Internet disruptions overview for Q3 2022

Internet disruptions overview for Q3 2022
Internet disruptions overview for Q3 2022

Cloudflare operates in more than 275 cities in over 100 countries, where we interconnect with over 10,000 network providers in order to provide a broad range of services to millions of customers. The breadth of both our network and our customer base provides us with a unique perspective on Internet resilience, enabling us to observe the impact of Internet disruptions. In many cases, these disruptions can be attributed to a physical event, while in other cases, they are due to an intentional government-directed shutdown. In this post, we review selected Internet disruptions observed by Cloudflare during the third quarter of 2022, supported by traffic graphs from Cloudflare Radar and other internal Cloudflare tools, and grouped by associated cause or common geography. The new Cloudflare Radar Outage Center provides additional information on these, and other historical, disruptions.

Government directed shutdowns

Unfortunately, for the last decade, governments around the world have turned to shutting down the Internet as a means of controlling or limiting communication among citizens and with the outside world. In the third quarter, this was an all too popular cause of observed disruptions, impacting countries and regions in Africa, the Middle East, Asia, and the Caribbean.

Iraq

As Continue reading

How Calico CNI solves IP address exhaustion on Microsoft AKS

Companies are increasingly adopting managed Kubernetes services, such as Microsoft Azure Kubernetes Service (AKS), to build container-based applications. Leveraging a managed Kubernetes service is a quick and easy way to deploy an enterprise-grade Kubernetes cluster, offload mundane operations such as provisioning new nodes, upgrading the OS/Kubernetes, and scaling resources according to business needs.

AKS also provides a fault-tolerant Kubernetes control plane endpoint and automates the worker node maintenance and deployment process. With regards to networking within the cluster, AKS provides an integrated CNI to address basic Kubernetes networking requirements, such as configuring network interfaces and providing connectivity between pods. However, the basic container networking in Microsoft AKS comes with a limited set of IP addresses. As businesses grow, so does application usage. Having a limited set of IPs can cause scale, availability, and manageability challenges for Microsoft AKS users.

In this blog post, I will discuss IP address exhaustion on Microsoft AKS and how Calico can solve this issue. I will also explore how Calico can address scalability challenges and provide resources that can quickstart your journey in using Calico to solve IP address exhaustion on AKS.

Microsoft AKS BYOCNI

Earlier this year, Microsoft AKS introduced the ability to bring Continue reading

Cisco powers up Nexus switch, offers 800GB optic modules

Cisco is using its high-powered Silicon One chip technology to turn up the power and efficiency of its Nexus family of data center, hyperscaler and cloud switches.The company rolled out a new high-end Nexus switch for the data center and one aimed at disaggregated applications. Cisco also added an 800Gb Ethernet module. Each of the new additions is powered by the company’s advanced Silicon One technology.   Introduced in 2019, Cisco’s Silicon One architecture uses the vendor’s custom chip technology, which features optical-routing silicon, deep buffering with rich QoS, and programmable forwarding.Silicon One boxes are programmable and can be customized for a range of applications from a single chipset, eliminating the need to deploy multiple, specific silicon for standalone processors, line-card processors, and fabric elements, according to Cisco. This is accomplished with a common and unified P4 programmable-forwarding code and SDK, Cisco says.To read this article in full, please click here

Oracle extends cloud options with Alloy launch

Oracle is giving cloud control to its partners and customers with the launch of Oracle Alloy, an infrastructure platform that lets organizations build and deploy custom cloud services using their own hardware and data centers.The Alloy platform is built on Oracle Cloud Infrastructure (OCI), the vendor’s portfolio of IaaS, PaaS, SaaS and other cloud services.“Oracle has spent a lot of money and effort to build out OCI. They’re really keen on growing share, and they’re going after programs like Alloy aggressively to do so,” said analyst Chris Kanaracus, a research director in IDC’s worldwide infrastructure practice. “Oracle is incentivized to be as appealing to customers – on economics and flexibility and localization – as possible.”To read this article in full, please click here

Oracle extends cloud options with Alloy launch

Oracle is giving cloud control to its partners and customers with the launch of Oracle Alloy, an infrastructure platform that lets organizations build and deploy custom cloud services using their own hardware and data centers.The Alloy platform is built on Oracle Cloud Infrastructure (OCI), the vendor’s portfolio of IaaS, PaaS, SaaS and other cloud services.“Oracle has spent a lot of money and effort to build out OCI. They’re really keen on growing share, and they’re going after programs like Alloy aggressively to do so,” said analyst Chris Kanaracus, a research director in IDC’s worldwide infrastructure practice. “Oracle is incentivized to be as appealing to customers – on economics and flexibility and localization – as possible.”To read this article in full, please click here

Direct Connect — Part 2 — Public VIF

< MEDIUM: https://towardsaws.com/direct-connect-part-2-public-vif-5bc0a2d2c478 >

First Post ( Direct Connect – Part 1 )- https://raaki-88.medium.com/direct-connect-part-1-dc3e9369933

Direct Connect offering though it connects to AWS has a difference in operation depending on the VIF we connect.

Public VIF

→ So when we have this setup, this is in no way related to VPC at all, all this does is advertise Amazon-owned Public Prefixes for services like S3/EC2(Elastic-IP only, not your Private IP), and that’s all to it.

→ There is flexibility at the customer end to scope the advertisement propagation t LOCAL, CONTINENT, and GLOBAL levels within AWS in an outbound direction and has the flexibility to filter inbound updates which are advertised toward him.

Here is by default, how the Community scope looks like, you also have the flexibility to filter routes inbound to customers.

Note: Outbound communities restrict the advertisement of prefixes to region/continent/global scope for any sort of Any-cast implementations.

if the Customer sends a route with a community

7224:9100 → This will be local to the region

7224:9200 → This will be local to the continent, the scope is till the EU

7224:9300Global, by default its global even if you don’t export Continue reading

On Applicability of MPLS Segment Routing (SR-MPLS)

Whenever I compare MPLS-based Segment Routing (SR-MPLS) with it’s distant IPv6-based cousin (SRv6), someone invariably mentions the specter of large label stacks that some hardware cannot handle, for example:

Do you think vendors current supported label max stack might be an issue when trying to route a packet from source using Adj-SIDs on relatively big sized (and meshed) cores? Many seem to be proposing to use SRv6 to overcome this.

I’d dare to guess that more hardware supports MPLS with decent label stacks than SRv6, and if I’ve learned anything from my chats with Laurent Vanbever, it’s that it sometimes takes surprisingly little to push the traffic into the right direction. You do need a controller that can figure out what that little push is and where to apply it though.

On Applicability of MPLS Segment Routing (SR-MPLS)

Whenever I compare MPLS-based Segment Routing (SR-MPLS) with it’s distant IPv6-based cousin (SRv6), someone invariably mentions the specter of large label stacks that some hardware cannot handle, for example:

Do you think vendors current supported label max stack might be an issue when trying to route a packet from source using Adj-SIDs on relatively big sized (and meshed) cores? Many seem to be proposing to use SRv6 to overcome this.

I’d dare to guess that more hardware supports MPLS with decent label stacks than SRv6, and if I’ve learned anything from my chats with Laurent Vanbever, it’s that it sometimes takes surprisingly little to push the traffic into the right direction. You do need a controller that can figure out what that little push is and where to apply it though.

Introducing the Event-Driven Ansible developer preview

Today at AnsibleFest 2022, Red Hat announced an exciting new developer preview for Event-Driven Ansible. Most customers are on a journey toward full end-to-end automation and there are many paths you take along this journey.  Event-Driven Ansible is a new way to enhance and expand automation. It improves IT speed and agility, while enabling consistency and resilience. 

By fully automating necessary but routine tasks, you and your team will have more time to focus on interesting engineering challenges and new innovations. For example, what if you no longer needed to pause critical work to manually add technical detail to  a service ticket?  Or address a user password reset request? Or reset a router as a first troubleshooting step? With Event-Driven Ansible, the friction in your day can be dramatically reduced, leaving more time to work on important projects, with some added work-life balance.  

 

Why a developer preview? 

The Event-Driven Ansible technology was developed by Red Hat and is available on GitHub as a developer preview. Community input is essential. Since we are building a solution to best meet your needs, we’re providing an opportunity for you to advocate for those needs. We ask that Continue reading

Getting Started with Event-Driven Ansible

 As one technology advances, it expands the possibilities for other technologies and offers the solutions of tomorrow for the challenges we face today. AnsibleFest 2022 brings us new advances in Ansible automation that are as bright as they are innovative. I am talking about the Event-Driven Ansible developer preview.

Automation allows us to give our systems and technology speed and agility while minimizing human error. However, when it comes to trouble tickets and issues, we are often left to traditional and manual methods of troubleshooting and information gathering. We inherently slow things down and interrupt our businesses. We have to gather information, try our common troubleshooting steps, confirm with different teams, and eventually, we need to sleep. 

Support lifecycle diagram with many manual steps and hand-offs.

 

One application of Event-Driven Ansible is to remediate technology issues before near real-time, or at least trigger troubleshooting and information collection in an attempt to find the root cause of an outage while your support teams handle other issues. 

Event driven automation used in the support lifecycle: fewer steps, faster Mean-Time-To-Resolution.  

 

Event-Driven Ansible has the potential to change the way we respond to issues and illuminates many new automation Continue reading

It takes a community: how partners play a key role in event driven automation

Event-driven automation is increasingly being adopted because of the strong benefits it delivers in managing huge amounts of complexity across multi-clouds, a multi-device remote workforce, and growing edge implementations. In a digital world, maintaining resilience and reliability is essential and event driven automation helps teams meet these needs while working around resource and skills gaps.  

This advanced automation technique can be used to address festering problems before there is a full-blown outage, improve agility and resilience to meet the demands of the business, and maintain consistency to avoid downtime and meet governance requirements. It also frees time spent on routine tasks so IT teams can focus on the innovations that matter.  

 

Partners benefit from enabling end-to-end event-driven automation

For independent software vendors (ISVs), solution providers and service partners, this is a great opportunity to create easy-to-implement solutions for your customers and help them work with modern automation techniques that will truly make an operational impact. Event-driven technologies – including network, security, monitoring tools, observability solutions and workload optimization tools – must be cooperative players in a larger ecosystem. 

Today, we invite ISVs and consulting/service partners to create event driven automation content that makes it easy for Continue reading

Gartner: IT matters more than ever to attract and keep the best talent

As the priorities of IT are driven by the needs to support business goals, one of the increasingly important needs IT leaders must to pay attention to is attracting and retaining high-quality employees.“IT now matters more than ever in the recruitment, retention, employee engagement and high performance of all enterprise employees, not just IT.” said Tina Nunno, Gartner vice president and fellow the opening keynote for the firms IT Symposium/Xpo 2022.A new Gartner survey found that only 31% of employees said that they have the technology they need, so there is an opportunity there for CIO’s to make a difference. “Employers who revolutionize the work and empower their workers with technology will become the employers of choice,” Nunno said.To read this article in full, please click here

Tech Bytes: LiveAction Integrates NDR And Network Visibility (Sponsored)

The Tech Bytes podcast welcomes sponsor LiveAction, which provides network visibility and NDR products for network engineers. We’ll get an overview of LiveAction’s portfolio and take a closer look at new security capabilities in its ThreatEye Network Detection and Response product.

The post Tech Bytes: LiveAction Integrates NDR And Network Visibility (Sponsored) appeared first on Packet Pushers.