Weekend Reads 050121


Attacks on virtual private networks, like those this week targeting a trio of known vulnerabilities in Pulse Secure appliances, have intensified in recent months along with the increase in remote and hybrid work environments since the outbreak of COVID-19.


Over the last couple of years, policy-making institutions have been putting greater focus on the study of various aspects of Artificial Intelligence (AI). This doesn’t come as a surprise.


Forty-six percent of all malware uses the cryptographic protocol to evade detection, communicate with attacker-controlled servers, and to exfiltrate data, new study shows.


One position I think more people should be aware of is a CISO. What does this actually mean – besides being made redundant when a breach is announced? I have personally worked within a CISO-as-a-Service position, but I wanted to get some more insight from those who are working in the trenches daily in an in-house CISO position.


According to Help Net Security, organizations in the pharmaceutical and biotech sectors witnessed a 50% increase in digital attacks between 2019 and 2020. It appears that at least part of those attacks originated from nation-state actors who specifically sought to steal COVID-19 vaccine research.


As further proof of this, new research Continue reading

VyControl – Web UI for VyOS Firewall

VyControl project is a single frontend interface to manage a single or multiple VyoS servers. It was developed by Roberto Berto and is written in Django/Python. It currently supports firewall and static routes configuration. Additional features are planned such as IPSEC, openvpn and basic dynamic routing. My goal is to provide easy-to-reproduce installation steps so […]
Continue reading...

RFC 7868: The Definitive EIGRP Guide

Seventeen years after I started working on my EIGRP book, the reverse engineering days were over: RFC 7868 is the definitive guide to modern EIGRP (I’m not familiar with at least half of the concepts mentioned in it).

Just in case you’re interested in a bit of historical trivia:

  • My EIGRP deciphering history started a few years before the book was published. In mid-1990s I was asked (as an external trainer) to create an EIGRP course for Cisco EMEA Training.
  • I’ve never seen any internal EIGRP documentation or code – everything I knew about EIGRP I’ve learned from trying out crazy stuff and deciphering debugging messages.
  • Two of the RFC authors (Russ White and Don Slice) were the technical reviewers for my EIGRP book. Russ copiously rewrote my pidgin English into something understandable – if you like reading my blog posts today, you should (also) thank Russ.

RFC 7868: The Definitive EIGRP Guide

Seventeen years after I started working on my EIGRP book, the reverse engineering days were over: RFC 7868 is the definitive guide to modern EIGRP (I’m not familiar with at least half of the concepts mentioned in it).

Just in case you’re interested in a bit of historical trivia:

  • My EIGRP deciphering history started a few years before the book was published. In mid-1990s I was asked (as an external trainer) to create an EIGRP course for Cisco EMEA Training.
  • I’ve never seen any internal EIGRP documentation or code – everything I knew about EIGRP I’ve learned from trying out crazy stuff and deciphering debugging messages.
  • Two of the RFC authors (Russ White and Don Slice) were the technical reviewers for my EIGRP book. Russ copiously rewrote my pidgin English into something understandable – if you like reading my blog posts today, you should (also) thank Russ.

Fast Friday Thoughts from the Woods

I’m at camp this week helping put on the second weekend of the Last Frontier Council Wood Badge course which is my idea of a vacation. I’m learning a lot, teaching a lot more, and having fun. But that does’t mean I’m not working too. Lots of fun conversations that make me recall the way people consume information, communicate what they know, and all too often overlook the important things they take for granted.

  • Why is IT one of the few disciplines that expects people to come in fully trained and do the job instead of learning while doing it? Is that because hiring managers don’t want to train people? Or is it because senior people are less likely to impart knowledge to protect their jobs? I don’t have a good answer but I know what the result looks like and it’s not something that’s positive, either for the people doing the job or how it’s perceived outside of IT.
  • There is a ton of value in doing something for real instead of just planning it and calling it good. DR plans need to be tested. Network changes need to be mocked up. No matter what kind of critical thing Continue reading

Member News: Chapters Respond to Proposed Internet Regulations

Big, big data: Several chapters of the Internet Society have joined the debate over proposed government Internet regulations. The Israeli Internet Association, for example, has raised concerns about a Ministry of Communications proposal to require all communications companies in Israel, including cellular, Internet, and television providers, to regularly give the ministry detailed information on the […]

The post Member News: Chapters Respond to Proposed Internet Regulations appeared first on Internet Society.

10 Reasons to Attend DockerCon LIVE 2021

DockerCon Live 2021 is almost here and it’s going to be one to remember. Our one-day, all-digital event on May 27 will be jam-packed with the application development technology, skills, tools and people you need to help solve the problems you face day to day — all for free.

Designed for developers by developers, this year’s event is all about modern application delivery in a cloud-native world. At DockerCon, you’ll learn how Docker helps you grow your development capacity and community connections so you can accelerate how you build, share and run your applications, and spend more of your time actually coding the next great application.

Ten Reasons to Attend

  1. Get the scoop. Be the first to see the latest Docker innovations, features and technology updates.
  2. Hear from industry leaders. In addition to Docker’s executive team, the speaker lineup includes AWS, Cockroach Labs, Instana, Mirantis, Accurics, Snyk and other companies that will share how Docker is an integral part of their software supply chain.
  3. Get up close. See live, on-demand technical demos.
  4. Connect. Network with peers and a vibrant community of developers, and connect with Docker Captains and Community Leaders.
  5. Learn. Attend tutorials on how to get started with containers Continue reading

Stuff The Internet Says On Scalability For April 30th, 2021

Hey, HighScalability is back!

This channel is the perfect blend of programming, hardware, engineering, and crazy. After watching you’ll feel inadequate, but in an entertained sort of way.

 

Love this Stuff? I need your support on Patreon to keep this stuff going.

 

Do employees at your company need to know about the cloud? My book will teach them all they need to know. Explain the Cloud Like I'm 10. On Amazon it has 285 mostly 5 star reviews. Here's a 100% bipartisan review:

Number Stuff:

Don't miss all that the Internet has to say on Scalability, click below and become eventually consistent with all scalability knowledge (which means this post has many more items to read so please keep on reading)...

Boosting Education and Research during COVID-19

When COVID-19 struck in 2020 and higher education institutions closed, National Research and Education Networks (NRENs) in Southeast Asia, instantly stepped up to ensure the continuity of education and research. We want to shine the light on how NRENs via collaboration have risen to the COVID-19 challenge of and demonstrated their commitment and creativity in […]

The post Boosting Education and Research during COVID-19 appeared first on Internet Society.

Heavy Networking 576: Deception And Canaries In Network Security

Today's Heavy Networking examines the role of deception and "canaries" in network security. A canary sits on a network segment (or multiple segments) and sounds the alarm if it comes under attack. Is this an effective security tool? How is it deployed and operated? What are the drawbacks? We discuss with guest Haroon Meer.

The post Heavy Networking 576: Deception And Canaries In Network Security appeared first on Packet Pushers.

Katacoda Scenario: netsim-tools with Containerlab and FRRouting

TL&DR: If you’d like to see how easy it is to deploy a full-blown OSPF+BGP network with netsim-tools together with Containerlab and FRRouting, check out this Katacoda scenario.

What is Katacoda? An awesome environment that allows content authors to create scenarios running on Linux VMs accessible through a web browser. I can only hope they’ll fix the quirks and keep going – I have so many ideas what could be done with it.

Why FRR? Not too long ago Jeroen van Bemmel sent me a link to a simple Katacoda scenario he created to demonstrate how to set up netsim-tools and containerlab. His scenario got the tools installed and set up, but couldn’t create a running network as there are almost no usable Network OS images on Docker Hub (that is accessible from within Katacoda) – the only image I could find was FRR.

Read more …

Red Hat buttresses edge features in RHEL 8.4

New features in Red Hat Enterprise Linux (RHEL) are tuned to provide better remote support for edge networking where processor- and memory-constrained devices can present management problems.RHEL 8.4 announced this week at Red Hat Summit has new capability to send lighter-weight universal base images and is designed for potentially less capable edge devices, letting Red Hat customers deploy edge applications more flexibly.[Get regularly scheduled insights by signing up for Network World newsletters.] In addition to the new RHEL version, Red Hat announced updates to Podman, the company’s open-source container engine, that will allow users to manage widely deployed containers from a single console, and an OpenShift update that adds support for smaller clusters and remote worker nodes makes it easier to use Kubernetes in resource-constrained locations.To read this article in full, please click here

Red Hat buttresses edge features in RHEL 8.4

New features in Red Hat Enterprise Linux (RHEL) are tuned to provide better remote support for edge networking where processor- and memory-constrained devices can present management problems.RHEL 8.4 announced this week at Red Hat Summit has new capability to send lighter-weight universal base images and is designed for potentially less capable edge devices, letting Red Hat customers deploy edge applications more flexibly.[Get regularly scheduled insights by signing up for Network World newsletters.] In addition to the new RHEL version, Red Hat announced updates to Podman, the company’s open-source container engine, that will allow users to manage widely deployed containers from a single console, and an OpenShift update that adds support for smaller clusters and remote worker nodes makes it easier to use Kubernetes in resource-constrained locations.To read this article in full, please click here

VMware Debuts A SASE Distributed Work Conglomeration Called Anywhere Workspace

VMware has announced the Anywhere Workspace. Designed to help control access to premises and cloud apps, and enforce security policies regardless of where an employee may be working, Anywhere Workspace is an assemblage of several existing products in VMware’s portfolio: endpoint management for laptops and smartphones, access control, endpoint security, and cloud-based security services. The […]

The post VMware Debuts A SASE Distributed Work Conglomeration Called Anywhere Workspace appeared first on Packet Pushers.

IBM buys Turbonomic for AIOps, hybrid-cloud management support

Big Blue kept its checkbook open this week buying AI-based application and network-performance management vendor Turbonomic for an unconfirmed estimate of $2 billion.The acquisition is the eleventh hybrid-cloud and AI-focused buy since Arvind Krishna became IBM CEO in 2020. "Hybrid cloud and AI are the two dominant forces driving change for our clients and must have the maniacal focus of the entire company,” he said at that time.Top metrics for multicloud management The Economic Times and Reuters said the deal was worth between $1.5 billion and $2 billion and would make it the largest since IBM grabbed Red Hat for $34 Billion in 2019.To read this article in full, please click here

1 … 694 695 696 697 698 … 3,795