers.
Coffee Break – Show 8
[player] This is “The Coffee Break”. A podcast on state of the networking business where we discuss vendors moves and news, analysis on product and positioning, and look at the business of networking. In the time it takes to have coffee break. Thanks to Steven Hill from Current Analysis for joining us this week. Show... Read more »NANOG 61
The recent NANOG 61 meeting was a pretty typical NANOG meeting, with a plenary stream, some interest group sessions, and an ARIN Public Policy session. The meeting attracted some 898 registered attendees, which was the biggest NANOG to date. No doubt the 70 registrations from Microsoft helped in this number, as the location for NANOG 61 was in Bellevue, Washington State, but even so the interest in NANOG continues to grow, and there was a strong European contingent, as well as some Japanese and a couple of Australians. The meeting continues to have a rich set of corridor conversations in addition to the meeting schedule. These corridor conversations are traditionally focused on peering, but these days there are a number of address brokers, content networks, vendors and niche industry service providers added to the mix. Here’s my impressions of some of the presentations at NANOG 61.Cumulus Networks, sFlow and data center automation
The Cumulus Linux platform makes it possible to run the same open source agent on switches, servers, and hypervisors - providing unified end-to-end visibility across the data center. The open networking model that Cumulus is pioneering offers exciting opportunities. Cumulus Linux allows popular open source server orchestration tools to also manage the network, and the combination of real-time, data center wide analytics with orchestration make it possible to create self-optimizing data centers.
Install and configure Host sFlow agent
The following command installs the Host sFlow agent on a Cumulus Linux switch:sudo apt-get install hsflowdNote: Network managers may find this command odd since it is usually not possible to install third party software on switch hardware. However, what is even more radical is that Cumulus Linux allows users to download source Continue reading
Conferences: Go
It is slightly paradoxical that since I left networking for the student life I’ve actually been reading more about networking than I was able to during the last years of my working life. Similarly, I’ve had more time to follow the goings on in the social media, especially when the big conferences were on. Over […]
Author information
The post Conferences: Go appeared first on Packet Pushers Podcast and was written by Matthew Mengel.
CCIE renewed
In the very last day of availability of the CCIE v4 350-001 written exam I’ve renewed my CCIE for a couple of years more: My plan was to recertify with another track – Wireless or Security – but life happens…/31 subnet in point-to-point links. Is that possible?
How does the internet work - We know what is networking
On point to point links we actually do not need special broadcast address of that subnet because there's only one way you can send a packet across point to point link.
Response: SDN Disruption to Networking Monitoring & Gartner’s NPMD
Gartner has defined itself a new market segment in “Network Performance Monitoring and Diagnostics” (NPMD) that highlights “solutions from AppNeta, CA Technologies, Corvil, Fluke Networks, Genie Networks, HP, Infovista, JSDU (via Network Instruments acquisition), Lancope, NetScout Systems, Niksun, Orsyp, Paessler, Riverbed, and SevOne.” These are all good companies but these companies mostly rely on hardware […]
The post Response: SDN Disruption to Networking Monitoring & Gartner’s NPMD appeared first on EtherealMind.
A Wi-Fi Gamble That Pays Off @Interop Las Vegas?
"Good Luck!" That’s what I was told when an industry friend heard that we were providing the Wi-Fi service for this year's Interop Las Vegas. To be fair, the bar for Wi-Fi at Interop was quite low. Historically the Wi-Fi...What’s the best approach to building next-generation data center networks?
Experts are in agreement that Software Defined Networking/Network Virtualization will make the network world more efficient and more agile, but opinions vary on the best path forward. We reached out to two of the most prominent players to ask them to spell out why they think their approach is best.
The Experts
Chris King
vice president of product marketing in VMware’s Networking & Security Business Unit, argues that network virtualization – embodied in the company’s NSX product -- is the way to go because it abstracts network control from network hardware while replicating everything the application expects to see, vastly simplifying the task of building and managing complex network environments. View debate
To read this article in full or to leave a comment, please click here