Captain Take 5 – Nuno do Carmo

Docker Captains are select members of the community that are both experts in their field and are passionate about sharing their Docker knowledge with others. “Docker Captains Take 5” is a regular blog series where we get a closer look at our Captains and ask them the same broad set of questions ranging from what their best Docker tip is to whether they prefer cats or dogs (personally, we like whales and turtles over here). Today, we’re interviewing Nuno do Carmo who has been a Docker Captain since 2019. He is a Sr System Analyst for a pharmaceutical company based in Switzerland and he is based in Montreux.

How/when did you first discover Docker?

Back in 2015, I was hanging with friends and we would meet once a week to check on technologies and we found out a training on Pluralsight, given by a certain Nigel Poulton, and we decided to “temporarily” download it, **cough**.

Both the training method from Nigel and the technology of Docker were an instant hit for us. We started to learn as hobbyists and fast forward, I guess I took it more at heart than my friends, haha.

What is your favorite Docker command?

`docker Continue reading

Making Firefox on Linux use Private Browsing by Default

While there are a couple different methods to make Firefox use private browsing by default (see this page for a couple methods), these methods essentially force private browsing and disable the ability to use “regular” (non-private) browsing. In this post, I’ll describe what I consider to be a better way of achieving this, at least on Linux.

It’s possible this method will also work on Windows, but I haven’t tested it. If anyone gets a chance to test it and let me know, I’ll update this post and credit you accordingly. Just hit me on Twitter and let me know what you’ve found in your testing. I’ve also only tested this on Fedora, but it should be the same or very similar for any distribution that uses GNOME.

GNOME uses the idea of “desktop files” (typically found in /usr/share/applications or ~/.local/share/applications) to enable the launching of applications via the Activities screen or other mechanisms. (For more information on desktop files, see here.) These desktop files specify where the executable is found, what command-line parameters to use, what icon to use, what name the application should go by, etc. Desktop files also allow application developers or users Continue reading

In Defense Of EIGRP With Zig Zsiga And Ethan Banks – Video

Zig Zsiga and Ethan Banks talk through use cases for the sometimes maligned EIGRP, a popular choice in Cisco networks for decades. The conversation covers EIGRP design basics, the stuck-in-active problem, stub routing, and RFC7868. Comparisons are made to how OSPF design differs to accomplish similar goals. This was originally published as an audio-only podcast […]

The post In Defense Of EIGRP With Zig Zsiga And Ethan Banks – Video appeared first on Packet Pushers.

Defense in Depth: The First Step to Security Certainty

Allen McNaughton Allen is the Director of Technical Sales, Public Sector at InfoBlox. He has over 20 years of experience in developing security solutions for service providers, public sector and enterprise customers. Bad actors are constantly coming up with ways to evade defensive techniques put in place by government agencies, educational institutions, healthcare providers, companies and other organizations. To keep up, network security needs what’s known as “defense in depth” — a strategy that leverages different security solutions to provide robust and comprehensive security against unauthorized intruders. Think about securing your house — locks on your doors only protect your doors. But if you have locks on your doors and windows, a high fence, security cameras, an alarm system and two highly trained guard dogs, you have what we call “defense in depth.” The same goes for networks. When it comes to building a defense-in-depth strategy for your network, the first and most important feature is visibility — knowing what is on your network. Why Visibility? Because You Can’t Protect What You Can’t See If you can’t see it, you can’t protect it — it’s obvious if you think about it. Without understanding the devices, hardware, software and traffic Continue reading

Bringing AI to the edge with NVIDIA GPUs

Bringing AI to the edge with NVIDIA GPUs
Bringing AI to the edge with NVIDIA GPUs

Cloudflare has long used machine learning for bot detection, identifying anomalies, customer support and business intelligence.  And internally we have a cluster of GPUs used for model training and inference.

For even longer we’ve been running code “at the edge” in more than 200 cities worldwide. Initially, that was code that we wrote and any customization was done through our UI or API. About seven years ago we started deploying custom code, written in Lua, for our enterprise customers.

But it’s quite obvious that using a language that isn’t widely understood, and going through an account executive to get code written, isn’t a viable solution and so four years ago we announced Cloudflare Workers. Workers allows anyone, on any plan, to write code that gets deployed to our edge network. And they can do it in the language they choose.

After launching Workers we added storage through Workers KV as programs need algorithms plus data. And we’ve continued to add to the Workers platform with Workers Unbound, Durable Objects, Jurisdictional Restrictions and more.

But many of today’s applications need access to the latest machine learning and deep learning methods. Those applications need three things: to scale easily, Continue reading

What’s In A Title? Network Engineer Vs. Professional Or Licensed Engineer

In the US, do not call yourself a "Professional Engineer" or "Licensed Engineer" as your title. Those are specially reserved titles for those who actually ARE licensed. However, calling yourself a "Network Engineer" is okay. If you want to know more details, read on.

The post What’s In A Title? Network Engineer Vs. Professional Or Licensed Engineer appeared first on Packet Pushers.

Don’t Poke Holes in Our Digital Security Shield

In only a few days the European Union will close the doors on our chance to provide feedback on an initiative which could grant law enforcement agencies backdoor access to encrypted messaging services. Doing this would poke holes in our most important digital security shield. It misleadingly claims it to protect kids’ safety online. As […]

The post Don’t Poke Holes in Our Digital Security Shield appeared first on Internet Society.

Finally! Local Traffic Remained Local

During a recent broadcast of an Italian Series A Championship football match, something extraordinary was happening behind the scenes. Local Internet traffic remained local. Cristiano Zanforlin, Chief Commercial Officer of Milan Internet Exchange (MIX), Flavio Luciani, Chief Technology Officer of Consorzio Namex, and Luca Cicchelli, Interconnection Manager of Consorzio TOP-IX, explain how Italian IXPs helped […]

The post Finally! Local Traffic Remained Local appeared first on Internet Society.

Location-based personalization at the edge with Cloudflare Workers

Location-based personalization at the edge with Cloudflare Workers
Location-based personalization at the edge with Cloudflare Workers

We’re excited to announce an update to Cloudflare Workers, our serverless code platform built on our global network. Geolocation data is now accessible and free for all developers on our Workers platform, including users on the free plan!

You can now serve personalized experiences for users based on their location using Workers. Personalization is critical to building intuitive apps for users and it unlocks new possibilities for what you can build on our platform. Whether you’re building a social networking app or an automatic shipping cost estimator for an e-commerce site, a one-size-fits-all experience doesn’t cut it. Location-based personalization helps you show what’s most relevant to your users, be it tickets for movies in their area or content in their local language.

With geolocation data available on the server side, there’s no configuration needed for users to set their location.

Each request to a Worker includes the user’s (example data shown):

  • Country: “US”
  • City: “Austin”
  • Continent: “NA”
  • Latitude: "30.27130"
  • Longitude: “-97.74260”
  • Postal code: "78701"
  • Metro code(dma): “635”
  • Region: “Texas”
  • Timezone: “America/Chicago”

Geolocation data on Workers makes it even easier to build server rendered apps and customized services.

Refer to the documentation to learn more.

In case you need Continue reading

Expanding the Cloudflare Workers Observability Ecosystem

Expanding the Cloudflare Workers Observability Ecosystem
Expanding the Cloudflare Workers Observability Ecosystem

One of the themes of Developer Week is “it takes a village”, and observability is one area where that is especially true. Cloudflare Workers lets you quickly write code that is infinitely scalable — no availability regions, no scaling policies. Your code runs in every one of our data centers by default: region Earth, as we like to say. While fast time to market and effortless scale are amazing benefits, seasoned developers know that as soon as your code is in the wild… stuff happens, and you need the tools in place to investigate, diagnose, fix and monitor those issues.

Today we’re delighted to add to our existing analytics partners. We’re announcing new partnerships with six observability-focused companies that are deeply integrated into the Cloudflare Workers ecosystem. We’re confident these partnerships will provide immediate value in building the operational muscle to maintain and make your next generation of applications fast, secure and bullet-proof in production.

Expanding the Cloudflare Workers Observability Ecosystem

console.log(`Got request. Extracted name=${name}. Saving…`);

Cloudflare wrangler gives you the ability to generate, configure, build, preview and publish your projects, from the comfort of your dev environment. Writing code in your favorite IDE with a fully-fledged CLI tool that also allows you to simulate Continue reading

10 of the best ways to get help on Linux

Just because Linux appeals to the nerdiest of nerds doesn't mean that it can't be extremely helpful for those who don't want to spend a lot of time delving into the technical details of how to use various commands. In fact, Linux provides a series of tools that can help anyone master the command line or just get the task at hand done more quickly and efficiently. This post covers 10 of the best options.man pages You can always go to the man pages to answer usage and syntax questions you might have on a Linux command. Just type "man" followed by the name of the command (e.g., man ps), and you'll get a lot of descriptive information. On the other hand, if you really just want to see some examples of how to use a particular command, the content of a man page might be a lot more than you want to comb through. In the remainder of this post, I'll explain some other options for finding the command that you need and learning how to use it.To read this article in full, please click here

10 of the best ways to get help on Linux

Just because Linux appeals to the nerdiest of nerds doesn't mean that it can't be extremely helpful for those who don't want to spend a lot of time delving into the technical details of how to use various commands. In fact, Linux provides a series of tools that can help anyone master the command line or just get the task at hand done more quickly and efficiently. This post covers 10 of the best options.man pages You can always go to the man pages to answer usage and syntax questions you might have on a Linux command. Just type "man" followed by the name of the command (e.g., man ps), and you'll get a lot of descriptive information. On the other hand, if you really just want to see some examples of how to use a particular command, the content of a man page might be a lot more than you want to comb through. In the remainder of this post, I'll explain some other options for finding the command that you need and learning how to use it.To read this article in full, please click here

AT&T picked as top managed-SD-WAN provider for the third year

AT&T, Hughes, and Verizon were selected as the top three SD-WAN providers for the third year in a row in the latest Vertical Systems Group rankings for year-end 2020. Comcast jumped to fourth place.Despite the pandemic, expansion of carrier-managed SD-WAN services in the U.S. increased 39% in 2020. Demand was resilient across bandwidth-intensive markets, but vulnerable for verticals like retail and travel.Vertical Systems Group is an independent market research firm focused on network services. Each year it issues its Carrier Managed SD-WAN Services Leaderboard.The one notable change was Comcast has replaced Lumen Technologies in fourth place, moving up from seventh position in 2019. Lumen is now in sixth, Windstream remains in fifth and Aryaka dipped from sixth to seventh.To read this article in full, please click here

Nokia Lab | LAB 3 IS-IS |


Hello everyone!

It's the next Nokia lab. Today we will review routing protocol widely spread across service providers networks. 
Please check my first lab for input information.

Topology example



















Lab tasks and questions:
  • Basic IS-IS
  • configure IS-IS between R1 and R2 (use P2P interface type, Level 2 only, "system" interface as passive, area 49.01)
  • check neighbors state
  • examine IS-IS control plane PDUs (You can use debug or packet capture)
  • describe all IS-IS PDU and their purpose
  • What transport does IS-IS use for control plane PDU delivery? Any difference with OSPF?
  • Examine destination MAC address of control plane PDU
  • examine LSDB
    • examine LSP in detail
    • What TLV types does it contain? Examine every TLV
  • examine route table
    • What is the default preference of IS-IS routes?
    • What is max-metric of IS-IS routes (default configuration)?
    • How to change behavior? How to take into account link bandwidth? 
    • Multi-area IS-IS
    • configure R3 and R4 as L1/L2 IS-IS routers (use P2P interface type, area 49.02)
    • configure R5 and R6 as L1-only IS-IS routers (use P2P interface type, area 49.02)
    • check IS-IS adjacency on R3
    • What adjacency types do you see?
  • examine LSDB on R3
    • make attention to LSP attributes

    Must Read: Automate Nexus-OS Fabric Deployment

    Some networking engineers breeze through our Network Automation online course, others disappear after a while… and a few of those come back years later with a spectacular production-grade solution.

    Stephen Harding is one of those. He attended the automation course in spring 2019 and I haven’t heard from him in almost two years… until he submitted one of the most mature data center fabric automation solutions I’ve seen.

    Not only that, he documented the solution in a long series of must-read blog posts. Hope you’ll find them useful; I liked them so much I immediately saved them to Internet Archive (just in case).

    Must Read: Automate Nexus-OS Fabric Deployment

    Some networking engineers breeze through our Network Automation online course, others disappear after a while… and a few of those come back years later with a spectacular production-grade solution.

    Stephen Harding is one of those. He attended the automation course in spring 2019 and I haven’t heard from him in almost two years… until he submitted one of the most mature data center fabric automation solutions I’ve seen.

    Not only that, he documented the solution in a long series of must-read blog posts. Hope you’ll find them useful; I liked them so much I immediately saved them to Internet Archive (just in case).

    Nvidia announces a 2023 launch for an HPC CPU named Grace

    Nvidia kicked off its GPU Technology Conference (GTC) 2021 with a bang: A new CPU for high performance computing (HPC) clients--its first-ever data-center CPU--called Grace.Based on the Arm Neoverse architecture, NVIDIA claims Grace will serve up to 10-times better performance than the fastest servers currently on the market for complex artificial intelligence and HPC workloads.But that’s comparing then and now. Grace won’t ship until 2023, and in those two years competitors will undoubtedly up their game, too. But no one has ever accused CEO Jen-Hsun Huang of being subdued.Nvidia made a point that Grace is not intended to compete head-to-head against Intel's Xeon and AMD's EPYC processors. Instead, Grace is more of a niche product, in that it is designed specifically to be tightly coupled with NVIDIA's GPUs to remove bottlenecks for complex AI and HPC applications.To read this article in full, please click here

    Nvidia announces a 2023 launch for an HPC CPU named Grace

    Nvidia kicked off its GPU Technology Conference (GTC) 2021 with a bang: A new CPU for high performance computing (HPC) clients--its first-ever data-center CPU--called Grace.Based on the Arm Neoverse architecture, NVIDIA claims Grace will serve up to 10-times better performance than the fastest servers currently on the market for complex artificial intelligence and HPC workloads.But that’s comparing then and now. Grace won’t ship until 2023, and in those two years competitors will undoubtedly up their game, too. But no one has ever accused CEO Jen-Hsun Huang of being subdued.Nvidia made a point that Grace is not intended to compete head-to-head against Intel's Xeon and AMD's EPYC processors. Instead, Grace is more of a niche product, in that it is designed specifically to be tightly coupled with NVIDIA's GPUs to remove bottlenecks for complex AI and HPC applications.To read this article in full, please click here

    Cisco DevNet certifications: 10k awarded in first year

    In the year since Cisco revamped its DevNet certification portfolio to focus more on network programing, automation and application development, the need for those software-based skillsets has never been more important. IT Salary Survey on Insider Pro IT Salary Survey 2021: The results are in IT Salary Survey 2021: Compensation holds steady despite pandemic IT Salary Survey 2021: Hiring rate expected to increase but priorities will shift IT Salary Survey 2021: Over half of IT pros are satisfied at work – but nearly half are job hunting IT Salary Survey 2021: Security and cloud computing certifications on the up The requirement for software skills in the networking environment is being driven by a number of factors including the tremendous increase in the use of automation, the need to have an intelligent pipeline to remote users, and the growing necessity to efficiently network and secure multicloud resources. Many of these changes were already underway of course, but tons more are being driven by the COVID-19 pandemic’s impact on many enterprise data-center, campus and wide area network operations.To read this article in full, please click here