0

Optimal BGP Path Selection with BGP Additional Paths

A month ago I explained how using a BGP route reflector in a large-enough non-symmetrical network could result in suboptimal routing (or loss of path diversity or multipathing). I also promised to explain how Advertisement of Multiple Paths in BGP functionality¹ solves that problem. Here we go…

I extended the original lab with another router to get a scenario where one route reflector (RR) client should use equal-cost paths to an external destination while another RR client should select a best path that is different from what the route reflector would select.

0

Optimal BGP Path Selection with BGP Additional Paths

A month ago I explained how using a BGP route reflector in a large-enough non-symmetrical network could result in suboptimal routing (or loss of path diversity or multipathing). I also promised to explain how Advertisement of Multiple Paths in BGP functionality¹ solves that problem. Here we go…

I extended the original lab with another router to get a scenario where one route reflector (RR) client should use equal-cost paths to an external destination while another RR client should select a best path that is different from what the route reflector would select.

0

Aviatrix’s Modest New Blocking Feature Hints At Greater Ambitions For Multi-Cloud Security

Aviatrix, which makes multi-cloud networking software for public clouds, has introduced a new security feature that can identify and then block customers’ cloud-based workloads from connecting to a malicious IP address or known-bad host on the Internet. The new capability is called ThreatIQ with ThreatGuard. It’s available to customers that already license the Aviatrix Co-Pilot […]

The post Aviatrix’s Modest New Blocking Feature Hints At Greater Ambitions For Multi-Cloud Security appeared first on Packet Pushers.

0

Some Notes from RIPE 83

The RIPE community held a meeting in November. Like most community meetings in these Covid-blighted times it was a virtual meeting. Here’s my notes from a few presentations that piqued my interest.

0

Day Two Cloud 126: Azure Arc And Building A Hybrid Cloud

On today's Day Two Cloud, we dig into Azure Arc and the construction of hybrid clouds with guest Ben Weissman, a consultant, author, and Pluralsight creator.

The post Day Two Cloud 126: Azure Arc And Building A Hybrid Cloud appeared first on Packet Pushers.

0

Day Two Cloud 126: Azure Arc And Building A Hybrid Cloud

On today's Day Two Cloud, we dig into Azure Arc and the construction of hybrid clouds with guest Ben Weissman, a consultant, author, and Pluralsight creator.

0

Noction Flow Analyzer – Initial Setup in Home Lab

The goal of this guide is to create a minimalistic and virtualized laboratory infrastructure in a home environment so that everyone can become familiar with all the features that the Noction Flow Analyzer (NFA) provides before actually deploying the NFA in the enterprise network. Our home network consists of two key components - nProbe Pro […]
Continue reading...

0

SD-WAN At Home? The Obstacles And Issues

As remote work becomes the norm, SD-WAN might seem like a good fit to support remote employees, but current offerings all have their drawbacks.

The post SD-WAN At Home? The Obstacles And Issues appeared first on Packet Pushers.

0

Scalable Policy Routing

More than a decade ago (before SD-WAN was even a thing) I wrote an article describing how easy it is to route different applications onto different links (MPLS/VPN versus IPsec tunnels) using a distance vector routing protocol (preferably BGP, although even RIP would work).

You might find it interesting that it’s possible to solve tough problems with good network design instead of proprietary unicorn dust, so I salvaged the article from some dusty archive, cleaned it up, polished it, and published it on ipSpace.net.

0

Scalable Policy Routing

More than a decade ago (before SD-WAN was even a thing) I wrote an article describing how easy it is to route different applications onto different links (MPLS/VPN versus IPsec tunnels) using a distance vector routing protocol (preferably BGP, although even RIP would work).

You might find it interesting that it’s possible to solve tough problems with good network design instead of proprietary unicorn dust, so I salvaged the article from some dusty archive, cleaned it up, polished it, and published it on ipSpace.net.

0

AWS wants to get your mainframe apps into the cloud – fast

AWS is now offering a mainframe service that promises to help Big Iron customers interested in moving apps to the cloud cut that migration time by two-thirds.The goal of AWS Migration Acceleration Program for Mainframe is to get those customers off of the Big Iron “as fast as they possibly can” in order to take better advantage of the cloud, according to Adam Selipsky, CEO of AWS, speaking at Amazon’s AWS re:Invent conference. [Get regularly scheduled insights by signing up for Network World newsletters.] “It can be a messy business and involves a lot of moving pieces, and it isn’t something that people really want to do on their own,” Selipsky said.  “And while AWS partners can help with the transition, it can still take a long time.”To read this article in full, please click here

0

AWS targets IPv6 migration for serverless, container workloads

Amazon Web Services has launched new support for IPv6-only subnets that can meet the needs of workloads that require more IP addresses than IPv4 can readily provide.The service is available through Amazon Virtual Private Cloud (VPC) and suitable for workloads such as serverless and container applications, according to a blog by Rohit Aswani, a senior specialist solutions architect and Aditya Santhanam, a senior product manager, both with AWS. “Workloads that are constrained by the limited size of the IPv4 address space can now migrate to an IPv6-only environment on AWS to scale up,” they wrote.To read this article in full, please click here

0

Thanksgiving’s biggest online shopping day was Cyber Monday, but other days were close behind

November comes, the temperatures start to get colder for most of the planet's population (87% live in the Northern Hemisphere) and many are also starting to prepare for the festive season. That also brings significant changes in Internet traffic, most notably the online shopping kind of traffic.

So, what were the November days that e-commerce websites had the most traffic in the US and what about worldwide? Is humanity using more mobile Internet at this time? And what are the most popular days online — is Black Friday the winner?

We’ll dig into those questions using Cloudflare Radar. E-commerce is expanding and at an all-time high, especially after the pandemic accelerated the digital transformation process (e-commerce had a 32.4% increase in sales in the US in 2020 and is expected to grow this year).

Cyber Monday, a ‘last minute’ winner

Let’s start with e-commerce — we added a chart to Radar that shows trends for e-commerce by country. The worldwide trend is pretty evident: Cyber Monday, the day for supposedly last-minute discounts, was the clear winner.

Worldwide most popular days for e-commerce

#1. Cyber Monday, November 29.

#2. Monday, November 23.

#3. Black Friday, November 26 — November Continue reading

0

Dynamic Negotiation of BGP Capabilities

I wanted to write a blog post explaining the intricacies of Advertisement of Multiple Paths in BGP, got into a yak-shaving exercise when discussing the need to exchange BGP capabilities to enable this feature, and decided to turn it into a separate prerequisite blog post. The optimal path selection with BGP AddPath post is coming in a few days.

The Problem

Whenever you want to use BGP for something else than simple IPv4 unicast routing the BGP neighbors must agree on what they are willing to do – be it multiprotocol extensions and individual additional address families, graceful restart, route refresh… (IANA has the complete BGP Capability Codes registry).

0

Dynamic Negotiation of BGP Capabilities

I wanted to write a blog post explaining the intricacies of Advertisement of Multiple Paths in BGP, got into a yak-shaving exercise when discussing the need to exchange BGP capabilities to enable this feature, and decided to turn it into a separate prerequisite blog post. The optimal path selection with BGP AddPath post is coming in a few days.

The Problem

Whenever you want to use BGP for something else than simple IPv4 unicast routing the BGP neighbors must agree on what they are willing to do – be it multiprotocol extensions and individual additional address families, graceful restart, route refresh… (IANA has the complete BGP Capability Codes registry).

0

Move Over Customer Experience; User Experience is Now King

With hybrid work here to stay, organizations need to boost the employee user experience by ensuring performance, connectivity, security, and usability.

0

Proxmox Provision Guests With Terraform

Recently, I have started using Proxmox as a hypervisor in my home lab. In this post I will show you how to provision Proxmox guest VMs using Terraform. I use this method to deploy about 20 VMs across 3 Proxmox hosts in my home lab. The following software was used in this post. Proxmox...continue reading

0

Shortcuts for adding multiple lines of text to files on Linux

There are a number of ways to add text to files on Linux systems without having to open an editor, such as the echo and printf commands. On the other hand, when you need to add A LOT of text, the technique you use can make the job tedious or a piece of cake.This post describes some of the commands you can use and the problems and benefits you can expect.Also see: How to loop forever in bash on LinuxThe echo commands append lines of text to existing files in a straightforward way:To read this article in full, please click here

0

Quantum primacy: Is it real (and if so, does it matter)?

The nexus of the ongoing competition among nations and corporations (such as   Google and IBM) to demonstrate quantum primacy has shifted to a university in China where not one, but two experimental quantum computers reportedly have shown that quantum primacy is attainable.Quantum primacy is when a quantum computer is able to solve computational problems that are beyond the ability of traditional “classical” computers, yoked as they are to their quaint system of ones and zeroes.Researchers show quantum computers can reason Don’t get me wrong; classical computers long have served with distinction. So did the abacus in its day. However, as society’s computational challenges became more complex--such as splitting a restaurant bill 11 ways among your cheap and quarrelsome family members--this ancient calculating device eventually gave way to the digital calculator.To read this article in full, please click here

0

Shortcuts for adding multiple lines of text to files on Linux

There are a number of ways to add text to files on Linux systems without having to open an editor, such as the echo and printf commands. On the other hand, when you need to add A LOT of text, the technique you use can make the job tedious or a piece of cake.This post describes some of the commands you can use and the problems and benefits you can expect.Also see: How to loop forever in bash on LinuxThe echo commands append lines of text to existing files in a straightforward way:To read this article in full, please click here