How to use Cloudflare for Service Discovery

Cloudflare runs 3,588 containers, making up 1,264 apps and services that all need to be able to find and discover each other in order to communicate -- a problem solved with service discovery.

You can use Cloudflare for service discovery. By deploying microservices behind Cloudflare, microservices’ origins are masked, secured from DDoS and L7 exploits and authenticated, and service discovery is natively built in. Cloudflare is also cloud platform agnostic, which means that if you have distributed infrastructure deployed across cloud platforms, you still get a holistic view of your services and the ability to manage your security and authentication policies in one place, independent of where services are actually deployed.

How it works

Service locations and metadata are stored in a distributed KV store deployed in all 100+ Cloudflare edge locations (the service registry).

Services register themselves to the service registry when they start up and deregister themselves when they spin down via a POST to Cloudflare’s API. Services provide data in the form of a DNS record, either by giving Cloudflare the address of the service in an A (IPv4) or AAAA (IPv6) record, or by providing more metadata like transport protocol and port in an SRV record.

Continue reading

Configuring Private VLANs on Juniper Switches

Thanks for the huge support on all my previous articles. Today I am going to talk about the Private VLANs configuration on the Juniper Switches. Earlier I wrote a article where i talk about the basics of the Private VLANs and the vendors supported to Private VLANs. If you want to have a look on that article, please go through the below mentioned link for the Private VLANs

Basics of Private VLANs

I am sure after reading the above article you will come to know about the basics of the Private VLANs. In this article I am going to cover the Configurational part of the Private VLANs on Juniper Switches, as it is demanded by some of the candidates on the blogs.

I will soon come up the configuration and the topology for the Private VLANs on Cisco and Huawei as well in another article.

A lot of people asking me about the VLANs, before starting with the configuration of the Private VLANs, let me quickly go through the VLANs and Private VLANs.

VLANs : Virtual Local Area Networks
VLANs is the way to partition the various Layer 2 network with in one Local Area Network which simply means that Continue reading

Cisco N1000v Switches

A cisco vswitch that can be used instead of the default VMware DvS to have a similar environment to that of Cisco physical NXOS switches. The control and packet communication can either be carried over VLANs in Layer2 mode or IP addresses in Layer3 mode. The default and Cisco recommended solution is L3 mode.

VMware vSphere vSwitches

Local and Distributed vSwitches server the same purpose as physical switches allowing for VM vNICs to be assigned to specific VLANs. In a production environment it is usual to define a local vSwitch on each ESX host for management and backdoor and have distributed vSwitches shared between hosts for VMs.

BIRD ROUTE SERVER INSTALL | BGP PEER WITH JUNIPER MX

I was recently faced with a challenge whereby I needed to inject 30,000 BGP routes into a test environment for a DOCSIS 3.1 POC. Typically I would use IXIA to form the BGP session and inject the routes. However, all of our IXIA testers were in use thus I needed a quick alternative.

I was already aware of BIRD and it’s use as a route server in a number of IXP environments so figured it would be a good fit. The following steps detail how to install BIRD on Ubuntu and how to instantiate a BGP session with a Juniper MX router.

For more info on BIRD check here

BIRD-BGP.png

For this install I’m using a VM running Ubuntu server 12.04LTS:

lab@ubuntu-server1:~$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description:    Ubuntu 12.04.3 LTS
Release:        12.04
Codename:       precise

First up we need to enable Linux to support IPv4 forwarding. Two options here; we can either use the sysctl net.ipv4.ip_forward=1 command, although this setting will reset when the server is rebooted. Alternatively we can modify /etc/sysctl.conf to make the change permanent. Edit /etc/sysctl.conf and Continue reading

Worth Reading: Silicon Valley’s Overstuffed Unicorns

Here’s what’s happening: Young tech companies have been backed by unprecedented sums of investment money in the last three or four years. Those startup financiers in turn have collected record amounts of money from their own investors to buy pieces of future tech startups. All this money is going into the startup system, but it’s not coming out the other end. —Bloomberg

The post Worth Reading: Silicon Valley’s Overstuffed Unicorns appeared first on rule 11 reader.

Risk Management in Submarine Cable Systems

Risk Management in Submarine Cable System   Submarine networks carry over 99% of the world’s Intercontinental electronic communications traffic. There is misconception that Satellites carry data from continent to continent. If we ask anyone in the world, 95% of people give answer as satellites carry international traffic. This is absolutely wrong.   The Internet, International […]

The post Risk Management in Submarine Cable Systems appeared first on Cisco Network Design and Architecture | CCDE Bootcamp | orhanergun.net.

Best Practices for RHV 4

Hi folks, one of the many things that I’ve been working on behind the scenes has finally seen the light of day: Best Practices for Red Hat Virtualization 4. This takes over where the product documentation leaves off.What I mean by that is this:

The product documentation is (mostly) great about telling you “how” to do the many activities related to deploying Red Hat Virtualization.

This new document tells you “why” to do many of the activities related to deploying Red Hat Virtualization. It does NOT have code examples, but it DOES have lots of things to consider. Things like:

  • “Standard” deployment or “Hosted Engine” deployment
  • RHEL host or RHV host
  • NAS or SAN
  • Lager or Ale (just kidding)

In other words, when you go to plan out your deployment, this is the document that you want to read before you paint yourself into a corner. Many of the items are best practices, like “don’t turn off SELinux”. Others are more considerations and implications, like “NAS or SAN”.

If this is something you’re interested in, you can download it here:

Best Practices for Red Hat Virtualization 4

Hope this helps,

Captain KVM

 

The post Best Practices for RHV Continue reading

Top storage certifications for IT pros

Skilled storage pros are in demand as enterprise IT teams take on exponential data growth and strategically migrate data assets from legacy systems to more modern options.For these professionals who are looking for a new job or aiming to advance in their current role, a certification could potentially differentiate them from other one candidates. And for hiring managers, certifications can help trim some of the risk from the recruitment process by validating to some extent expertise in areas such as network-attached storage, storage area networks, and storage configuration and operations management.Vendor neutral vs. vendor specificTo read this article in full or to leave a comment, please click here

Top storage certifications for IT pros

Skilled storage pros are in demand as enterprise IT teams take on exponential data growth and strategically migrate data assets from legacy systems to more modern options.For these professionals who are looking for a new job or aiming to advance in their current role, a certification could potentially differentiate them from other one candidates. And for hiring managers, certifications can help trim some of the risk from the recruitment process by validating to some extent expertise in areas such as network-attached storage, storage area networks, and storage configuration and operations management.Vendor neutral vs. vendor specificTo read this article in full or to leave a comment, please click here

Bluetooth Mesh networks: Is a standards body right for IoT innovation?

Earlier this week, the Bluetooth Special Interest Group (SIG) announced the Bluetooth Low Energy (BLE) standards have been extended to include mesh network features. It is clear that the Internet of Things (IoT) is the intended market. The SIG says: Bluetooth Mesh is “ideally suited for building automation, sensor networks and other IoT solutions where tens, hundreds, or thousands of devices need to reliably and securely communicate with one another.” Mesh networks are not new. It is a network topology in which each node relays data for the network. All mesh nodes cooperate in the distribution of data in the network. The IoT-purpose-built Zigbee—a low-power, low-bandwidth ad hoc network—is a mesh network. Dating to 2002, Aruba Networks was founded to build Wi-Fi mesh networks. In 2014, student protesters in Hong Kong used mobile app FireChat to turn the crowd’s smartphones into a Wi-Fi and Bluetooth mesh network so authorities could not interrupt protester’s coordinating conversations by blocking 3G and 4G network access. Bluetooth Mesh has some very desirable features:To read this article in full or to leave a comment, please click here

Bluetooth Mesh networks: Is a standards body right for IoT innovation?

Earlier this week, the Bluetooth Special Interest Group (SIG) announced the Bluetooth Low Energy (BLE) standards have been extended to include mesh network features. It is clear that the Internet of Things (IoT) is the intended market. The SIG says: Bluetooth Mesh is “ideally suited for building automation, sensor networks and other IoT solutions where tens, hundreds, or thousands of devices need to reliably and securely communicate with one another.” Mesh networks are not new. It is a network topology in which each node relays data for the network. All mesh nodes cooperate in the distribution of data in the network. The IoT-purpose-built Zigbee—a low-power, low-bandwidth ad hoc network—is a mesh network. Dating to 2002, Aruba Networks was founded to build Wi-Fi mesh networks. In 2014, student protesters in Hong Kong used mobile app FireChat to turn the crowd’s smartphones into a Wi-Fi and Bluetooth mesh network so authorities could not interrupt protester’s coordinating conversations by blocking 3G and 4G network access. Bluetooth Mesh has some very desirable features:To read this article in full or to leave a comment, please click here

1 … 2,021 2,022 2,023 2,024 2,025 … 3,888