Cisco, Kyndryl step up partnership to cut enterprise security threats

Cisco and Kyndryl have expanded their partnership to offer new services that are aimed at helping enterprise customers better detect and respond to cyber threats.Specifically, Kyndryl will be integrating its own cyber resiliency offering with Cisco’s overarching Security Cloud platform that includes security components such as Cisco’s Duo access control, extended detection and response features, and Multicloud Defense, which orchestrates security and policy across private and public clouds.Security Cloud operates as a layer on top of the infrastructure across a customer’s cloud services – including Azure, AWS, GCP and private data-center clouds – to protect core applications, Cisco said. It features a unified dashboard, support for flexible trust policies, and open APIs to encourage third-party integrators. By correlating data and employing artificial intelligence and machine learning, Cisco Security Cloud can detect and remediate threats quickly throughout an organization, Cisco says.To read this article in full, please click here

Carriers vs. aggregators: How to select the optimal mix of network transport providers

Enabled by SD-WAN, internet-first networking strategies are now the order of the day for wide-area connectivity and have been for some time. While MPLS used to be the de facto choice for enterprise-grade network transport, companies today are using internet-based transport technologies such as dedicated internet access, business broadband, cellular broadband as well as other niche network technologies like microwave.Best practices call for companies to work with multiple suppliers to get competitive prices, maximize service coverage, and secure better service delivery performance. But which suppliers should an enterprise select? How do you figure out the best fit for an enterprise’s needs, and what are some of the challenges and gotchas of a multi-supplier portfolio approach?To read this article in full, please click here

Kubernetes Unpacked 033: Platform Engineering And The CNCF White Paper

In today's episode, Michael and Kristina catch up with Saim Safdar to chat about a recent white paper on platform engineering from the Cloud Native Computing Foundation (CNCF). Saim dives into not only the CNCF whitepaper, but how Platform Engineering should be thought about from a Kubernetes perspective in 2023 and beyond.

The post Kubernetes Unpacked 033: Platform Engineering And The CNCF White Paper appeared first on Packet Pushers.

Star your favorite websites in the dashboard

Star your favorite websites in the dashboard
Star your favorite websites in the dashboard

We’re excited to introduce starring, a new dashboard feature built to speed up your workflow. You can now “star” up to 10 of the websites and applications you have on Cloudflare for quicker access.

Star your websites or applications for more efficiency

We have heard from many of our users, particularly ones with tens to hundreds of websites and applications running on Cloudflare, about the need to “favorite” the ones they monitor or configure most often. For example, domains or subdomains that our users designate for development or staging may be accessed in the Cloudflare dashboard daily during a build, migration or a first-time configuration, but then rarely touched for months at a time; yet every time logging in, these users have had to go through multiple steps—searching and paging through results—to navigate to where they need to go. These users seek a more efficient workflow to get to their destination faster. Now, by starring your websites or applications, you can have easier access.

How to get started

Star a website or application

Today, you can star up to 10 items per account. Simply star a website or application you have added to Cloudflare from its Overview page. Once Continue reading

Ansible Community Day, Berlin 2023

 

The Ansible Community Day is a new initiative by the Ansible Community Team at Red Hat to connect with the people using, contributing to, and developing the Ansible project worldwide. This new event complements the Ansible Contributor Summit, to put the users of Ansible in all their shapes and forms front and center.

In the last Ansible Community Day in Boston, the day right before AnsibleFest 2023, the community had the opportunity to meet in-person and get to know each other, learn a few things and share their knowledge using Ansible. It was such a great experience that we couldn't wait to have another. And here it is!

 

Guten Tag Berlin!

After two very successful Ansible Community Day events this year, the first in Pune, India in February and the next in Boston in May, our third event for 2023 will be held in Berlin, Germany!

Registration for Ansible Community Day Berlin 2023 is now open! If you’d like to attend, please check out the following Eventbrite page for specific details and registration. 

The event is set for Wednesday, September 20, 2023.
We will meet in c-base (Rungestraße 20, Berlin, Germany)

What can you expect from (or Continue reading

OpenELA group pushes for bug compatibility with RHEL

A dramatic disagreement in the enterprise Linux community has some distributions scrambling to keep their code compatible with Red Hat, as the acknowledged biggest player in the space cracks down on source code distribution.The core issue is the existence of several “downstream” Linux distributions based on Red Hat Enterprise Linux. Those distributions were historically based on CentOS, a free RHEL clone developed originally for the purposes of testing and development. The downstream distributions in question, however, are supported by companies like CIQ and Oracle – which sell support services for their “clones” of RHEL. This has led to a long-running tension between those companies and Red Hat, whose supporters argue that the downstream companies are simply repackaging Red Hat’s work for profit, while detractors say that Red Hat is violating the sprit – if not, technically, the law – of open source.To read this article in full, please click here

OpenELA group pushes for bug compatibility with RHEL

A dramatic disagreement in the enterprise Linux community has some distributions scrambling to keep their code compatible with Red Hat, as the acknowledged biggest player in the space cracks down on source code distribution.The core issue is the existence of several “downstream” Linux distributions based on Red Hat Enterprise Linux. Those distributions were historically based on CentOS, a free RHEL clone developed originally for the purposes of testing and development. The downstream distributions in question, however, are supported by companies like CIQ and Oracle – which sell support services for their “clones” of RHEL. This has led to a long-running tension between those companies and Red Hat, whose supporters argue that the downstream companies are simply repackaging Red Hat’s work for profit, while detractors say that Red Hat is violating the sprit – if not, technically, the law – of open source.To read this article in full, please click here

BGP Labs: The Basics

The first BGP labs are online. They cover the basic stuff (one has to start with the basics, right?):

The labs are supposed to be run on virtual devices, but if you’re stubborn enough it’s possible to make them work with the physical gear. In theory, you could use any system you like to set up the virtual lab (including GNS3 and CML/VIRL), but your life will be way easier if you use netlab – it supports BGP on almost 20 different devices. For more details, read the Installation and Setup documentation.

BGP Labs: The Basics

The first BGP labs are online. They cover the basic stuff (one has to start with the basics, right?):

The labs are supposed to be run on virtual devices, but if you’re stubborn enough it’s possible to make them work with the physical gear. In theory, you could use any system you like to set up the virtual lab (including GNS3 and CML/VIRL), but your life will be way easier if you use netlab – it supports BGP on almost 20 different devices. For more details, read the Installation and Setup documentation.

Ansible Community Day, Berlin 2023

Ansible Community Day, Berlin 2023

Ansible community day logo 

The Ansible Community Day is a new initiative by the Ansible Community Team at Red Hat to connect with the people using, contributing to, and developing the Ansible project worldwide. This new event complements the Ansible Contributor Summit, to put the users of Ansible in all their shapes and forms front and center.

In the last Ansible Community Day in Boston, the day right before AnsibleFest 2023, the community had the opportunity to meet in-person and get to know each other, learn a few things and share their knowledge using Ansible. It was such a great experience that we couldn't wait to have another. And here it is!

Guten Tag Berlin!

After two very successful Ansible Community Day events this year, the first in Pune, India in February and the next in Boston in May, our third event for 2023 will be held in Berlin, Germany!

Registration for Ansible Community Day Berlin 2023 is now open! If you'd like to attend, please check out the following Eventbrite page for specific details and registration. 

The event is set for Wednesday, September 20, 2023. We will meet in c-base (Rungestraße 20, Berlin, Germany)

What can Continue reading

Introducing the 2023 Intern-ets!

Introducing the 2023 Intern-ets!
Introducing the 2023 Intern-ets!

This year, Cloudflare welcomed a class of approximately 40 interns, hailing from five different countries for an unforgettable summer. As we joined both remotely and in-person across Cloudflare’s global offices, our experiences spanned a variety of roles from engineering, product management to internal auditing and marketing. Through invaluable mentorship, continuous learning, and the chance to make a real-world impact, our summer was truly enriched at every step. Join us, Anni and Emilie, as we provide an insider's perspective on a summer at Cloudflare, sharing snippets and quotes from our intern cohort.

printf(“Hello Intern-ets!”)

You might have noticed that we have a new name for the interns: the Intern-ets! Our fresh intern nickname was born from a brainstorm between us and our recruiter, Judy. While “Cloudies”, “Cloudterns”, and “Flaries” made the shortlist, a company-wide vote crowned "Intern-ets" as the favorite. And just like that, we've made Cloudflare history!

git commit -m “Innovation!”

We're all incredibly proud to have gotten the opportunity to tackle interesting and highly impactful projects throughout the duration of our internships. To give you a glimpse of our summer, here are a few that showcase the breadth and depth of our experiences.

Mia M., Product Continue reading

BrandPost: What do music and multi-cloud networking (MCN) have in common?

By: Nav Chander, Head of Service Provider SD-WAN/SASE Product Marketing at HPE Aruba Networking.In this first of a three-part blog series on SD-WAN, SSE, and multi-cloud networking (MCN), where we will highlight how these three technology areas are analogous to three different musical instruments that can be played separately. However, when these three technologies are “synchronized,” much like a musical ensemble of the three instruments blends the music to create a perfect harmony and an enjoyable listening experience.To read this article in full, please click here

Versa enhances SASE package with AI-based security tools

Versa is bolstering the AI security management features of its integrated Secure Access Service Edge (SASE) package to include improved malware detection for Advanced Threat Protection, network microsegmention and generative AI protection to help customers better detect and quickly mitigate threats to their networked service and applications.The vendor supports AI in its integrated Versa SASE package that includes SD WAN, a next-generation and web application firewall, intrusion prevention, zero trust support and data loss prevention.To read this article in full, please click here

Versa enhances SASE package with AI-based security tools

Versa is bolstering the AI security management features of its integrated Secure Access Service Edge (SASE) package to include improved malware detection for Advanced Threat Protection, network microsegmention and generative AI protection to help customers better detect and quickly mitigate threats to their networked service and applications.The vendor supports AI in its integrated Versa SASE package that includes SD WAN, a next-generation and web application firewall, intrusion prevention, zero trust support and data loss prevention.To read this article in full, please click here

Generating Network Diagrams from Netbox with Pynetbox

Here’s my typical disclaimer: I’m not a developer. I have the ability to make code give me an expected output, but I do not do anything “the right way.”

All the code I write for these blog posts is in my Github repo that you can and should freely copy and modify. Here’s the environment I’m running this stuff in. Python. Pynetbox. You know the drill by now.

Python         :  3.9.10
Pynetbox       :  7.0.0
Netbox version :  3.5.8

We’ve been working through some stuff, and, at this point, we have a lot of stuff in our Netbox instance. Let’s step up the game a little, though, and see if we can’t generate a network diagram based on that data. Let’s set some expectations, though. This is not going to be comparable to that Visio diagram you’ve managed by hand for the last 8 years. This is going to be a very simple diagram with subnet, nodes, and IP addresses — enough for an auditor or for some architect who doesn’t know what’s in their own data centers.

The logic is pretty easy. The first thing we do it query for all our prefixes. Continue reading

Generating Network Diagrams from Netbox with Pynetbox

Here’s my typical disclaimer: I’m not a developer. I have the ability to make code give me an expected output, but I do not do anything “the right way.”

All the code I write for these blog posts is in my Github repo that you can and should freely copy and modify. Here’s the environment I’m running this stuff in. Python. Pynetbox. You know the drill by now.

Python         :  3.9.10
Pynetbox       :  7.0.0
Netbox version :  3.5.8

We’ve been working through some stuff, and, at this point, we have a lot of stuff in our Netbox instance. Let’s step up the game a little, though, and see if we can’t generate a network diagram based on that data. Let’s set some expectations, though. This is not going to be comparable to that Visio diagram you’ve managed by hand for the last 8 years. This is going to be a very simple diagram with subnet, nodes, and IP addresses — enough for an auditor or for some architect who doesn’t know what’s in their own data centers.

The logic is pretty easy. The first thing we do it query for all our prefixes. Continue reading

New report: The state of Calico Open Source 2023

We are excited to announce the publication of our 2023 State of Calico Open Source, Usage & Adoption report! The report compiles survey results from more than 1,200 Calico Open Source users from around the world, who are actively using Calico in their container and Kubernetes environments. It sheds light on how they are using Calico across various environments, while also highlighting different aspects of Calico’s adoption in terms of platforms, data planes, and policies.

Report highlights

The report shows that Calico continues to be a pivotal part of the container and Kubernetes ecosystem, finding large-scale adoption across major Kubernetes platforms.

  • Calico Open Source is mainly used for Kubernetes networking and security
    • 63% are using Calico as a security policy engine on top of an existing CNI
  • The top 3 Calico capabilities driving user adoption are its scalable networking, security policies and interoperability across different environments
  • Calico users are using a combination of data planes including eBPF, standard Linux and Windows
    • 16% of respondents use Calico’s newer eBPF data plane
  • Calico policy creation and deployment is driven by the need for workload access control and secure egress access
    • 85% of users need to achieve network segmentation and protect east-west traffic

Continue reading