I’ve been playing around with Ansible quite a bit lately. One of the issues I’ve started to run into is that Ansible can’t always do what you want by default. Put more plainly, Ansible can’t always easily do what you want. Many times I found myself writing tasks to manipulate variables and thinking to myself, “Man – if I could just run some Python code on this it would be way easier”. As luck would have it, you can! Ansible supports a whole slew of plugins but the type I want to talk about today are called filter plugins. Filter plugins, in my opinion, are one of the easiest ways to manipulate your variables with native Python. And once you know how to do it you’ll see that it opens up a whole realm of possibilities in your playbooks. Some of the most popular filters that exist today were once custom filters that someone wrote and then contributed to Ansible. The IP address (ipaddr) filter set is a great example of filters that can be used to manipulate IP related information.
When I first looked into writing a custom filter I found the Ansible documentation not very helpful. It essentially Continue reading
Software-defined storage gets another open source project.
In case you missed it last month, we announced that Docker is extracting a key component of its container platform, a part of the engine plumbing called containerd – a core container runtime – and committed to donating it to an open foundation.
You can find up-to-date roadmap, architecture and API definitions in the Github repository, and more details about the project in our engineering team’s blog post.
You can also watch the following video recording of the containerd online meetup, for a summary and Q&A with Arnaud Porterie, Michael Crosby, Stephen Day, Patrick Chanezon and Solomon Hykes from the Docker team:
Here is the list of top questions we got following this announcement:
A. Although runC is the default runtime, as of Docker 1.12, it can be replaced by any other OCI-compliant implementation. Docker will be compliant with the OCI Runtime Specification
A. SwarmKit is using Docker Engine to orchestrate tasks, and Docker Engine is already using containerd for container execution. So technically, you are already using Continue reading
The post Worth Reading: Before you pay that ransom… appeared first on 'net work.
The carrier has virtualized 34% of its network.
A 40-car BMW fleet is on its way.
In Don’t Forget to Lock the Back Door! A Characterization of IPv6 Network Security Policy, the authors ran an experiment that tested for open ports in IPv4 and IPv6 across a wide swath of the network. What they discovered was interesting—
IPv6 is more open than IPv4. A given IPv6 port is nearly always more open than the same port is in IPv4. In particular, routers are twice as reachable over IPv6 for SSH, Telnet, SNMP, and BGP. While openness on IPv6 is not as severe for servers, we still find thousands of hosts open that are only open over IPv6.
This result really, on reflection, should not be all that surprising. There are probably thousands of networks in the world with “unintentional” deployments of IPv6. The vendor has shipped new products with IPv6 enabled by default, because one large customer has demanded it. Customers who have not even thought about deploying IPv6, however, end up with an unprotected attack surface.
The obvious solution to this problem is—deploy IPv6 intentionally, including security, and these problems will likely go away.
But the obvious solution, as obvious as it might be, is only one step in the right direction. Instead of just Continue reading
Did you know that 89% of top-level domains are now signed with DNSSEC? Or that over 88% of .GOV domains and over 50% of .CZ domains are signed? Were you aware that over 103,000 domains use DANE and DNSSEC to provide a higher level of security for email? Or that 80% of clients request DNSSEC signature records in DNS queries?
All these facts and much more are available in our new State of DNSSEC Deployment 2016 report.