0

Technology Short Take 127

Welcome to Technology Short Take #127! Let’s see what I’ve managed to collect for you this time around…

Networking

• Banzai Cloud’s Toader Sebastian explains how to write WASM (WebAssembly) filters for Envoy and deploy those filters with Istio. Be forewarned—this is a bit of an advanced topic.
• Ivan Pepelnjak provides a 101-level overview of AWS networking.
• This recent post by Eric Sloof shows how to do BGP neighbor adjacency between GNS3 and NSX-T 3.0.
• Andrew Sy Kim tackles explaining a (somewhat) obscure part of Kubernetes networking: the externalTrafficPolicy setting. Read his write-up here.

Servers/Hardware

Nothing this time around, but I’ll stay alert for items to include next time!

Security

• Ubuntu 20.04 has backported support for WireGuard in its 5.4-based kernel, but for earlier versions some additional work is needed. Here’s a write-up on setting up WireGuard on Ubuntu 18.04.
• Bruce Schneier weighs in on the security and privacy implications of Zoom. (And while we’re on the topic of Zoom, I’d love to hear your thoughts on their acquisition of Keybase.)
• Some security vulnerabilities with Thunderbolt were recently discovered and disclosed. See this website for more details.
• Looking for some security tools? Look no further.

Cloud Continue reading

0

Pandemic Muddles SD-WAN Supply Chain

Supply chain disruptions are affecting SD-WAN vendors and managed service providers differently....

Read More »

0

Daily Roundup: Cisco Pays $1B for ThousandEyes

Cisco paid $1 billion for ThousandEyes; VMware posted stronger-than-expected Q1 results; and...

Read More »

0

SAP Cloud CFO Set to Jump Ship

Todd McElhatton, who currently serves as SVP and CFO of SAP’s Cloud Business Group, will join...

Read More »

0

Heavy Networking 519: Let’s Meet Wi-Fi 6E

Just as we're getting comfortable with Wi-Fi 6, along comes 6E, an extension that enables the use of newly available unlicensed spectrum in the 6GHz frequency band (at least here in the US). Our guest to introduce us to Wi-Fi 6E is Wes Purvis. We discuss the properties of the spectrum, how it might be used, when to expect products, and more.

0

Heavy Networking 519: Let’s Meet Wi-Fi 6E

Just as we're getting comfortable with Wi-Fi 6, along comes 6E, an extension that enables the use of newly available unlicensed spectrum in the 6GHz frequency band (at least here in the US). Our guest to introduce us to Wi-Fi 6E is Wes Purvis. We discuss the properties of the spectrum, how it might be used, when to expect products, and more.

The post Heavy Networking 519: Let’s Meet Wi-Fi 6E appeared first on Packet Pushers.

0

How Nutanix and HPE’s Partnership Delivers Simplicity, with Brian Cox and Abhi Karmakar

Abhi Karmakar and Brian Cox, of Nutanix, sat down to share their thoughts on the ongoing...

Read More »

0

Weekend Reads 052920

Data breach notifications are meant to tell you what happened, when and what impact it may have on you. —Zack Whittaker

If “experience is merely the name men gave to their mistakes,” as Oscar Wilde puts it in The Picture of Dorian Gray, then the more we know about the threats we face and how we react to these threats, the better our chances are of keeping our data secure and our company’s name out of the headlines for all the wrong reasons. —Anastasios Arampatzis

Whenever a popular web interface gets any kind of significant visual change, a lot of people react with confusion, dismay, and even anger. —Angela Lashbrook

MicrosoftMicrosoft is creating a new kind of Office document. Instead of Word, Excel, or PowerPoint, the company has created Lego blocks of Office content that live on the web. The tables, graphs, and lists that you typically find in Office documents are transforming into living, collaborative modules that exist outside of traditional documents. —Tom Warren

First of all, I’d like to discourage you from adding security gimmicks to your product. You are no more likely to come up with an exciting new security feature on your own as you are Continue reading

0

GSMA, O-RAN Forge Alliance

“The growth of the open networking ecosystem will be essential to meeting enterprise coverage and...

Read More »

0

The Week in Internet News: Executive Order Targets Social Media

Trump vs. Twitter: U.S. President Donald Trump, one of Twitter’s most prolific users, has signed an executive order directing government agencies to target social media sites after Twitter fact-checked one of his tweets about voting by mail. The executive order argues social media platforms should lose their lawsuit protections for content posted by users, by directing the Federal Communications Commission to begin a rule-making proceeding to determine when those protections should be stripped away, NPR reports.

Internet freedom? Meanwhile, Business Insider notes that Trump said he’d shut down Twitter if he could, even as he tried to emphasize his “commitment to free and open debate on the Internet.” Trump, with more than 80 million followers on Twitter, complained about social media platforms stifling conservative voices.

Robots vs. COVID-19: A shopping center in Thailand is deploying artificial intelligence-powered robots to fight COVID-19, Euronews.com reports. The mall has thermal scanners to check shoppers’ temperatures, and robots carry public health messages and hand sanitizer.

AI on the beach: In Israel, startup Sightbit is using AI and video cameras to help lifeguards on busy beaches, NoCamels reports. The company is running a pilot program at one of Israel’s most popular beaches. Continue reading

0

The Hook Brings You Back

If I asked you to summarize the great works of literature in a few paragraphs, how would you do it? Would you read over the whole thing and try to give a play-by-play of the book? Would it be more like Cliff’s Notes, summarizing the major themes but skipping over the details? Maybe you’d offer up the conclusion only and leave it as an exercise to the reader to find out? There are a lot of ways to do it and almost all of them seem insurmountable.

What if there was an easy way to jump right into starting to discuss a topic or summarize something? What if you could find a way to easily get people interested in your ideas? Believe or not, it’s not as hard as you might think. People usually freak out because they feel like there are too many places to start when they want to write something. They decide to try and figure out the perfect way to get going and, more often than not, they paralyze themselves with inaction.

So how do you get things moving? You have to find the hook.

By Hook or Crook

What’s the hook? Most people think it’s Continue reading

0

Export logs from Cloudflare Gateway with Logpush

Like many people, I have spent a lot more time at home in the last several weeks. I use the free version of Cloudflare Gateway, part of Cloudflare for Teams, to secure the Internet-connected devices on my WiFi network. In the last week, Gateway has processed about 114,000 DNS queries from those devices and blocked nearly 100 as potential security risks.

I can search those requests in the Cloudflare for Teams UI. The logs capture the hostname requested, the time of the request, and Gateway’s decision to allow or block. This works fine for one-off investigations into a block, but does not help if I want to analyze the data more thoroughly. The last thing I want to do is click through hundreds or thousands of pages.

That problem is even more difficult for organizations attempting to keep hundreds or thousands of users and their devices secure. Whether they secure roaming devices with DoH or a static IP address, or keep users safe as they return to offices, deployments at that scale need a better option for auditing tens or hundreds of millions of queries each week.

Starting today, you can configure the automatic export of logs from Cloudflare Gateway Continue reading

0

Basic Linux Networking tips and tricks part-4: curl command

Here is another post of the series on basic network troubleshooting and tools under Linux. In this post, I will talk about the cURL command.   Others posts of the series This post is part of a series about basic Linux Networking tips and tricks. The others posts of this series are: The ip and nmcli commands The mtr command The ss and netstat commands The curl command   What is cURL? cURL is a Linux command-line tool for getting or sending data and files, using an URL syntax. Since cURL…

The post Basic Linux Networking tips and tricks part-4: curl command appeared first on AboutNetworks.net.

0

Updated: What is Cumulus Linux All About

Pete Lumbis started his Cumulus Linux 4.0 update with an overview of differences between Cumulus Linux on hardware switches and Cumulus VX, and continued with an in-depth list of ASIC families supported by Cumulus Linux.

You can watch his presentation, as well as the more in-depth overview of Cumulus Linux concepts by Dinesh Dutt, in the recently-updated What Is Cumulus Linux All About video.

0

Diving Deep Into The Nvidia Ampere GPU Architecture

When you have 54.2 billion transistors to play with, you can pack a lot of different functionality into a computing device, and this is precisely what Nvidia has done with vigor and enthusiasm with the new “Ampere” GA100 GPU aimed at acceleration in the datacenter. …

Diving Deep Into The Nvidia Ampere GPU Architecture was written by Timothy Prickett Morgan at The Next Platform.

0

VMware Posts Q1 Beat, Reports Triple-Digit VMC on AWS Growth

“We have seen that COVID-19 is not stopping customers from their cloud migration projects with...

Read More »

0

Cisco Advances Software Push With $1B ThousandEyes Buy

“This is a big step in removing the delineation between private and public networks," analyst...

Read More »

0

Cisco takes aim at supporting SASE

Cisco is embracing the secure-access service edge (SASE) architecture put forth by Gartner with plans to upgrade some of its existing products to reach the goal of delivering access control, security and networking to cloud services.The enterprise shift to SASE will be gradual as they figure out the best way to connect their increasingly remote workforce to distributed resources delivered from corporate data centers and as cloud services, Cisco says.Network pros react to new Cisco certification curriculum “Flexibility will be fundamental as IT chooses among multiple security and networking capabilities that best fit their operations, regulatory requirements, and types of applications,” said Jeff Reed, senior vice president of product, Cisco’s Security Business Group in a blog post. “Security services can be predominantly delivered from the cloud to provide consistent access policies across all types of endpoints. However, globally distributed organizations may need to apply security and routing services differently according to regional requirements.”   To read this article in full, please click here

0

IPv6 Buzz 052: What Do Network Engineers Need To Know About IPv6?

Today's IPv6 Buzz podcast examines key topics network engineers should know when working with v6, including the complexities of auto-addressing, network security and dual-stack environments, address plans, and more. Our guest is engineer and consultant Andres Taudte.

0

IPv6 Buzz 052: What Do Network Engineers Need To Know About IPv6?

Today's IPv6 Buzz podcast examines key topics network engineers should know when working with v6, including the complexities of auto-addressing, network security and dual-stack environments, address plans, and more. Our guest is engineer and consultant Andres Taudte.

The post IPv6 Buzz 052: What Do Network Engineers Need To Know About IPv6? appeared first on Packet Pushers.