Community Rooms at DockerCon LIVE 2021

The Docker community spans the four corners of the world. To celebrate the global nature of our community at DockerCon this year, we’ve created something new: Community Rooms.

Building on the learnings of our “regional rooms experiment” during our last Community All-Hands, Community Rooms are virtual spaces that DockerCon attendees will be able to join to discuss, share and learn about Docker in their own language and/or around a specific topic area. 

100% LIVE

The main focus of these Community Rooms is to bring people together and encourage interaction so we have set them up to be 100% live. Yep, that’s right, all the content you’ll find in these rooms, whether they’re talks, demos, workshops, panel discussions etc. will be in real-time, all broadcast over a live Zoom link. 

Hosted by the Community for the Community

Each Community Room will be overseen by Docker Captains and Community Leaders. They will be responsible for every aspect of the room, from the curation of content, to the management of the schedule, to the recruitment of the speakers, to the moderation of their room’s live chat. 

There will be seven community rooms to choose from, each with one or Continue reading

Cisco adds to its Catalyst software stack for back-to-work safety

Cisco has taken the wraps off a technology package it says will utilize existing core wireless and wired systems to help enterprises better control their physical environments and enable a safer, more secure return to the office.While supporting remote offices and branches of one—IDC says that post-COVID, more than 52% of workers will either remain remote or hybrid—they rest could return to an altered business space.  Who’s selling SASE, and what do you get? In these offices, sensors and devices that have been used to manage lighting and HVAC systems can be adapted to occupancy and density monitoring, air-quality testing, contact tracing, and in-room presence, according to Anoop Vetteth, vice president of product management with Cisco’s Enterprise Switching and Software Solutions group.To read this article in full, please click here

Cisco adds to its Catalyst software stack for back-to-work safety

Cisco has taken the wraps off a technology package it says will utilize existing core wireless and wired systems to help enterprises better control their physical environments and enable a safer, more secure return to the office.While supporting remote offices and branches of one—IDC says that post-COVID, more than 52% of workers will either remain remote or hybrid—they rest could return to an altered business space.  Who’s selling SASE, and what do you get? In these offices, sensors and devices that have been used to manage lighting and HVAC systems can be adapted to occupancy and density monitoring, air-quality testing, contact tracing, and in-room presence, according to Anoop Vetteth, vice president of product management with Cisco’s Enterprise Switching and Software Solutions group.To read this article in full, please click here

Now Storage Jumps Into HPE’s GreenLake

There has been a land rush of sorts by storage OEMs over the past few weeks to roll out systems and services designed to help enterprises manage and process the huge amounts of data that is being created and stored throughout their widely distributed IT environments. …

Now Storage Jumps Into HPE’s GreenLake was written by Jeffrey Burt at The Next Platform.

Segment Routing Segment IDs and MPLS Labels

In one of my introductory Segment Routing videos, I made claims along the lines of “Segment Routing totally simplifies the MPLS control plane, replacing LDP and local labels allocated to various prefixes with globally managed labels advertised in IGP”

It took two years for someone to realize the stupidity over-simplification of what I described. Matjaž Strauss sent me this kind summary of my errors:

You’re effectively claiming that SRGB has to be the same across all devices in the network. That’s not true; routers advertise SIDs and must configure label swap operations in case SRGBs don’t match.

Wait, what? What is SRGB and why could it be different across devices in the same network? Also, trust IETF to take a simple idea and complicate it to support vendor whims.

Segment Routing Segment IDs and MPLS Labels

In one of my introductory Segment Routing videos, I made claims along the lines of “Segment Routing totally simplifies the MPLS control plane, replacing LDP and local labels allocated to various prefixes with globally managed labels advertised in IGP”

It took two years for someone to realize the stupidity over-simplification of what I described. Matjaž Strauss sent me this kind summary of my errors:

You’re effectively claiming that SRGB has to be the same across all devices in the network. That’s not true; routers advertise SIDs and must configure label swap operations in case SRGBs don’t match.

Wait, what? What is SRGB and why could it be different across devices in the same network? Also, trust IETF to take a simple idea and complicate it to support vendor whims.

To Safeguard Today’s Networks, Security Must be Everywhere

Will Groq Re-Emerge to Steal AI Market Share?

With the AI chip startup hype cycle spinning down from its feverish pace in 2018, giving way to 2021 expectations for real-world deployments, it still difficult to see which company will steal what little share is left in the Nvidia/Intel/AMD dominated datacenter. …

Will Groq Re-Emerge to Steal AI Market Share? was written by Nicole Hemsoth at The Next Platform.

9 tips for speeding up your business Wi-Fi

The days are long past when a fast office Wi-Fi connection was a nice-to-have. These days it's essential for your business to provide clients and employees alike with a speedy, reliable wireless network.<aside class="sidebar medium"><h3 class="body">Wi-Fi resources</h3><ul><li><a href="https://www.networkworld.com/article/3541759/test-and-review-of-4-wi-fi-6-routers-whos-the-fastest.html"> Test and review of 4 Wi-Fi 6 routers: Who’s the fastest?</a></li><li><a href="https://www.networkworld.com/article/3356838/how-to-determine-if-wi-fi-6-is-right-for-you.html"> How to determine if Wi-Fi 6 is right for you</a></li><li><a href="https://www.networkworld.com/article/3510461/5-questions-to-answer-before-deploying-wi-fi-6.html">Five questions to answer before deploying Wi-Fi 6</a></li><li><a href="https://www.networkworld.com/article/3563832/wi-fi-6e-when-its-coming-and-what-its-good-for.html"> Wi-Fi 6E: When it’s coming and what it’s good for</a></li></ul></aside>To read this article in full, please click here

The Prospects For An Arm Server Insurrection

If you want to break into datacenter compute in a sustainable way, it takes the patience of a glacier. …

The Prospects For An Arm Server Insurrection was written by Timothy Prickett Morgan at The Next Platform.

Ambiguity and complexity: once more into the breach

Recent research into the text of RFCs versus the security of the protocols described came to this conclusion—

While not conclusive, this suggests that there may be some correlation between the level of ambiguity in RFCs and subsequent implementation security flaws.

This should come as no surprise to network engineers—after all, complexity is the enemy of security. Beyond the novel ways the authors use to understand the shape of the world of RFCs (you should really read the paper; it’s really interesting), this desire to increase security by decreasing the ambiguity of specifications is fascinating. We often think that writing better specifications requires having better requirements, but down this path only lies despair.

Better requirements are the one thing a network engineer can never really hope for.

It’s not just that networks are often used as a sort of “complexity sink,” the place where every hard problem goes to be solved. It’s also the uncertainty of the environment in which the network must operate. What new application will be stuffed on top of the network this week? Will anyone tell the network folks about this new application, or just open a ticket when it doesn’t work right? What about all Continue reading

Unifying Kubernetes Service Networking (Again) with the Gateway API

The in detail — and in-person — at Kubecon 2019 in San Diego. There were already many well-known and Gateway API was intended as a redo of these APIs, built on the lessons from Services, Ingress and the service mesh community. With a group of Ingress and Service

Cisco 8000 Series routers

flow exporter-map SF-EXP-MAP-1
 version sflow v5
 !
 packet-length 1468
 transport udp 6343
 source GigabitEthernet0/0/0/1
 destination 192.127.0.1
 dfbit set
!

flow monitor-map SF-MON-MAP
 record sflow
 sflow options
  extended-router
  extended-gateway
  if-counters polling-interval 300
  input ifindex physical
  output ifindex physical
 !
 exporter SF-EXP-MAP-1
!

sampler-map SF-SAMP-MAP
 random 1 out-of 20000
!

interface GigabitEthernet0/0/0/3
 flow datalinkframesection monitor-map SF-MON-MAP sampler SF-SAMP-MAP ingress

Network Break 331: Proofpoint Goes Private In $12 Billion Deal; Defense Dept. Unveils IPv4 Address Cache

Network Break 331: Proofpoint Goes Private In $12 Billion Deal; Defense Dept. Unveils IPv4 Address Cache

Guest analyst Johna Till Johnson, CEO and Founder of Nemertes Research, joins the Network Break to discuss a variety of IT news including the rising price of copper, Proofpoint going private in a $12.3 billion deal, why the US Defense Department suddenly began advertising a huge block of IPv4 addresses, and space networking.

The post Network Break 331: Proofpoint Goes Private In $12 Billion Deal; Defense Dept. Unveils IPv4 Address Cache appeared first on Packet Pushers.

The 4 Definitions of Multicloud: Part 4 — Traffic Portability

With the goal of bringing more productive discussions on this topic into focus and understanding which types of multicloud capabilities are worth pursuing, this series concludes with a look at multicloud through the lens of traffic portability. Traffic Portability Armon Dadgar Armon is co-founder and CTO of HashiCorp, where he brings his passion for distributed systems to the world of DevOps tooling and cloud infrastructure. Multicloud traffic portability means you can shift traffic between environments dynamically. If you have geographically dispersed users, traffic portability would allow you to route traffic to the nearest cloud provider that could service them. So, if your app can run on Azure and AWS, maybe there’s a closer AWS data center to your customer than Azure. Or maybe one cloud vendor works better for data sovereignty in Europe, so you route to a particular vendor only for those requests. In most cases, the goal of traffic portability is to have the ability to dynamically shift traffic very quickly between multiple cloud platforms and on-premises data centers. This could also mean you’re balancing 50/50 traffic between AWS and Azure. Or maybe you’re doing maintenance in your Google Cloud environments, so you move 100% of traffic to Continue reading

Extreme CEO talks AI, automation, chip shortages

Fresh off one of the strongest quarters in the company’s 25 year history where it hit double-digit, year-over-year revenue growth and a fourth consecutive quarter of growth, Extreme Networks is betting heavily on automation, AI and cloud management to keep the party going. Extreme Networks Extreme CEO Ed MeyercordTo read this article in full, please click here

Object Storage Makes A Push Into HPC

Four years ago, Cloudian was a six-year-old startup in an object storage space that, while the technology had been around for more than a decade, was seeing a surge of interest from cloud providers desperate for a storage architecture that only could scale to meet the demands of their rapidly growing datacenters, the massive amounts of data that was being generated and the need to be able to more easily move it between core on-premises datacenters and multiple cloud environments – and in the coming years the edge. …

Object Storage Makes A Push Into HPC was written by Jeffrey Burt at The Next Platform.

The Week in Internet News: India Tries to Censor Online Critics

Shut your mouth: The government in India has tried to silence critics of its response to the COVID-19 pandemic there as cases spike in the country, BuzzFeed News reports. India’s IT ministry recently ordered Twitter to block more than 50 tweets from being seen in the country, and Facebook, Instagram, and YouTube also had content critical […]

The post The Week in Internet News: India Tries to Censor Online Critics appeared first on Internet Society.

Handling OOB Network Changes

In this blog I would like to showcase the power of Ansible Content Collections to build powerful abstractions. Collections are a distribution format for Ansible content that can include playbooks, roles, modules and plugins. For this blog post, let us address an Infrastructure as Code(IaC) use case for network configuration management of BGP. We will walk through examples for both Cisco IOS and Arista EOS devices.

First, let us define a data-model that encapsulates the vendor-agnostic configuration.

bgp_global:
    as_number: '65000'
    bgp:
        log_neighbor_changes: true
        router_id:
            address: 192.168.1.1
    neighbor:
    -   activate: true
        address: 10.200.200.2
        remote_as: 65001
bgp_address_family:
    address_family:
    -   afi: ipv4
        neighbor:
        -   activate: true
            address: 10.200.200.2
        network:
        -   address: 10.25.25.0
            mask: 255.255.255.0
        -   address: 10.25.26.0
            mask: 255.255.255.0
        -   address: 10.100.100.0
            mask: 255.255.255.0
        -   address: 10.200.200.0
            mask: 255.255.255.0
        -   address: 172.16.0.0
        -   address: 192.168.1.1
            mask: 255.255.255.255

As you might have observed, this data-model matches exactly the input expected by the <vendor>.bgp_global and  bgp_address_family modules within the IOS and EOS Continue reading