Testing Cumulus Linux with Serverspec

As configuration management software has matured, engineers have recognized the importance of testing and validation. A comprehensive set of tools has been been developed around configuration management software such as Chef, Puppet, Ansible and others that allow you to test your configuration management scripts.

One of these tools is Serverspec, which is an RSpec testing framework for checking that servers are configured correctly by testing their actual state.

Serverspec can execute its tests on a remote host (such as a Cumulus Linux switch) via. SSH. The tests express how the system should be configured and Serverspec will test that the current system configuration meets those expectations.

Using Serverspec to validate your switch configuration means that you can make changes to your configuration management scripts and be confident that the changes have been applied correctly and worked as intended.

Getting started

Because Serverspec natively supports Cumulus Linux, all you have to do is install Serverspec and create your tests. If you’ve never used Serverspec before, the serverspec-init command will create an example called sample_spec.rb. Adding your own files is very simple; just make sure the filename ends in _spec.rb and the first line of the file is require 'spec_helper'

Writing tests

Individual Serverspec tests are Continue reading

Expedia to buy Orbitz for $1.6 billion

Cheaper air travel is making the world seem smaller—and that’s increasingly the case for the online booking market too, with Expedia planning to swallow up rival Orbitz Worldwide barely a month after buying the smaller Travelocity.Expedia operates online booking services for flights, car rentals and hotels, including the Hotels.com brand, while Orbitz offers similar services under its own brand and at Ebookers.com and Hotelclub.com.For Expedia, the acquisition is primarily about growing its customer base: The companies offer similar services in overlapping markets. Orbitz also operates “white label” travel booking services for airlines and bank loyalty programs through its Orbitz Partner Network.To read this article in full or to leave a comment, please click here

Expedia to buy Orbitz for $1.6 billion

Cheaper air travel is making the world seem smaller—and that’s increasingly the case for the online booking market too, with Expedia planning to swallow up rival Orbitz Worldwide barely a month after buying the smaller Travelocity.Expedia operates online booking services for flights, car rentals and hotels, including the Hotels.com brand, while Orbitz offers similar services under its own brand and at Ebookers.com and Hotelclub.com.For Expedia, the acquisition is primarily about growing its customer base: The companies offer similar services in overlapping markets. Orbitz also operates “white label” travel booking services for airlines and bank loyalty programs through its Orbitz Partner Network.To read this article in full or to leave a comment, please click here

The Upload: Your tech news briefing for Thursday, February 12

Restrictive governments getting better at censoring the InternetAuthoritarian government are censoring the Internet more aggressively and using more sophisticated technology, according to the annual World Press Freedom Index being released Thursday by Reporters Without Borders. China is judged “a pioneer” in the field, after blocking access to all Google services during the last year and stamping out domestic coverage of protests in Hong Kong and the 25th anniversary of the Tiananmen Square Massacre. Iran is also high on the list, as it works on a national intranet that will keep citizens off the global Internet.To read this article in full or to leave a comment, please click here

The Upload: Your tech news briefing for Thursday, February 12

Restrictive governments getting better at censoring the InternetAuthoritarian government are censoring the Internet more aggressively and using more sophisticated technology, according to the annual World Press Freedom Index being released Thursday by Reporters Without Borders. China is judged “a pioneer” in the field, after blocking access to all Google services during the last year and stamping out domestic coverage of protests in Hong Kong and the 25th anniversary of the Tiananmen Square Massacre. Iran is also high on the list, as it works on a national intranet that will keep citizens off the global Internet.To read this article in full or to leave a comment, please click here

Quick ACL Entry Comparison Script

The ACL_compare function takes two lists of strings and compares the first to the second and returns a list comprising strings that are present in the first that are not in the second.

The listconvert function converts a file read into memory into a list of strings. Handy for when you use filenames as arguments when you run the script.

Essentially it’s all just string comparison really.


def ACL_compare(fwsm_ACL,asa_ACL):
comparison=[]
for line in fwsm_ACL:
if line in asa_ACL:
pass
else:
comparison.append(line)
return comparison

def listconvert(file):
newlist=file.readlines()
return newlist


Network Design Webinar With Yours Truly at CLN

I’m hosting a network design webinar at the Cisco Learning Network on Feb 19th, 20.00 UTC+1.

As you may know, I am studying for the CCDE so I’m focusing on design right now but my other reason for hosting this is to remind people that with all the buzzwords around SDN and NfV going around, the networking fundamentals still hold true. TCP/IP is as important as ever, building a properly designed network is a must if you want to have overlays running on it. If you build a house and do a sloppy job with the foundation, what will happen? The same holds true in networking.

I will introduce the concepts of network design. What does a network designer do? What tools are used? What is CAPEX? What is OPEX? What certifications are available? What is important in network design? We will also look at a couple of design scenarios and reason about the impact of our choices. There is always a tradeoff!

If you are interested in network design or just want to tune in to yours truly, follow this link to CLN.

I hope to see you there!


Apple ends system of recruitment fees that tied labor to contractors

Apple has forced its suppliers to end a form of “bonded labor” that saddled assembly line workers with unnecessary hiring fees, and put them in debt to third-party recruiters.The requirement went into effect starting this year, the company said on Wednesday in its latest supplier responsibility report, which examines the labor conditions at factories that produce Apple products.Many of these factories are based in mainland China, where suppliers are hiring thousands of local workers. But in periods of labor shortages, Apple suppliers have at times relied on third-party recruitment agencies to bring in more temporary workers.To read this article in full or to leave a comment, please click here

More online censorship coming to closed countries, says report

Authoritarian governments are doubling down on press censorship and becoming more adept at blocking Internet access to uncensored news sources, according to the annual World Press Freedom Index that will be published on Thursday.The report, from Paris-based Reporters Without Borders, saw many countries lose points this year as threats against reporters and press freedom increased. They included governments using national security as an excuse to track reporters and their sources; threats from para-military, organized crime and terrorist groups; government interference in the media, and reporters being targeted for covering demonstrations.To read this article in full or to leave a comment, please click here

Kubernetes 101 – Networking

image One of the reasons that I’m so interested in docker and it’s associated technologies is because of the new networking paradigm it brings along with it.  Kubernetes has a unique (and pretty awesome) way of dealing with these networking challenges but it can be hard to understand at first glance.  My goal in this post is to walk you through deploying a couple of Kubernetes constructs and analyze what Kubernetes is doing at the network layer to make it happen.  That being said, let’s start with the basics of deploying a pod.  We’ll be using the lab we created in the first post and some of the config file examples we created in the second post.

Note: I should point out here again that this lab is built with bare metal hardware.  The network model in this type of lab is likely slightly different that what you’d see with a cloud provider.  However, the mechanics behind what Kubernetes is doing from a network perspective should be identical. 

So just to level set, here is what our lab looks like…

 

image
We touched on the topic of pod IP addressing before, but let’s provide Continue reading

Cisco posts revenue gains, vows to beat VMware’s network software

Cisco Systems posted quarterly revenue and profit gains that included growth for its software-defined networking products, and Chairman and CEO John Chambers used the occasion to lay down the gauntlet to SDN rival VMware.The company’s revenue hit $11.9 billion in the fiscal quarter ended Jan. 24, up 7 percent from a year earlier. SDN, a new market that might imperil Cisco’s traditional network hardware business, was a strong point: Sales of the company’s recently introduced Nexus 3000 and 9000 data-center switches, key to its SDN architecture, grew 350 percent.Cisco claimed 1,700 total customers for its SDN architecture, called ACI (Application Centric Infrastructure), up from 970 the previous quarter.To read this article in full or to leave a comment, please click here

Five Next-Gen Networker Skills

With all the flux that is going on in the networking space, it’s hard to figure out what to do next. You may want to add to your skillset, but you’re not sure where to throw your effort. I’d like to focus on five different areas you can focus on, without talking about a specific product - at the end of the day, that’s just implementation details. These areas are going to be increasingly more valuable and will help you be more marketable when added to your existing network knowledge and experience.

Five Next-Gen Networker Skills

With all the flux that is going on in the networking space, it’s hard to figure out what to do next. You may want to add to your skillset, but you’re not sure where to throw your effort. I’d like to focus on five different areas you can focus on, without talking about a specific product - at the end of the day, that’s just implementation details. These areas are going to be increasingly more valuable and will help you be more marketable when added to your existing network knowledge and experience.

How to run GUI applications on an Amazon AWS cloud server

In a previous post, I showed how easy it is to set up a remote server on Amazon’s AWS service. Now I would like see if I can run one or more of the open-source network simulators I’ve been using on this remote server. I want be able to access a network simulator from any device such as a personal computer, a tablet, or even a smart phone.

To accomplish this, I first need to install a Linux desktop environment on the remote Ubuntu server. Then, I need to set up the server and my client devices to allow the graphical user interface displayed on a remote server to be viewed on a local client.

In this post I will show how to install a Linux desktop (in this case, XFCE) and how to set up either VNC or X11 on a server and client.

Required software

Linux desktop

In this example, I chose to run the XFCE desktop environment on the Amzaon AWS remote server because XFCE uses less resources than other desktop environments such as Gnome or KDE.

Remote-access methods

There are two common methods for accessing a remote server’s graphical user interface:

  1. VNC, Virtual Network Computing, Continue reading

How will the Apple Watch succeed where Android Wear has struggled?

The Apple Watch is set to hit the market in April, at a time when the smartwatch market appears to be largely up for grabs.Canalys released a report today that claimed manufacturers shipped just 720,000 devices featuring Google's smartwatch OS Android Wear in 2014. For context, 4.6 million total smartwatches and bands shipped last year, and mobile market newcomer Pebble shipped more than 1 million units from its 2013 launch through 2014, according to Canalys.Meanwhile, J.P. Morgan Chase wireless analyst Rod Hall recently upped his target for Apple stock price to $145 from $140 based on optimism for the Apple Watch, according to this Barron's blog post. That excitement is based on the expectation that 5% of 525 million projected iPhone users will buy the Apple Watch this year, resulting in more than 26 million shipments. Hall was even bold enough to extend this prediction into 2016, when he sees 13% of iPhone customers buying the Apple Watch, good for more than 55 million units.To read this article in full or to leave a comment, please click here

Everyone has something to say about revived Wi-Fi Innovation Act

A revived and bi-partisan supported Wi-Fi Innovation Act has been introduced this week by U.S. Senators and is backed by U.S. House members with a companion bill of their own.The legislation, originally pitched last summer, urges the FCC to test the feasibility of opening up spectrum at the higher end of the 5GHz band (5850-5925) for unlicensed Wi-Fi use. Cable and other tech companies are all for this, while automakers and their partners are opposed, citing possible interference with car safety systems they are becoming more mainstream.MORE: How Not to Get Slammed by the FCC for Wi-Fi BlockingTo read this article in full or to leave a comment, please click here

Facebook super-sizes its open networking switch

Facebook is taking its crusade for open networking to a broader battlefield, using its 16-port “Wedge” switch design as the basis of a new modular platform that can link together racks of servers across a data center.The social networking juggernaut doesn’t intend to become a data networking vendor. It designs switches for its own needs and then open-sources its hardware designs so others can use them. In time, other companies could turn Facebook switch designs into products for sale, but Facebook won’t be directly involved, said Matt Corddry, director of hardware engineering at Facebook.GOOD LUCK: Geeky Ways to Celebrate Friday the 13thTo read this article in full or to leave a comment, please click here

Facebook super-sizes its open networking switch

Facebook is taking its crusade for open networking to a broader battlefield, using its 16-port “Wedge” switch design as the basis of a new modular platform that can link together racks of servers across a data center.The social networking juggernaut doesn’t intend to become a data networking vendor. It designs switches for its own needs and then open-sources its hardware designs so others can use them. In time, other companies could turn Facebook switch designs into products for sale, but Facebook won’t be directly involved, said Matt Corddry, director of hardware engineering at Facebook.GOOD LUCK: Geeky Ways to Celebrate Friday the 13thTo read this article in full or to leave a comment, please click here

1 … 3,486 3,487 3,488 3,489 3,490 … 3,694