Day Two Cloud 197: Understanding Decentralized Identity With Dr. Joanne Friedman

On today's Day Two Cloud we dive into Decentralized Identity, or DID. This W3C standard is a unique identifier, authenticated by cryptographic proofs, that individuals and organizations can generate themselves using systems they trust. A DID can be a person, an object, an organization, a data model, or other subject. We explore DIDs, how they work, and what they can be used for with Dr. Joanne Friedman.

The post Day Two Cloud 197: Understanding Decentralized Identity With Dr. Joanne Friedman appeared first on Packet Pushers.

NTP in a Nutshell

Years ago I’ve been involved in an interesting discussion focusing on NTP authentication and whether you can actually implement it reliably on Cisco IOS. What I got out of it (apart from a working example) was the feeling that NTP and it’s implementation in Cisco IOS was under-understood and under-documented, so I wrote an article about it. Of course the web version got lost in the mists of time but I keep my archives handy.

Last weekend I migrated that article to blog.ipSpace.net. I hope you’ll still find it useful; while it’s pretty old, the fundamentals haven’t changed in the meantime.

NTP in a Nutshell

Years ago I’ve been involved in an interesting discussion focusing on NTP authentication and whether you can actually implement it reliably on Cisco IOS. What I got out of it (apart from a working example) was the feeling that NTP and it’s implementation in Cisco IOS was under-understood and under-documented, so I wrote an article about it. Of course the web version got lost in the mists of time but I keep my archives handy.

Last weekend I migrated that article to blog.ipSpace.net. I hope you’ll still find it useful; while it’s pretty old, the fundamentals haven’t changed in the meantime.

Heavy Wireless 003: Designing Eduroam For The Future With Mark Houtz

On today's Heavy Wireless, Keith Parsons talks with guest is Mark Houtz about designing Eduroam for the future, including the 6Ghz band. Mark explains the challenges of filtering Internet access for K-12 students when they travel outside of their local high school and the technical requirements of Eduroam, specifically the use of WPA3 Enterprise on all frequencies when using the new 6 GHz band. Mark also shares his testing process for Eduroam's compatibility with 6 GHz radios.

Heavy Wireless 003: Designing Eduroam For The Future With Mark Houtz

On today's Heavy Wireless, Keith Parsons talks with guest is Mark Houtz about designing Eduroam for the future, including the 6Ghz band. Mark explains the challenges of filtering Internet access for K-12 students when they travel outside of their local high school and the technical requirements of Eduroam, specifically the use of WPA3 Enterprise on all frequencies when using the new 6 GHz band. Mark also shares his testing process for Eduroam's compatibility with 6 GHz radios.

The post Heavy Wireless 003: Designing Eduroam For The Future With Mark Houtz appeared first on Packet Pushers.

Network Break 432: DriveNets Aims To Make Ethernet AI-Friendly; China Goes Eye-For-An-Eye With US Over Tech Bans

This week we discuss a new offering from DriveNets that aims to make Ethernet more suitable as a network fabric for AI workloads, why the EU slapped Meta with a $1.3 billion fine, and a new offering from Extreme Networks that lets you manage Extreme gear in the cloud or from on-prem, China banning Micron, and more IT news.

The post Network Break 432: DriveNets Aims To Make Ethernet AI-Friendly; China Goes Eye-For-An-Eye With US Over Tech Bans appeared first on Packet Pushers.

Tech Bytes: Assembling A SASE Architecture With Fortinet (Sponsored)

Today on the Tech Bytes podcast we pull back the covers on SASE, or Secure Access Service Edge. Fortinet is our sponsor. One important concept to grasp around SASE is that it’s as much an architecture as it is a product. It requires planning and foresight to put the pieces together and operate them. We talk with Fortinet about the elements of its SASE offering and what a typical customer engagement with SASE looks like.

Tech Bytes: Assembling A SASE Architecture With Fortinet (Sponsored)

Today on the Tech Bytes podcast we pull back the covers on SASE, or Secure Access Service Edge. Fortinet is our sponsor. One important concept to grasp around SASE is that it’s as much an architecture as it is a product. It requires planning and foresight to put the pieces together and operate them. We talk with Fortinet about the elements of its SASE offering and what a typical customer engagement with SASE looks like.

The post Tech Bytes: Assembling A SASE Architecture With Fortinet (Sponsored) appeared first on Packet Pushers.

How doNotTrack policies work in the Calico eBPF dataplane

Almost all modern network systems, including stateful firewalls, make use of connection tracking (“conntrack”) because it consumes less processing power per packet and simplifies operations. However, there are use cases where connection tracking has a negative impact, as we described in Linux Conntrack: Why it breaks down and avoiding the problem. Distributed Denial of Service (DDoS) mitigation systems, defending against volumetric network attacks, is a well known example of such a use case, as it needs to drop malicious packets as fast as possible. In addition to these attacks, connection tracking becomes a potential attack vector as it is a limited resource. There are also applications generating huge amounts of short lived connections per second, to the point that tracking connections leads to more processing and defeating its intended purposes. These use cases demonstrate that there is a need to not track connections in a firewall, also known as stateless firewalling.

In this blog post, we will explain how Project Calico uses eXpress Data Path (XDP) in its eBPF dataplane (also in its iptables dataplane but not the focus of this post) to improve the performance of its stateless firewall. XDP is an eBPF hook that allows a program to Continue reading

MGX: Nvidia Standardizes Multi-Generation Server Designs

Whenever a compute engine maker also does motherboards as well as system designs, those companies that make motherboards (there are dozens who do) and create system designs (the original design manufacturers and the original – get a little bit nervous as well as a bit relieved.

MGX: Nvidia Standardizes Multi-Generation Server Designs was written by Timothy Prickett Morgan at The Next Platform.

Qualcomm doubles down on its pivot to AI

Qualcomm has announced it is shifting its focus from providing chips exclusively for communications devices and doubling down on its efforts to support AI workloads.The company is transitioning to becoming  an “intelligent edge computing” firm, Alex Katouzian, a senior vice president at Qualcomm, said during a keynote speech at the Computex show in Taipei Tuesday.AI workloads require a lot of compute power and in February, Qualcomm announced the Snapdragon X75, its latest 5G modem component that the company said will be the world’s first modem-RF system for 5G-Advanced — a set of specifications designed to improve speed, maximize coverage, and enhance mobility and power efficiency for mobile devices. The X75 is also reportedly able to process AI workloads 2.5 times faster than its predecessor, the X70.To read this article in full, please click here

Qualcomm doubles down on its pivot to AI during Computex keynote

Qualcomm has announced it is shifting its focus from providing chips exclusively for communications devices and doubling down on its efforts to support AI workloads.The company is transitioning to becoming  an “intelligent edge computing” firm, Alex Katouzian, a senior vice president at Qualcomm, said during a keynote speech at the Computex show in Taipei Tuesday.AI workloads require a lot of compute power and in February, Qualcomm announced the Snapdragon X75, its latest 5G modem component that the company said will be the world’s first modem-RF system for 5G-Advanced — a set of specifications designed to improve speed, maximize coverage, and enhance mobility and power efficiency for mobile devices. The X75 is also reportedly able to process AI workloads 2.5 times faster than its predecessor, the X70.To read this article in full, please click here

Inside Nvidia’s new AI supercomputer

With Nvidia’s Arm-based Grace processor at its core, the company has introduced a supercomputer designed to perform AI processing powered by a CPU/GPU combination.The new system, formally introduced at the Computex tech conference in Taipei the DGX GH200 supercomputer is powered by 256 Grace Hopper Superchips, technology that is a combination of Nvidia’s Grace CPU, a 72-core Arm processor designed for high-performance computing and the Hopper GPU. The two are connected by Nvidia’s proprietary NVLink-C2C high-speed interconnect.To read this article in full, please click here

Inside Nvidia’s new AI supercomputer

With Nvidia’s Arm-based Grace processor at its core, the company has introduced a supercomputer designed to perform AI processing powered by a CPU/GPU combination.The new system, formally introduced at the Computex tech conference in Taipei the DGX GH200 supercomputer is powered by 256 Grace Hopper Superchips, technology that is a combination of Nvidia’s Grace CPU, a 72-core Arm processor designed for high-performance computing and the Hopper GPU. The two are connected by Nvidia’s proprietary NVLink-C2C high-speed interconnect.To read this article in full, please click here

Nvidia’s new Grace Hopper superchip to fuel its DGX GH200 AI supercomputer

Nvidia has unveiled a new DGX GH200 AI supercomputer, underpinned by its new Grace Hopper superchip and targeted toward developing and supporting large language models.“DGX GH200 AI supercomputers integrate Nvidia’s most advanced accelerated computing and networking technologies to expand the frontier of AI,” Nvidia CEO Jensen Huang said in a blog post.To read this article in full, please click here

Nvidia’s new Grace Hopper superchip to fuel its DGX GH200 AI supercomputer

Nvidia has unveiled a new DGX GH200 AI supercomputer, underpinned by its new Grace Hopper superchip and targeted toward developing and supporting large language models.“DGX GH200 AI supercomputers integrate Nvidia’s most advanced accelerated computing and networking technologies to expand the frontier of AI,” Nvidia CEO Jensen Huang said in a blog post.To read this article in full, please click here

Nvidia’s new Grace Hopper superchip to fuel its DGX GH200 AI supercomputer

Nvidia has unveiled a new DGX GH200 AI supercomputer, underpinned by its new Grace Hopper superchip and targeted toward developing and supporting large language models.“DGX GH200 AI supercomputers integrate Nvidia’s most advanced accelerated computing and networking technologies to expand the frontier of AI,” Nvidia CEO Jensen Huang said in a blog post.The supercomputer, according to Huang, combines the company’s GH200 Grace Hopper superchip and Nvidia’s NVLink and Switch System, to allow the development of large language models for generative AI language applications, recommender systems, and data analytics workloads.To read this article in full, please click here