As I’m doing occasional consulting for large enterprises redesigning their data centers, I encounter a wide range of network automation readiness, from “we don’t need that” to “how could we automate as much as possible”.
Based on the pervasiveness of “we don’t need that” responses it looks like many enterprise network engineers still have to go through the five stages of automation grief.
Read more ...After my initial post about obfs4 on how to hide any TCP traffic and an example for hiding SSH traffic, it’s now time to do so for OpenVPN.
For this, I have written a Bash script to do the job. It’s called obfs4proxy-openvpn and is freely available under MIT license.
The main goal of the script is to provide obfs4 transport to OpenVPN. This is also the main interest of this article.
This transport requires out-of-band CERT exchange between client and server and because of that, can provide some advanced functionalities which are missing in older transports.
obfs3 transport is supported but should generally be avoided in favor of obfs4.
obfs2, the oldest transport is supported as well (mainly because its supported by obfs4proxy). You really shouldn’t use it…
Before going into detail, its good to have a basic idea on how different parts of the script work together to provide obfs4 functionality to Continue reading
Who controls containers: developers, or operations teams? While this might seem like something of an academic discussion, the question has very serious implications for the future of IT in any organization. IT infrastructure is not made up of islands; each component interacts with, and depends on, others. Tying all components of all infrastructures together is the network.
If operations teams control containers, they can carefully review the impact that the creation of those containers will have on all the rest of an organization’s infrastructure. They can carefully plan for the consequences of new workloads, assign and/or reserve resources, map out lifecycle, and plan for the retirement of the workload, including the return of those resources.
If developers control containers, they don’t have the training to see how one small piece fits into the wider puzzle, and almost certainly don’t have the administrative access to all the other pieces of the puzzle to gain that insight. Given the above, it might seem like a no-brainer to let operations teams control containers, yet in most organizations deploying containers, developers are responsible for the creation and destruction of containers, which they do as they see fit.
This is not as irrational as it Continue reading
In the previous post I’ve demonstrated how to build virtual network topologies on top of Kubernetes with the help of meshnet-cni plugin. As an example, I’ve shown topologies with 50 cEOS instances and 250 Quagga nodes. In both of these examples virtual network devices were running natively inside Docker containers, meaning they were running as (a set of) processes directly attached to the TCP/IP stack of the network namespace provided by the k8s pod. This works well for the native docker images, however, the overwhelming majority of virtual network devices are still being released as VMs. In addition to that, some of them require more than one VM and some special bootstrapping before they can they can be used for the first time. This means that in order to perform true multi-vendor network simulations, we need to find a way to run VMs inside containers, which, despite the seeming absurdity, is quite a common thing to do.
Kubevirt is a very popular project that provides the ability to run VMs inside k8s. It uses the power of Custom Resource Definitions to extend the native k8s API to allow the definition of VM parameters (libvirt domainxml) same Continue reading
The project is now working on a six-week release cycle cadence that will allow for smaller and more frequent updates.
The deal will use IBM Watson’s cognitive capabilities to help with the operation of Juniper’s cloud and data center environments.
This is CEO Matt Carter’s first big leadership shakeup since taking over as head of Aryaka in September of last year.
Today's Datanauts explores three different topics in one show: we dive into AWS Outposts with Ned Bellavance, NVMe fabrics with Howard Marks, and parallel NFS with Chris Wahl. It's a triple play episode!
The post Datanauts 156: AWS Outposts, Choosing An NVMe Fabric, Parallel NFS Cautions appeared first on Packet Pushers.
I have been frequently asked when the OpenMP and OpenACC directive APIs for parallel programming will merge, or when will one of them (usually OpenMP) will replace the other. …
Burying The OpenMP Versus OpenACC Hatchet was written by Timothy Prickett Morgan at .
The Cybeats IoT Radar app provides internal defense, monitoring, and lifecycle management directly to IoT devices.
The investment comes on the heels of Veeam competitor Rubrik closing a $261 million funding round at a $3.3 billion valuation. And it’s yet another signal that the data management sector is hot.
Join the Mobile for Humanitarian Innovation at MWC19 for an exciting line-up of sessions profiling innovative digital humanitarian services, such as The Future of Digital Humanitarian Response: Partnership & Innovation.
VMware CEO Patrick Gelsinger told attendees at a recent investor conference that the company was “seeing [a] good uptick” in adoption of PKS.
With its entry into the private data center ecosystem, it now makes sense for AWS to help customers place their workloads where it's more cost effective.
When you launch your domain to the world, you rely on the Domain Name System (DNS) to direct your users to the address for your site. However, DNS cannot guarantee that your visitors reach your content because DNS, in its basic form, lacks authentication. If someone was able to poison the DNS responses for your site, they could hijack your visitors' requests.
The Domain Name System Security Extensions (DNSSEC) can help prevent that type of attack by adding a chain of trust to DNS queries. When you enable DNSSEC for your site, you can ensure that the DNS response your users receive is the authentic address of your site.
We launched support for DNSSEC in 2014. We made it free for all users, but we couldn’t make it easy to set up. Turning on DNSSEC for a domain was still a multistep, manual process. With the launch of Cloudflare Registrar, we can finish the work to make it simple to enable for your domain.
You can now enable DNSSEC with a single click if your domain is registered with Cloudflare Registrar. Visit the DNS tab in the Cloudflare dashboard, click "Enable DNSSEC", and we'll handle the rest. If you are Continue reading
The GSA has identified 45 countries that are planning 5G spectrum auctions or have already allocated spectrum for the new services.
Outro Music:
Danger Storm Kevin MacLeod (incompetech.com)
Licensed under Creative Commons: By Attribution 3.0 License
http://creativecommons.org/licenses/by/3.0/
The post History Of Networking – WHOIS – Mark Kosters appeared first on Network Collective.
One of Germany’s foremost scientific research centers, Jülich Forschungszentrum, will receive a €36-million infusion of government funding to advance quantum and neuromorphic computing technologies. …
Germany Makes Massive Quantum, Neuromorphic Investment was written by Michael Feldman at .