Please Help Me Follow Your Content

Finding good content in the swamp of AI slop is hard, and whenever I find a blog post worth reading, I’d like to know when the author publishes the next one.

For stupid reasons (like a day having only 24 hours, and me having a life), I can’t periodically scan all websites I find interesting, but fortunately, I don’t have to. Two well-known mechanisms work reliably: email updates and RSS feeds.

Meet Mylo: An AI-native way to work with Calico

A library of Calico tools and skills — delivered through the Calico MCP Server

What if your hardest network question took ten minutes instead of ten days?

Anyone who has operated Kubernetes networking at scale knows the shape of a bad day. A request that should succeed is quietly failing. The application team swears nothing changed. Somewhere across a stack of tiers, selectors, and policies, some written last week and some inherited from an engineer who left two years ago, a rule is denying the traffic. Finding it means reading YAML, cross-referencing flow logs, and reconstructing the policy evaluation order in your head. For a genuinely knotty case, that work can stretch across days and pull in more than one team before anyone gets to the bottom of it.

I think that day is about to get a lot shorter. Today we’re introducing Mylo, an expert for Calico that works inside the AI tools your teams already use. Ask Mylo why a pod can’t reach a service, and it traces the path, points to the exact policy and rule doing the blocking, and explains why in plain language, in about the time it took you to read this paragraph. Mylo Continue reading

N4N063: Link Layer Discovery Protocol

Ethan and Holly tackle the Link Layer Discovery Protocol (LLDP). They explain how this protocol helps network engineers map network topologies and validate wiring. They also discuss how LLDP devices use frames to send information, mandatory and optional type length values (TLVs), and why security on edge ports remains critical. Episode Links: Watch this episode... Read more »

BGP-Free Core with SR-MPLS

The beauty of SR-MPLS is that it’s a drop-in replacement for the traditional (LDP- or RSVP-based) MPLS control plane. For example, you could replace LDP with SR-MPLS in a network using MPLS to implement a BGP-free transport core, and it just keeps working.

This scenario was the first “fun” scenario in the ITNOG10 Segment Routing workshop. The core network uses the same topology as in the previous examples; I added two hosts and BGP routing.

Simplest possible network using a BGP-free core

Simplest possible network using a BGP-free core

TCG083: Superintelligence for Everyone: Who Actually Holds the Power?

Mark Zuckerberg argues that broadly distributed personal AI, or a “superintelligence” in his parlance, can increase prosperity and counter the risks of AI being controlled by a handful of government and corporate entities. Drew Conry-Murray joins Eyvonne and William to engage in a lively roundtable where they examine whether distributing access meaningfully distributes power when... Read more »

NAN130: Network Automation Forum: From Simple Survey to Global Community

Eric Chou welcomes guest co-host William Collins as well as Network Automation Forum founders Scott Robohn and Chris Grundemann to discuss how their community emerged from a simple question: Why haven’t we seen full adoption of network automation? They discuss the growth of AutoCon and how its practitioner-focused, vendor-neutral approach has fostered a unique environment... Read more »

Networking Aspects of Running VMs in Containers

The vrnetlab project and its containerlab fork implement a wonderful idea: let’s package virtual machines (primarily network devices that cannot be containerized) as containers to use reliable orchestration tools like containerlab to provision network topologies.

That approach might have a few drawbacks (depending on how the container images are built), but the obvious elephant in the room is: how do you make the virtual network plumbing work?

HS141: EA vs AI

What does Enterprise Architecture (EA) mean when AI is everywhere in the stack? Enterprise Architecture is about nailing down relationships and functions while AI pushes back with dynamic processes and probabilistic results. Join Johna and John as they discuss the possibilities for EA: does it prevail, adapt, or die? Episode Links: Watch this episode on... Read more »

PP124: How Coruna, DarkSword, and Other Exploits Slice Up Apple iPhones

Coruna and DarkSword are exploit frameworks that have successfully targeted Apple iPhones to steal cryptocurrency and harvest data including messages, email, location data, and browsing history. On today’s show we trace the provenance of these exploits (Coruna was originally developed by a contractor for the US government), their rapid evolution in the cyber underworld, and... Read more »

Aching for Engagement

I’ve noticed something in the last few weeks that might drive me crazy. I’m sure you noticed it too. There are people talking about things and they’re ready to join your community. Just click on this notification to learn more!

Paying Attention

Earlier this year I talked about how everything seems to be geared to disrupt our attention. At that time, I thought it would get better by just ignoring the notifications and removing them from my devices to reduce it to the minimum. I think the providers read my post because they found even more ways to get to me. I think they have it out for me.

Attention is a resource like money or oil or the amount of hydrogen atoms in the sun. It has a finite limit and we only have so much to work with. Every disruption causes us to switch contexts and try to manage it. As I mentioned, I went about removing as much of that distraction as I could. Because having my focus be on a task and not on a cute popup banner is important for work and the other things that I do.

Thankfully, the social media apps found a Continue reading

SONiC Deep Dive: BGP Peer Configuration – BGP Unnumbered

 

After enabling IPv6 on the Ethernet0 interface, we can configure BGP peering. Instead of statically defining a peer IP address and AS number, the BGP neighbor is defined at the interface level. This tells BGP to expect a neighbor and initialize the BGP peering over Ethernet0. Because our intent is to transport IPv4 traffic over the IPv6 network, we activate both the IPv4 and IPv6 address families. We also configure the peer as an external BGP (eBGP) neighbor by using a command remote-as external. This tells BGP that the peer must use an AS number different from the local AS number.

Because the network uses IPv6 as the transport for IPv4 traffic, IPv4 Network Layer Reachability Information (NLRI) exchanged through BGP use IPv6 next-hop addresses. BGP therefore needs the Extended Next Hop Encoding capability to support IPv4 routes with IPv6 next hops. In this configuration, the capability is explicitly enabled with the capability extended-nexthop command.

In FRRouting, the v6only option controls which IP version is used for interface-based BGP Unnumbered peering. Without v6only, FRR uses the interface's IPv6 link-local address for peering only when no suitable IPv4 address is configured on the interface. With v6only, FRR skips Continue reading

MUST READ: Git – Going Pro

I sure wish Tony Mattke had started publishing his Git-related blog posts in 2017 when I was still struggling with the basics. In his latest Going Pro article he covers:

  • Using SSH keys with Git and GitHub
  • Pre-commit hooks
  • GitHub Actions and linting
  • GitHub Branch protection
  • PR reviews
  • gh CLI

Absolutely worth every second you’ll spend reading the article!

NB589: OpenAI Makes Cyber Mess, Wants World to Clean It Up; Cisco Strategizes Infrastructure Identity

Take a Network Break! We start with listener followup about how Device Bound Session Credentials could thwart session cookie theft, and then highlight a string of critical vulnerabilities in IBM’s AIX. On the news front, Nvidia has reportedly bought Hugging Face for $12.9 billion, Nvidia and AWS team up on GPUs and physical AI, and... Read more »