Sometimes a user with performance issues will proudly present me with a traceroute and point to a particular hop in the network and accuse it of being the problem because of high latency on the link. About 1 time in 1000 they are correct and the link is totally saturated. The other 999 times, well, let me explain.
Here’s a typical traceroute I might be sent by a user (IPs and hostnames are altered to protect the innocent):
$ traceroute www-europe traceroute to www-europe (18.9.4.17), 64 hops max, 52 byte packets 1 gateway (57.239.196.133) 11.447 ms 18.371ms 25.057 ms 2 us-atl-edge (137.16.151.202) 13.338 ms 20.070 ms 19.119 ms 3 us-ga-core (57.239.129.37) 103.789 ms 105.998 ms 103.696 ms 4 us-nyc-core (57.239.128.189) 107.601 ms 103.116 ms 103.934 ms 5 us-east-core (57.239.13.42) 103.099 ms 104.215 ms 109.042 ms 6 us-east-bb1 (57.239.111.58) 107.824 ms 104.463 ms 103.482 ms 7 uk-south-bb1 (57.240.117.81) 106.439 ms 111.156 ms 104.761 ms Continue reading
This blog post is written by a systems person who has always dodged networking ... until now. I gave Ansible networking modules a try with a vyos Vagrant image. This blog describes how I fumbled through the process of writing my first Ansible playbook to successfully gather facts from a running vyos virtual machine.
First things first, I need a network thingy to run commands on. I don’t have a physical networking thingy so let’s go searching for a virtual one. After some googling for a Cisco IOS virtual machine I found and started to download an ISO. While that was going on I pinged my co-worker Ben on Slack. Ben’s a networking guy within Ansible. I asked him what virtual device he uses. He pointed me at a vyos Vagrant image. So I canceled the Cisco IOS ISO download and ran the needed vagrant commands.
vagrant init higebu/vyos
vagrant up
Ok, that did something but what did it do? Let me try the old vagrant ssh. Nope, that didn’t work. Oh, I got another message from Ben on slack. He mentions I’m going to need a plugin to make this work smoothly with Vagrant and to run:
vagrant plugin install Continue readingHey, it's HighScalability time:
LiDAR sees an enchanted world. (Luminar)
If you like this sort of Stuff then please support me on Patreon.
I’ve been asked a few times in the past year if I missed being behind a CLI screen or I ever got a hankering to configure some networking gear. The answer is a guarded “yes”, but not for the reason that you think.
CCIEs are keyboard jockeys. Well, the R&S folks are for sure. Every exam has quirks, but the R&S folks have quirky QWERTY keyboard madness. We spend a lot of time not just learning commands but learning how to input them quickly without typos. So we spend a lot of time with keys and a lot less time with the mouse poking around in a GUI.
However, the trend in networking has been to move away from these kinds of input methods. Take the new Aruba 8400, for instance. The ArubaOS-CX platform that runs it seems to have been built to require the least amount of keyboard input possible. The whole system runs with an API backend and presents a GUI that is a series of API calls. There is a CLI, but anything that you can do there can easily be replicated elsewhere by some other function.
Why would a company do this? To Continue reading
P4 Runtime overcomes SDN shortfall of a programmable forwarding plane.
The security platform is designed to be compatible with SD-WAN.
Looking to host your website, application, or API in the cloud, or migrate to a new cloud provider while keeping your data secure? In this webinar, Trey Guinn, Head of Solutions Engineering at Cloudflare, will discuss how companies should approach security, during and after migration. We'll highlight the migration story of LUSH, one of the largest global e-Commerce cosmetic retailers, and how they took the right steps to migrate from their previous cloud provider to Google Cloud Platform, in less than 3 weeks. Trey will be performing a live demo on setting up Cloudflare load balancing across cloud providers, as well as
Asad Baheri
Security & Networking Partner Manager
Google Cloud Platform
Trey Guinn
Head of Solutions Engineering
Cloudflare
Asad Baheri
Today we're going to talk about LUSH's migration to Google Cloud and how Cloudflare, one of our top security and performance partners, can help you with your own cloud migration. Throughout our presentation, we'll be talking about security best practices, how CDNs and the CDN Interconnect program works, and we're also going to also give you a demo of Cloudflare's load balancing to start your migration.
One of Continue reading
The Deploy360 team is back from ION Malta, which took place on 18 September alongside an ICANN DNSSEC Training Workshop. We again thank our sponsor Afilias for making this possible, and are now working toward our final ION Conference of the year, ION Belgrade in November. All the presentations from ION Malta are available online.
I opened the event with an introduction to Deploy360 and an invitation for everyone to get involved with the Internet Society’s 25th anniversary the next day. We also heard from Jasper Schellekens, the president of the ISOC Malta Chapter about their activities and how to get more involved. They have a small but mighty presence in Malta and are looking forward to getting more members and increasing their activity.
Next, Nathalie Trenaman from RIPE NCC gave a fascinating presentation on the status of IPv6 in Malta. Unfortunately, IPv6 penetration in Malta is extremely low, but ISPs are transferring IPv4 address space around and, interestingly, have purchased over 30,000 IPv4 addresses from Romania. She encouraged ISPs to begin moving to IPv6 now, as RIPE NCC estimates that full transition takes about 2.5 years to complete.
Next up, Klaus Nieminen from the Finnish Communications Continue reading
IT pros cite pros and cons of two products that shield the network against DDoS attacks.
IT pros cite pros and cons of two products that shield the network against DDoS attacks.
 |
| Fig 1.1- Riverbed Steelhead deployment in WAN |
In June 2017, we concluded the Building Next Generation Data Center online course with a roundtable discussion with Andrew Lerner, Research Vice President, Networking, and Simon Richard, Research Director, Data Center Networking @ Gartner.
In the second half of our discussion (first half is here) we focused on these topics:
Read more ...The post IPv10 – a Joke or a Serious RFC Draft? appeared first on Noction.
Last week I published a statement about Internet blocking measures in Catalonia, Spain.
The situation in Catalonia is delicate and politically sensitive. Understandably, my statement prompted some strong reactions from the Internet community.
In light of this, we feel it is important to clarify what we set out to do in the statement.
The statement was not drafted as a comment on the current political debate and it was not intended to be read in this way. There are many other stakeholders who are much better positioned than the Internet Society to deal with and comment on these political aspects.
Rather, we wanted to highlight the potential consequences for the Internet that stem from the court order requiring .CAT to monitor content and use the DNS (domain name system) to block that content. In this instance, the content in question related to the 1st October referendum.
We firmly believe that intermediaries (in this case the top-level domain (TLD) operator, but it could be any other intermediary such as an Internet Service Provider (ISP)) should not be put in the position of having to decide what content is legal and what is not. Simply put, this is not the role of Continue reading
We’ve all seen the VMware PKS announcement at VMworld 2017, and we are all excited about it. The idea of provisioning Kubernetes clusters in an easy way, with day-2 operations, inside your datacenters, has been a request from most of the VMware customers who are starting their journeys into the brave new cloud-native world. As... Read more →
We’ve all seen the VMware PKS announcement at VMworld 2017, and we are all excited about it. The idea of provisioning Kubernetes clusters in an easy way, with day-2 operations, inside your datacenters, has been a request from most of the VMware customers who are starting their journeys into the brave new cloud-native world. As we saw also from the announcement, PKS is currently under development by VMware, Google and Pivotal and is targeted for GA Q4 this year.
Until then, what if we have a solution today that you can start piloting right away without waiting? And what if it is based on the VMware solutions that you’ve grown to use and love. Better yet, what if we can add to that mix a solid networking and security capabilities to run your Kubernetes clusters in a self-service and IT governance to maintain your existing operational models?
Figure 1: Solution Overview
I’ve just started a new blog series that I named “Kubernetes in the Enterprise” which answers all those questions in a form of an enterprise-grade solution. This solution is very grounded to the real-world and business challenges, and driven by many discussions that I have been having with my Continue reading