NSA, ODNI and CISA Release 5G Analysis Paper
Useful reading to understand network integrity, impacts and risk of mobile networks
Useful reading to understand network integrity, impacts and risk of mobile networks
After I created the Segment Routing lab to test the relationship between Node Segment ID (SID) and MPLS labels, I was just a minor step away from testing BGP-free core with SR-MPLS.
I added two nodes to my lab setup, this time using IOSv as those nodes need nothing more than EBGP support (and IOSv is tiny compared to IOS XE on CSR):
After I created the Segment Routing lab to test the relationship between Node Segment ID (SID) and MPLS labels (and added support for IS-IS, SR-MPLS, and BGP to netsim-tools), I was just a minor step away from testing BGP-free core with SR-MPLS.
I added two nodes to my lab setup, this time using IOSv as those nodes need nothing more than EBGP support (and IOSv is tiny compared to IOS XE on CSR):

Join us for DockerCon LIVE 2021 on Thursday, May 27. DockerCon LIVE is a free, one day virtual event that is a unique experience for developers and development teams who are building the next generation of modern applications. If you want to learn about how to go from code to cloud fast and how to solve your development challenges, DockerCon LIVE 2021 offers engaging live content to help you build, share and run your applications. Register today at https://dockr.ly/2PSJ7vn
With DockerCon just around the corner, we’re pleased to announce our outstanding keynote speaker line-up.
Among the Docker luminaries taking the virtual stage May 27 will be CEO Scott Johnston, CTO Justin Cormack and VP of Products Donnie Berkholz. Look for keynotes, too, from special guests Dana Lawson, GitHub VP of Engineering, and Matt Falk, VP of Engineering, Data Science and Computer Vision at Orbital Insight.
Picking up hosting duties will be Docker’s Peter McKee and William Quiviger, along with DevOps consultant and Docker Captain Bret Fisher.
They’re just part of the one-day event packed with demonstrations, product announcements, company updates and more — all of it focused on modern application delivery in a cloud-native world.
Last year 78,000 registrants Continue reading
Frustrated by poor service from an MSP, the IT team at White Family auto dealers needed a more efficient way to connect locations while ensuring high performance and strong security to meet regulatory requirements. The company chose Fortinet for its network and security equipment. Fortinet is our sponsor, and we talk with Shane Williams, Director of IT; and Paul Provorse, System Administrator about going all-in with Fortinet to run their own show.
The post Tech Bytes: Auto Dealer Takes Network Control With Fortinet (Sponsored) appeared first on Packet Pushers.

I’m a bit late posting this … but this Thursday (an odd day for me) I’m running How the Internet Really Works, Part 1, over at Safari Books Online. From the page:
You can register for the training at the link above. I’ll be giving part 2 of How the Internet Really Works next month.

Internet shutdowns harm societies, economies, and the global Internet infrastructure – that’s why we’re tracking disruptions on the Internet Society Pulse platform. There are thousands of disruptions to Internet access every day all over the world, but not all of them are the result of deliberate shutdowns. Lengthy outages are usually the result of technical errors, routing misconfigurations, or infrastructure failures. […]
The post Tracking Internet Shutdowns appeared first on Internet Society.
Just about everyone prepends AS’ to shift inbound traffic from one provider to another—but does this really work? First, a short review on prepending, and then a look at some recent research in this area.

What is prepending meant to do?
Looking at this network diagram, the idea is for AS6500 (each router is in its own AS) to steer traffic through AS65001, rather than AS65002, for 100::/64. The most common method to trying to accomplish this is AS65000 can prepend its own AS number on the AS Path Multiple times. Increasing the length of the AS Path will, in theory, cause a route to be less preferred.
In this case, suppose AS65000 prepends its own AS number on the AS Path once before advertising the route towards AS65001, and not towards AS65002. Assuming there is no link between AS65001 and AS65002, what would we expect to happen? What we would expect is AS65001 will receive one route towards 100::/64 with an AS Path of 2 and use this route. AS65002 will, likewise, receive one route towards 100::/64 with an AS Path of 1 and use this route.
AS65003, however, will receive two routes towards 100::/64, one with an AS Continue reading
Today's Network Break covers IBM's new 2nm chip process, Juniper's first step toward a SASE offering, whether secondary markets for network gear might be an option for companies dealing with supply chain shortages, and more tech news.
The post Network Break 332: Juniper Teases SASE Offering; IBM Gets Small With 2nm Chip appeared first on Packet Pushers.

From the community: A new poll from Morning Consult finds that more than half of U.S. residents trust local governments to provide broadband services, and just 14 percent believe local governments should be prohibited from providing broadband. Currently, 18 states limit or outright prohibit local governments from providing their own broadband. In those states, “these […]
The post The Week in Internet News: Many U.S. Residents Support Community Broadband appeared first on Internet Society.
Red Hat Ansible Network Automation continues to be a popular domain for Red Hat Ansible Automation Platform. We have continually developed additional resource modules to make automating network appliances easier, and more approachable, for novices and experts alike. These resource modules provide a consistent experience across multiple network vendors. There are seven main state parameters for resource modules: merged, replaced, overridden, deleted, gathered, rendered and parsed. The Ansible network team is adding one more parameter, purged, to this tool chest for resource modules. This blog will cover the purged parameter and show use-cases through a practical example.

For this example, we will be using two BGP resource modules to configure a Cisco network device. We will be using the bgp_global module, which was covered in Rohit’s blog post, and the bgp_address_family module. The BGP configuration is split between these two separate modules to simplify configuration and data models associated with them.
Let’s start with a data model:
bgp_global:
as_number: '65000'
bgp:
log_neighbor_changes: true
router_id:
address: 192.168.1.1
neighbor:
- activate: true
address: 10.200.200.2
remote_as: 65001
bgp_address_family:
address_family:
- afi: ipv4
neighbor:
- activate: true
address: 10.200.200.2
network:
- address: 10.25. Continue reading