Day Two Cloud 077: Why Kubernetes Is Wrong For You
Kubernetes seems like a shining paragon of Ops efficiency, but the reality of running it is quite different. Is your organization up to the task? Is Kubernetes the thing you actually want or need? In this Day Two Cloud episode we talk to Cory O’Daniel and Rishi Malik from Container Heroes, and they have some thoughts on why Kubernetes is wrong for you.
The post Day Two Cloud 077: Why Kubernetes Is Wrong For You appeared first on Packet Pushers.
Remembering Francis Kariuki: Africa’s Tweeting Chief
The African community networks community is sad to learn about the passing of one of its prolific members, Chief Francis Kariuki of Lanet-Umoja, a rural community in Nakuru County, Kenya. He died on on 21 October 2020 after a short illness.
Chief Kariuki was a renowned Kenyan administrator who pioneered the use of technology to foster development, justice, trust, peace, and inclusion in his community. His struggle for digital inclusion earned him several nicknames, including “The Digital Champion” and “The Tweeting Chief,” for being the first African local administrator to use social media channels to promote community development. His passion and drive for adopting technologies in service delivery at the local level earned him national and global recognition.
Chief Kariuki was a strong advocate for community networks in Africa. He successfully championed for a community network in Lanet-Umoja and worked with his community members to coordinate its installation, operation, and management.
Beyond Kenya, Chief Kariuki engaged in the Africa Summits on Community Networks, a platform where community network operators in Africa gather to foster learning, networking, knowledge, and experience sharing. At the Summits, Chief Kariuki shared key insights on community networks and inspired many young people to adopt digital Continue reading
Chasing CRC Errors in a Data Center Fabric
One of my readers encountered an interesting problem when upgrading a data center fabric to 100 Gbps leaf-to-spine links:
- They installed new fiber cables and SFPs;
- Everything looked great… until someone started complaining about application performance problems.
- Nothing else has changed, so the culprit must have been the network upgrade.
- A closer look at monitoring data revealed CRC errors on every leaf switch. Obviously something was badly wrong with the whole batch of SFPs.
Fortunately my reader took a closer look at the data before they requested a wholesale replacement… and spotted an interesting pattern:
Chasing CRC Errors in a Data Center Fabric
One of my readers encountered an interesting problem when upgrading a data center fabric to 100 Gbps leaf-to-spine links:
- They installed new fiber cables and SFPs;
- Everything looked great… until someone started complaining about application performance problems.
- Nothing else has changed, so the culprit must have been the network upgrade.
- A closer look at monitoring data revealed CRC errors on every leaf switch. Obviously something was badly wrong with the whole batch of SFPs.
Fortunately my reader took a closer look at the data before they requested a wholesale replacement… and spotted an interesting pattern:
Anatomy of a Build-to-Suit Data Center
Enterprises seeking alternatives to one-size-fits-all data center solutions are increasingly considering building their own facilities for more flexibility and greater control over costs.Tigera to Support Amazon EKS-Distro
Today, we are excited to announce our commitment to support Calico and Calico Enterprise for the Amazon EKS-Distro, a Kubernetes distribution based on and used by Amazon EKS. EKS-D enables you to create reliable and secure Kubernetes clusters using the same versions of Kubernetes and its dependencies deployed by Amazon EKS.
We view EKS-D as further confirmation of the central role that Kubernetes plays in today’s IT infrastructure. We are excited to work with Amazon on this initiative to enable EKS-D users with the same robust enterprise networking and network security functionality that you rely on today to secure your EKS cluster deployments.
Tigera’s commitment to supporting EKS-D highlights our fundamental design principle of “choice”. Our customers can choose to use Calico and Calico Enterprise with their preferred Kubernetes distribution and use the same solution to operate seamlessly across different Kubernetes distributions, including multi-cloud multi-cluster and hybrid environments. Calico Enterprise, for example, allows you to manage multiple Kubernetes clusters to define, apply, and enforce consistent networking and security policy across all your clusters from a single master cluster. Adding EKS-D clusters, which use the same underlying versions of Kubernetes deployed by Amazon EKS, as an option for our customers Continue reading
Remotely Triggered Black Hole Filtering as Service
Remotely triggered black hole (RTBH) filtering is a technique that provides the ability to drop undesirable traffic before it enters a protected network. It is commonly used for the mitigation of distributed-denial-of-service (DDoS) and DoS attacks. We have covered a configuration of source and destination RTBH for Cisco IOS-XR in a previous tutorial. A trigger […]Continue reading...
Data Center Master Classes
I’m doing a series of three master classes through Juniper on various DC fabric topics—
Join Juniper’s Russ White, a widely published 30-year network engineering veteran, in a three-part masterclass exploring the data center. Choose from classes on data center fabric, physical topologies, or data center security.
From the schedule—
- Class 1: Data Center Fabric, December 2, 12 PM EST
- Class 2: Physical Topologies, January 13, 12 PM EST
- Class 3: Security in the Data Center, February 10, 12 PM EST
The EXPERIENCE HAS SHOWN THAT Keyword (RFC2915, Rule 4)
The world of information technology is filled, often to overflowing, with those who “know better.” For instance, I was recently reading an introduction to networking in a very popular orchestration system that began with the declaration that routing was hard, and therefore this system avoided routing. The document then went on to describe a system of moving packets around using multiple levels of Network Address Translation (NAT) and centrally configured policy-based routing (or filter-based forwarding) that was clearly simpler than the distributed protocols used to run large-scale networks. I thought, for a moment, of writing the author and pointing out the system in question had merely reinvented routing in a rather inefficient and probably broken way, but I relented. Why? Because I know RFC2915, rule 4, by heart:
Some things in life can never be fully appreciated nor understood unless experienced firsthand. Some things in networking can never be fully understood by someone who neither builds commercial networking equipment nor runs an operational network.
Ultimately, the people who built this system will likely not listen to me; rather, they are going to have to experience the pain caused by large-scale failures for themselves before they will listen. Many network Continue reading
NSX-T Data Center Migration Coordinator – Modular Migration
NSX-T 3.1
For a point release, VMware NSX-T 3.1 is packed with a bunch of major features. One of these is modular migration, which is making its debut with this release. Customers had asked for an automated way to migrate just firewall rules and groups; modular migration, a new feature of Migration Coordinator, addresses exactly that request.
What’s Migration Coordinator?
Taking a step back, Migration Coordinator is a tool that was introduced almost 18 months ago, with NSX-T 2.4, to enable customers to migrate from NSX for vSphere to NSX-T Data Center. It’s a free tool built into NSX-T Data Center that enables customers to migrate everything — from edges, to compute, to workloads — in an automated fashion and with a workflow that is similar to an in-place upgrade on existing hardware. This model of migration is called “in-place.” 
From a resource perspective, in-place migration only needs enough resources to host NSX-T manager appliances and edges along with enough capacity per cluster to be Continue reading
pygnmi 3. Usage of gNMI Capabilities.
Hello my friend,
Some time ago we’ve started sharing with you the details of pygnmi – our new open-source Python library created to simplify the management of the network elements with gNMI. The library is already almost fully operational and we want to start sharing the usage scenarios with you.
2
3
4
5
retrieval system, or transmitted in any form or by any
means, electronic, mechanical or photocopying, recording,
or otherwise, for commercial purposes without the
prior permission of the author.
Don’t you want to automate boring stuff?
Every job, especially network operation, has lots of routing tasks, which are boing and time consuming. Some of such tasks could be already automated in your company, but the vast majority is still waiting you. In our trainings:
- We explain the advantages and challenges of network automation in multivendor networks (leveraging network operating systems from Cisco, Nokia, Arista, Cumulus).
- We teach you how to reach quick wins in network automation to fuel your automation projects for a long run.
- We covers all the details of the automation protocols, data models and teach you how to apply it in real Continue reading
Fifty Shades of High Availability
A while ago we had an interesting exchange of ideas around inserting high-availability network appliance into a public cloud environment (TL&DR: it was really hard until AWS introduced Gateway Load Balancing), and someone quickly pointed out we’re solving the wrong challenge because…
Azure Firewall […] is a fully stateful firewall-as-a-service with built-in high-availability.
Somehow he wasn’t too happy when I pointed out that there’s more to high availability than vendor marketing ;)
Fifty Shades of High Availability
A while ago we had an interesting exchange of ideas around inserting high-availability network appliance into a public cloud environment (TL&DR: it was really hard until AWS introduced Gateway Load Balancing), and someone quickly pointed out we’re solving the wrong challenge because…
Azure Firewall […] is a fully stateful firewall-as-a-service with built-in high-availability.
Somehow he wasn’t too happy when I pointed out that there’s more to high availability than vendor marketing ;)