CyberFlood L4-L7 Traffic Generator: New Blog/YouTube Combo Series

So excited about this new series of blogs and YouTube videos. Absolutely LOVE “getting my geek on” and then sharing it. This series will be about the Layer 4 thru Layer 7 traffic generation tool from Spirent. If you are... Read More ›

The post CyberFlood L4-L7 Traffic Generator: New Blog/YouTube Combo Series appeared first on Networking with FISH.

Automation 8. Overview and Getting Started with Model-Driven Automation in Cumulus Linux 5.0

Hello my friend,

yes, we are nerds. Despite the Christmas holidays we continue working and delivering value. After all, Guido von Rossum has created Python over Christmas holidays. We find that very inspiring to be honest and, therefore, decided to look into something appealing as well.

1
2
3
4
5
No part of this blogpost could be reproduced, stored in a 

retrieval system, or transmitted in any form or by any 

means, electronic, mechanical or photocopying, recording, 

or otherwise, for commercial purposes without the 

prior permission of the author.

How to automate the automation?

Is that even a right term “automating the automation”? It is quite right, yes. It ultimately means the capability to be able to invoke automation workflows not only manually by the automation operator, but also in an automated way: via API request (e.g., called from a customer self-service portal or web hook from some other application) or certain event or condition (e.g., based on syslog, SNMP streaming telemetry). For various types of the application (Ansible or Python) there are different automation platforms (AWX, Apache Airflow, StackStorm) existing, which ultimately fulfil that task.

And in our trainings you will get an exposure Continue reading

Enhanced Networking – 1. SRIOV – AWS

In preparation for AWS Advanced Networking Speciality Track, I have come across Enhanced Networking and application in various scenarios. I am going to cover this in a few different parts in the blog posts.

Enhanced Networking

Enhanced Networking – boils down to speeds (100Gbps vs 10Gbps) , from the picture below you can use enable Enhanced Networking either by choosing ENA stands for Elastic Network Adapter (which is supported by most of current gen instances) or by using Intel 82599 Virtual Function Interface which supports speeds upto 10Gbps with specific Instances.

https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/enhanced-networking.html

I have heard about SR-IOV but never did a deep dive into what exactly it does, to be honest. While going through Enhanced Networking documentation on AWS documentation, I have seen mention of SR-IOV at several places.

What is SR-IOV ?

More on SR-IOV is written in this blog-post, but in short SR-IOV which stands for Single Root I/O Virtualisation provides device virtualisation by using virtual-functions/DMA(Direct memory access)/virtual function devices (VFD’s) and lowering CPU interrupts.

So, the first question is if this enabled by default ? No. you have to manually enable it, per Amazon website https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html#current-gen-instances , all current generation instances Continue reading

How 5G Networks are Secured and Enabled by SASE

Holiday Networking Thoughts from 2021

It’s the Christmas break for 2021, which means lots of time spent doing very little work-related stuff. I’m currently putting together a Lego set, playing Metroid Dread and working on beating Ocarina of Time again.

As I waited for updates to download on Christmas morning I remembered how many packets must be flying across the wire to update software and operating systems for consoles. Even having done a few of the updates the night before I could see the traffic to those servers started to get a bit congested. It’s like Black Friday but for the latest patches to keep your games running. Add in the content that needs to be installed now in order to make that game disc work, or the download-only consoles for sale, and you can see that network engineers aren’t going to be a dying profession any time soon.

I’m a bit jaded because I come from a time when you didn’t need to be constantly connected to use software or need to download an update every few days. Heck, some of the bugs in Ocarina of Time have been there for over twenty years because those cartridges are not designed to be patched, Continue reading

Make The Most Of 5G/LTE SD-WAN Links With Fortinet Wireless WAN Gateways

Fortinet's FortiExtender cellular gateways support multiple LTE or 5G connections. The FortiExtender can be placed in the best physical location to get a mobile signal, and then tied back into an SD-WAN appliance to provide an active link or failover option in an SD-WAN deployment.

The post Make The Most Of 5G/LTE SD-WAN Links With Fortinet Wireless WAN Gateways appeared first on Packet Pushers.

Cisco SDA part XII – BSR, Auto-RP for the fabric and a catch-22

In this post, we look at why BSR and Auto-RP do not work with a SD-Access fabric.

Cisco SDA design study #1 – understanding user authentication in the fabric

In this post, we look at how a typical user gets authenticated and authorized in a SD-Access fabric.

Cisco SDA Part XI – understanding ARP in SDA

In this post, we look at how an ARP packet flows within a SD-Access fabric.

Cisco SDA Part X – understanding L2 handoff

In this post, we take a detailed look at the L2 handoff feature in Cisco’s SD-Access.

Cisco SDA Part IX – need for duplicate IPs on fabric borders

In this post, we look at why SD-Access borders have the anycast IP addresses configured as loopback addresses.

Cisco SDA Part VIII – DHCP challenges in SDA

In this post, we look at various DHCP challenges in Cisco’s SD-Access fabric and how it is solved.

Cisco SDA Part VII – multi-instance LISP

In this post, we look at multi-instance LISP, which is another core construct for Cisco’s SD-Access.

Cisco SDA Part V – LISP mobility – roaming hosts

In this post, we look at an actual LISP host mobility event and what happens behind the scenes to make this work.

Cisco SDA Part VI – LISP mobility – Solicit Map Requests (SMRs)

In this post, we look at SMRs and how these are essential for a host mobility event, within the LISP architecture.

Cisco SDA Part IV – LISP mobility – dynamic EIDs

In this post, we look at LISP dynamic EID - a core construct of LISP host mobility.

How to Choose a Red Team Service Provider

Custom screen saver with XSecureLock

i3lock is a popular X11 screen lock utility. As far as customization goes, it only allows one to set a background from a PNG file. This limitation is part of the design of i3lock: its primary goal is to keep the screen locked, something difficult enough with X11. Each additional feature would increase the attack surface and move away from this goal.¹ Many are frustrated with these limitations and extend i3lock through simple wrapper scripts or by forking it.² The first solution is usually safe, but the second goes against the spirit of i3lock.

XSecureLock is a less-known alternative to i3lock. One of the most attractive features of this locker is to delegate the screen saver feature to another process. This process can be anything as long it can attach to an existing window provided by XSecureLock, which won’t pass any input to it. It will also put a black window below it to ensure the screen stays locked in case of a crash.

XSecureLock is shipped with a few screen savers, notably one using mpv to display photos or videos, like the Apple TV aerial videos. I have written my own saver using Python and Continue reading

Cisco SDA Part III – LISP and non-LISP sites

In this post, we look at how a LISP site talks to non-LISP sites.

Cisco SDA Part II – basic LISP configuration and operation

In this post, we introduce basic LISP configuration and operation using packet captures and packet walks.