How to Manage a Home Network with Infrastructure as Code

Unifi Dream Machine home management device because, in addition to my personal and guest SSIDs, there is an apartment in my house for which I wanted to segment traffic. I also wanted to add an extra layer of security around some of the home automation and IoT devices that were being added to our home network with a fourth SSID. I started to configure the new network, I had started a spreadsheet of VLANs, subnet CIDRs and mappings of those to SSIDs. Additionally, I needed to track firewall rules, port forwards and other settings and configurations. Needless to say, this was a lot of information to maintain and manage. My day job is working on the Infrastructure-as Code (IaC) product

Next-generation endpoint security goes beyond the endpoint

AI and behavioral analysis are key to elevating the level of security for devices and back-end systems and are a prerequisite for IoT devices and services. Is your vendor moving in the right direction?

Next-generation endpoint security goes beyond the endpoint

AI and behavioral analysis are key to elevating the level of security for devices and back-end systems and are a prerequisite for IoT devices and services. Is your vendor moving in the right direction?

How Dell’s 5G Laptop Portfolio Delivers Seamless Connectivity from Anywhere

Huawei Cops to Video Surveillance Chip Backdoor

IPv6 Buzz 044: Building An IPv6 Lab

IPv6 Buzz 044: Building An IPv6 Lab

The best way to learn IPv6 is to get it into the lab and play with it. On today's IPv6 Buzz podcast, we share advice, learnings, and tips on building a lab and getting your hands dirty with this protocol.

The post IPv6 Buzz 044: Building An IPv6 Lab appeared first on Packet Pushers.

Sponsored Post: Fauna, Sisu, Educative, PA File Sight, Etleap, Triplebyte, Stream

Who's Hiring? 

• Sisu Data is looking for machine learning engineers who are eager to deliver their features end-to-end, from Jupyter notebook to production, and provide actionable insights to businesses based on their first-party, streaming, and structured relational data. Apply here.


• Triplebyte lets exceptional software engineers skip screening steps at hundreds of top tech companies like Apple, Dropbox, Mixpanel, and Instacart. Make your job search O(1), not O(n). Apply here.


• Need excellent people? Advertise your job here! 

Cool Products and Services

• Level up on in-demand technologies and prep for your interviews on Educative.io, featuring popular courses like the bestselling Grokking the System Design Interview. For the first time ever, you can now sign up for a subscription to get unlimited access to every course on the platform at a discounted price through the holiday period only. You'll also get to lock in this price as long as you're a subsciber. 


• Stateful JavaScript Apps. Effortlessly add state to your Javascript apps with FaunaDB. Generous free tier. Try now!


• PA File Sight - Actively protect servers from ransomware, audit file access to see who is deleting files, reading files or moving files, Continue reading

Our Favourite Picks from the KubeCon Europe 2020 Schedule

Last Wednesday, the CNCF released the KubeCon Europe 2020 schedule. There are so many talks at KubeCon it can be daunting even to decide what to go to see! Here are some talks by the team at Docker, and some others we think will be particularly interesting. Looking forward to seeing you in Amsterdam!

Simplify Your Cloud-Native Application Packaging and Deployments – Chris Crone

Chris is an engineer in our Paris office and is also co-executive director of the CNAB project. CNAB (Cloud Native Application Bundle) is a specification for bundling up cloud-native applications, which can consist of multiple containers, into a single object that can be pushed to a registry. Open source projects using CNAB, like Docker App or Porter allow you to package apps that would normally require multiple tools like Terraform, Helm, and shell to deploy, into a single tooling agnostic packaging format. These packages can then be shared using existing container registries and used with other CNAB compliant tools. This can really simplify cloud-native development.

Sharing is Caring! Push your Cloud Application to an OCI Registry – Silvin Lubecki & Djordje Lukic

Did you know that you can store anything into a container registry? Continue reading

How to Start Your Network Automation Journey

A journey of a thousand miles begins with one step they say… but what should that first step be if you want to start a network automation journey (and have no idea how to do it)?

Anne Baretta sent me a detailed description of his journey, which (as is often the case) started with the standardized configuration templates.

Intel drops work on one of its AI-chip lines in favor of an other

Well, that was short.Intel is ending work on its Nervana neural network processors (NNP) in favor of an artificial intelligence line it gained in the recent $2 billion acquisition of Habana Labs.[Get regularly scheduled insights by signing up for Network World newsletters.] Intel acquired Nervana in 2016 and issued its first NNP chip one year later. After the $408 million acquisition by Intel, Nervana co-founder Naveen Rao was placed in charge of the AI platforms group, which is part of Intel's data platforms group. The Nervana chips were meant to compete with Nvidia GPUs in the AI inference training space, and Facebook worked with Intel “in close collaboration, sharing its technical insights,” according to former Intel CEO Brian Krzanich.To read this article in full, please click here

Game changers at the branch: Wi-Fi 6, 4G, 5G plus SD-WAN

Combining 4G and 5G cellular services with SD-WAN can give enterprise IT pros connectivity options that are faster than wired alternatives such as MPLS and that provide benefits including rapid provisioning, improved reliability and more bandwidth for less money.Branch offices, which are undergoing dramatic changes in the amount of traffic they generate and where that traffic goes, can particularly benefit from 4G and 5G, and one enabler is software-defined WAN.To read this article in full, please click here

Game changers at the branch: Wi-Fi 6, 4G, 5G plus SD-WAN

Combining 4G and 5G cellular services with SD-WAN can give enterprise IT pros connectivity options that are faster than wired alternatives such as MPLS and that provide benefits including rapid provisioning, improved reliability and more bandwidth for less money.Branch offices, which are undergoing dramatic changes in the amount of traffic they generate and where that traffic goes, can particularly benefit from 4G and 5G, and one enabler is software-defined WAN.To read this article in full, please click here

CloudGenix Joins Cissdm’s SD-WAN Crew

The Killer Apps For FPGAs Could Be SmartNICs And Storage

If FPGAs are going to take off in the datacenter in their own right, they are going to need their own killer apps. …

The Killer Apps For FPGAs Could Be SmartNICs And Storage was written by Timothy Prickett Morgan at The Next Platform.

Daily Roundup: Cisco Patches Big Zero-Day Bug

NetBeez helps narrow down root causes of issues in virtual environments

Ryan Riffle is the network manager for an insurance firm with just under 2,000 employees. The company operates a primary data center, plus another for disaster recovery, to serve two major offices in the south-central US and smaller branches around the country. Three years ago, the company installed a software-defined network based on VMware NSX technology, and now more than 99% of the network operates in a virtual environment.The flexibility of the software-defined network provides a lot of benefits. Riffle says the company was able to improve its security posture with micro-segmentation for business applications at the virtual layer. (The company does not allow use of its name for the appearance of endorsing any product or vendor.) What’s more, there is no longer a need to have physical third-party appliances that had to be managed differently from the virtual server environment. They were able to remove physical devices, including a hardware firewall, routers and load balancers.To read this article in full, please click here

5G holds promise for enterprises, but what’s real?

5G technology can offer high bandwidth, low-latency wireless connections, but how available is it, and what types of service does it support?The acknowledged global leader in 5G tech is Huawei is caught in a political attack from the U.S. that calls for banning the use of its gear in U.S. service-provider networks. How will that affect rollouts?What are the characteristics of the frequency bands 5G can emplo,y and how can that affect the business applications it’s best suited for.In this video “Making the move to 5G” technology consultant Jack Gold addresses these questions and more.To read this article in full, please click here

Building an Isolated Kubernetes Cluster on AWS

In this post, I’m going to explore what’s required in order to build an isolated—or Internet-restricted—Kubernetes cluster on AWS with full AWS cloud provider integration. Here the term “isolated” means “no Internet access.” I initially was using the term “air-gapped,” but these aren’t technically air-gapped so I thought isolated (or Internet-restricted) may be a better descriptor. Either way, the intent of this post is to help guide readers through the process of setting up a Kubernetes cluster on AWS—with full AWS cloud provider integration—using systems that have no Internet access.

At a high-level, the process looks something like this:

1. Build preconfigured AMIs that you’ll use for the instances running Kubernetes.
2. Stand up your AWS infrastructure, including necessary VPC endpoints for AWS services.
3. Preload any additional container images, if needed.
4. Bootstrap your cluster using kubeadm.

It’s important to note that this guide does not replace my earlier post on setting up an AWS-integrated Kubernetes cluster on AWS (written for 1.15, but valid for 1.16 and 1.17). All the requirements in that post still apply here. If you haven’t read that post or aren’t familiar with the requirements for setting up a Kubernetes cluster with the AWS Continue reading

The Fourth Wave Of FPGA Compute

Ahead of The Next FPGA Platform event that we hosted recently in San Jose, we talked to Manoj Roge, vice president of product planning and business development at Achronix, about the three waves of FPGAs that have occurred over the past three decades, and in the course of our live conversation, we got a little more insight into the addressable market for FPGAs and also talked about the fourth wave, which is just starting now. …

The Fourth Wave Of FPGA Compute was written by Timothy Prickett Morgan at The Next Platform.