Recap of ONUG Conference 2014

Last week I attended the Open Networking User Group conference. My main reason for attending was to participate in three roundtable discussions put on by Tech Field Day. These sessions were recorded, and I’ll be following up with specific thoughts on each session in later blog posts.

These round-tables only occupied a portion of the two-day conference, so I spent the remainder of the time speaking with some of the vendors and sitting in a few of the sessions.

Sessions

I wasn’t permitted to attend a large chunk of ONUG sessions, and I’ll get to that in the next paragraph. I did manage to see a good friend Kyle Mestery present on two of my favorite topics – OpenDaylight and OpenStack. The sessions at ONUG were not recorded, but I’ll again direct you to this video for a reasonably close approximation:

Kyle is the embodiment of the passion and energy found in great communities like OpenStack and OpenDaylight, and if you ever have the opportunity to hear him present, I encourage you to take it.

I also finally got to meet Brad Hedlund in meatspace:

@mestery and @bradhedlund at #ONUG workshop. pic.twitter.com/t775QPavTw

— Gideon Tam (@mfmahler) May Continue reading

Cisco Live 2014 – Final Countdown!

Into the Light of Day: Uncovering Ongoing and Historical Point of Sale Malware and Attack Campaigns

Point of Sale systems that process debit and credit cards are still being attacked with an increasing variety of malware. Over the last several years PoS attack campaigns have evolved from opportunistic attacks involving crude theft of card data with no centralized Command & Control, through memory scraping PoS botnets with centralized C&C and most recently to highly targeted attacks that require a substantial amount of lateral movement and custom malware created to blend in with the target organization.

While contemporary PoS attackers are still successful in using older tools and methodologies that continue to bring results due to poor security, the more ambitious threat actors have moved rapidly, penetrating organizational defenses with targeted attack campaigns. Considering the substantial compromise lifespans within organizations that have active security teams and managed infrastructure, indicators shared herein will be useful to detect active as well as historical compromise.

Organizations of all sizes are encouraged to seriously consider a significant security review of any PoS deployment infrastructure to detect existing compromises as well as to strengthen defenses against an adversary that continues to proliferate and expand attack capabilities.

In addition to recent publications discussing Dexter and Project Hook malware activity, Arbor ASERT is currently Continue reading

Recap of ONUG Conference 2014

Recap of ONUG Conference 2014

Beamforming Basics for the Wi-Fi Challenged

Quiz #24 – OSPF Default-Information Originate Always

Tails 1.0: A bootable Linux distro that protects your privacy

Whatever your primary OS, Linux distro Tails 1.0 offers a plethora of security features to help you work online without worrying about privacy issues.These days, it seems as though anyone who uses the Internet is a tasty morsel for insatiable data thieves. Marketers, governments, criminals and random snoops won't be satisfied until they can snarf whatever information they want about us at any time.If you want to dodge ad trackers, have sensitive sources to protect or you just want to conduct your normal online activities without being spied on, then The Amnesiac Incognito Live System (better known as Tails) could help.To read this article in full or to leave a comment, please click here

QUIZ #24 &#8211 OSPF Default-Information Originate Always

Company ABC has multiple buildings and two internet connections via 2 different ISPs. Both BR-B and BR-C receive a default route via eBGP from the ISPs and they inject it in OSPF. For some reason, when ISP-1 link goes down, entire Building-A looses the internet access ! Something must be wrong...

Musing: Ethernet Connected Hard Drives, Network Designs

Ethernet Hard Drives are coming. Nothing to do with networking.

The post Musing: Ethernet Connected Hard Drives, Network Designs appeared first on EtherealMind.

Internets of Interest for 8th May 2014

  Collection of useful, relevant or just fun places on the Internets for 8th May 2014 and a bit commentary about what I’ve found interesting about them: Whitebox Switching: Would You? Should You? — The Peering Introvert – Ethan Banks takes a good hard look at Whitebox Switches after a session at ONUG inspired some […]

The post Internets of Interest for 8th May 2014 appeared first on EtherealMind.

Community Show – CCDE Preparation and Recommendations

[player] Cisco Certified Design Expert exam is the popular expert level vendor independent certification. In this podcast Orhan Ergun – CCIE & CCDE  talks   with his three guests who have CCDE certificate as well ,  about preparation, resources, recommendations and many other topics. We also discussed whether CCIE is losing its value. Please share […]

The post Community Show – CCDE Preparation and Recommendations appeared first on Packet Pushers.

Community Show – CCDE Preparation and Recommendations

Cisco Certified Design Expert exam is the popular expert level vendor independent certification. In my first podcast I talked   with my three guests who have CCDE as well ,  about preparation, resources, recommendations and many other topics. We also discussed whether CCIE is losing its value. Please share your comments about this podcast.   Participants […]

Author information

Orhan Ergun

Orhan Ergun, CCIE, CCDE, is a network architect mostly focused on service providers, data centers, virtualization and security.

He has more than 10 years in IT, and has worked on many network design and deployment projects.

In addition, Orhan is a:

Blogger at Network Computing.
Blogger and podcaster at Packet Pushers.
Manager of Google CCDE Group.
On Twitter @OrhanErgunCCDE

The post Community Show – CCDE Preparation and Recommendations appeared first on Packet Pushers Podcast and was written by Orhan Ergun.

Cisco Live 2014 Schedule

Show 188 – Introducing A10 Networks

In this sponsored show we introduce A10 Networks and it's all about application deliver controllers, load balancers and speed like you have never seen because of smart software architecture.

Author information

Greg Ferro

Greg Ferro is a Network Engineer/Architect, mostly focussed on Data Centre, Security Infrastructure, and recently Virtualization. He has over 20 years in IT, in wide range of employers working as a freelance consultant including Finance, Service Providers and Online Companies. He is CCIE#6920 and has a few ideas about the world, but not enough to really count.

He is a host on the Packet Pushers Podcast, blogger at EtherealMind.com and on Twitter @etherealmind and Google Plus.

TwitterFacebookGoogle+

The post Show 188 – Introducing A10 Networks appeared first on Packet Pushers Podcast and was written by Greg Ferro.

Packet pushers podcast – Hardware Resources

It’s been quite a while since I’ve posted here but I wanted to highlight some work I’ve been doing with Greg Ferro and Simon Chatterjee on the Packet Pushers podcast. We recorded a three part series where we dive deep … Continue reading →

The post Packet pushers podcast – Hardware Resources appeared first on The Network Sherpa.

Anycast HSRP and Design Considerations

HSRP is the first hop redundancy Cisco property protocol which allows a transparent failover of the first-hop gateway. Many technologies have been slightly modified to use it efficiently. In this article although Anycast hsrp will be explained but first I want to first explain how basically HSRP works.   HSRP has Version 1 and 2. […]

Author information

Orhan Ergun

Orhan Ergun, CCIE, CCDE, is a network architect mostly focused on service providers, data centers, virtualization and security.

He has more than 10 years in IT, and has worked on many network design and deployment projects.

In addition, Orhan is a:

Blogger at Network Computing.
Blogger and podcaster at Packet Pushers.
Manager of Google CCDE Group.
On Twitter @OrhanErgunCCDE

The post Anycast HSRP and Design Considerations appeared first on Packet Pushers Podcast and was written by Orhan Ergun.

HTIRW: The Business Side of DNS (2)

</a>continued from part 1 The top level server is either paid for by the domain owner (if they are managing the TLD name space internally), or by the company contracted to manage the TLD name space. This accounts for the top level servers in our diagram. What about the thirteen root servers? These are owned […]

Author information

Russ White

Principle Engineer at Ericsson

Russ White is a Network Architect who's scribbled a basket of books, penned a plethora of patents, written a raft of RFCs, taught a trencher of classes, and done a lot of other stuff you either already know about, or don't really care about. You want numbers and letters? Okay: CCIE 2635, CCDE 2007:001, CCAr, BSIT, MSIT (Network Design & Architecture, Capella University), MACM (Biblical Literature, Shepherds Theological Seminary). Russ is a Principal Engineer in the IPOS Team at Ericsson, where he works on lots of different stuff, serves on the Routing Area Directorate at the IETF, and is a cochair of the Internet Society Advisory Council. Russ will be speaking in November at the Ericsson Technology Day. he recently published The Art of Network Architecture, is currently working on a new book in the area Continue reading

Making Sense of the SDN Landscape

Making Sense of the SDN Landscape

Understanding SDN, as a concept, is relatively simple. But understanding the SDN landscape can be difficult. Here are some of the major players in the SDN standards bodies landscape and why they're significant. 

The Open Networking Foundation: 

The Open Networking Foundation (ONF) is in charge of the OpenFlow standard, which defines how the control layer and delivery layer are meant to function, and the protocols for how they interact. It enables remote controllers to correctly route packets through the network, separating control from forwarding – the technological foundation of SDN. OpenFlow allows for remote administration of packet forwarding tables, and can add, modify, and remove packet matching rules and actions. ONF is a user-led organization that promotes the adoption of SDN. A number of switch and router vendors have announced to support or are shipping supported gear for OpenFlow, including Alcatel-Lucent, Big Switch Networks, Brocade Communication, Arista Networks, Cisco, Dell Force10, Extreme Networks, IBM, Juniper Networks, Larch Networks, HP, NEC, and MikroTik. 

OpenDaylight Project: 

OpenDaylight is a collaborative open source project hosted by The Linux Foundation. It's a consortium of about 20 Continue reading

PSA: Global IPv4 Routing Table Hits 500k Routes

Last week, the global IPv4 routing table has surpassed the 500 thousand route benchmark, according to the CIDR Report. The graph below shows its progression since the early nineties:

I last wrote about global IPv4 growth in August of 2009, when the table size was at a mere 300 thousand routes. While that benchmark was largely ceremonial, this one crosses a threshold which should may be of grave concern for many.

As has been pointed out on the NANOG mailing list, we are quickly approaching the hard forwarding plane capacity limits which exists on several very popular platforms, namely the Cisco 7600/6500 and RSP720/Sup720. The default TCAM partitioning scheme of these platforms allows for a maximum of 512 thousand IPv4 routes.

If you accept full Internet routes anywhere on your network, you'll want to verify the maximum table sizes for those platforms. On the 6500/7600 platform, the current partitioning scheme can be inspected with show mls cef maximum-routes:

Router# show mls cef maximum-routes
FIB TCAM maximum routes :
=======================
Current :
---------
 IPv4 + MPLS         - 512k (default)
 IPv6 + IP Multicast - 256k (default)

The good news is that it's easy to repartition the default scheme (e. Continue reading