I’ll be speaking at the Chicago Network Operator’s Group (CHI-NOG) 2016 on the 12th of May 2016 on BGP security. As we come closer to what we’re actually going to deploy to make BGP more secure, I can come closer to describing it in the talks I give. 
Feel free too ping me if you’re going to be there.
The post CHI-NOG 2016 appeared first on 'net work.
Dual POP Dual last mile Dual CE (DPDLDC)
This is second post related to fail over Mechanism ,In first post we have configured IP SLA to track the Primary link.Here we won’t be configuring track but will be having IBGP configured between CPE-1 and CPE-2. It’s topology is also Dual POP Dual last mile Dual CE (DPDLDC).It provides redundancy both for WAN connectivity as well as LAN connectivity.
Here we will be controlling the Traffic from CPE. ISP is very much transparent and is not influencing traffic in this scenario.
Topology.
Here we wont’t track the WAN IP as in fail over Mechanism in last post but will have IBGP running between CPE-1 and CPE-2
Failover Mechanism —
1. Outgoing Traffic from CPE wan is controlled using Local-Preference (Higher LP preferred)
2. Incoming traffic to CPE is controlled using AS Path Prepend attribute of BGP at secondary( lower as path count , better path)
Normal Scenario
================
Primary WAN link is up .HSRP running on CPE-1 towards LAN is active state. CPE-1 has routes to other location from both EBGP and IBGP but will be preferred via PE1 (High Local Preference configured ).Whereas AS prepend is configured on CPE-2 Continue reading
The post Worth Reading: Intel and the Network Arms Race appeared first on 'net work.
If you've been following recent security news, you may have heard of the Badlock vulnerability in the protocols used by the Microsoft Windows Active Directory infrastructure. This vulnerability could lead to a man-in-the-middle attacker intercepting traffic between a client and the Active Directory server, and then impersonating the client, gaining unauthorized access to resources.
| |
More information can be found at http://badlock.org/ and the Red Hat Knowledgebase. |
Thanks to Ansible, however, patching your systems doesn't have to be complicated.
- hosts: all
gather_facts: true
become_method: sudo
become_user: root
vars:
service_name:
'Debian': 'smbd'
'RedHat': 'smb'
tasks:
- name: check samba version
shell: dpkg -l | grep -q samba
when: ansible_os_family == 'Debian'
register: samba_installed
ignore_errors: True
- name: update samba from apt if installed
apt:
name: samba
state: latest
update_cache: yes
when: ansible_os_family == 'Debian' and samba_installed.rc == 0
notify: restart_samba
- name: check samba version
shell: rpm -q samba
when: ansible_os_family == 'RedHat'
register: samba_installed
ignore_errors: True
- name: update samba from yum if installed
yum:
name: samba
state: latest
update_cache: yes
when: ansible_os_family == 'RedHat' and samba_installed.rc == 0
notify: restart_samba
handlers:
- name: restart_samba
service:
name: "{{ Continue reading
This post is going to be a little off the beaten path, but it might yet be useful for folks interested in the process of standardization through the IETF.
Last week, at the IETF in Buenos Aires, a proposal was put forward to move the IPv4 specifications to historic status. Geoff Huston, in his ISP column, points out the problem with this sort of thing—
The idea to push IPv4 to historic is, apparently, an attempt to move the market, in a sense. If it’s historic, then the market won’t use it, or will at least move away from it.
Right.
Another, similar, line of thinking came up at the mic during a discussion around whether Continue reading
If component suppliers want to win deals at hyperscalers and cloud builders, they have to be proactive. They can’t just sit around and wait for the OEMs and ODMs to pick their stuff like a popularity contest. They have to engineer great products with performance and then do what it takes on price, power, and packaging to win deals.
This is why memory maker Micron Technology is ramping up its efforts to get its DRAM and flash products into the systems that these companies buy, and why it is also creating a set of “architected solutions” focused on storage that …
Micron Enlists Allies For Datacenter Flash Assault was written by Timothy Prickett Morgan at The Next Platform.