The end of the road for Server: cloudflare-nginx

The end of the road for Server: cloudflare-nginx

Six years ago when I joined Cloudflare the company had a capital F, about 20 employees, and a software stack that was mostly NGINX, PHP and PowerDNS (there was even a little Apache). Today, things are quite different.

The end of the road for Server: cloudflare-nginx CC BY-SA 2.0 image by Randy Merrill

The F got lowercased, there are now more than 500 people and the software stack has changed radically. PowerDNS is gone and has been replaced with our own DNS server, RRDNS, written in Go. The PHP code that used to handle the business logic of dealing with our customers’ HTTP requests is now Lua code, Apache is long gone and new technologies like Railgun, Warp, Argo and Tiered Cache have been added to our ‘edge’ stack.

And yet our servers still identify themselves in HTTP responses with 

Server: cloudflare-nginx

Of course, NGINX is still a part of our stack, but the code that handles HTTP requests goes well beyond the capabilities of NGINX alone. It’s also not hard to imagine a time where the role of NGINX diminishes further. We currently run four instances of NGINX on each edge machine (one for SSL, one for non-SSL, one for caching and one Continue reading

HP Networking/Comware NETCONF interface quick tutorial (using python’s ncclient and pyhpecw7)

So let’s learn about NETCONF, but first a bit of history and perspective. Everyone in networking business at least once heard about SNMP (Simple Network Management Protocol), which is the goto protocol for monitoring your network devices, and wondered how cool it would be if you could not only monitor your network with it, but actively configure it (sort of like “SDN wannabe”). But for that purpose the SNMP  was not really useful, it supported some write operations but they were so generic and incomplete that it was not really feasible. That is where NETCONF came around 2011 as a standard (it was here before but its RFC 6241 was ratified then) and changed the game in favor of configuring any device, while not restricting vendors from declaring their own NETCONF data structures to fit their features, but lets first check the protocol first before diving into the data structures.

NETCONF is a RCP (remote procedure call) based protocol, using XML formating as payload and YAML language as data modeling (the part that explains to you what XML to send to configure something).

LAB TOPOLOGY

Ok, lets get to the point, in our excercise I will be focused on the Continue reading

MANRS, Routing Security, and the Brazilian ISP Community

Last week, I presented MANRS to the IX.BR community. My presentation was part of a bigger theme – the launch of an ambitious program in Brazil to make the Internet safer.

While there are many threats to the Internet that must be mitigated, one common point and a challenge for many of them is that the efficacy of the approaches relies on collaboration between independent and sometimes competing parties. And, therefore, finding ways to incentivize and reward such collaboration is at the core of the solutions.

MANRS tries to do that by increasing the transparency of a network operator’s security posture and its commitment to a more secure and resilient Internet. Subsequently, the operator can leverage its increased security posture, signaling it to potential customers and thus differentiating from their competitors.

MANRS also helps build a community of security-minded operators with a common purpose – an important factor that improves accountability, facilitates better peering relationships, and improves coordination in preventing and mitigating incidents.

So, what does the Brazilian ISP community think about routing security and MANRS?

I ran an interactive poll with four questions to provide a more quantitative answer. More than 100 people participated, which makes the results Continue reading

First Speakers in the Spring 2018 Automation Online Course

For the first two sessions of the Building Network Automation Solutions online course I got awesome guest speakers, and it seems we’ll have another fantastic lineup in the Spring 2018 course:

Most network automation solutions focus on device configuration based on user request – service creation or change of data model describing the network. Another very important but often ignored aspect is automatic response to external events, and that’s what David Gee will describe in his presentation.

Read more ...

Configuring InterVLAN Routing- Router on Stick

Today I am going to talk about the configurational part of the Inter-VLAN scenario with the Router on stick which is used earlier in many of the enterprise LAN networks to have the inter-VLAN communication through the Router.

Most of the Routing and Switching experts already knew how to configure the Router on Stick configuration in order to have the inter-VLAN communications. Although now a days enterprises uses SVI instead if Router on stick as SVI is the better way to have the communication on the Core Switches.

Before i started with one of the scenario of the Inter-VLAN router on stick followed by the configuration part, I would like to tell you guys that we have our own youtube channel for various network videos that can further help you guys to study further. I will going to add many more videos soon on the channel, Please subscribe to the channel for the study network related videos.

Subscribe us on Youtube: http://y2u.be/0c4lMYVp9go

Thanks who already subscribed to our Youtube Channel. We will soon going to have so many videos on the networking basics, essentials and advance case studies in order to educate everybody in the networking space. Once again Continue reading

New Content: Debugging Ansible Playbooks and Jinja2 Templates

Here’s a quote from one of my friends who spent years working with Ansible playbooks:

Debugging Ansible is one of the most terrible experiences one can endure…

It’s not THAT bad, particularly if you have a good debugging toolbox. I described mine in the Debugging Ansible Playbooks part of the Ansible for Networking Engineers online course.

Please note that the Building Network Automation Solutions online course includes all material from the Ansible online course.

Cisco DNA Center Vs Arista Cloud Vision

Today I am going to talk about the Automation orchestration layer for Cisco and Arista which can push the policies around the network automatically and many other features to have the best customer experiences. The goal for Cisco and Arista are same to provide the automation in the Campus or enterprise networks.

Before I will start up with the Cloud Vision and Cisco DNA center, I would like to tell you guys that we have our own youtube channel for various network videos that can further help you guys to study further. I will going to add many more videos soon on the channel, Please subscribe to the channel for the study network related videos.

Subscribe us on Youtube: http://y2u.be/0c4lMYVp9go


Arista Networks- Cloud Vision
Lets talk about the Cloud Vision first. Cloud Vision is the part of Arista Networks showing the capabilities of the network automation.

CloudVision platform is a software suite of services that deliver further operational simplification of the Arista physical infrastructure 

Work ow monitoring and provisioning is controlled centrally with pre-integrated tool sets for provisioning, change management, network-wide upgrades & rollback, network monitoring, network virtualization, and visibility services. 

Fig 1.1- ARISTA Cloud-Vision

CloudVision actually Continue reading

Introduction to Arista Networks High End Switches : Arista 7500 E Switches

Today I am going to talk about one of the new vendor in the market named as Arista Networks who came up with the high end Switches. Although Arista Networks have many switches in their portfolio but specifically I am going to talk about the Arista 7500E switches.

Before I start with the Arista 7500E switch, I would like to tell you guys that we have our own youtube channel for various network videos that can further help you guys to study further. I will going to add many more videos soon on the channel, Please subscribe to the channel for the study network related videos.

Subscribe us on Youtube: http://y2u.be/0c4lMYVp9go

Arista 7500E come up with two different models. These switches are generally for the core switching as they have the high switching capacity. These models are Arista 7504E and Arista 7508E. Arista 7500E Series modular systems are high performance data center switches, available in a compact 7RU (4-slot) or 11RU (8-slot) they combine scalable L2 and L3 forwarding and traffic management with advanced features for network monitoring, precision timing, and network virtualization to deliver deterministic network performance for mission critical data centers, cloud computing, enterprise and HPC environments.

Arista Continue reading

Pre-Order My Computer Networking Problems & Solutions Book And Save 40%

I co-authored Computer Networking Problems And Solutions with Russ White. The nice folks at InformIT.com are accepting pre-orders of the book and ebook at 40% off until December 16, 2017. Go get yourself a copy of this short 832 page read via this link containing all of InformIT’s titles coming soon.

Or, if you use the book’s product page instead of the “coming soon” link above, use code PREORDER to get the discount.

All “coming soon” titles on sale at InformIT: http://informit.com/comingsoon

Product Page for Computer Networking Problems & Solutions: http://www.informit.com/store/computer-networking-problems-and-solutions-an-innovative-9781587145049

Pre-Order My Computer Networking Problems & Solutions Book And Save 40%

I co-authored Computer Networking Problems And Solutions with Russ White. The nice folks at InformIT.com are accepting pre-orders of the book and ebook at 40% off until December 16, 2017. Go get yourself a copy of this short 832 page read via this link containing all of InformIT’s titles coming soon.

Or, if you use the book’s product page instead of the “coming soon” link above, use code PREORDER to get the discount.

All “coming soon” titles on sale at InformIT: http://informit.com/comingsoon

Product Page for Computer Networking Problems & Solutions: http://www.informit.com/store/computer-networking-problems-and-solutions-an-innovative-9781587145049

Weekend Reads: The Relay Box Attack

West Midlands Police believe it is the first time the high-tech crime has been caught on camera. Relay boxes can receive signals through walls, doors and windows but not metal. The theft took just one minute and the Mercedes car, stolen from the Elmdon area of Solihull on 24 September, has not been recovered. @BBCWest Midlands Police believe it is the first time the high-tech crime has been caught on camera. Relay boxes can receive signals through walls, doors and windows but not metal. The theft took just one minute and the Mercedes car, stolen from the Elmdon area of Solihull on 24 September, has not been recovered. @BBC

There’s rising worry that corporations are taking over America. But after reviewing a slew of the bids by cities and states wooing Amazon’s massive second headquarters, I don’t think “takeover” quite captures what’s going on. More like “surrender.” Last month Amazon announced it got 238 offers for its new, proposed 50,000-employee HQ2. I set out to see what’s in them, but only about 30 have been released so far under public-record acts. @The Seattle Times

The Supreme Court will hear oral arguments in Carpenter v. United States on November Continue reading

No Slowdown in Sight for Kubernetes

Kubernetes has quickly become a key technology in the emerging containerized application environment since it was first announced by Google engineers just more than three years ago, catching hold as the primary container orchestration tool used by hyperscalers, HPC organizations and enterprises and overshadowing similar tools like Docker Swarm, Mesos and OpenStack.

Born from earlier internal Google projects Borg and Omega, the open-source Kubernetes has been embraced by top cloud providers and growing numbers of enterprises, and support is growing among datacenter infrastructure software vendors.

Red Hat has built out its OpenShift cloud application platform based on both …

No Slowdown in Sight for Kubernetes was written by Nicole Hemsoth at The Next Platform.

1 … 1,826 1,827 1,828 1,829 1,830 … 3,872