0

EVPN VLAN-Aware Bundle Service

In the EVPN/MPLS Bridging Forwarding Model blog post I mentioned numerous services defined in RFC 7432. That blog post focused on VLAN-Based Service Interface that mirrors the Carrier Ethernet VLAN mode.

RFC 7432 defines two other VLAN services that can be used to implement Carrier Ethernet services:

• Port-based service – whatever is received on the ingress port is sent to the egress port(s)
• VLAN bundle service – multiple VLANs sharing the same bridging table, effectively emulating single outer VLAN in Q-in-Q bridging.

And then there’s the VLAN-Aware Bundle Service, where a bunch of VLANs share the same MPLS pseudowires while having separate bridging tables.

0

SASE: The Final Destination; A SASE Conversation with Craig Connors of VMware

A conversation about what's driving Secure Access Service Edge (SASE), its benefits, and how best to eliminate confusion in the market.

0

Google launches VMs powered by newest Intel Xeon

Google Cloud announced new virtual machines as part of its cloud platform based on Intel’s newest Xeon Scalable processors.In addition to the new C3 virtual machine series, Google also announced it is deploying Infrastructure Processing Units (IPU), which are designed to intelligently route network traffic and take the load of network data processing off the CPU. The  company made the announcements at its Google Cloud Next ’22 conference held virtually.The IPU chip, formally known as the E2000, was co-designed by Google and Intel together and features 16 Arm Neoverse cores and 200GbE networking.C3 machine instances deliver performance gains of up to 20% over previous generation of C2 instances. They also benefit from a recent product launch called Hyperdisk, a block storage system that offers 80% higher IOPS per vCPU for data analytics and DBMS workloads when compared to other hyperscalers,To read this article in full, please click here

0

Hedge 150: Micah Beck and Universal Broadband

What would the Internet look like—or what kinds of services would need to be developed and deployed—to make boradband class service available to every user? What could this kind of development do to drive entire societies forward? Micah Beck, from the University of Tennessee, joins Tom Ammon and Russ White to discuss universal broadband on this episode of the Hedge.

download

0

Portnox adds IoT fingerprinting to network access control service

The IoT fingerprinting feature will allow companies to fully identify IoT devices that don't have the storage or processing capabilities to communicate complete identifying information such as model number, or even device type.

0

Portnox adds IoT fingerprinting to network access control service

The IoT fingerprinting feature will allow companies to fully identify IoT devices that don't have the storage or processing capabilities to communicate complete identifying information such as model number, or even device type.

0

After Long Last, A Commercial-Grade SONiC Network Operating System

It is perplexing to us that the world’s largest distributor of client and server operating systems and also the creator of the Linux-based, open source SONiC network operating system – that would be Microsoft with its Windows and Windows Server franchises – did not see the benefit or the need to commercialize SONiC and lead the open networking revolution. …

After Long Last, A Commercial-Grade SONiC Network Operating System was written by Timothy Prickett Morgan at The Next Platform.

0

Day Two Cloud 167: Interviewing At A Huge Tech Company

On today's Day Two Cloud we talk about what it's like to interview for a job at a massive tech company. How do you get yourself in line? What can you expect from the interview? How do you prepare? How do you overcome your own imposter syndrome? Our guest is Nathaniel Avery, Outbound Product Manager at Google Cloud. He recently ran the gauntlet of the tech interview, and is here to share tips and insights on the process.

0

Day Two Cloud 167: Interviewing At A Huge Tech Company

On today's Day Two Cloud we talk about what it's like to interview for a job at a massive tech company. How do you get yourself in line? What can you expect from the interview? How do you prepare? How do you overcome your own imposter syndrome? Our guest is Nathaniel Avery, Outbound Product Manager at Google Cloud. He recently ran the gauntlet of the tech interview, and is here to share tips and insights on the process.

The post Day Two Cloud 167: Interviewing At A Huge Tech Company appeared first on Packet Pushers.

0

Tier 1 Carriers Performance Report: September, 2022

The post Tier 1 Carriers Performance Report: September, 2022 appeared first on Noction.

0

The Edge Is The New Frontier For IT

The datacenter is becoming hyperdistributed and incorporating some multiple of capacity – 2X, 3X, 4X, or maybe 10X – outside of the traditional datacenter walls because applications and storage live increasingly at the edge. …

The Edge Is The New Frontier For IT was written by Jeffrey Burt at The Next Platform.

0

Confluent: Have We Entered the Age of Streaming?

Three years ago, when we posed the question, “Apache Kafka was emerging as the default go-to-publish/subscribe messaging engine for the cloud era. At the time, we drew comparisons with IPO’ed while Databricks continues Pulsar recently emerged as a competing project, but is it game over? Hyperscalers are offering alternatives like Azure Event Hub, and AWS co-markets Confluent Cloud, with a similar arrangement with Jay Kreps evangelized streaming using electricity as the metaphor. Kreps positioned streaming as pivotal to the next wave of apps in chicken and egg terms. That is, when electricity Continue reading

0

Cloudflare DDoS threat report 2022 Q3

This post is also available in Français, Español, Português, 한국어, 简体中文, 繁體中文, and 日本語.

Welcome to our DDoS Threat Report for the third quarter of 2022. This report includes insights and trends about the DDoS threat landscape - as observed across Cloudflare’s global network.

Multi-terabit strong DDoS attacks have become increasingly frequent. In Q3, Cloudflare automatically detected and mitigated multiple attacks that exceeded 1 Tbps. The largest attack was a 2.5 Tbps DDoS attack launched by a Mirai botnet variant, aimed at the Minecraft server, Wynncraft. This is the largest attack we’ve ever seen from the bitrate perspective.

It was a multi-vector attack consisting of UDP and TCP floods. However, Wynncraft, a massively multiplayer online role-playing game Minecraft server where hundreds and thousands of users can play on the same server, didn’t even notice the attack, since Cloudflare filtered it out for them.

General DDoS attack trends

Overall this quarter, we've seen:

• An increase in DDoS attacks compared to last year.
• Longer-lasting volumetric attacks, a spike in attacks generated by the Mirai botnet and its variants.
• Surges in attacks targeting Continue reading

0

OSPF External Routes (Type-5 LSA) Mysteries

Daniel Dib posted a number of excellent questions on Twitter, including:

While forwarding a received Type-5 LSA to other areas, why does the ABR not change the Advertising Router ID to it’s own IP address? If ABR were able to change the Advertising Router ID in the Type-5 LSA, then there would be no need for Type-4 LSA which meant less OSPF overhead on the network.

TL&DR: The current implementation of external routes in OSPF minimizes topology database size (memory utilization)

Before going to the details, try to imagine the environment in which OSPF was designed, and the problems it was solving.

0

OSPF External Routes (Type-5 LSA) Mysteries

Daniel Dib posted a number of excellent questions on Twitter, including:

While forwarding a received Type-5 LSA to other areas, why does the ABR not change the Advertising Router ID to it’s own IP address? If ABR were able to change the Advertising Router ID in the Type-5 LSA, then there would be no need for Type-4 LSA which meant less OSPF overhead on the network.

TL&DR: The current implementation of external routes in OSPF minimizes topology database size (memory utilization)

Before going to the details, try to imagine the environment in which OSPF was designed, and the problems it was solving.

0

What is a network router?

By most definitions, the network router’s purpose is defined by its name – it routes packets from one location to another. But over the course of decades of internet networking, the value of the router has grown significantly, offering enterprises additional functions such as network security, content filtering, quality of service, and more.At its most basic level, a router is a device that connects networks to each other, forwarding data packets from one location to another until they reaches their destination. Within a local area network (LAN), a router can also allow multiple devices to use the same Internet connection, such as how a home router allows users to connect their laptops, phones and tablets (among countless other devices) at the same time.To read this article in full, please click here

0

What is a network router?

By most definitions, the network router’s purpose is defined by its name – it routes packets from one location to another. But over the course of decades of internet networking, the value of the router has grown significantly, offering enterprises additional functions such as network security, content filtering, quality of service, and more.At its most basic level, a router is a device that connects networks to each other, forwarding data packets from one location to another until they reaches their destination. Within a local area network (LAN), a router can also allow multiple devices to use the same Internet connection, such as how a home router allows users to connect their laptops, phones and tablets (among countless other devices) at the same time.To read this article in full, please click here

0

IPv6 Extension Headers Revisited

The topic of the robustness of IPv6 Extension Headers has experienced a resurgence of interest in recent months. I’d like to update our earlier report on this topic with some more recent measurement data.

0

Palo Basic Setup

A run through using the CLI to set up a Palo firewall at home covering the initial configuration, upgrading, BGP routing and a basic firewall policy.

0

Tech Bytes: Get Early Attack Detection And Fast Response With Fortinet FortiDeceptor (Sponsored)

Today on the Tech Bytes podcast we’re talking deception. That is, deceiving attackers that try to exploit your network by creating fake assets and infrastructure. Sponsor Fortinet is here to talk about using deception techniques to spot intruders via its FortiDeceptor product. We’ll also talk about threat reconnaissance capabilities of a product called FortiRecon. Our guest is Moshe Ben Simon, VP of Product Management.