Why Do We Need IBGP Full Mesh?

Here’s another question from the excellent list posted by Daniel Dib on Twitter:

BGP Split Horizon rule says “Don’t advertise IBGP-learned routes to another IBGP peer.” The purpose is to avoid loops because it’s assumed that all of IBGP peers will be on full mesh connectivity. What is the reason the BGP protocol designers made this assumption?

Time for another history lesson. BGP was designed in late 1980s (RFC 1105 was published in 1989) as a replacement for the original Exterior Gateway Protocol (EGP). In those days, the original hub-and-spoke Internet topology with NSFNET core was gradually replaced with a mesh of interconnections, and EGP couldn’t cope with that.

Read more …

Why Do We Need IBGP Full Mesh?

Here’s another question from the excellent list posted by Daniel Dib on Twitter:

BGP Split Horizon rule says “Don’t advertise IBGP-learned routes to another IBGP peer.” The purpose is to avoid loops because it’s assumed that all of IBGP peers will be on full mesh connectivity. What is the reason the BGP protocol designers made this assumption?

Time for another history lesson. BGP was designed in late 1980s (RFC 1105 was published in 1989) as a replacement for the original Exterior Gateway Protocol (EGP). In those days, the original hub-and-spoke Internet topology with NSFNET core was gradually replaced with a mesh of interconnections, and EGP couldn’t cope with that.

Read more …

Cisco launches 10-year plan to train 25 million people in IT skills

As Cisco celebrates the 25th anniversary of Cisco Networking Academy, the company on Tuesday announced two new certifications and a plan to provide networking, cybersecurity and general IT  training to 25 million people over the next 10 years.The training will be done through the company's networking academy, an IT skills-to-jobs program that provides IT courses, learning simulators, and hands-on learning opportunities, supporting instructors and learners in 190 countries. To date, Cisco says more than 17.5 million global learners have taken Cisco Networking Academy courses to gain IT skills, with 95% of students attributing their post-course job or education opportunity to Cisco Networking Academy.To read this article in full, please click here

Cisco launches 10-year plan to train 25 million people in IT skills

As Cisco celebrates the 25th anniversary of Cisco Networking Academy, the company on Tuesday announced two new certifications and a plan to provide networking, cybersecurity and general IT  training to 25 million people over the next 10 years.The training will be done through the company's networking academy, an IT skills-to-jobs program that provides IT courses, learning simulators, and hands-on learning opportunities, supporting instructors and learners in 190 countries. To date, Cisco says more than 17.5 million global learners have taken Cisco Networking Academy courses to gain IT skills, with 95% of students attributing their post-course job or education opportunity to Cisco Networking Academy.To read this article in full, please click here

Fortinet’s SASE enhancements target remote-user access to private cloud, SaaS apps

New capabilities in Fortinet's secure access service edge (SASE) package are designed to help customers better secure their private and cloud-based assets.Fortinet added Secure Private Access and Secure SaaS Access features to its FortiSASE security platform, which includes SD-WAN, secure web gateway, firewall as a service, and zero-trust network access. All of Fortinet’s offerings run on top of its FortiOS operating system.To read this article in full, please click here

T-Mobile, Spectrum top mobile and fixed broadband speed test ratings

T-Mobile retained its place as the consensus fastest mobile data provider in the US, posting a median download speed of 116Mbps and outstripping Verizon and AT&T by a roughly two-fold margin in the latest market analysis report from network analysis firm Ookla. Additionally, the report—based on tests in the third quarter—found that Spectrum topped the rankings for fastest fixed broadband service, beating out Cox and Xfinity for the top spot with a median download speed of 211Mbps.The figures were gathered via Ookla’s online Speedtest website, which lets users test their internet connections for upload speed, download speed, latency and more.To read this article in full, please click here

HS035 Quiet Quitting Hustle Culture

Whats the deal with Quiet Quitting ? Johna & Greg get into a heated debate about the nature of work. Johna wants people to ‘do your job’, Greg wants ‘pay me more to do more’. How much can a companies expect from their employees as hustle culture is being rejected by more people.

Internet disruptions overview for Q3 2022

Internet disruptions overview for Q3 2022
Internet disruptions overview for Q3 2022

Cloudflare operates in more than 275 cities in over 100 countries, where we interconnect with over 10,000 network providers in order to provide a broad range of services to millions of customers. The breadth of both our network and our customer base provides us with a unique perspective on Internet resilience, enabling us to observe the impact of Internet disruptions. In many cases, these disruptions can be attributed to a physical event, while in other cases, they are due to an intentional government-directed shutdown. In this post, we review selected Internet disruptions observed by Cloudflare during the third quarter of 2022, supported by traffic graphs from Cloudflare Radar and other internal Cloudflare tools, and grouped by associated cause or common geography. The new Cloudflare Radar Outage Center provides additional information on these, and other historical, disruptions.

Government directed shutdowns

Unfortunately, for the last decade, governments around the world have turned to shutting down the Internet as a means of controlling or limiting communication among citizens and with the outside world. In the third quarter, this was an all too popular cause of observed disruptions, impacting countries and regions in Africa, the Middle East, Asia, and the Caribbean.

Iraq

As Continue reading

How Calico CNI solves IP address exhaustion on Microsoft AKS

Companies are increasingly adopting managed Kubernetes services, such as Microsoft Azure Kubernetes Service (AKS), to build container-based applications. Leveraging a managed Kubernetes service is a quick and easy way to deploy an enterprise-grade Kubernetes cluster, offload mundane operations such as provisioning new nodes, upgrading the OS/Kubernetes, and scaling resources according to business needs.

AKS also provides a fault-tolerant Kubernetes control plane endpoint and automates the worker node maintenance and deployment process. With regards to networking within the cluster, AKS provides an integrated CNI to address basic Kubernetes networking requirements, such as configuring network interfaces and providing connectivity between pods. However, the basic container networking in Microsoft AKS comes with a limited set of IP addresses. As businesses grow, so does application usage. Having a limited set of IPs can cause scale, availability, and manageability challenges for Microsoft AKS users.

In this blog post, I will discuss IP address exhaustion on Microsoft AKS and how Calico can solve this issue. I will also explore how Calico can address scalability challenges and provide resources that can quickstart your journey in using Calico to solve IP address exhaustion on AKS.

Microsoft AKS BYOCNI

Earlier this year, Microsoft AKS introduced the ability to bring Continue reading

Cisco powers up Nexus switch, offers 800GB optic modules

Cisco is using its high-powered Silicon One chip technology to turn up the power and efficiency of its Nexus family of data center, hyperscaler and cloud switches.The company rolled out a new high-end Nexus switch for the data center and one aimed at disaggregated applications. Cisco also added an 800Gb Ethernet module. Each of the new additions is powered by the company’s advanced Silicon One technology.   Introduced in 2019, Cisco’s Silicon One architecture uses the vendor’s custom chip technology, which features optical-routing silicon, deep buffering with rich QoS, and programmable forwarding.Silicon One boxes are programmable and can be customized for a range of applications from a single chipset, eliminating the need to deploy multiple, specific silicon for standalone processors, line-card processors, and fabric elements, according to Cisco. This is accomplished with a common and unified P4 programmable-forwarding code and SDK, Cisco says.To read this article in full, please click here

Oracle extends cloud options with Alloy launch

Oracle is giving cloud control to its partners and customers with the launch of Oracle Alloy, an infrastructure platform that lets organizations build and deploy custom cloud services using their own hardware and data centers.The Alloy platform is built on Oracle Cloud Infrastructure (OCI), the vendor’s portfolio of IaaS, PaaS, SaaS and other cloud services.“Oracle has spent a lot of money and effort to build out OCI. They’re really keen on growing share, and they’re going after programs like Alloy aggressively to do so,” said analyst Chris Kanaracus, a research director in IDC’s worldwide infrastructure practice. “Oracle is incentivized to be as appealing to customers – on economics and flexibility and localization – as possible.”To read this article in full, please click here

Oracle extends cloud options with Alloy launch

Oracle is giving cloud control to its partners and customers with the launch of Oracle Alloy, an infrastructure platform that lets organizations build and deploy custom cloud services using their own hardware and data centers.The Alloy platform is built on Oracle Cloud Infrastructure (OCI), the vendor’s portfolio of IaaS, PaaS, SaaS and other cloud services.“Oracle has spent a lot of money and effort to build out OCI. They’re really keen on growing share, and they’re going after programs like Alloy aggressively to do so,” said analyst Chris Kanaracus, a research director in IDC’s worldwide infrastructure practice. “Oracle is incentivized to be as appealing to customers – on economics and flexibility and localization – as possible.”To read this article in full, please click here

Direct Connect — Part 2 — Public VIF

< MEDIUM: https://towardsaws.com/direct-connect-part-2-public-vif-5bc0a2d2c478 >

First Post ( Direct Connect – Part 1 )- https://raaki-88.medium.com/direct-connect-part-1-dc3e9369933

Direct Connect offering though it connects to AWS has a difference in operation depending on the VIF we connect.

Public VIF

→ So when we have this setup, this is in no way related to VPC at all, all this does is advertise Amazon-owned Public Prefixes for services like S3/EC2(Elastic-IP only, not your Private IP), and that’s all to it.

→ There is flexibility at the customer end to scope the advertisement propagation t LOCAL, CONTINENT, and GLOBAL levels within AWS in an outbound direction and has the flexibility to filter inbound updates which are advertised toward him.

Here is by default, how the Community scope looks like, you also have the flexibility to filter routes inbound to customers.

Note: Outbound communities restrict the advertisement of prefixes to region/continent/global scope for any sort of Any-cast implementations.

if the Customer sends a route with a community

7224:9100 → This will be local to the region

7224:9200 → This will be local to the continent, the scope is till the EU

7224:9300 → Global, by default its global even if you don’t export Continue reading

On Applicability of MPLS Segment Routing (SR-MPLS)

Whenever I compare MPLS-based Segment Routing (SR-MPLS) with it’s distant IPv6-based cousin (SRv6), someone invariably mentions the specter of large label stacks that some hardware cannot handle, for example:

Do you think vendors current supported label max stack might be an issue when trying to route a packet from source using Adj-SIDs on relatively big sized (and meshed) cores? Many seem to be proposing to use SRv6 to overcome this.

I’d dare to guess that more hardware supports MPLS with decent label stacks than SRv6, and if I’ve learned anything from my chats with Laurent Vanbever, it’s that it sometimes takes surprisingly little to push the traffic into the right direction. You do need a controller that can figure out what that little push is and where to apply it though.

Read more …
1 … 417 418 419 420 421 … 3,841