Packet Pushers Podcast
By Greg Ferro & Ethan Banks
To listen to an audio podcast, mouse over the title and click Play. Open iTunes to download and subscribe to podcasts.
Podcast Description
Packet Pushers is about Data Networking - routing, switching, firewalls, security and much more. We talk nerdy on highly technical topics such as routing protocols, switch architecture, network designs, vendors, and much more. Our motto is "Too Much Networking Would Never Be Enough"
| Name | Description | Released | Price | ||
|---|---|---|---|---|---|
|
1 |
Show 104 – Is SDN a TRILL Killer? | Greg Ferro & Ethan Banks conclude their chat begun in Show 103 - Choking on Cookies, but take the conversation in a different direction. What We Discuss TRILL & SPB - are they competing or complimentary? Or aimed at different markets? If SDN really gets a strong foothold in the marketplace because of excellent applications, what might that mean for TRILL and SPB? What has Google *really* demonstrated with their OpenFlow announcement? And what does that mean for the rest of us? If you buy an SDN-based "network-in-a-box" that's a proprietary vendor solution, what happens to your skill set? SDN is early right now. Can we tell where it's going to take the industry? A useful application for SDN: end-to-end flow analysis (instead of point-in-time flow analysis). TRILL would pick up steam if Cisco reduced the prohibitive cost of licensing FabricPath. Links Show 44 - The Case For Shortest Path Briding Fake Name Generator | 5/23/12 | Free | View In iTunes |
|
2 |
Show 103 – Choking on Cookies | Podcast hosts Ethan Banks & Greg Ferro have a good old-fashioned chinwag about things that are on their minds in this, the first of a two-part podcast. Part two should be published later during the week of 20-May-2012 as Show 104. Stay tuned! What We Discuss Long-term goals for the Packet Pushers Podcast. How you can stay in touch with the show these days. How we usually record & produce the show. We talk about Cisco: issues of vendor trust, resellers, licensing, and overlapping product choices. The advantages of buying an integrated solution like vBlock. How companies gather information through your browser and use it to build a very personal profile about YOU. Links Ethan's article on Cisco, trust, and brand inertia. Cookie Monster - a manager for the cookies created by the most usual Windows browsers: Internet Explorer, Firefox, Google Chrome, Mozilla and Opera (only basic support for this one). Ghostery - a browser tool available for Firefox, Chrome, Safari, Opera and Internet Explorer. It scans the page for scripts, pixels, and other elements and notifies the user of the companies whose code is present on the page. | 5/20/12 | Free | View In iTunes |
|
3 |
Show 102 – A Layer of Indirection: Is MPLS Tunneling? | Greg Ferro and Ethan Banks dive into a deep, dark hole of nerdery with Ivan Pepelnjak, Marko Milivojevic, and Petr Lapukov to see if we can decide whether or not MPLS is tunneling. We plumb the depths of packet and frame formatting, compare and contrast various technologies, toss different scenarios around, contradict one another, and throw buckets of cold water all over the place. In the end, we think we have an answer. So put the kids to bed, cram in your earbuds, and visualize the virtual whiteboard. Close your eyes...focus...there it is! All that's missing is the smell of dry erase markers. What We Talk About In the witty opening banter, we find out Greg is an Interop judge, Petr works on something called "Bing", and Marko is teaching the first CCIE ever a thing or two. Oh, and who WAS the first CCIE anyway? Hint - not our friend Terry. Not quite. From here, the show gets serious, and includes the following topics: Foundations: circuits vs. connections vs connectionless. How is a tunnel different from a virtual circuit? How do we say that a circuit has "state"? We could think of a tunnel as "a layer of forwarding indirection". The tricky business of distinguishing between the OSI model (classical layering) vs. what we normally consider tunnels. Now wait a minute...could MPLS be considered NAT in a certain sense? So...maybe a tunnel is tunnel when you see the same protocol twice in the header. Redefining a tunnel as "a layer of frozen interaction". MPLS is not exactly L2 or L3. It's a total layering violation. How do CRC checks impact our definition of tunneling? Isn't it time for a new networking model? Once we've hammered through all of that, we loop back around to review why we had the chat. The question comes back up - why are we reinventing the wheel in data center networking? Couldn't an MPLS application be written to do many of the same things the explosion of overlay protocols are doing? Or would we have scalability problems? | 5/10/12 | Free | View In iTunes |
| 4 | VideoShow 101 – Brocade Virtual Symposium Part 1 – Sponsored | Introducing the Brocade Virtual Symposium. In a special video session, we brought Chip Copper from Brocade into a room to talk about four key areas of Brocade's Ethernet Fabric. The first episode is this weeks Packet Pushers Podcast. The session is discussing just "What is an Ethernet Fabric" and digging into how Brocade implements their Ethernet Fabric strategy. In the weeks ahead, we will publish three more sessions. In the second session, we had a discussion of Converged Storage with FCoE and for IP Storage protocols. The third session looks at Mulitchassis and Multipath as an alternative or a complement to Ethernet Fabric led by Greg Ferro and we dig in to the features. The fourth and final session titled "Hard Cores and Soft Edges" where Ivan Peplnjak leads the discussion about Automated Migration of Port Profiles (AMPP) and how Brocade has a soft switching solution to fully integrate with VMware. This discussion on "What is an Ethernet Fabric" covered the following broad areas: we kicked off with a short presentation How we could improve Ethernet of today by looking at its weaknesses Spanning Tree means unused bandwidth and forced tree design. Insights on Brocade Ethernet Fabric Architecture How a Brocade Ethernet Fabric improves utilisation and delivers resilience by auto-healing. Hosted by Greg Ferro, Stephen Foskett, Ivan Pepelnjak, Ethan Banks and Brandon Carroll. Thanks to them for their time. Session 2: Converged Storage – Hosted by Stephen Foskett Acknowledging the value of FC but focussing on Ethernet/IP storage What are the emerging workloads that make Ethernet storage compelling. and how do Fabrics play in that arena. SSD performance driving high speed. Big Data driving cluster networking Session 3: Multipath versus Multichassis – Hosted by Greg Ferro Emerging layer-2 multipath technologies introduce the multipathing, fast failure recovery, and optimum bandwidth utilization we’ve always enjoyed in the IP world to the Ethernet layer-2 forwarding, allowing the data center architects to build large-scale (multipath) layer-2 solutions that approach the efficiency of layer-3 networks. Some vendors are proposing an alternate solution: using multi-chassis link aggregation (MLAG) they’re building a virtual star topology that retains the redundancy and optimum bandwidth utilization requirements, and minimizes the impact of link outages without introducing new technologies. Brocade's strategy of “revolution through evolution” Virtual chassis technology Brocade Virtual Cluster Switching Technical Architecture Transparent LAN service Virtual link aggregation groups (vLAGs) Distributed configuration management (virtual Chassis) ECMP / TRILL Session 4: Hard Cores / Soft Edges – Hosted by Ivan Pepelnjak Brocade Automatic Migration of Port Profiles (AMPP) and VM-Aware Network Automation features enable customers to fully align virtual server and network infrastructure resources and realize the full benefits of server virtualization. Brocade VM-Aware Network Automation provides secure connectivity and full visibility to virtualized resources with dynamic learning and activation of port profiles. In VMware environments, the Brocade VCS fabric communicates directly with VMware vCenter ™ to eliminate manual configuration of port profiles. Brocade VCS fabric also supports VM mobility across VCS fabrics within a data center, while providing protection against VM MAC spoofing. Additional VMware vCenter integration with Brocade Network Advisor provides another layer of intelligence to network administrators.b0cca9cf19624a3036c03424f68b6a3e We will be announcing more sessions over the next three weeks, stay tuned for more details on them. Thanks to Brocade for supporting the Packet Pushers by sponsoring a new type of marketing event. You can send Ethan and I feedback at packetpushers@gmail.com. | 5/3/12 | Free | View In iTunes |
| 5 | VideoShow 100 – Live at Network Field Day Three – Video | Network Field Day Three meant that a lot of regular guests on Packet Pushers were in the same room at the same time. And that room was full of cameras, microphones and a crew to run it!! So we recorded a Packet Pushers Live - the first ever show in video as Show 100. That's right - 100 shows! Two years since we started, about 6000 downloads per show and more than 50000 downloads a month. | 4/30/12 | Free | View In iTunes |
|
6 |
Show 99 – I Always Use a VPN – Thomas D’Otreppe – Aircrack-NG – OpenWIPS-NG | This week we are talking to Thomas d'Otreppe, author of Aircrack-NG and OpenWIPS-NG about his Open Source project and what they do ? AirCrack-NG Aircrack “Aircrack-ng is an 802.11 WEP and WPA-PSK keys cracking program that can recover keys once enough data packets have been captured. It implements the standard FMS attack along with some optimizations like KoreK attacks, as well as the all-new PTW attack, thus making the attack much faster compared to other WEP cracking tools. In fact, Aircrack-ng is a set of tools for auditing wireless networks.” OpenWIPS OpenWips “OpenWIPS-ng is an open source and modular Wireless IPS (Intrusion Prevention System). It is composed of three parts: Sensor(s): "Dumb" devices that capture wireless traffic and sends it to the server for analysis. Also responds to attacks. Server: Aggregates the data from all sensors, analyzes it and responds to attacks. It also logs and alerts in case of an attack. Interface: GUI manages the server and displays information about the threats on your wireless network(s).” Components of Aircrack-NG: Aircrack-ng (cracking WEP, WPA/WPA2) airodump-ng airmon-ng airbase-ng aireplay-ng airtun-ng General Topics Comparison of Kismet and Aircrack-NG and OpenWIPS-NG. use case and features for Wireless and Network Security Engineers. Call for volunteers on the project! You can also find more about Thomas at WiFu MEME: I don’t always use wireless at the airport...but when I do, I use VPN. Subscribe in iTunes You can subscribe in iTunes by clicking on the logo here. Other Media Players and MP3 Download Alternatively, you can subscribe to the RSS feed with your favourite pod catcher. The URL is feed://feeds.packetpushers.net/PacketPushersPodcast | 4/25/12 | Free | View In iTunes |
|
7 |
Show 98 – The Future of TRILL and Spanning Tree – Part 2 | This is the second part of the TRILL and Spanning Tree discussion. TRILL has been on the radar for about three years and while we are seeing some shipping hardware and deployments, it's still not clear what the current status of TRILL is. This week, Jon Hudson IETF Member for TRILL and Brocade engineer is joined with Andy Shalomon from Cisco, who is conducting testing and deployment on Cisco's FabricPath for a discussion about where TRILL is today. | 4/13/12 | Free | View In iTunes |
|
8 |
Show 97 – The Future of TRILL and Spanning Tree – Part 1 | TRILL has been on the radar for about three years and while we are seeing some shipping hardware and deployments, it's still not clear what the current status of TRILL is. This week, Jon Hudson IETF Member for TRILL and Brocade engineer is joined with Andy Shalomon from Cisco, who is conducting testing and deployment on Cisco's FabricPath for a discussion about where TRILL is today. | 4/9/12 | Free | View In iTunes |
|
9 |
Show 96 – Hack the Hackers: Fyodor on Nmap & The Security Industry | Michele Chubirka (our very own Mrs. Y), Greg Ferro, and Ethan Banks gather *in person* with very special guest Gordon "Fyodor" Lyon. Fyodor is the author of Nmap, for many years the tool of choice to perform network scanning. The four of us chat about Nmap, being a security practitioner, and goings-on in the security business. What We Discuss Nmap's 15th birthday. The new version of Nmap 5.61 test 5 soon to be released. What does Nmap do? Host detection. OS detection using heuristics and fingerprinting. What's Zenmap? NSE, the Nmap scripting engine. Is it a good or bad thing that other folks bundle Nmap with their products? Nmap's dual licensing scheme (open source vs. commercial entities). Who's working on Nmap these days? What language do you have to know to use NSE? What are the new features we'll see in the upcoming version of Nmap? The trouble with scanning IPv6 address ranges. Why is there a perception that IPv6 is less secure than IPv4? IPv5 trivia. Why have we had so many big security breaches lately? Is there a disconnect between application developers and IT practitioners? Greg's pet theory of active security and passive security. Did you know that Nmap has an tool called Ndiff that will show you variances in scan results from one day to the next? Evading the notice of intrusion detection devices & firewalls. Does it make sense to patrol outside of the perimeter (i.e. an IDS outside the firewall)? The challenge of sorting through huge amounts of log data. Just how do we protect our intellectual property from hackers with abilities like Fyodor's? Are honeypots useful? How well are OS vendors patching themselves, and how much is it helping? Why do we keep working around our own security tools? Links Nmap - free and open source utility for network exploration or security auditing. Zenmap - the official Nmap Security Scanner GUI. Ndiff - a tool to aid in the comparison of Nmap scans. Metasploit - helps security and IT professionals identify security issues, verify vulnerability mitigations, and manage expert-driven security assessments. insecure.org - Fyodor's blog. Nmap Network Scanning: The Official Nmap Project Guide to Network Discovery and Security Scanning - Fyodor's book. Tor Project - Protect your privacy. Defend yourself against network surveillance and traffic analysis. Greg's blog post on IPv5 - yes, really. Thin-slicing - a term used in psychology and philosophy to describe the ability to find patterns in events based only on "thin slices," or narrow windows, of experience (from Wikipedia). The Honeynet Project - to learn the tools, tactics and motives involved in computer and network attacks, and share the lessons learned. Nmap's page on the Google Summer of Code - try coding for Nmap for a summer instead of flipping burgers! Apply by April 6, 2012 to be considered for this summer. twitter.com/nmap facebook.com/nmap Nmap Hackers mailing list Sponsors NEC ProgrammableFlow OpenGear - This week’s show was sponsored in part by Opengear, experts in out-of-band management. Visit www.opengear.com to learn about secure, next generation management appliances that provide lights out access to network equipment even when the primary link is down. Tell them you heard of their solutions from Packet Pushers for a free t-shirt. | 4/4/12 | Free | View In iTunes |
|
10 |
Show 95 – Security Onion With Doug Burks -or- Why IDS Rules and IPS Drools | Ethan Banks and Michele Chubirka (aka Mrs. Y aka the Network Security Princess) have a relaxed chinwag with Doug Burks, Deputy Chief Security Officer at Mandiant, community instructor for SANS, and the man behind Security Onion. What is Security Onion? To quote Doug's website... Security Onion is a Linux distro for IDS (Intrusion Detection) and NSM (Network Security Monitoring). It's based on Xubuntu 10.04 and contains Snort, Suricata, Sguil, Squert, Snorby, Bro, NetworkMiner, Xplico, and many other security tools, all wrapped up with an easy-to-use Setup wizard. What We Discuss What was the driver that brought about the creation of Security Onion? What security functions does Security Onion include? Why is there such an emphasis on intrusion detection as opposed to intrusion prevention with this distro? How is an IPS like a firewall? Why does it make sense for an enterprise to have an IDS in addition to an IPS? Why does full packet capture matter in an IDS system? What packages are included in the Secuirty Onion distro? How can Secuity Onion be used as a forensic analysis tool? Why should a company that's already invested in commercial IDS/IPS bother with Security Onion? What role does Security Onion play in host-based intrusion detection (HIDS)? How would you size server hardware & storage for a successful Security Onion deployment? When will Security Onion be available in a 64-bit flavor? What's the profile of the typical shop that's deployed Security Onion? Can Security Onion monitor traffic on multiple interfaces simultaneously? What's the difference between a Security Onion "sensor" and "server"? How much data does a Security Onion sensor send back to a server, and what's the impact on WAN utilization? Will there be wireless functionality built into Security Onion in the future? Does Mandiant give Doug much time to work on Security Onion? Can Security Onion be deployed as a virtual machine? Links Security Onion Doug Burks on Twitter TaoSecurity - Richard Bejtlich's blog on digital security Snort - open source network intrusion prevention and detection system OISF - home of Suricata. The Open Information Security Foundation (OISF) is a non-profit foundation organized to build a next generation IDS/IPS engine. OSSEC - open source host-based intrusion detection system Argus - a small, fast, and easily expandable network IDS designed with small to moderate sized networks in mind Bro - powerful network analysis framework that is much different from the typical IDS NetworkMiner - a Network Forensic Analysis Tool (NFAT) for Windows PF_RING - a new type of network socket that dramatically improves packet capture speed Kismet - an 802.11 layer2 wireless network detector, sniffer, and intrusion detection system TCP/IP Weapons School 3.0 - TWS3 as taught by Richard Bejtlich. Is your network safe from intruders? Do you know how to find out? Do you know what to do when you learn the truth? ELSA - enterprise log, search and archive. A centralized syslog framework built on Syslog-NG, MySQL, and Sphinx full-text search. Sponsors NEC ProgrammableFlow | 4/1/12 | Free | View In iTunes |
|
11 |
Show 94 – Aerohive and Bonjour Gateway – Sponsored | Aerohive has recently announced Bonjour support for networking. If you aren’t familiar with Bonjour it’s the zero configuration protocol that used by Apple for all their devices to discover services on the network such as printers, AppleTVs, File Shares and more. Apple technologies such as Airplay (for music/media sharing), AirDrop (for file sharing) and Print Servers to get access to resources. And with companies adopting Apple products on a large scale it’s time for the network to have some control and management of services. At the networking level, the Bonjour protocol was designed for local access only and uses mulitcast and broadcast protocols to announce available services. For example this is a snap of services on a simple networks: Aerohive has placed Bonjour forwarding agents into their hardware that allows control over Bonjour and sponsored this podcast to talk about these features. Side note from greg: Although I learned a lot about Bonjour/ZeroConf in this podcast it's important to realise that you can control Bonjour traffic on LANs in addition to wireless networks. What is Apple’s Bonjour protocol? How does it work? What are the problems with it? What has Aerohive introduced to solve these issues? Why did Aerohive build this feature? What types of companies are in need of this type of solution? Were you the first to address this problem? Show Notes Show 75 - Mid November - Aerohive and Branch networking Bonjour Browser can be downloaded from here. Aerohive Blogs Areohive blog post with more technical detail : Breaking Subnet Boundaries with Bonjour: Simplifying Apple TV and AirPlay in the Enterprise About Mathew Gast Matthew Gast is the Director of Product Management at Aerohive Networks, where he leads development of the core software technologies in Aerohive’s fully distributed Wi-Fi network system. He currently serves as chair of both the Wi-Fi Alliance’s security task groups, and is the past chair of the IEEE 802.11–2012 revision. Matthew is also the author of 802.11 Wireless Networks: The Definitive Guide (O’Reilly), which is now in its second edition and has been translated into six languages. His second book on wireless networking, 802.11n: A Survival Guide (O’Reilly) is expected in March of this year. [OReilly 802.11 book](http://shop.oreilly.com/product/9780596100520.do) [Oreilly 802.11n book]( http://shop.oreilly.com/product/0636920021988.do) | 3/29/12 | Free | View In iTunes |
|
12 |
Show 93 – Lies and Routing in the Internet | This show is few moments to breathe, take stock, and meditate about peace in our time and listen to someone else do the talking. Today, Packet Pushers is re-broadcasting a recording of a presentation by Geoff Huston from the AusCERT2011. I have to say that I've always known that Internet routing was a mess but Geoff breaks it down in approachable and easy to understand way that drives home just how unreliable and insecure the Internet is. Chilling stuff and well worth listening to. Geoff Huston is a well known and respected figure in the development of the Internet. Here is the description form the conference website: Securing the Internet's Foundations - Addresses and Routing The framework of trust that supports the operation of the internet starts with a basic assumption about the uniqueness of IP addresses and the integrity of routing. If this assumption fails then the internet is exposed to many forms of subversion and attack. This presentation will outline the role of addresses and routing and the potential attack vectors, and will also report on the progress to establish a secure framework for addresses and their use in the Internet, highlighting the progress in establishing a secure routing environment for the Internet. APNIC's Geoff Huston on routing system "lies" This was recorded by Risky.biz - a podcast on information security which I listen to every week. The host, Patrick Grey is a freelance security journalist who really knows his stuff. I'd sure like to meet up and meet both him and Adam Buarlow(?) someday. Risky Business is a great show which a good practical mix of security news and interviews with interesting people. A big shout out to Patrick Grey who kindly gave me permission to use his recording. And thanks to Geoff Huston who also gave his permission to rebroadcast this recording. About Geoff Huston Geoff Huston is the Chief Scientist at the Asia Pacific Network Information Centre (APNIC), where he undertakes research on topics associated with Internet infrastructure, IP technologies, and address distribution policies. Prior to APNIC, Geoff was employed as the Chief Internet Scientist at Telstra and Technical Manager of the Australian Academic and Research Network (AARNET). He was a leading figure in the development of Australia's academic and commercial Internet services. Potaroo | 3/24/12 | Free | View In iTunes |
|
13 |
Show 92 – HP TippingPoint Secure Virtual Framework With Sanjay Raja – Sponsored | The prime Pushers Ethan Banks and Greg Ferro chat with HP Security's Sanjay Raja in this sponsored podcast about the TippingPoint Secure Virtual Framework (SVF). Sanjay Raja is a Product Marketing Manager with the TippingPoint organization, and describes in detail how SVF integrates into your VMware environment. What We Discuss Inspecting traffic sourced from VMs, when those VMs don't always live in the same physical place. Keeping the same security policy applied to a virtualized environment as would have been applied to a physical environment. Topology discovery and integration with Virtual Management Center. Firewalling VMs from other VMs. Shunting traffic to an external IPS device via low-latency tunneling. New vShield APIs that TippingPoint is creating with VMware via an exclusive partnership. The challenge of virtualizing IPS functionality without consuming all the resources of the cluster being protected. How to integrate SVF into an environment that's only partially virtualized. What "next generation IPS" really means, and how TippingPoint is a part of that space. Why you care about TippingPoint's DV Labs vulnerability discovery team. Does SVF allow inside hosts and DMZ (read: "Internet-facing") hosts to coexist on the same VMware cluster? What's the redundancy/resiliency architecture for SVF? How is TippingPoint SVF integrated with the other HP Security business units like Fortify and ArcSight? Links Secure Virtual Framework HPEnterpriseSecurity.com Solid Reasons for Securing the Cloud (Sanjay Raja) How are you dealing with the new PCI standards covering virtualization and cloud security? (Sanjay Raja) | 3/17/12 | Free | View In iTunes |
|
14 |
Show 91 – Packet Party Feb 2012 | Packet Pushers had a Packet Party in Feb 17, 2012 with an Open Microphonr. The Packet Party was recorded live from event where we had about 90 people on the call. People from the audience would ask questions, and we throw to topic open for discussion. Overall the discussion was great, and we covered a lot different topics. Please let us know if you enjoyed this format. Depending on the feedback, we will look to schedule more shows in the future. | 3/11/12 | Free | View In iTunes |
|
15 |
Show 90 – Talking Career With Todd Lammle | Trainer, author, and long-time network industry veteran Todd Lammle joins Ethan Banks and Greg Ferro for a chat about the good ol' days, the days ahead, and how to make it in the networking business. Todd's worked at some legendary companies like Atari and Xerox. He's been around the industry for a long time, and worked hard to make a go of it. Today, he's an independent trainer, consultant, and author. And did you know he's never played a video game? We have a great chat with Todd, who opines about the state of the book publishing business, e-learning, staying focused, and how to have a successful career. We hit the following topics along the way. Todd, how did you get started in networking? How did you transition into training and writing? Luck vs. self-discipline – which is more important and why? Is blogging a waste of time? What about social media? Physical books vs. e-books & e-learning. Does it matter? A lot of people think certifications are the answer to IT success. Are they? Why has it gotten so much harder to keep up with technology? What are the up-and-coming skills someone in networking should focus on to stay relevant? When it is time to move on to a different employer? What does cloud computing really mean for the networking industry? How does someone manage to earn a certification when they also have a full-time job and a family? What are some techniques to master the information required to pass a certification exam? Links Tips On Getting Things Done For The Person Already Stretched (Ethan's Personal Blog) Todd Lammle on Twitter, Facebook, and YouTube. Sponsors NEC ProgrammableFlow | 2/28/12 | Free | View In iTunes |
|
16 |
Show 89 – OSPF vs IS-IS Smackdown – Where You Can Watch Their Eyes Reload | In this show we discuss the the differences between OSPF & IS-IS routing protocols and the differences between them. protocol optimisations are both good and bad. How both protocols have poor metric generation OSPFv3 offers some hope for the future. QoS Based metrics in their forms - MPLS TE isn't getting good adoption. Why do vendors put 10 cent CPUs in their equipment and make using SPF protocols so hard ? * Best Quotes: Ivan - "There is the right thing to do, which is to choose IS-IS. Then there is the best thing to do which is to choose OSPF." Marko: "Then you can watch their Eyes reload" On the "Unique versus Useful" A comparison between two routing protocols: OSPF and IS-IS - Radia Perlman - Behind the IEEE Paywall so don't bother following the link Multi-topology routing in OSPFv3 (MT-OSPFv3) IS-IS and OSPF Difference Discussions - IETF DRAFT OSPF and IS-IS : Choosing an IGP for Large-Scale Networks - Jeff Doyle Guests Petr Lapukhov Marko Milovejic @icemarkom and Blog - My Network Stories Ivan Pepelnjak -@ioshints IPspace.net | 2/20/12 | Free | View In iTunes |
|
17 |
Show 88 – Server Internals and Network Performance | Having met at VMworld 2010, Daniel Bowers and I were having an ongoing discussion around server architectures and how they impact network performance. I convinced him to come onto the show and talk broadly about what goes on inside a server. Mostly we focus on how server performance impacts network performance. I wouldn't call this a deep dive, more of an overview into some of the ideas to keep in the top of your head. This show was recorded on 4th October 2011. It's taken a while to find a slot where we can publish this show - we've got too much to talk about. PCI Express bus connections can support 10GbE. PCI Express is a point to point connection Memory performance affects network performance. You may get better performance with less memory modules according the type of memory bus in use. Physical slots in the chassis have different properties. Servers don't make good switches Guests Daniel Bowers is an server design engineer and marketeer who analyzes server architectures and performance for the IT research firm Ideas International. He’s also a primary representative at SPEC and TPC. Follow him on Twitter, or read his blogs on ideasint.blogs.com. Show Links Not All Servers Are Alike (With DNA) | 2/15/12 | Free | View In iTunes |
|
18 |
Show 87 – A SIP of Voice | The Packet Pushers voice crew reassembles, this time for a discussion of SIP trunks. Erik Peterson, Amy Arnold and Tom Hollingsworth are the technical talent this week, while Ethan Banks hosts and tries to keep up with the conversation without going, "Huh?" too many times. Hey, we can't all be voice engineers. ;-) SIP gets a pretty good look from us as we take on the following talking points: What’s SIP stand for, and what's it used for? What are the common alternatives to SIP, and why is SIP preferred? What sorts of widely recognized hardware/software uses SIP? How does SIP work? Implementing SIP trunking in the enterprise for PSTN access. What should enterprises be considering when planning a transition to SIP? What is a Session Border Controller? What is SIP normalization, and when does it need to be used? SIP applications in production networks. SIP troubleshooting tools. (Packet captures, ladder diagrams, per call debugging, and common show & debug commands.) How do I learn more about SIP? (Read Tom's review of the CiscoPress title "SIP Trunking".) We hope you enjoy this show, and don't forget all of the different ways that you can follow the Packet Pushers to keep up with the content generated by our community. | 2/12/12 | Free | View In iTunes |
|
19 |
Show 86 – Connect to the IPv6 Internet for Free Using TunnelBroker.Net | Hurricane Electric's Owen DeLong joins Ethan Banks and Greg Ferro to discuss TunnelBroker.net. What's TunnelBroker.net? It's a free service from Hurricane Electric that lets you connect to the IPv6 Internet across an IPv4-only connection. Want to get started with IPv6? This is a great way to go, not only for the connectivity, but also for the IPv6 education Hurricane Electric offers. We keep the show pretty on-topic, and cover the following information. Who is Hurricane Electric? In simple terms, what's the TunnelBroker.net service? Are these "real" routable IPv6 address blocks HE is issuing? Why is HE offering this service (a) at all and (b) for free? Who is eligible to use TunnelBroker.net? Why bother? Isn't carrier grade NAT going to save us all? There are several types of IPv6 over IPv4 tunnels. What kind of tunnel is tunnelbroker.net using, and why was this type chosen over others? What sorts of devices can successfully bring up an IPv6 tunnel to HE? What sort of tunnel termination device is on the HE side? Is it redundant/resilient? In what way? Explain the tunnelbroker.net provisioning process. Is it automated or are there humans involved? Once the tunnel is up, what can you do with it? Can end users do anything crazy like advertise their own RIR-assigned IPv6 allocation to HE via BGP through the tunnel? Or nail up 2 tunnels to HE to have redundant virtual links for their IPv6 block? What happens if the user's IPv4 tunnel endpoint is dynamically assigned, and the address changes? How does a person advertise their IPv6-enabled service with DNS? What resources would you recommend for a person trying to get smart about IPv6? What's a good strategy for a business looking to do IPv6 multihoming? Is IPv6 prefix translation just a lame way for carriers to get out of upgrading their equipment? LINKS Carrier Grade NAT 6in4 Quad-A DNS Records (RFC3596) IPv6 Prefix Translation (IETF Draft) www.theipv6experts.net - where Owen blogs...you know...once in a while. | 2/4/12 | Free | View In iTunes |
|
20 |
Show 85 – Sponsored – The Span Port You Always Wanted – Gigamon | In this Sponsored show we talk to Gigamon about " making the SPAN port what it always wanted to be". In short, Gigamon makes switch devices that allow for powerful ways to capture traffic from your network, then slice, dice and forward it. If you have ever had problem with "not enough SPAN ports" for packet capture, then take a look at this product. Show Agenda Overview of Gigamon Mid-stage startup; founded in 2004; all product built-in-the-USA; founders from network monitoring industry Bridge the gap between faster-and-flatter networks, and the growing demand for diverse monitoring, management and security tools Establish an out-of-band, pervasive fabric, connecting to the network mirror & SPAN ports, and intelligently delivering the right traffic to the right tool Sounds good, but how do you do that ? A range of systems from 1RU to 1Tb chassis Let's focus on a deployment of just one system (although they are all locally and remotely 'stackable') Traffic on SPAN/Mirror/TAP ports is delivered into the Gigamon Fabric on what we call a "network port" At wirespeed, the traffic is 'manipulated' using GigaVUE software with hardware acceleration "Manipulation" means duplication, slicing, filtering, masking, etc How is the "Manipulation" configured : using "FlowMapping" logic What is FlowMapping ? A L2/3/4 rules engine that overcomes the limitation of ingress and egress filtering Ingress : too much is dropped at the entry .. Good stuff could be lost Egress : too much could be dropped through oversubscription Flow Mapping sits in the heart of the system (and can span multiple systems) How complex / what type of rules can be written ? Very complex, multi-step boolean type decisions Multiple egress (multi-tool as we call it) so that single ingress traffic can go to multiple tools Are they fixed rules/definitions ? We support the L2/3/4 decision criteria Also allow for a set of User-Defined criteria to look for specific traffic characteristics How do you extend beyond a single system ? We offer stacking – to connect multiple system together over n x 10Gb trunks We offer tunneling – to allow systems in remote offices to be part of the central "stack" How do your customers use the systems ? Single-system deployments to smooth the migration from 1Gb to 10Gb To deliver longer and more predictable ROI for monitoring, management and security tools In Data Centers to centralize all monitoring/management system into one rack Service providers around the globe to support the growth of mobile devices What does a normal deployment look like with your technology ? Ranges from a single system to multiple systems stacked together to form one Visibility Fabric Easy/flexible to configure – Network ports and tool port Maps are built to establish the "mapping rules" of traffic on network ports to tool ports Central management from a single GUI system (Citrus) if required How does your solution get deployed in the Data Center ? End of row deployments Each end of row location has uplinks to top-of-rack swicthes GigaVUE devices are connected together using stacking All monitoring and management tools centrally located in one rack "Maps" are changed as needed to forward traffic from any server, any rack, any row to central tools You can also watch a presentation from Gigamon from TechFieldDay at Vimeo - Gigamon where they presented at Network Field Day in Otcober 2011. Thanks to Gigamon for sponsoring the Packet Pushers and sharing this content with the community. Contact You can follow them on twitter at http://twitter.com/gigamon or on the web at http://www.gigamon.com/ | 1/27/12 | Free | View In iTunes |
|
21 |
Show 84 – Cisco WAAS – The Sleeping Giant Awakens – Sponsored | Liad Ofek from the Cisco Borderless team joins Ethan Banks and Greg Ferro to discuss the state of Cisco Wide Area Application Services (WAAS) in this sponsored show. WAAS is Cisco's WAN optimization platform, competing against products from Riverbed, SilverPeak, Exinda and others. If you're wrinkling your brow while remembering a bad WAAS experience back in 2007-2008, the software functionality and implementation process have changed for the better. Are you in the market for a WAN optimization solution? WAAS is worth another look. In this show, we cover the following points: WAAS was a rough ride back in day. Are we right to have some bad memories? 2010 was a breakout year for WAAS releases, while 2011 saw additional innovations. What are the deployment options for WAAS? (We discuss appliances, ISRG2 modules, Nexus 1000V and more.) We get into some detail about deployment scenarios. When does it make sense to deploy a WAVE appliance versus WAAS Express, for example? WAAS has some rich features and options that arrived in 2011, including new appliances, upgradeable network modules, context-aware DRE, and application optimization for Citrix XenDesktop. Network World seemed to like WAAS in their November 2011 independent testing. Links Cisco WAAS Home Page Technical Discussion of WAAS Features Context Aware Data Redundancy Elimination White Paper Technical Discussion of vWAAS WAAS Express Data Sheet Network World WAAS Testing | 1/22/12 | Free | View In iTunes |
|
22 |
Show 83 – We Are an Independent Show | This week it's just Greg and Ethan talking over a few topics. What was intended to be a quick half hour chat for the new year about Packet Pushers turned into a more than an hour on a whole range of topics that interest us, especially on independence and community. Some technical, some industry stuff and some about our own lives. Intro What the show is. Who we are. Plans for 2012. Mix of sponsored and independent shows. (Hey vendors, get on our radar now, Q1 is already filled.) Still about one show a week. More new voices from the community. More from our popular regulars (Ivan, Mrs. Y, Tom, others) More bloggers. Call for assistance with moderated forum / e*mail list site. (Are we ready to make that plea?) Continued relationship with Tech Field Day. Do it yourself fibre optic cabling. Introduction to Mechanical Splicing - http://www.thefoa.org/tech/ref/termination/mechsplice.html Greg's recent blog post on laser power and cable lengths: Can Fibre Optic Ethernet Cables Be Longer Than the standard?Splice loss on a mech splice = 0.3db whereas fusion splice is <0.1db loss. Cisco website Ethan: All I want is a documentation library that’s easy to navigate. Greg: Yeah, right. Greg, hating on Cisco's Web Siteearlier this year. Firewall log management CSM vs FW1 vs Splunk vs SolarWinds LEM Will you get alerts if your Internet goes down? Issue - if the Internet at your main site is offline, is there a path for your alerting system to let you know about the issue? Alternatives * Multi-site monitoring * POTS modems * Cradlepoint 3G/4G failover * SMS gateways (?) * Cloudsourced monitoring * Secondary DSL or other cheap Internet (tricky to make effective, often a dead primary Internet circuit can make a dead secondary circuit if serviced out of the same facility or via the same conduit) The importance of testing failover designs Why? Even simple redundancy designs break due to human error. Complex redundancy designs can break something you did not consider or for reasons that don’t show up on a whiteboard. Types of failover to test Failover routing, i.e. multipath Hardware pairs (redundant sups, core switch/routers, load balancer pairs, firewall pairs, ToR/EoR switches, switch stacks) Load on failover/redundant hardware/software FHRPs Failback - does topology reconverge to preferred state once error is past? Examples Link failover from private WAN to IPSEC (dynamic routing, IPSEC setup, application performance, available bandwidth, VoIP) Application failover to opposite data center (GSLB/DNS, firewall state, load-balancer state, connection spike due to shift) Testing criteria Flapping links and other subtle failures (point- we tend to simulate complete failures, not partial failures, but in real life, failures are often partial) Reachability - key when failing w/o dynamic routing Timers - fast enough? Too fast? Alerting / logging - are you even aware that a failure event has occurred? Independent Bloggers are more compelling than analysts and journalists Why independent bloggers write more compelling content than career journalists when it comes to networking. * analyst firms have special access * analyst firms can’t criticise vendors * vendors are both sources of information for research, andvendors are customers who pay analysts for papers * This is a serious conflict of interest and it can be hard to tell who is leading who in the dance. * usually, analysts are not technically strong. Who wants to be an engineer in that sort of organisation ? * Analysts can be arrogant or over proud and this can lead to poor quality research. Independent bloggers tends to display their biases clearly, and openly. Since they are customers, they can afford to speak their mind since they have no stake in the PR/Marketing game. Compare this to analyst firms whose income or source material comes from vendors. WiFI Mobility Symposium | 1/3/12 | Free | View In iTunes |
|
23 |
Show 82 – Security Failures, No IPv6, No Network Management – Another Good Year | Guests This week a bunch of new faces to talk about 2011 and it's many failing: Scott Morris - well known industry figure and CCIE trainer. Chris Marget - Fragmentation Needed who works for a large reseller. And some regulars return: Tony Bourke @tbourke [Data Center Overlords](http://datacenteroverlords.com/ Hosts and Regulars And the blow hards Mrs. Y - the Network Security Princess, Ethan "I'm looking forward to next year" Banks and Greg "IT Security got shown up as a bunch of retards in 2011" Ferro are all making noises as usual. Topics From Greg’s blog - is OpenFlow/SDN routing or switching? From Chris’ blog - Pricing and Trading Networks: Down is Up, Left is Right Is 2012 the year enterprises get serious about IPv6? (Don’t fear the colon.) Professional certifications that matter in 2012. 2011 was the year everything we trusted in security broke (RSA, various CAs, health information breaches, financial information breaches, SSL cipher cracks). So what decisions should enterprises be making in 2012 to stay out of the headlines? Show Notes Show 72 - How We are Killing the Internet - where we talk about the Happy Eyeballs IPv6/IPv4 interoperability feature. LinkedIn Group - Packet Pushers Show Sponsors This week’s show is sponsored Get Console, makers of the best iPad terminal app for network engineers. If you need a rock solid feature rich terminal app to run on your iPad, including serial console support, check out www.getconsole.co.uk. And also by, Infineta Systems, a leading innovator and provider of Hyper-scale WAN Optimization solutions. Infineta's WAN Optimization product, the Data Mobility Switch, allows enterprises to expand and fill large WAN links. Infineta helps you move more data, more quickly, using less bandwidth. Get more information at www.infineta.com. | 12/26/11 | Free | View In iTunes |
|
24 |
Show 81 -Tail-F and Network Configuration Management – Sponsored | Network Configuration is still done by hand. Each engineer types in each command after thirty years of "progress". Does this seem right to you ? Tail-F systems sponsored today's show to talk about their Network Configuration System and the advantage of using decent software with good quality tools like NETCONF and YANG to make configuring your network easier than before. Topics Covered Why did Tail-f move towards addressing the central configuration management solution? What is wrong with existing solutions for managing configuration? What is the NCS product and what is it's moving parts? What is NETCONF and how does it apply to configuration management and Tail-f solutions Describe the architecture of NCS and how that works with the network What can NCS do that current solutions can't? What about legacy (non-NETCONF) interfaces? What kind of solutions can NCS be applied to? What kind of solutions shouldn't NCS be applied to? About Tail-F Tail-f has two products. The first, ConfD, is what we've been working on since we were founded in 2006. It's an on-device configuration management soution that provides common management interfaces (CLI, SNMP, Web UI, NETCONF server and REST API) and supporting infrastructure (AAA, transaction management, data store) for all kinds of networking equipment. A large number of equipment providers are using it (including 7 out of the 10 largest) in their products. The second product, NCS, is what we're currently bringing to market. It's a network configuration management software solution that takes a software oriented approach to configuration (as in reading and writing to the routers and switches) management. NCS allows developers to write applications that manipulate the network configuration using a model-driven environment. Early customers use it for things like provisioning of (MPLS) VPNs, managing clusters of load balancers, and managing large BGP policies. Show Notes and References Some links to data sheets and whitepapers: For the ConfD product, used by vendors, information available here: ConfD - for network vendors Then some more thought-oriented whitepapers around the issues that we see with configuration management: Tail-F Whitepaper on Enterprise and Network Management Systems doing more than than just Alarms and Maps Tail-F Systems Whitepaper: EMS and NMS - Beyond Alarms and Maps.pdf A paper that we are presenting at LISA 2011: Automating Network and Service Configuration For information about the product we're bringing to market, NCS: [Tail-F NCS Product Data Sheet] ( http://www.tail-f.com/products-and-services/ncs) NETCONF RFC http://tools.ietf.org/html/rfc6241 YANG RFC - A Data Modeling Language for the Network Configuration Protocol (NETCONF) - http://tools.ietf.org/html/rfc6020 Overview of the 2002 IAB Network Management Workshop: The goal of the workshop was to continue the important dialog started between network operators and protocol developers, and to guide the IETFs focus on future work regarding network management. This report summarizes the discussions and lists the conclusions and recommendations to the Internet Engineering Task Force (IETF) community. http://tools.ietf.org/html/rfc3535 The NETCONF and YANG Users Group at LinkedIn http://www.linkedin.com/groups/NETCONF-YANG-Users-3301774 A 30 Minute Introduction to NETCONF and YANG http://www.slideshare.net/cmoberg/a-30minute-introduction-to-netconf-and-yang | 12/18/11 | Free | View In iTunes |
|
25 |
Show 80 – SFlow and IP Accounting | During the EuroNOG conference I recorded a conversation about SFlow with Elisa Jasinska who is Senior Packet Herder at Limelight Networks. ( That's what is says on her business card). Joining me is Ivan Pepelnjak to cover the SFlow basisc and some f the more advanced ideas that you need to be thinking of when looking a IP Accounting. Show Topics We kept the agenda simple - SFlow: Why, What, How About Ela Ela Jasinska is a Senior Network Architect at Limelight Networks. Her work is focused on introducing new technologies to Limelight’s global network footprint as well as designing tools to manage and maintain the platform. She built and now operates Limelight’s Phoenix based Internet exchange, Arizona IX. Previously Elisa has been working as a Network Engineer at the Amsterdam Internet Exchange, on projects such as AMS-IX’s route server deployment and their sFlow accounting software, as well as day-to-day operations of the exchange point. Show Links PMAcct - Open Source OpenFlow accounting PMACCT AMSIX Frame Size Distribution http://www.ams-ix.net/sflow-stats/ | 12/12/11 | Free | View In iTunes |
|
26 |
Show 79 – Elfiq & Link Load Balancing – Sponsored | In this sponsored podcast, we introduce Link Load Balancing - something the Packet Pushers hadn't realised was available for Enterprise and handling multi gigabit links. We talk about what Link Balancing is, how it works, and even some of the gotchas and 'be careful' points when deploying. Plus some delightfully nerdy discussion about what goes on inside the box. Elfiq Link Balancer appliances bring the ability to deploy and manage multiple ISPs for redundancy/failover, bandwidth augmentation and management. This approach is simple and more cost-effective than traditional methods including BGP and is fully automated. As all organizations depend on Internet connectivity to conduct business, Elfiq Link Balancers are a natural addition to any network. Links to More Information on Elfiq Link Load Balancers. Elfiq White Papers: www.elfiq.com/whitepapers (we have 15 - one for all major topics!) Introduction to Link Balancers: www.elfiq.com/what Webcasts: http://www.elfiq.com/webcasts Elfiq model selector: www.elfiq.com/modelselector About Elfiq Networks Elfiq Networks ® enables organizations to ensure business continuity and improve network performance through innovative link balancing technologies. We have been delivering innovation and excellence since 2004, creating a unique value proposition which is used in businesses in over 120 countries all over the world. The Packet Pushers thanks Elfiq Networks for supporting the show by sponsoring us. | 12/4/11 | Free | View In iTunes |
|
27 |
Show 78 – Especially Thankful Chinwagging | This week we takes a nod at Thanksgiving and talk nerdy. talks about the latest security breaches. Unsurprisingly. Ivan talks about changing the name of his quite famous ioshints.info blog to ipSpace.net HP announces only one Software licensing for their Wired Ethernet switches across the product range. which naturally, leads into a rant about Cisco licensing. Answer some twitter questions about Centralised Wireless Controllers making sense and even when VoIP is being used. Documentation - Sharepoint, Wikis. Diagrams. Reminder about Color Blindness Colour Blindness, Network Diagrams and Reliability Show Sponsors This week’s show is sponsored Get Console, makers of the best iPad terminal app for network engineers. If you need a rock solid feature rich terminal app to run on your iPad, including serial console support, check out www.getconsole.co.uk. And also by, Infineta Systems, a leading innovator and provider of Hyper-scale WAN Optimization solutions. Infineta's WAN Optimization product, the Data Mobility Switch, allows enterprises to expand and fill large WAN links. Infineta helps you move more data, more quickly, using less bandwidth. Get more information at www.infineta.com. | 11/30/11 | Free | View In iTunes |
|
28 |
Show 77 – Cisco Nexus 1000V and VXLAN With Han Yang and Victor Moreno – Sponsored | Greg Ferro and Ethan Banks chat with Cisco Technical Marketing Engineers Han Yang and Victor Moreno to discuss Cisco's implementation of the emerging VXLAN standard (currently a draft) in the Nexus 1000V virtual switch. VXLAN is being evaluated by architects who need to scale multi-tenant networks beyond the traditional 4K VLAN limitation. VXLAN can be integrated with existing infrastructures, as it leverages IPv4 to form tunnels and multicast groups to carry broadcast traffic. | 11/24/11 | Free | View In iTunes |
|
29 |
Show 76 – Why OpenFlow Has Mind-Melting Potential | OpenFlow. Brave new world, or niche solution to a specific problem? The tool we always wanted, or the need we didn't know we had? Replacement for the legacy data center, or special purpose player at the edge? Unicorn tears or useful technology? Greg Ferro, Ivan Pepelnjak, and Derick Winkworth join this show's host Ethan Banks in a wide-open, back-and-forth discussion that opines about these questions and many more. For example: Is OpenFlow really "open" if you have to have a license to bake it into your products? Do we care? Does the ONF's agenda limit the impact OpenFlow will have on enterprise networks? Why does Cisco want to stomp OpenFlow into the ground? Or do they? Why is it that some of the guys developing OpenFlow technology say that the revolution is not all about OpenFlow? How is Software Defined Networking different from OpenFlow? Why did the NEC ProgrammableFlow demo rock the world of the Net Field Day 2 delegates? What's Big Switch doing that gets folks running multi-tenant networks all excited? Isn't it time we stopped managing our networks one device at a time? Why does OpenFlow have mind-melting potential? Links Open Networking Foundation NEC ProgrammableFlow Big Switch Networks Nicira | 11/20/11 | Free | View In iTunes |
|
30 |
Show 75 – Introducing Aerohive Branch on Demand – Sponsored | Introducing Aerohive , manufacturers of fine Enterprise Wi-Fi networking equipment who, believe it or not, may actually have found a use for the cloud at the same time as getting rid of wireless LAN controllers in their big boned Access Points. After a quick introduction to Aerohive, we talk about their Branch-on-Demand product line that is being announced today. This is an interesting change from traditional branch networking because the Wireless Access Point becomes the edge router, integrates off-site (Cloud based) security functions and offer a yearly pricing plan starting at USD$99 and priced per user and providing alternatives for SSL VPN, branch office routers. Hive Manager provides visibility and control of remote sites using cloud-hosted management system which means it scales according to your needs. Moving ahead of the rising tide of network management and visibility, Aerohive has already built a management platform that is well ahead of other organisations. Visibility and monitoring is especially important to the success of wireless networks, but for wide area networking it's vital to the administrator to know what's happening 'out there'. More Information You can go to www.aerohive.com for more product information and blogs.aerohive.com and follow them on twitter at @Aerohive More information on the Branch-On-Demand Products Branch on Demand Landing Page – http://www.aerohive.com/vip Extending your Enterprise With Branch on Demand - http://www.aerohive.com/solutions/solutions-use-case/extending-your-enterprise HiveOS for WiFi and Routing - http://www.aerohive.com/products/access-points/www.aerohive.com/products/software-management/hiveos Cloud VPN Gateway Product Page - http://www.aerohive.com/products/software-management/cloud-vpn-gateway BR100 Product Page - http://www.aerohive.com/products/hive-routers/br100 Cloud Platform - http://www.aerohive.com/solutions/technology-behind-solution/cloud-platform Feedback Follow the Packet Pushers on Twitter (@packetpushers | Greg @etherealmind, and send your queries & comments about the show to packetpushers@gmail.com. We want to hear from you! Subscribe in iTunes and RSS You can subscribe to Packet Pushers in iTunes by clicking on the logo here. Media Player and MP3 Download You can subscribe to the RSS feed or head over to the Packet Pushers website to download the MP3 file directly from the blog post for that episode. | 11/15/11 | Free | View In iTunes |
|
31 |
Show 74 – Juniper Certification Track Update | Liz Burns, Kieran Milne, and Kurt Bales join Ethan Banks for an update on where the Juniper certification tracks stand. Liz & Kieran talk about each of the tracks in turn, discuss the current and upcoming boot camp offerings, and Kurt describes his training and test-taking experience gained during the beta period. A short show, a good listen, and interesting content for anyone considering a certification in the Juniper realm. Links Packet Pushers podcast from October 2010 - "Big Things Ahead For Juniper Certifications" Juniper Networks Certification Program Service Provider Routing & Switching Track Enterprise Routing & Switching Track Junos Security Track Junosphere Lab Follow @junipercertify on Twitter. | 11/13/11 | Free | View In iTunes |
|
32 |
Show 73 – Cisco ASA 1000V Cloud Firewall – Sponsored | Cisco is extending their Nexus 1000V in new directions. Not only is the Nexus 1000V a virtual switch, it acts as a platform for extending ASA firewall and security technology into your virtual environment. In this sponsored podcast, we get Rajneesh Chopra, Product Manager for the Nexus 1000V product line, to talk about how Virtual ASA maps into the product and fits into Cisco's product strategy. Topics Covered Data path from source to destination How the firewall is both in-line and indirect for application scanning. Suppoer for existing procedures and firewall policies Performance and capacity planning for the Virtual ASA firewall comparing with vShield Edge/App as distinct firewall solutions. comparing with Juniper VGW and HP Tipping Point SVF. Answering the question - Wouldn’t everyone need both VSG and virtual ASA? Is there a customer for one that would never need the other? Show Notes Previously we covered the Nexus 1000v in Show 49 – Cisco Nexus 1000v on 21 June 2011 where we covered the internal working and product overview. You can find more information on the Cisco ASA 1000v Cloud Firewall on these links: ASA 1000V product page Nexus 1000V product page Cisco Virtual Network Management Center And big thanks to Cisco Server and Virtualization Business Unit for sponsoring the Packet Pushers. It helps us to keep pushing out more content. !!! | 11/7/11 | Free | View In iTunes |
|
33 |
Show 72 – How We Are Killing the Internet | Greg was invited to be a speaker at the EuroNOG conference in Warsaw Poland. While there, Greg spoke to Jan Zorz who is a major contributor to IPv6 in RIPE and IETF and involved with many large service providers for their IPv6 designs and deployment. He says about himself “A Guy from Slovenia, the IPv6 evangelist. And a lot of opinions. ”. Ivan Pepelnjak was also on hand to make sure we had everything technically correct This is general discussion to highlight the problem with IPv6, NAT and stateful protocols such as MPLS are slowly killing the Internet. And we talk about a wide range of other stuff - well, what else is new. This is first podcast Greg recorded using a portable recorder so the audio quality is bit patchy. It’s still good to listen to, but not up to our usual standards Show Links Happy Eyeballls RFC6346 - The Address plus Port (A+P) Approach to the IPv4 Address Shortage | 11/3/11 | Free | View In iTunes |
|
34 |
Show 71 – OpenFlow, SDN, Controllers, VXLAN & Wishing for Fishes | A wide ranging discussion this week following the Applied OpenFlow Symposium on Wednesday and the Network TechFieldDay on Thursday/Friday where we talked about the week and the much argued about purpose of VXLAN. Probably much more relevant to network engineers, I talk to Ivan Pepelnjak and discuss his conversion to believing in OpenFlow/SDN after he co-hosted the event with me. Big thanks to Marko Milivojevic for being willing to ask questions that the listeners would ask ( It takes a lot of courage to ask questions like he did) Much fun, and herd discussion occurred. The Difference Between Network and Server Engineers – Pictorial Link to Vimeo videos for the Vendor Presentations. We talked about what the vendors are doing in the OpenFlow/SDN space and here are the just the vendor presentations videos from the OpenFlow Symposium. You can watch them yourself Ed Crabbe of Google http://vimeo.com/31176510 Igor Gashinsky of Yahoo http://vimeo.com/31175672 David Ward of Juniper http://vimeo.com/31205041 David Meyer of Cisco http://vimeo.com/31187703 Kyle Forster of Big Switch Network http://vimeo.com/31184739 Don Clark of NEC http://vimeo.com/31204705 Curt Beckmann of Brocade http://vimeo.com/31185469 Table Vimeo Ed Crabbe of Google at OpenFlow Symposium http://vimeo.com/31176510 Igor Gashinsky of Yahoo http://vimeo.com/31176510 David Ward of Juniper at OpenFlow Symposium http://vimeo.com/31205041 Don Clark of NEC at OpenFlow Symposium http://vimeo.com/31204705 David Meyer of Cisco at OpenFlow Symposium http://vimeo.com/31187703 Curt Beckmann of Brocade http://vimeo.com/31185469 Kyle Forster of Big Switch Networks at OpenFlow Symposium http://vimeo.com/31184739 Guests Rob Markovic @vrobm Marko Milivojevic @icemarkom | blog.ipexpert.com Ivan Pepelnjak @ioshints | http://blog.ioshints.info | 10/30/11 | Free | View In iTunes |
|
35 |
Show 70 – Preview of Tech Field Day and OpenFlow Symposium | Jeff Fry, Tony Bourke, and Tom Hollingsworth chat with Ethan and Greg about the upcoming Tech Field Day and closely tied OpenFlow Symposium events to be held in San Jose, California this week. On Wednesday, October 26, 2011, several compelling vendors & potential customers (such as Google and Yahoo) will present their unique take on OpenFlow at the OpenFlow Symposium, the kick-off gathering for this Tech Field Day event. The Packet Pushers Podcast and Tech Field Day are pleased to be able to share this discussion with the networking community via live streaming and audio that will be captured during the event. If you're trying to get a technical handle on the OpenFlow hype, or if you have a specific networking challenge you think OpenFlow can help solve, then be sure to join in the discussion. Ethan and Greg will be compiling crowdsourced questions to pass along to the vendors during this event via Twitter and Google Plus, so please follow us or share with us as you like. Don't forget that Ivan Pepelnjak will also be on the panel to ask several questions of his own. Watch Twitter for the #OFS11 hashtag. A great mix of networking vendors will present to the Tech Field Day delegation on Thursday and Friday, October 27 and 28. The list of vendors and bloggers (many of which have been on the podcast) that will be attending can be found here. As with the OpenFlow Symposium, crowdsourcing questions is definitely on our minds. As the vendors present to the delegation, you'll be able to watch via live streaming (watch Twitter for the #NFD2 hashtag or visit techfieldday.com for live stream info), so tweet away with your questions, aiming them at any or all of us in the room. We'll do our best to relay those questions to the vendors, time and discussion permitting. It's a busy week for us, and we hope you find the networking content we'll be able to share beneficial. | 10/25/11 | Free | View In iTunes |
|
36 |
Show 69 – HP Talks Tech at Interop NYC on OpenFlow, Optical Backplanes, IRF, and IPv6 | At Interop NYC held the first week of October 2011, HP invited several network engineers engaged in social media to attend at HP's expense. Ethan Banks was one of those in attendance, and he captured several hours worth of audio from the event. This podcast is not the typical "let's gather around the virtual conference table and chat" format, but is instead a compilation of the most interesting technical audio from the event, focused on discussions HP held with the bloggers. Topics Discussed Saar Gillai, leader of HP Networking's Advanced Technology Group, talks about HP's position on OpenFlow. It's not the same over-hyped story you've maybe heard before. Saar's view is a little different, and - dare I say - more balanced than what you hear from some pundits. Saar continues by discussing the issues driving the need for optical backplanes. In short, we can't aggregate very many 100Gbps links into a chassis using copper-based backplane technology before exceeding what science will allow. The change to optical backplanes is therefore inevitable. HP kicks off a discussion with the bloggers about IRF, HP's Intelligent Resilient Framework. IRF allows you to bond as many as 4 switches into a single logical super-chassis. I know some of you just shuddered. The bloggers ask some hard questions about IRF (the ones that made you shudder), and HP comes back with their answers. The final discussion is a technical explanation of how HP handles memory space such that their switches' IPv6 forwarding performance is on par with their IPv4 performance. Not all vendors can say this (often IPv6 performance lags behind IPv4), and HP explains what's different in their systems that allows IPv4 and IPv6 performance parity. Links Saar Gillai's Profile Greg Ferro's Live Shots Of A Prototype HP Optical Backplane HP Overview Whitepaper on IRF HP A5820X & A5800 Switch Series IRF Configuration Guide Ivan Pepelnjak's Take On IRF | 10/22/11 | Free | View In iTunes |
| 37 | VideoShow 68 – Practical Introduction and Application of OpenFlow Networking | Practical Introduction to Applied OpenFlow We've heard a lot of talk about OpenFlow recently and it's potential impact for networking but not a lot about how it works. This screencast is Practical Introduction to OpenFlow with a focus on how we would actually make it work in real networks. Instead of muttering into beards about XML formats and debating the relative merits of protocol mechanics, this is a "bottom up" look at how OpenFLow is designed and it's practical application in networks and what the transition from today to tomorrow will look like. I'm joined by Martin Casado from Nicira Networks, who is also one of the creators of OpenFlow to help me with some of the heavy content and applications for OpenFlow. Thanks to Martin for reviewing the presentation and offering more information and then joining me to discuss various aspects. Don't forget the Applied OpenFlow Symposium happening in San Jose on Tuesday, 26th October. We will be streaming the event live on the Tech Field Day website. We will having panel discussions with the NEC, Juniper, Brocade, Big switch and Cisco on their Business AND Technical approach to OpenFlow and their future plans. And representatives from Google and Yahoo will be on hand to talk about their experiences and practical uses. There have been several blog posts at Packet Pushers -click for a list is the last few weeks that are definitely worth reading. And a podcast on 7 April 2011 where we first 'discovered' OpenFlow - Show 40 – Openflow – Upending the Network Industry Greg has also posted a few previous articles: OpenFlow - Why it can cross the Adoption Gap OpenFlow and Network Value – Network Computing Feedback Follow the Packet Pushers on Twitter (@packetpushers | Greg @etherealmind, and send your queries & comments about the show to packetpushers@gmail.com. We want to hear from you! Subscribe in iTunes and RSS You can subscribe to Packet Pushers in iTunes by clicking on the logo here. Media Player and MP3 Download You can subscribe to the RSS feed or head over to the Packet Pushers website to download the MP3 file directly from the blog post for that episode. | 10/15/11 | Free | View In iTunes |
|
38 |
Show 67 – CCIE Security Track Update With Natalie Timms, Program Manager | Natalie Timms, CCIE Security Program/Product Manager for Cisco, is kind enough to spend a little time chatting with Packet Pushers podcast host Ethan Banks about the current state of the Cisco CCIE Security track. Ethan and Natalie build a conversation around the following items: Talk about what Cisco is doing to help preserve the integrity of the CCIE exams. Please describe at a high-level the sorts of technologies covered in the CCIE Security track. The Routing & Switching track is the most popular; some CCIEs consider the Security track for their second challenge. How much technology overlap is there between R&S and Security? The Security track has been at version 3.0 since about April 2009. How far away is a 4.0 track, and how much notice will we have? The Cisco ASA has seen significant changes with the 8.3 and 8.4 releases. How far are we from seeing these new ASA versions implemented in the exams? There’s been a lot of back-and-forth between Cisco and lab exam candidates about open ended questions and the troubleshooting section. Can you update us on where those issues stand? Is Cisco working with CiscoPress to bring an updated CCIE Security Exam Certification Guide to market? If so, is there a targeted publication date? What test taking tips do you recommend? Links Learning at Cisco - CCIE Security Program CCIE Security Blueprint (written) - Login Required CCIE Security Blueprint (lab) - Login Required | 10/11/11 | Free | View In iTunes |
|
39 |
Show 66 – VXLAN and NVGRE With Ken Duda | I wanted to know more about VXLAN and NVGRE so who better than Ken Duda from (http://aristanetworks.com) from Arista Networks, the only author listed on both IETF RFCS and [Ivan Pepelnjak](http://blog.ioshints.info) on a call to go fast and loose on the topics. [IETF VXLAN](https://datatracker.ietf.org/doc/draft-mahalingam-dutt-dcops-vxlan/) [IETF NVGRE](https://datatracker.ietf.org/doc/draft-sridharan-virtualization-nvgre/) What is VXLAN and why does networking need it ? How does it works, and what are it's future impacts on networking ? Comparing NVGRE and VXLAN and why there are two standards ? Why aren't we using MPLS or LISP ? Cover some of the limitations ? What about lack of transparency with VXLAN packets ? What about L2 security challenges inside VXLAN networks ? In particular, the key lesson I learned is that the control plane is open. The current implementation doesn't specify the end point discovery and OpenFlow is a consideration here. And that VXLAN silicon is planned for the future for networking intervention in flows. Hosts Name: Ivan Pepelnjak Web: http://blog.ioshints.info Twitter: @ioshints and last, and the very least: Greg Ferro http://etherealmind.com| Twitter @etherealmind Feedback Follow the Packet Pushers on Twitter (@packetpushers | Greg @etherealmind | Tom Hollingsworth), and send your queries & comments about the show to packetpushers@gmail.com. We want to hear from you! Subscribe in iTunes and RSS You can subscribe to Packet Pushers in iTunes by clicking on the logo here. Media Player and MP3 Download You can subscribe to the RSS feed or head over to the Packet Pushers website to download the MP3 file directly from the blog post for that episode. | 10/7/11 | Free | View In iTunes |
|
40 |
Show 65 – Second Shot of Strong Opinion | This show in all about Beast Attack on SSL, Cisco Nexus network designs and limitations of the FEX switching, and a bitch slap between MrsY and Greg on DNS Load Balancers. This is the second half of the show recorded on the 25th Sep, 2011. You can find the first show. Beast Attack on SSL. MrsY says: Felt so depressed after reading about the new SSL vuln, that I didn’t even want to go to work the next day. I can’t figure out what we’re doing anymore. Why aren’t we deploying TLS 1.1 and 1.2?! Everyone knew this was coming. “...Short for Browser Exploit Against SSL/TLS, BEAST performs what's known as a chosen plaintext-recovery attack against AES encryption in earlier versions of SSL and its successor TLS, or transport layer security. The technique exploits an encryption mode known as cipher block chaining, in which data from a previously encrypted block of data is used to encode the next block.” http://www.theregister.co.uk/2011/09/19/beast_exploits_paypal_ssl/ Pretty good post on mitigating the threat and what it means Saw some figures from Ivan Ristic’s site regarding the prevalence of older (vulnerable) versions of SSL and TLS: http://blog.ivanristic.com/2011/09/ssl-survey-protocol-support.html And from the God of Crypto (i.e. Blowfish), Bruce Schneier: “The tool is based on a blockwise-adaptive chosen-plaintext attack, a man-in-the-middle approach that injects segments of plain text sent by the target's browser into the encrypted request stream to determine the shared key. The code can be injected into the user's browser through JavaScript associated with a malicious advertisement distributed through a Web ad service or an IFRAME in a linkjacked site, ad, or other scripted elements on a webpage. Using the known text blocks, BEAST can then use information collected to decrypt the target's AES-encrypted requests, including encrypted cookies, and then hijack the no-longer secure connection. That decryption happens slowly, however; BEAST currently needs sessions of at least a half-hour to break cookies using keys over 1,000 characters long. The attack, according to Duong, is capable of intercepting sessions with PayPal and other services that still use TLS 1.0which would be most secure sites, since follow-on versions of TLS aren't yet supported in most browsers or Web server implementations.” Adaptive chosen-plaintext attack, where the cryptanalyst makes a series of interactive queries, choosing subsequent plaintexts based on the information from the previous encryptions. http://www.schneier.com/blog/archives/2011/09/man-in-the-midd_4.html “The chosen plaintext-recovery at the heart of BEAST attacks algorithms that use a mode known as CBC, or cipher block chaining, in which information from a previously encrypted block of data is used (as an IV) to encode the next block. CBC is present in both AES and DES, but not in RC4.” http://www.theregister.co.uk/2011/09/23/google_ssl_not_vulnerable_to_beast/ And finally, best analysis of how BEAST works by the Tor developers. https://blog.torproject.org/blog/tor-and-beast-ssl-attack Cisco Nexus Switch Designs Ethan says I met with Cisco this week to design a small Nexus core/agg/access. We could talk through why they guided me the way they did. AKA, why is the 7K lagging behind the 5K in features? Shouldn’t the 5K be the leader? Or is it all about the non-blocking? How come FEXen can’t dual-home to a pair of 7Ks? And does it matter? Etc. Using DNS Load Balancers or BIND to manage DNS domains MrsY and Greg go head to head on whether BIND is better than using DNS Load Balancer appliances for managing DNS domains. Talked about F5 GTM, NetScaler Global DNS, Cisco GSLB or using a managed DNS service. | 10/4/11 | Free | View In iTunes |
|
41 |
Show 64 – Catalyst 6500 Supervisor 2T Deep Dive With Cisco TME’s Patrick Warichet + Scott Hodgdon | In this sponsored show, Cisco Technical Marketing Engineers Patrick Warichet and Scott Hodgdon join Greg Ferro and Ethan Banks to chat about the recently announced Cisco Catalyst 6500 Supervisor 2T in a deep dive discussion. We mine the depths of the new sup's architecture and get the feeling that, "there's life in the old dog yet!" The Discussion Sup2T engine architecture & fabric forwarding capability. Compatibility: what legacy line cards & DFCs, service modules, and chassis' are supported by the 2T? 80Gbps per slot using new (and future) 6900 series line cards. TrustSec: hop-by-hop layer 2 encryption in hardware (MACsec) & security group tagging compatible with the Nexus scheme. Data center virtualization features: MPLS, VPLS, fat pseudowires, and more. Is FabricPath/TRILL coming to the 6500? Sounds like it. Sup2T initial code release has feature parity with IOS SX 12.2(33)SXI3 on the Sup720. Sup2T VSS capability is single sup per chassis today, but quad sup SSO is coming. What's the development path of the Sup720 in conjunction with the Sup2T going forward? Will the Sup720 be abandoned? When will we see IOS 15.0 on the 6500? What's the licensing structure going to be for the 6500/Sup2T? Will service modules continue to be a big driver in a Sup2T-powered 6500? How do you squeeze as much performance as possible from a 6500? What's the IPv6 performance & feature set like on the Sup2T? Scott talks about his favorite Sup2T feature: flexible netflow. Links Cisco Catalyst 6500 Supervisor 2T Data Sheet Cisco TrustSec Cat6500 – Sup 2T – Dead Parrot or a Million Volts? (Greg) Cisco Catalyst 6500 Supervisor 2T Technical Highlights – Will Sup2T Stop You From Buying Nexus? (Ethan) | 9/30/11 | Free | View In iTunes |
|
42 |
Show 63 – The First Shot of Strong Opinion | First up, we talked about the how Packet Pushers is moving into some sponsored shows and contents. We are a community driven group so your feedback is important and valuable. The good news is that sponsorship will help to continue making content and doing cool things. The bad is that some advertising will appear. We hope to make a reasonable balance, keep it nerdy, a little bit fun and full of tough, good questions. Everyone has said a bit about the HP CEO getting the boot, and then putting some other person in charge. So we pretend to know something about what motivates managers for a while, then give up in frustration. As usual. Blogging at Packet Pushers - everyone is welcome to blog at Packet Pushers and contribute to community. Importantly, you precious writing will actually be read. Contact us packetpushers@gmail.com We invited you to join us at the Applied OpenFlow Symposium, we will streaming the event live, and if you live near San Jose, you can come and join us - get your free ticket at Eventbrite to help us with numbers. James wrote to us and asked “Is there any mileage in a show discussing how different people go about building new skills, in particular when faced with a new subject, a new product or a new technology. Where do you start, what tools do you use to keep tech notes, bookmarks, documentation etc. How do you reinforce learning, build a lab and keep yourself from forgetting it all in three months.” And everyone had something to say. Not sure if it was helpful but we tried :). Our two cents worth. We had a short discussion about HP and their CEO troubles. The question is Do we care? But it's fun to prognosticate. We mentioned running computers in sheds and had good potential conversation. Cisco Announces Hyper-V and Nexus 1000. Omar Sultan has the details and links into the real information. And mentioned @beaker post on Flying Cars and Why The Hypervisor is a Lawnmower in Comparison The rest of the show will be up in the next couple of weeks. | 9/26/11 | Free | View In iTunes |
|
43 |
Show 62 – Technical Deep-Dive – Infineta Data Mobility Switch (DMS) Hyper-Scale WAN Optimization | Haseeb Budhani, VP of Products at Infineta, chats with Greg and Ethan to do a technical deep-dive of Infineta's Data Mobility Switch (DMS) in this sponsored show. The DMS is the industry's first Hyper-scale WAN optimization solution that can fill WAN pipes as large as 10Gbps. Targeting customers who need to accelerate replication, backup traffic, Hadoop, and similar data sets between data centers, Infineta is offering a solution that (as far as the Packet Pushers know) no one else is offering at this time. What used to take an array of WAN accelerators can now be handled by a single piece of hardware at each DC. Infineta is focused solely on Hyper-scale WANs - data center to data center traffic. Infineta starts where other WAN optimization vendors leave off. The smallest Infineta box accelerates multiple Gigabits per second. Merchant silicon is used (as opposed to x86 architecture) to allow deduplication of data streams at speeds up to 10Gbps. In this deep-dive, we discuss the following with Haseeb: In-path versus out-of-path deployments. Implications for data center routing architectures. Hardware redundancy. TCP stream manipulation. The effect of interdatacenter path changes on in-flight accelerated traffic. Why disk caching doesn't work at 10Gbps, and what the DMS does instead. Integrating a DMS-accelerated data stream with security devices. Working with the DMS interface. Links Data Mobility Switch (DMS) Overview @haseebbudhani | 9/16/11 | Free | View In iTunes |
|
44 |
Show 61 – Securing an Internet-Facing App – Part 2 – Border Routers, Firewalls, IDS/IPS | In show 61, host Ethan Banks is joined again by Mrs. Y, Daniel Powell, Bob Plankers, and Tom Hollingsworth in the second part of a virtual workbench discussion begun in show 56. We recorded this heart-warming, family-friendly episode about securing an Internet-facing application on September 9, 2011. The Packet Pushers eagerly anticipate award nominations for this gripping script expressing the love a network engineer has for his border routers, firewalls, and intrusion prevention devices. Filled with passion, packets, and paradigm shifts, this is the one show that will change the way you see everything. Okay, not really. But we think you'll like it. We hope. After all, "it depends." News Carol Bartz gets irreverently booted from Yahoo. And she's not happy. DNS gets hijacked? OR DID IT?!? The Pushers say web developers have reservations on the short bus. DigiNotar's getting taken over by the Dutch government...and rumor has it they deserved it? Hmm. Why all the hate? Kernel.org hosted a nasty rootkit, and it wasn't detected for 17 days. Did code kernel.org distributes get impacted, or didn't it? Why the weasel words? Stanford patient data is found to be available online for roughly a year. We're pretty sure that's not HIPAA-compliant, and so we discuss the difference between ignorance and stupidity. A University of Vermont web sites gets defaced after a month-old warning went unheeded. See? He told 'em so. Discussion Getting tough with border routers by using hardening guides. We discuss whether it makes sense to filter transit traffic on the border router or not. Or is there a third option? Reputation filters, real-time black hole lists, DNS sinkholes, bogon filters: generally we like them, but maybe they're not always a good idea? Daniel sounds off. ISP DDoS mitigation services are here to help because they're big, and you're small. We talk through common firewall designs. NAT does not make us secure. It just breaks things. And look - Tom's twitching! Should you use private VLANs in a DMZ? Or is that more work than it's worth? Where do multiple DMZs make sense? What about multiple firewalls? Mrs. Y in a moment of frustrated despondency proclaims, "We've done network security to death. And it's not working." Tom breaks down the difference between intrusion detection and intrusion prevention. Some of the actions an IPS can take against detected threats: TCP resets, blackholing, rate shaping. Where you should you place an IDS versus an IPS? Isn't my firewall with built in IPS functionality good enough? The main evil encountered when deploying an IPS: false positives. Mrs. Y points out, "You drop one thing some VP thinks shouldn't have been dropped, and you're disabling everything." Are IPS signatures the crack cocaine of the security world? Are you staffed to properly maintain an IPS infrastructure, since it's not a "set it and forget it" appliance? This point gets hammered home with a vengeance. Using an IPS to help your applications survive an attack. Next-gen firewalls mash up L7 inspections with traditional firewall functions. How does this impact firewall performance? We swap war stories about implementing Check Point Smart Defense. We laugh, we cry, we twitch. And mostly, we turn it off. Daniel goes on a happy rant about Check Point's SmartView Tracker, while Mrs. Y sings the praises of syslog and Splunk. Ethan tries to strike a balance while vendor allegiance rears its ugly head. Poke, poke, poke. We wrap up with a quick reminder to assess the ability of security appliances themselves to withstand attacks. LMGTFY (because we love you) Shady RAT PKI SSL extended validation uRPF CoPP Cisco ASR router & the QuantumFlow processor DNS sinkholes (PDF) OpenDNS DNS-OARC Team Cymru Spamhaus MAPS RBL BGP Obtaining a BGP AS from ARIN SYN flood TCP intercept Level 3 Managed DDoS Protection Service DMZ Cisco private VLANs | 9/12/11 | Free | View In iTunes |
|
45 |
Show 60 – Introducing Infineta Hyper-Scale WAN Optimization | Haseeb Budhani, VP of Products at Infineta, chats with Greg and Ethan to introduce Infineta's Data Mobility Switch (DMS) in this sponsored show. The DMS is the industry's first Hyper-scale WAN optimization solution that can fill WAN pipes as large as 10Gbps. Targeting customers who need to accelerate replication, backup traffic, Hadoop, and similar data sets between data centers, Infineta is offering a solution that (as far as the Packet Pushers know) no one else is offering at this time. What used to take an array of WAN accelerators can now be handled by a single piece of hardware at each DC. Infineta is focused solely on Hyper-scale WANs - data center to data center traffic. Infineta starts where other WAN optimization vendors leave off. The smallest Infineta box accelerates multiple Gigabits per second. Merchant silicon is used (as opposed to x86 architecture) to allow deduplication of data streams at speeds up to 10Gbps. We'll be publishing a deep-dive on the DMS in a later show, where we get nerdy about how the DMS does its magic. Links Data Mobility Switch (DMS) Overview @haseebbudhani | 9/6/11 | Free | View In iTunes |
| 46 | VideoShow 59 – Design Clinic 1 – Is This Virtual Whiteboard on ? | Packet Pushers first Design Clinic where we take questions from the audience and try to work them out. We are working out the kinks in the show format so maybe this show isn't as good as we would like. We talk about VXLAN, VTP and it's consequences, and a Design Scenario from CJ. | 9/3/11 | Free | View In iTunes |
|
47 |
Show 58 – The Packet Speaks! | In show 58, recorded August 27, 2011, Ethan Banks is joined by Tom Hollingsworth, Erik Peterson, and Amy Arnold for the Packet Pushers' first discussion about voice technology. Think of this as a foundational show that will ramp you up if you're a network engineer that doesn't deal with voice much beyond a QoS policy tweak here and there. I apologize in advance for any coughing/sniffling/clicking/crickets/hurricanes you notice. It seems this week's Skype upgrade broke my mute button, at least as related to my recording plug-in, so there's some environmental racket that wasn't possible for me to edit out in this show. First - The News: Cisco's been talking up their Integrated Services Router 819, which they are tagging as a "machine to machine (M2M) gateway". In ruggedized form, the 819 can take a bunch of abuse. Don't try this at home, but definitely check out this video. Lots of fun. ComputerWorld talks about some IPv6 attacks that could ding you, even if you're not an IPv6 shop. Why?Because you probably are an IPv6 shop, even if you don't think you are. Steve Jobs leaves Apple, and Tim Cook takes the helm officially. We wish Steve extremely well with his health, and Tim incredible success in bringing us the next magical and revolutionary devices. Psst...hey, Tim - could you make the big MBP a little cheaper? Some of us have mortgages. Discussion - The Packet Speaks! Voice - the redheaded stepchild of the networking world. Or is it? Why should network geeks pay attention to voice technology? Let's distinguish between voice and video. So I bought this fancy VoIP system for my business. I can dump my phone company now, right? How does a data T1 functionally differ from a voice T1? When I order a voice T1 from my provider, what am I actually ordering? We discuss CAS vs. PRI. Explain channelization of a voice T1 vs. a data T1...D-channels and B-channels, indeed. Why is planning for peak load so critical when deploying voice networks? What components take VoIP packets and turn them into TDM voice suitable for the plain old telephone system? We discuss gateways and DSPs. Do I have to terminate my voice T1 on a router? Or can I terminate it on a call manager system directly? What codecs should be used for what situations? G.711, G.729, and G.722 are discussed. Let's discuss vendor interoperability issues in the voice world. We mention a few religious discussions, proprietary vs. standard methodologies, and integrating a legacy PBX while migrating to a new VoIP system. The voice world is acronym heavy, but we take a stab a grouping them into signalling protocols and media protocols. | 8/28/11 | Free | View In iTunes |
|
48 |
Show 57 – Fat Cast Free for All – Virtual Workbench | The virtual workbench convened on August 9, 2011 with Greg Ferro, Ethan, Kurt Bales, Tom Hollingsworth, Josh O'Brien, and Mrs. Y (aka the Network Security Princess). This week we cover news, views and gossip of the last few weeks. A lot of complaining and review of what's changing in the network industry. Discussion VMware licensing backdown after customers complained- VMware isn't as dominant as it may appear, and will you ever OWN anything ? Lack of networking features in vSphere 5 Mrs Y gives us a rundown of Black Hat A mix of other random topics Cisco Nexus 2000 and working with FEX designs Links Odds and ends of items mentioned in the show... Jeff Fry's Blog on Future Nexus 7000 Line Cards (Sup2/ASA/NAM/WAN) The Register talks about the sales of Alcatel/Lucent Enterprise Business Unit The supposed OSPF vulnerability Symantec takes some potshots at Operation Shady Rat that was discovered by McAfee. We all agree that neither organisation is very credible - "virus protection" is synonymous with extortion and claming "he said/she said" is silly. http://cyberarms.wordpress.com/2011/07/26/researchers-break-military-chip-encryption-keys-using-nvidia-tesla-gpus/ | 8/19/11 | Free | View In iTunes |
|
49 |
Show 56 – Securing an Internet-Facing App – Part 1 – Host Hardening | An all-US cast gathers around the virtual whiteboard for a security discussion in Packet Pushers podcast show #56, recorded on August 1, 2011. Sysadmin, virtualization heavy, and blogger Bob Plankers joins Network Security Princess Mrs. Y, security industry veteran Daniel Powell, show regular and CCIE Tom Hollingsworth, and this week's host Ethan Banks to discuss host hardening in this first of a series on securing Internet-facing applications. First, The News: VMware vSphere 5 has been released, with some networking enhancements. RSA breach cost EMC $66M in Q2. BlackHat wartexting brings up SCADA fears. Google Street View data is coughing up private information. Conficker found on Fission External 4-in-1 Hard Drive/DVD/USB/Card Reader sold at Australian supermarket chain ALDI Global analysis of 10 million web attacks reveals everything old is new again. Then, The Discussion: Ancient attacks often still work. Each OS has a unique hardening strategy. Shutting down unneeded services is a best practice, but can impact other services. Host-based firewalls - boon or bane? Using a GUI to configure firewall services on a *NIX box is okay. We won't tell if you don't use vi. Can we distinguish a host-based firewall from a network firewall appliance? So...should we use both host-based firewalls and appliance firewalls at the same time? Separating system privileges by user and process. Security is no longer about one guy working by himself - that's a dead idea. How can you help an HTTP engine defend itself? Is it possible to break out of a chrooted jailcell? What impact to overall performance can host security add-ons cause? Moats, walls, and guns are great...unless you leave the back door open. Assuming our app will be broken into, what can we do ahead of time to keep damage to a minimum? Patching: protecting against potential harm. Detecting changes to hosts or applications using signatures and fingerprints. How do you handle the flood of logging events that's normal on any network? Centralized syslogging: there must be only one. How do you get back to normality once you've been pwned? Does it make sense to restore to a normal state via a VMware snapshot? Links: The gummy bear method of defeating fingerprint readers Cisco ASA identity-based firewalling (PDF) mod_security F5 Networks Application Security Module Open Web Application Security Project (OWASP) Pen testing Mining memcached TripWire (open source flavor) Logging, escalation, and correlation tools: Splunk, LogLogic, ArcSight, OpenNMS, SolarWinds Puppet Chef | 8/7/11 | Free | View In iTunes |
|
50 |
Show 55 – Questions You Should Be Asking Your Cloud Provider | This show is #55, recorded on July 27, 2011 with Greg Ferro, Ethan Banks, Kim Pedersen, and Mrs. Y aka the Network Security Princess. We cover a bit of news, and then discuss the security and economic implications of outsourcing your applications to the cloud. Or...the "blah blah cloud" as those of us worn out by marketing hype like to think of it. The News Dell buys Force 10. The applause is still ringing in our ears. Software switching keeps getting a lot of attention, and Greg gets a little ranty about finger placement & corduroy. US-CERT director gives no reason for departure, but we have our suspicions. Apple releases Lion. Firewire vulnerabilities, battery bricks, and busted VPN clients, oh my! TSA pr0n parade gets a software whitewash. You're lookin' good in your pixel-y undies! Discussion Defining the cloud. (Okay, at least we try to.) What sorts of functions can the cloud provide? How is cloud computing distinct from a colocation service? Is the cloud secure? ORLY?!? Tell us how... How is separation between cloud tenants done? How do you handle intellectual property theft by a cloud provider employee? If your cloud provider goes out of business, who owns your data? The cloud provider - or you? How long could your business last if you had to go to court to get your data back from your cloud provider? How do you write a contract to protect your business if your cloud provider has an extended outage? Can you control where your data geographically resides? How do you guarantee access from your network to your cloud provider? Once you've guaranteed access and performance, is outsourcing to the cloud still financially wise? When does it make sense to outsource to the cloud? When does it NOT make sense? What happens when a cloud fails? What is your recovery plan? Is it a smart idea to put mission-critical applications into the cloud? How do cloud providers contract SLAs for system failures? How do cloud providers replicate data between sites? What usage reporting does a cloud provider offer? How do you authenticate a cloud-based application against your local user database? How do you ensure compliance with regulations when your application is cloud-hosted? Is the cloud really just a poor man's data center? Okay - level set. Pros versus cons. The cloud is not all bad. Links Odds and ends of items mentioned in the show... Amazon EC2 Palo Alto Networks VMware vShield Cloud Security Alliance BGP AS (definition) Cisco Unified Computing and Servers | 7/31/11 | Free | View In iTunes |
|
51 |
Show 54 – Speaking With a LISP Expert – Cisco’s Victor Moreno | This show was recorded on July 7, 2011 (the week before Cisco Live Las Vegas), where Greg and Ethan were joined by subject matter expert Victor Moreno of Cisco in a topical podcast about LISP, the Locator/ID Separation Protocol. QUESTIONS WE ASKED What is LISP? What problems are addressed by LISP? How does LISP impact your existing core routing infrastructure? What's the difference between an RLOC and an EID? How does LISP help with device mobility? How does a packet get from one LISP site to another? LISP uses a (sort of) tunnel, so how much overhead is introduced? How does PMTUD work in a LISP environment? How does LISP help us with multihoming & equal-cost load-balancing between sites? What are LISP's loop prevention & route optimization mechanisms? Is there a way to apply routing policies to a LISP environment? Is LISP going to talk directly to devices like vCenter or OpenFlow controllers? Do all LISP routers maintain a synchronized routing table? Cisco has an inside joke that "the only way is the overlay." What's that mean? Are enterprises dependent on their ISPs if they'd like to leverage LISP? What are some applications for privately deployed LISP inside the data center? How does LISP detect when a host has moved from one domain to another? What is the RFC status of LISP? Would Cisco bet the data center on LISP? What Cisco platforms will LISP be supported on? Will LISP support highly dynamic environments where hosts move frequently? What is Cisco's reaction to informational RFC6115, Recommendation for a Routing Architecture? What security is baked into the current LISP iteration? LINKS Cisco's LISP Jump Page lisp.cisco.com Overview Page LISP Covered In The Internet Protocol Journal, Vol. 11, No. 1 IETF LISP Working Group Page RFC6115, as well as Greg's comments on RFC6115 | 7/24/11 | Free | View In iTunes |
|
52 |
Show 53 – CCIE Lab Preparation Tips – Persistence Pays Off | Getting Started This show is #53, and was recorded on July 12, 2011. In this show, Ethan Banks, Tom Hollingsworth, Greg Ferro, Kurt Bales, and Nicolas Michel talk about the process of preparing for Cisco's fabled CCIE lab exam. The show gets rolling with Tom checking in from CiscoLive and Ethan explaining how to set up a Cius (although a few of his details might be off). ;-) The Main Event The CCIE lab preparation discussion gets serious while the group shares their views on questions such as: How long did you prepare for the written exam? What about the lab? Did you rent a rack, use an emulator, or have your own equipment rack to practice with? Are there emulated switches these days? Are CCIE bootcamps really worthwhile? At what stage of your lab preparation would you most benefit from a bootcamp? Was the lab easier or harder than you expected? How challenging is the lab's troubleshooting section? During the lab, do you feel pressured by time to complete the assigned tasks? How do you cope with frustration or disappointment, both during preparation and the lab itself? What external resources do you draw upon to help prepare (forums, mailing lists, mentors, etc.)? How do you memorize obscure lists & facts? Have your career opportunities improved now that you're a CCIE? Does passing the CCIE lab mean you've crossed the finish line? Links Micronics Training (Narbik Kocharians) Internetwork Expert (Brian McGahan, Brian Dennis, Petr Lapukhov) IPExpert (Marko Milivojevic) Dynamips/Dynagen GNS3 IOU GroupStudy Mailing List Mental Case - "The Study App" Hosts & Guests Tom Hollingsworth | http://networkingnerd.wordpress.com | @networkingnerd Greg Ferro | http://etherealmind.com| @etherealmind Nicolas Michel | @mclnicolas Kurt Bales | http://www.network-janitor.net | @networkjanitor Ethan Banks | http://packetattack.org | @ecbanks | 7/16/11 | Free | View In iTunes |
|
53 |
Show 52 – Cisco Live Quickie | This week Tom is at Cisco Live and in a short sharp show, got a hold of Tony Mattke to talk about the conference and what their experiences are. Somewhere along the line, Tony told us some of his poor experiences with the Nexus 2000 and design tips for a Nexus-centric data centre. Greg is still in the UK and wishing he was at Cisco Live to join in the fun - but alas, there is real work to be done. Still jealous though. Hosts Tom Hollingsworth http://networkingnerd.wordpress.com | Twitter: @NetworkingNerd Tony Mattkehttp://routerjockey.com | Twitter: @tonhe and last, and the very least: Greg Ferro http://etherealmind.com| Twitter @etherealmind Feedback Follow the Packet Pushers on Twitter (@packetpushers | Greg @etherealmind | Tom Hollingsworth), and send your queries & comments about the show to packetpushers@gmail.com. We want to hear from you! Subscribe in iTunes and RSS You can subscribe to Packet Pushers in iTunes by clicking on the logo here. Media Player and MP3 Download You can subscribe to the RSS feed or head over to the Packet Pushers website to download the MP3 file directly from the blog post for that episode. | 7/10/11 | Free | View In iTunes |
|
54 |
Show 51 – Juniper QFabric | The much anticipated show about Juniper QFabric has finally arrived. Juniper QFabric is a different approach to building a switched network core - using what I call "expanded backplane" concept - to create a single Layer data centre switch fabric that uses a different approach from what we are used to by extending the backplane from a single switch to a multiswitch design. | 7/6/11 | Free | View In iTunes |
|
55 |
Show 50 – Collapsing Layers | This show was recorded Thursday, 6/23/2011. Greg was away at Glastonbury, so joining Ethan on the mic are Kurt Bales, Jeff Fry, and Mrs. Y for a design-oriented discussion revolving around the emerging one-tier data center. First - the news. New Zealand Herald 6/23/2011 - Free service hides your online life from prying eyes - "A free service launched yesterday called PrivateSky lets internet users shield email, Facebook updates, and other online exchanges from hackers or other unwanted snoops. The service from startup CertiVox comes as hackers appear to be rampaging through the internet, cracking defences at companies, attacking public websites, and tricking their way into email accounts to spy on contents." The Register 6/22/2011 - FBI fat-thumbs data centre raid - "A bungled FBI raid on a data centre has taken out an unknown number of Web sites. Apparently targeting a particular – but unnamed – customer of DigitalOne, the G-men seized three enclosures of equipment, according to the New York Times." ITNews.Com.AU 6/21/2011 - ASX takes network neutrality to new extremes - "Customers connected with exactly the same length of fibre. The Australian Stock Exchange (ASX) is promising mathematically consistent services to customers of its new $32 million data centre in Sydney's Gore Hill, even if that means rolling out hundreds of metres of excess fibre cabling." Then - the "collapsing layers" discussion. We're seeing the steady decline of the three-tier data center architecture. In fact, vendors are touting their new fabric solutions as single tier with any-to-any communication. What's a one-tier data center look like? Do we really have to kill spanning tree to evolve? What are the security implications in a data center where anyone can talk to anyone? We discuss and speculate about Juniper's QFabric. What are the challenges of converging your storage onto the fabric? (Don't miss Mrs. Y's definition of NFS!) Do we have to have a lossless single tier to safely run storage over a converged ethernet? If we could erase the whiteboard and design a brand new data center from scratch, what would it look like? Listener Question What are the pros and cons of running a single Cisco Catalyst 6513 for your entire infrastructure (including workstations)? Hosts Kurt Bales | http://www.network-janitor.net | @networkjanitor Jeff Fry | http://www.fryguy.net | @fryguy_pa Mrs. Y | our anonymous special guest Ethan Banks | http://packetattack.org | @ecbanks Greg Ferro | http://etherealmind.com| @etherealmind | 6/28/11 | Free | View In iTunes |
|
56 |
Show 49 – Cisco Nexus 1000v | A show about Cisco Nexus 1000V where we poke and prod at some of it's inner workings. 1. Virtual Machine Networking - the Nexus 1000V VEM data plane, port profiles, etc. VSM control plane (Nexus 1010) 2. Virtual Security Gateway (VSG) - VM-level firewall for multi-tenant environments 3. VM-FEX - 802.1Qbg/h comparison - Virtual Machine - aware networking add link to borg/big brother article on IOSHints http://www.ioshints.info/Data_Center_Fabric_Architectures Q&A 1. Why do we need a technology like VM-FEX? What’s the relation of VM-FEX to Adapter-FEX? 2. What’s the status of the standardization efforts? 3. HP is proposing VEPA? What’s different about what Cisco is doing? 4. Seems like there’s some proprietary stuff in VN-Link, maybe on the physical switch side? Is that the case? Can you elaborate? 5. VSG runs on vmware hypervisor. Why do we need VSG if vmware also offers vShield? 6. What about other virtual services beside firewall? Any plans for L4-7 stuff? 7. How do you get all this stuff provisioned and orchestrated in cloud environments? IP QoS on NX1KV. * Does it do policing or shaping on VM NICs? * How does that compare to what vSwitch is doing? * Will it get better queuing on pNIC … like ACL or QoS group classification mechanisms? * How about PFC/ETS support on pNIC (from Kurt Bales) Ivan has blogged extensively about the 802.1Qbg / Qbh and VN-Tag in these three blog (and probably even more by now) http://blog.ioshints.info/2011/05/edge-virtual-bridging-evb-8021qbg-eases.html http://blog.ioshints.info/2011/05/evb-8021qbg-s-component.html http://blog.ioshints.info/2011/06/vn-tag8021qbh-basics.html and a good campfire story about N1K development: http://blogs.cisco.com/datacenter/the_past_and_the_future_of_the_cisco_nexus_1000v/ Listener Questions We took the following listeners questions - hopefully we answered them during the show. Ian Castleman (with donation!!) : I have N5K's at top of rack, budget for N1KV's, VMWare in the blade chassis and a server team I can't convince to try UCS or HP so I'm stuck with the Dell dog awful M6220s in between them. My question for Cisco is can we still deploy the N1KVs and if so what functionality do I lose with a non Nexus "switch" in the middle. Question for you guys,any way you know of that I can get around having to have those Dell "switches" in the chassis? I'm not too familiar with the Dell range but the server guys tell me there are no pass through options that don't result in cabling explosions.. John McManus - who should manage the 1000v switch server engineers or network engineers Matt Keller - I'd like to know if Cisco plans to support other hypervisors such as Microsoft's HyperV. Matt Norwood - So do you see a bunch of N1k clones from other vendors in the future Hosts Tom Hollingsworth Web: http://networkingnerd.wordpress.com | Twitter: @NetworkingNerd Name: Ivan Pepelnjak Web: http://blog.ioshints.info Twitter: @ioshints Ethan Banks Web: http://packetattack.org | Twitter: @ecbanks and last, and the very least: Greg Ferro http://etherealmind.com| Twitter @etherealmind Feedback Follow the Packet Pushers on Twitter (@packetpushers | Greg @etherealmind | Tom Hollingsworth), and send your queries & comments about the show to packetpushers@gmail.com. We want to hear from you! Subscribe in iTunes and RSS You can subscribe to Packet Pushers in iTunes by clicking on the logo here. Media Player and MP3 Download You can subscribe to the RSS feed or head over to the Packet Pushers website to download the MP3 file directly from the blog post for that episode. | 6/21/11 | Free | View In iTunes |
|
57 |
Show 48 – Juniper Junosphere | This week we talk to Juniper about their Junosphere emulator and make the case for why the current version is very good but not suited for the Enterprise market ( because its actually too good ) and question why they are charging a customer for the hosted service. junosphere, unlike other emulators, is a fully detailed and accurate version that supports as many features as possible - it's the 'real deal' not a cut down version. In return, Greg makes the case that the Enterprise does not need the features they are discussing or offering. The software needs to be available on a desktop, it needs to be free and freely available. If Juniper wants to get "into" the Enterprise, then give customers the software tools to prevent the "we don't do Junos" objection. Should Juniper should be looking at this as a growth opportunity and not as a profit opportunity ? Hosts / Guests Ashwin Kovummal, Product Manager for Junosphere, Juniper. Dan Backman, JNCIE-ER #6 / JNCIE-MT #265 / JNCI, Solutions Architect / Product Marketing. Topics - What is Junosphere exactly? - Where did it come from? - What does it do / what problems is it intended to solve? - What does Juniper think is unique about Junosphere? - How do we expect people to use it? - What users/environments is it targeted towards? - What about Virtual Junos? - VJX Series is a separate product that runs a virtual Junos image within Junosphere Are there plans to offer a standalone version of Junosphere for proof of concept or change control testing? Are there plans to offer Junosphere packages in less than 24 hour increments? ============ Handling hardware specific configuration e.g. QoS How to buy / purchase order / pay ? Why should we pay, haven’t we paid enough already ? Hosts Tom Hollingsworth http://networkingnerd.wordpress.com | Twitter: @NetworkingNerd Ethan Bankshttp://packetattack.org | Twitter: @ecbanks and last, and the very least: Greg Ferro http://etherealmind.com| Twitter @etherealmind Feedback Follow the Packet Pushers on Twitter (@packetpushers | Greg @etherealmind | Tom Hollingsworth), and send your queries & comments about the show to packetpushers@gmail.com. We want to hear from you! Subscribe in iTunes and RSS You can subscribe to Packet Pushers in iTunes by clicking on the logo here. Media Player and MP3 Download You can subscribe to the RSS feed or head over to the Packet Pushers website to download the MP3 file directly from the blog post for that episode. | 6/15/11 | Free | View In iTunes |
|
58 |
Show 47 – Load Balancers – Good Thing We Didn’t Step in It | Load Balancers or Application Delivery Controllers are about improving the performance of our data centres. By allocating TCP session at the network layer, and combined with deep application awareness, we can improve our networks. We look at a range of issues, including Probes, Keepalives, DNS Global Load Balancing. Also looking at TCP Session termination as a performance and security methodology. | 6/6/11 | Free | View In iTunes |
|
59 |
Show 46 – Gum Flapping Fun | We just wandered around the topics this week, talking about whatever took our fancy and taking time for some laughs. Ethan has returned to add his voice to the debate, and "Mrs Y" turns up late but more than makes up for it in a crushing review of the security industry. Again. Rumours of Cisco ditching Linksys and Webex chatting about Cisco’s lack of direction and focus and what our experiences are. Cisco on the Outs With EMC, VMware? http://gigaom.com/cloud/is-cisco-on-the-outs-with-emc-vmware/ Junosphere emulator compared with Cisco IOU (and Arista’s free offering) This is really interesting. It’s offered as a standalone or as part of the Juniper Academic Alliance, a partnership with universities. Mrs. Y response: I just saw this released too, virtualizing JunOS on VMWare: http://www.darkoperator.com/blog/2011/5/10/virtualizing-junos-on-vmware.html OpenFlow configures OpenSwitch - why greg thinks openflow will cross the gap http://etherealmind.com/openflow-why-it-can-cross-the-adoption-gap/ http://community.citrix.com/display/ocb/2011/05/16/How+OpenFlow+is+changing+networking+and+XenServer Coding Relic: Just Weld It to the Rack - http://codingrelic.geekhold.com/2011/05/just-weld-it-to-rack.html There is a mantra amongst network equipment vendors: never let the customer unscrew the chassis from the rack. Replace every component with upgraded equipment, but never upgrade the chassis itself. Doing so often triggers the customer to send the whole thing out for bid to multiple vendors, and you might not win. Somebody else's chassis might get slotted into the hole you left. Apple tells support reps: Don’t Confirm Mac Infections http://www.theregister.co.uk/2011/05/20/apple_malware_attacks/ From the “OMG are you kidding me” postings for the week: Sony PSN still vulnerable http://www.bgr.com/2011/05/18/sonys-playstation-network-password-reset-page-compromised/ Junosphere - a discussion from the University perspective with "Mrs Y" weighing in. At $5 per day per router it's fine for Junos training partners, but no one else is likely to buy it - that is, anyone who isn't totally comitted to Juniper already isn't going to be attracted to JunOS. Why are they "nickel and diming" a competitive advantage ? Hosts / Guests Tom Hollingsworth http://networkingnerd.wordpress.com | Twitter: @NetworkingNerd Ethan Bankshttp://packetattack.org | Twitter: @ecbanks John McManus http://etherealmind.com/author/mcmanusj/ | Twitter: @johnmcmanus and last, and the very least: Greg Ferro http://etherealmind.com| Twitter @etherealmind Feedback Follow the Packet Pushers on Twitter (@packetpushers | Greg @etherealmind | Tom Hollingsworth), and send your queries & comments about the show to packetpushers@gmail.com. We want to hear from you! Subscribe in iTunes and RSS You can subscribe to Packet Pushers in iTunes by clicking on the logo here. Media Player and MP3 Download You can subscribe to the RSS feed or head over to the Packet Pushers website to download the MP3 file directly from the blog post for that episode. | 5/29/11 | Free | View In iTunes |
|
60 |
Show 45 – Arista – EOS Network Software Architecture – Webinar | Arista EOS Software Architecture - why is it different, better ? What's different about the software development that makes the product great. Recording of Arista EOS Software Architecture webinar. Sponsored by Arista (THANKS!) | 5/24/11 | Free | View In iTunes |
|
61 |
Show 44 – The Case for Shortest Path Bridging | A detailed look at Shortest Path Bridging for Layer 2 Mulitpath solutions for data centre, campus and carrier networks. | 5/15/11 | Free | View In iTunes |
|
62 |
Show 43 – Microsoft Teredo Is Crap | A shorter show this week as Greg gets ready to go to Interop in Las Vegas next week. We look at recent events and talk generally about network with Tom Hollingsworth, Brandon Carroll and Greg Ferro. Amazon AWS outage. People need to start realizing that just parking your infrastructure in the cloud doesn’t make it redundant. There is additional planning and design work. Network engineers and architects don’t just make this stuff up, as the people who undoubtedly lost their jobs because of this fiasco are now learning. According to this post by Jeremy Gaddis, it would appear that a wayward engineer was attempting to upgrade IOS on a device and jumped the gun on downing another section of the network, triggering a waterfall of failure. A cautionary reminder that you can never anticipate the human element: http://evilrouters.net/2011/04/29/the-ec2-ebs-outage-what-amazon-didnt-tell-you/ Sony Playstation Network Playstation Network goes down and gets pwned. If you thought AWS was bad, Sony managed to exposed 77 million people in one shot. The whole backbone of their online distribution network went down and they couldn’t do anything about it. To add insult to injury, it appears customer data was readily available from the hack. As of today, there are approximately 2.2 million credit cards up for sale, all with the critical CVV codes. Compartmentalization, anyone? IPv6 / IPv4 NAT - Hang our Heads in Shame RFC 6146 - Stateful NAT64 and RFC 6147 - DNS64. I think there’s a lot of discussion around these two. It appears that someone is of the opinion that the transition from IPv4 to IPv6 won’t happen without a little hand holding. I think these people are the same ones that still take chewable vitamins. Yes, it’s a bitter pill but you had best get used to swallowing it. http://tools.ietf.org/html/rfc6146 http://tools.ietf.org/html/rfc6147 IPv6 and Microsoft Teredo Host to Host, Host to Router, Router to Router. Teredo is Host to Host, relies on public gateways of someone elses/anyones servers not HA not reliable http://www.potaroo.net/ispcol/2011-04/teredo.html Teredo is described in a Microsoft technical note - http://technet.microsoft.com/en-us/library/bb457011.aspx. Teredo uses what has become a relatively conventional approach to NAT traversal, using a simplified version of the STUN active probing approach to determine the type of NAT, and uses concepts of "clients", "servers" and "relays" http://tools.ietf.org/html/rfc6144 The choice between the terms "transition" versus "coexistence" has engendered long philosophical debate. "Transition" carries the sense that one is going somewhere, while "coexistence" seems more like one is sitting somewhere. Historically with the IETF, "transition" has been the term of choice [RFC4213] [RFC5211], and the tools for interoperability have been called "transition mechanisms". There is some perception or conventional wisdom that adoption of IPv6 is being impeded by the deficiency of tools to facilitate interoperability of nodes or networks that are constrained (in some way, fully or partially) from full operation in one of the address families. In addition, it is apparent that transition will involve a period of coexistence; the only real question is how long that will last. Thus, coexistence is an integral part of the transition plan, not in conflict with it, but there will be a balancing act. It starts out being a way for early IPv6 adopters to easily exploit the bigger IPv4 Internet, and ends up being a way for late/never adopters to hang on with IPv4 (at their own expense, with minimal impact or visibility to the Internet). One way to look at solutions is that cost incentives (both monetary cost and the operational overhead for the end user) should encourage IPv6 and discourage IPv4. That way natural market forces will keep the transition moving -- especially as the legacy IPv4-only stuff ages out of use. | 5/2/11 | Free | View In iTunes |
|
63 |
Show 42 – Protect My B00B1E5 by Hating on Firewalls | We covered a lot of topics in this show, mainly hating on firewalls and the lack of security process in most corporate companies. Firewalls I was listening to one of your shows from July and heard you discuss Checkpoint Vs. other firewalls. I've been... | 4/25/11 | Free | View In iTunes |
|
64 |
Show 41 – Mrs Y – QoS’D Up the Wahzoo – RSA, Comodo, Low Cost Data Centre Design, L3 Switch or Router | Topic: RSA exposure and what it means to people when the obscurity of a statement tells you nothing about what happened and why you should be very, very scared. You could even contrast this a little with the Fukushima nuclear issues due to the lack of... | 4/19/11 | Free | View In iTunes |
|
65 |
Show 40 – Openflow – Upending the Network Industry | This show is an introduction to OpenFlow - the why, how and what's it gonna do ? We discuss OpenFlow with Matt Davey from Indiana University who is using OpenFlow enabled switches and wireless access points today. The concept of a controller based LAN network is a powerful idea, and the OpenFlow Network Foundation has participation from large networking vendors, large cloud providers and big data companies such as Google, Facebook, Yahoo and so forth. This provides some validation that the technology is of keen interest. Recently, venture capital funding has been moving into startups working on this technology. Ivan and Greg both agree that this is potentially a game changing technology, especially for cloud networking with the potential to disrupt significant parts of the networking industry. Show Notes You can Matt Davey's blog here. OpenFlow Website Openflow coming to Interop Openflow project at Stanford Uni recorded a number of videos which have great demonstrations of where the product is today. Greg's article on TCAM can be found here Venture capitals has funded Big Switch to develop software in this are. This company iwNetworks makes switch hardware for Cloud networks. Details on the OpenVswitch and their announced support for OpenFlow. This is hugely interesting if you are a cloud provider and the ability to tie your virtual switches with the configuration of the your physical switches is a powerful tool. Open vSwitch is an equivalent Speakers You can Matt Davey's blog here. Name: Ivan Pepelnjak Web: http://blog.ioshints.info Twitter: @ioshints Name: Greg Ferro Web: www.etherealmind.comTwitter: @etherealmind Feedback Follow the Packet Pushers on Twitter (@packetpushers | Greg @etherealmind | Tom Hollingsworth), and send your queries & comments about the show to packetpushers@gmail.com. We want to hear from you! Subscribe in iTunes and RSS You can subscribe to Packet Pushers in iTunes by clicking on the logo here. Media Player and MP3 Download You can subscribe to the RSS feed or head over to the Packet Pushers website to download the MP3 file directly from the blog post for that episode. | 4/7/11 | Free | View In iTunes |
|
66 |
Show 39 – Unplugged on Tech Field Day Wireless | The rise in mobile devices such as iPads, HP tablets and more means that Wireless Networking is becoming part of the mainstream for network engineers. You can't ignore it anymore. When we got an invitation to the very first ever Wireless Tech Field Day in San Jose on March 17 & 18 , then we all packet our bags and headed out. Greg got to meet Tom for the first time, and bunch of other wireless nerds (Full List and talk networking. To wrap it up we recorded this show where we gove the Packet Pushers critical eye on the products and the presentations, talk about what we loved and hated, some of the interesting parts of the show. comparing the Spectrum Analysis tools from Air Magnet, Metageek (WiSpy) and discussing which one is best suited to different markets. A look at wireless controller networking and the fact that wireless manufacturers are moving towards distributed solutions and that companies like Aerohive are part of that move. Some info the HP and Cisco wireless networking products including discussion 3x3 wireless stadanrd You can find the Metageek training videos on their WiSpy products on Youtube by metageektrent. You can Jennifer Huber's Comparison video of MetaGeek and Air Magnet . Greg's post at EtherealMind.com on Controller based networks and might be worth contrasting with the move away from controller based networks in wireless AeroHive, HP, ‘Big Boner’ AP’s and Wireless LAN Controllers Guests Jennifer Huber is @jenniferlucille and her blog http://jenniferhuber.blogspot.com/ Chris Lyttle | Twitter: wifikiwi.com @wifikiwi Tom Hollingsworth http://networkingnerd.wordpress.com | Twitter: @NetworkingNerd Presenting Sponsors Here are the presenting companies from the Wireless Tech Field Day: Aerohive @Aerohive AirMagnet @AirMagnet_Inc Fluke Networks @FlukeNetworks HP @HP_Networking MetaGeek @MetaGeek Cisco Wireless Feedback Follow the Packet Pushers on Twitter (@packetpushers | Greg @etherealmind | Tom Hollingsworth), and send your queries & comments about the show to packetpushers@gmail.com. We want to hear from you! Subscribe in iTunes and RSS You can subscribe to Packet Pushers in iTunes by clicking on the logo here. Media Player and MP3 Download You can subscribe to the RSS feed or head over to the Packet Pushers website to download the MP3 file directly from the blog post for that episode. | 4/4/11 | Free | View In iTunes |
|
67 |
Show 38 – Comparing Data Centre Fabrics From Juniper, Brocade and Cisco | Kurt Bales has a customer who wants to buy a new Data Centre Network and the three main networking vendors (Juniper, Cisco & Brocade) have pitched at him and the customer. Kurt then contacted the Pushers and said "This would make a great podcast to talk about how it looks, works and the reality of the so-called "Data Centre Fabric networks, plus I've got some questions that I'd like to get some second opinions." So we rounded up Ivan from IOS Hints and Greg from EtherealMind to record a fast, furious and focussed look at the state of play with the three data centre fabrics today. Lots of speculation, wild guesses and deep diving followed. I learned heaps. Topics that we covered: * data centre fabric design, TRILL, Borg or Big Brother approaches, * FCoE, iSCSI, NFS, Routing, * Juniper, QFX 3500, QFabric, ERX, ICN, * Brocade, VDX, VCS, FSPF, * Cisco, Nexus 7000, Nexus 5000, Name: Ivan Pepelnjak Web: http://blog.ioshints.info Twitter: @ioshints Name: Kurt Bales Web: http://www.network-janitor.net Twitter: @networkjanitor Name: Greg Ferro Web: www.etherealmind.comTwitter: @etherealmind Links and Posts This post is where Ivan looks into TRILL and STP interaction at the edge of the L2 network. IOSHints TRILL/FABRIC PATH – STP INTEGRATION Here is the post where Ivan outlines the Borg / Big Brother architectures. THE DATA CENTER FABRIC ARCHITECTURES Brad Hedlund's post on Inverse Virtualisation - it seems Cisco might be forgetting that there is more than one way to do it and Brad talks about the the other ways to do it while pointing out that the way HE does it is best. Keep up the good work Brad and stay "on message" for Cisco - keep pulling for the team. Greg's post at EtherealMind.com on Controller based networks and might be worth contrasting with the move away from controller based networks in wireless AeroHive, HP, ‘Big Boner’ AP’s and Wireless LAN Controllers Feedback Follow the Packet Pushers on Twitter (@packetpushers | Greg @etherealmind | Tom Hollingsworth), and send your queries & comments about the show to packetpushers@gmail.com. We want to hear from you! Subscribe in iTunes and RSS You can subscribe to Packet Pushers in iTunes by clicking on the logo here. Media Player and MP3 Download You can subscribe to the RSS feed or head over to the Packet Pushers website to download the MP3 file directly from the blog post for that episode. | 3/25/11 | Free | View In iTunes |
|
68 |
Show 37 – Even More IPv6 Ready Than Last Week | A short episode this week because of the daylight savings change in the US and Greg didn't schedule things correctly. Guests Terry Slattery http://www.netcraftsmen.net Tom Hollingsworth http://networkingnerd.wordpress.com | Twitter: @NetworkingNerd John McManus http://etherealmind.com/author/mcmanusj/ | Twitter: @_johnmcmanus_ Matthew Norwood http://networktherapy.wordpress.com @matthewnorwood and last, and the very least. Greg Ferro http://etherealmind.com| Twitter @etherealmind Topic 1 - Cisco UC or Microsoft Lyncs What's the difference ? Does anyone care ? http://go.microsoft.com/?linkid=9742864 http://technet.microsoft.com/en-us/library/gg293124.aspx http://www.cisco.com/en/US/products/sw/voicesw/ps556/index.html Topic 2 - Data Cabling Talking more about MPO cabling and data centre cabling design. Which led into a discussion about data centre floors, power density, suspended cabling floors, contained hot or cold aisles and other related topics. Greg had a blog post http://etherealmind.com/notes-physical-connectors-40-100-gigabit-ethernet/. Topic 3 - IPv6 and NAT Because we haven't discussed it enough yet. Carrier Grade NAT. Deep Packet Inspection and the pathways is forces onto the traffic flows. Topic 4 - Designing the Network from the Ground Up How do you approach design a network form the ground up ? Feedback Follow the Packet Pushers on Twitter (@packetpushers | Greg @etherealmind | Tom Hollingsworth), and send your queries & comments about the show to packetpushers@gmail.com. We want to hear from you! Subscribe in iTunes and RSS You can subscribe to Packet Pushers in iTunes by clicking on the logo here. Media Player and MP3 Download You can subscribe to the RSS feed or head over to the Packet Pushers website to download the MP3 file directly from the blog post for that episode. | 3/18/11 | Free | View In iTunes |
|
69 |
Show 36 – IPv6 Ready | Guests Tom Hollingsworth http://networkingnerd.wordpress.com | Twitter: @NetworkingNerd John McManus http://etherealmind.com/author/mcmanusj/ | Twitter: @_johnmcmanus_ Greg Ferro http://etherealmind.com| Twitter @etherealmind Topic 1 - iPad 2 Apparently none of us are going to buy one, because we've already got one. Topic 2 - What is Cloud Computing Although we tire of talking about Cloud Computing, it's seem that there is more to say. Talking about what building you own cloud is about including accounting/budgeting problems and server/networking operation problems. We also talk about the lack of bandwidth and a wide range of other topics. Topic 3 - Catalyst 6500 Services module strategy What's the future of Cisco Cat6500 services modules strategy since the current modules are obviously not scaling to the future. Is the Nexus 7000 suitable for use in the Campus ? Somehow we deviated into a discussion about the relevance of the ASR 1K/9K routers and their fit into a network design. Topic 4 - IPv6 Ready program A look at the http://www.ipv6ready.org/ program which led into a discussion around how to deploy IPv6 into an enterprise (hint: it's doesn't involve deploying IPv6). Topic 5 Tech Field Day Wireless I'll be in San Jose for the http://gestaltit.com/field-day/2011-wireless/ Gestalt IT Tech Field Day. Tom Hollngswoth and Mat Norwood (regular guests on the show) are also Feedback Follow the Packet Pushers on Twitter (@packetpushers | Greg @etherealmind | Tom Hollingsworth), and send your queries & comments about the show to packetpushers@gmail.com. We want to hear from you! Subscribe in iTunes and RSS You can subscribe to Packet Pushers in iTunes by clicking on the logo here. Media Player and MP3 Download You can subscribe to the RSS feed or head over to the Packet Pushers website to download the MP3 file directly from the blog post for that episode. | 3/14/11 | Free | View In iTunes |
|
70 |
Show 35 – Media Markup – A Garden of Switches | Intro This is Packet Pushers Media Mungle, new format were we gather people from from the technology media to sit down around the virtual workbench and look back at events with beady media eye. We’ll take closer look at what’s been happening and discuss what’s happening in a little bit more detail. We got a list of topics to discuss and here is who’s who in the zoo today. Guests Mike Fratto, Editor, Network Computing. networkcomputing.com | Twitter: @ mfratto Shamus McGillicuddy, Director of News and Features for searchnetworking.com | Twitter : @shamustt Matters At Hand Juniper QFabric and it's impact on the market Cisco SecureX strategy - is there a plan ? First it was Borderless Networks, now it's SecureX. Along the way we lost a lot of products, and seen a lot of delays. Any news from Brocade ? Nah, still nothing. There is also the Huawei/Symantec and Force10 deal which could be interesting. Breathes some life into Force10 Feedback Follow the Packet Pushers on Twitter (@packetpushers | Greg @etherealmind , and send your queries & comments about the show to packetpushers@gmail.com. We want to hear from you! Subscribe in iTunes and RSS You can subscribe to Packet Pushers in iTunes by clicking on the logo here. Media Player and MP3 Download You can subscribe to the RSS feed or head over to the Packet Pushers website to download the MP3 file directly from the blog post for that episode. . | 3/6/11 | Free | View In iTunes |
|
71 |
Show 34 – Breaking the Three Layer Model | Guests Tom Hollingsworth http://networkingnerd.wordpress.com | Twitter: @NetworkingNerd Brandon Carroll http://globalconfig.net/ | Twitter: @brandoncarroll John McManus http://etherealmind.com/author/mcmanusj/ | Twitter: @_johnmcmanus_ Topic 1 Juniper QFabric Announcement Is this the point we start to re-think the 3 Layers of Network Architecture, will the future generation laugh at core, distribution and access designs. What are the implications for future designs? Cisco response is kind of hysterical. http://blogs.cisco.com/news/ciscos-unified-fabric-in-the-data-center/ Greg posts about Diverging Ethernet Switch markets is http://etherealmind.com/diverging-ethernet-switch-markets/ Greg's post on controller based network sis http://etherealmind.com/controller-based-networks-for-data-centres/ Topic 2 - Who’s scared of multivendor networking ? Does anyone remember those days ? There seem to be a drive at proprietary technology around the Data Centre these days, QFabric Unified Fabric, this does not help with multivendor environments. Topic 3 - What impact has could computing on network design for the network Design Engineer ? I see network a bunch of cuboids linked together which allows communication between end point, I see no fluffiness here. Topic 4 - The Last of the Bogons / Bogon begone RT @_JohnMcManus_: BOGON updates tonight, feeling all sentimental as this should really be the last time :( bye bye BOGONS http://www.team-cymru.org/Services/Bogons/ Topic 5 - Backplanes and Frames - User Question From: Travis Marlow travis.marlow@gmail.com Message: Does a tagged frame stay tagged when it enters a switch and traverses the backplane? I have always wondered this and haven't found the answer in all of my studies. Cheesy Bogon Jokes A Bogon walks into a bar. The Bartender says... You’re not supposed to be here! A Bogon walks into a bar. The Bartender says..... I thought you were extinct ! A Bogon walks into a bar and says to the Bartender... Take me to your leader! Feedback Follow the Packet Pushers on Twitter (@packetpushers | Greg @etherealmind | >Tom Hollingsworth <), and send your queries & comments about the show to packetpushers@gmail.com. We want to hear from you! Subscribe in iTunes and RSS You can subscribe to Packet Pushers in iTunes by clicking on the logo here. Media Player and MP3 Download You can subscribe to the RSS feed or head over to the Packet Pushers website to download the MP3 file directly from the blog post for that episode. . | 2/27/11 | Free | View In iTunes |
|
72 |
Show 33 – IPv6 It All Comes Down to Money | Intro With the upcoming Ipocalypse it seems like time to start discussing IPv6 in detail. Although we previously covered IPv6 in Show 21 – IPv6 for the Win! Part 1 and Show 21 – IPv6 for the Win! Part 2 we think that IPv6 is big enough to have another shot. Guests Shivlu Jain http://www.mplsvpn.info | Twitter: @shivlu ruhann du plessishttp://routing-bits.com | Twitter : @routingbits Kurt Bales, Eintellego www.network-janitor.net | Twitter: @networkjanitor Skeeve Stevens , Eintellego www.eintellego.net | Twitter: @skeevework Matters At Hand Boche.Net - VMware and jumbo frames Boche.net - Jumbo Frames Comparison Testing with IP Storage and vMotion IPv6 - It's almost here public IPv6 allocation and how the RIRs will respond. https://www.arin.net/knowledge/rirs/ARINcountries.html Shivlu points out that 6RD is going to be the most popular choice. http://tools.ietf.org/html/rfc5569 http://en.wikipedia.org/wiki/IPv6_rapid_deployment http://www.renesys.com/blog/2011/01/egypt-leaves-the-internet.shtml cablemap.info shows a global map withthe undersea cables around the globe. http://revk.www.me.uk/2011/01/expert.html Blog post suggesting that the ARIN is working up a media event for the last of the IPv4 addresses. Egypt blocking off the Internet Observations, comments. Statements of the obvious. Skeeve points out that at recent Internet conference Egypt wants to be able to tap all the backbone cables. global prefix and it's failure for carrier dependent deploymnt Feedback Follow the Packet Pushers on Twitter (@packetpushers | Greg @etherealmind | Ethan @ecbanks), and send your queries & comments about the show to packetpushers@gmail.com. We want to hear from you! Subscribe in iTunes and RSS You can subscribe to Packet Pushers in iTunes by clicking on the logo here. Media Player and MP3 Download You can subscribe to the RSS feed or head over to the Packet Pushers website to download the MP3 file directly from the blog post for that episode. . | 1/30/11 | Free | View In iTunes |
|
73 |
Show 32 – Media Mungle | Intro This is Packet Pushers Media Mungle, new format were we gather people from from the technology media to sit down around the virtual workbench and look back at events with beady media eye. We’ll take closer look at what’s been happening and discuss what’s happening in a little bit more detail. We got a list of topics to discuss and here is who’s who in the zoo today. Guests Mike Fratto, Editor, Network Computing. networkcomputing.com | Twitter: @ mfratto Shamus McGillicuddy, Director of News and Features for searchnetworking.com | Twitter : @shamustt James Duffy, networkworld.com | Twitter: @jim_duffy Matters At Hand Topic 1 - Cisco Announces a Dividend - Why ? Precis: Cisco announced a dividend for 2011. Is there a bigger story to this ? Links: http://www.reuters.com/article/idUSTRE68D42P20100914?pageNumber=1 Topic 2 - Cisco's disappointing outlook for its fiscal Q2. Why did Cisco downcast its upcoming quarter while its peers are expecting double digit growth? Is it a Cisco issue alone? Misexecution? Spread too thin in too many adjacent markets? They gained share in core routing and switching markets in fiscal Q1/calendar Q3 so it does not appear that they are taking their eye off the ball. What's at the root of Cisco's challenging quarter? Topic 3 - Network Management ? The Data Center Orchestration market heating up with LineSider acquisition and joint development with BMC. Is it imperative for Cisco to own this technology (vs. partner) in order to be successful in next-gen data center opportunities? Network management has always been a chink in Cisco's armour -- will it impair the company's efforts in data center? Or will they get it right this time around? Do they have any wiggle room? Must they succeed in DC mgmt./orchestration -- ie, be a leading supplier or provider of these solutions -- in order to succeed in DC/cloud overall? Topic 4 - Wireless LAN market activity One general topic: wireless LAN market activity. Smaller players like Aerohive and Meraki have made interesting moves in recent weeks. Cisco announced a new WIPS solution. And HP is rumored to be making a major move soon. Feedback Follow the Packet Pushers on Twitter (@packetpushers | Greg @etherealmind | Ethan @ecbanks), and send your queries & comments about the show to packetpushers@gmail.com. We want to hear from you! Subscribe in iTunes and RSS You can subscribe to Packet Pushers in iTunes by clicking on the logo here. Media Player and MP3 Download You can subscribe to the RSS feed or head over to the Packet Pushers website to download the MP3 file directly from the blog post for that episode. . | 1/24/11 | Free | View In iTunes |
|
74 |
Show 31 – Don'T Take It Too Seriously | Topics for this Week A mixed bag of topics this week, some from people who have written in and some more general topics. Capacity planning a firewall or router - what are the issues and technical limitations Why are we using 1Gb Ethernet ports at the access layer when we don't need them ? A look at the Skype outage - Skype's Blog Using EIGRP as the IGP in an MPLS core - why not ? Feedback Follow the Packet Pushers on Twitter (@packetpushers | Greg @etherealmind | Ethan @ecbanks), and send your queries & comments about the show to packetpushers@gmail.com. We want to hear from you! Subscribe in iTunes and RSS You can subscribe to Packet Pushers in iTunes by clicking on the logo here. Media Player and MP3 Download You can subscribe to the RSS feed or head over to the Packet Pushers website to download the MP3 file directly from the blog post for that episode. Also, subscription options for Zune, Boxee and a range of other podcatchers are listed on the website. | 1/18/11 | Free | View In iTunes |
|
75 |
Show 30 – HP ExpertOne Certifications | This week we hear from HP on their Network Certification program. Rebekah Harvey, Director of Product Management for HP Global Certification and Learning got in the hot seat and answered our questions on their program | 1/6/11 | Free | View In iTunes |
|
76 |
Unplugged – Show 4 – Too Many iPads | Guests This Week Jennifer Huber is the host and her twitter is @jenniferlucille and her blog http://jenniferhuber.blogspot.com/ Andrew von Nagyblakekrone.com @w4nm4n Chris Lyttle wifikiwi.com @wifikiwi #Content * 802.11n adoption in the enterprise may be driven by iPads and iPhones today, and Android in the future. This may drive the greater of adoption of wireless networking generally. * Will the prevalence of personal hotspot devices end up ruining enterprise guest networks? Guest networks are becoming important systems for external consultants and contractors and the wireless networks need to be more reliable. Discussions of some of the challenges around this. * Fast roaming and why it’s important in an enterprise environment, especially with 802.1x/EAP authentication; forthcoming Wi-Fi Alliance Voice Enterprise certification. * Keith R Parsons moving to Ruckus. Feedback Follow the Packet Pushers on Twitter (@packetpushers | Greg @etherealmind | Dan @rovingengineer | Ethan @ecbanks), and send your queries & comments about the show to packetpushers@gmail.com. We want to hear from you! Subscribe in iTunes and RSS You can subscribe to Packet Pushers in iTunes by clicking on the logo here. Media Player and MP3 Download You can subscribe to the RSS feed or head over to the Packet Pushers website to download the MP3 file directly from the blog post for that episode. Also, subscription options for Zune, Boxee and a range of other podcatchers. If you need to subscribe manually use http://feeds.packetpushers.net/PacketPushersPodcast. | 12/19/10 | Free | View In iTunes |
|
77 |
Show 29 – IT Is About SKILLS Not Business | This week on the Packet Pushers we had Guests Josh O'Brien http://staticnat.com @joshobrien77 Matthew Norwood http://networktherapy.wordpress.com @matthewnorwood Jeremy Filliben http://www.jeremyfilliben.com/ @jfilliben Marko MILIVOJEVIC http://markom.info @icemarkom Topics Discussed Matthew recently posted about Myths of IT http://networktherapy.wordpress.com/2010/12/08/the-myths-of-it-part-2/ where he points out the IT people don’t REALLY need business skills just commonsense. Looking back at Cisco’s marketing for the year. Hah! How the future of Cisco networking products looking …. not too good. What do you do during your commute. If you have one (don’t be hating Jeremy because he works from home) And lost of other stuff. Listen in to the general chat from this week. Feedback Follow the Packet Pushers on Twitter (@packetpushers | Greg @etherealmind | Ethan @ecbanks), and send your queries & comments about the show to packetpushers@gmail.com. We want to hear from you! Subscribe in iTunes and RSS You can subscribe to Packet Pushers in iTunes by clicking on the logo here. Media Player and MP3 Download You can subscribe to the RSS feed or head over to the Packet Pushers website to download the MP3 file directly from the blog post for that episode. Also, subscription options for Zune, Boxee and a range of other podcatchers are listed on the website. | 12/19/10 | Free | View In iTunes |
|
78 |
Show 28 – vCloud Network Overlays, OTV, VEPA and Networking Appliances | It was planned to have a discussion around L2 Data Centre connection the VMworld in Copenhagen but Scott and I could not meetup. So we recorded this podcast to start talking about some of the issues, technology and solutions. I'm not sure that we have all the technology or knowledge in place, so keep watching for more discussions in the future. This is the second half of the show and you should probably listen to last weeks show to get the whole story at http://packetpushers.net/show-27-layer-two-2-data-centre-interconnect/ Guests Scott Lowe http://scottlowe.org Ivan Pepelnjak http://blog.ioshints.info @ioshints Layer 2 Data Centre Interconnect - open discussion The challenges of extending L2 DCI network betweens sites. Outlining the threats of large Layer 2 spaces in terms of network vulnerability. quick review of vMotion traffic and its requirements. Reviewing the impact of fault domains and L2 VLAN space as uncontrollabl It’s all about the application. Latency, latency and the impact on vMotion switchover. Greg’s article on the Traffic Trombone and Ivan’s extensions to it. It’s worth remembering that Network Load Balancers can be more effective than using vMotion is certain use cases. vMotion is not for unplanned outages or DR. More for planned outages or possibly workload balancing. Debating whether we are able to QoS L2 traffic when flowing between data centers thus answering the question about guaranteeing levels of service for multiple hosts in a VLAN. Some humour on Pseudowire over MPLS over GRE over IP. But’s its actually real. Some review on the F5 EtherIP technology and whether it’s relevant to the solution. Feedback Follow the Packet Pushers on Twitter (@packetpushers | Greg @etherealmind | Ethan @ecbanks), and send your queries & comments about the show to packetpushers@gmail.com. We want to hear from you! Subscribe in iTunes and RSS You can subscribe to Packet Pushers in iTunes by clicking on the logo here. Media Player and MP3 Download You can subscribe to the RSS feed or head over to the Packet Pushers website to download the MP3 file directly from the blog post for that episode. Also, subscription options for Zune, Boxee and a range of other podcatchers are listed on the website. | 12/12/10 | Free | View In iTunes |
|
79 |
Runt Packet 8 – Virtensys – I/O Virtualisation | In this Runt Packet we talk to Bob Napaa from Virtensys about their Virtual I/O solution for servers. What’s especially different is that their solution doesn’t use networking…..tune in for mroe details. In the show we cover a lot of topics: How Virtensys connects CPU and Memory to External Resources. Explain key benefits of PCI Bus extension. it’s a standards based technology it’s high performance About the Physical Equipment PCI card into the PCI bus cables that connect to the top of rack Vietensys box Uses standard Ethernet and Fibrechannel adapters in the chassis Management Platform Virtensys also has a GUI management platform. which shows the status, configuration but also has a CLI for power users. Links and Sites You can check out http://virtensys.com/. If you want to contact someone at Virtensys for more information: Virtensys US and Americas sales@virtensys.com Virtensys EMEA (Europe, Middle East and Africa) sales@virtensys.com Virtensys Japan sales@virtensys.com Virtensys APAC sales@virtensys.com Feedback Follow the Packet Pushers on Twitter (@packetpushers | Greg @etherealmind | Ethan @ecbanks), and send your queries & comments about the show to packetpushers@gmail.com. We want to hear from you! | 12/8/10 | Free | View In iTunes |
|
80 |
Show 27 – Layer 2 Data Centre Interconnection | Scott Lowe and I planned to have a discussion around L2 Data Centre connection the VMworld 2010 in Copenhagen but Scott and I could not meetup. So we recorded this podcast to start talking about some of the issues, technology and solutions on L2 DCI. I'm not sure that we have all the technology or knowledge in place, so keep watching for more discussions in the future. We have only scratched the surface. If anyone else wants to discuss the topic, please get int contact as more would be better. Because the recording lasted for a hour and a half, we split the show into two parts. This is Part 1 - Layer 2 Data Centre Interconnection where we talk about the problems, challenges. Next week we go into more esoteric topics on vCloud networking, OTV, VEPA and network appliances as virtual machines. Guests Scott Lowe http://blog.scottlowe.org Ivan Pepelnjak http://blog.ioshints.info @ioshints Layer 2 Data Centre Interconnect - open discussion The challenges of extending L2 DCI network betweens sites. Outlining the threats of large Layer 2 spaces in terms of network vulnerability. quick review of vMotion traffic and its requirements. Reviewing the impact of fault domains and L2 VLAN space as uncontrollabl It’s all about the application. Latency, latency and the impact on vMotion switchover. Greg’s ariticle on the Traffic Trombone and Ivan’s extensions to it. It’s worth remembering that Network Load Balancers can be more effective than using vMotion is certain use cases. vMotion is not for unplanned outages or DR. More for planned outages or possibly workload balancing. Debating whether we are able to QoS L2 traffic when flowing between data centers thus answering the question about guaranteeing levels of service for multiple hosts in a VLAN. Some humour on Pseudowire over MPLS over GRE over IP. But’s its actually real. Some review on the F5 EtherIP technology and whether it’s relevant to the solution. Feedback Follow the Packet Pushers on Twitter (@packetpushers | Greg @etherealmind | Ethan @ecbanks), and send your queries & comments about the show to packetpushers@gmail.com. We want to hear from you! Subscribe in iTunes and RSS You can subscribe to Packet Pushers in iTunes by clicking on the logo here. Media Player and MP3 Download You can subscribe to the RSS feed or head over to the Packet Pushers website to download the MP3 file directly from the blog post for that episode. Also, subscription options for Zune, Boxee and a range of other podcatchers are listed on the website. | 12/4/10 | Free | View In iTunes |
|
81 |
Unplugged – Show 3 – The Fittest Engineers Ever | Guests This Week Blake Krone blakekrone.com @blakekrone Rocky Gregory intensified.com @bionic_rocky Chris Lyttle wifikiwi.com @wifikiwi Show Notes: Item 1 - Firesheep, Blacksheep, is it really news that open wifi is not secure? http://techcrunch.com/2010/11/08/firesheep-blacksheep/ Item 2 - Which EAP / PEAP is better & why ? Item 3 - RTLS: What is it and how you can benefit from it. Real time location Services is where we combining RFID tags, WiFi networks for location monitoring and customer tracking. Item 4 - Trapeze goes to Juniper - Big OEM player - who got shafted ? Item 5 - Air Magnet’s new multi adapter support? Plus some general wanderings into various wireless issues. The Hosts Jennifer Huber is @jenniferlucille and her blog http://jenniferhuber.blogspot.com/ Feedback Follow the Packet Pushers on Twitter (@packetpushers | Greg @etherealmind | Dan @rovingengineer | Ethan @ecbanks), and send your queries & comments about the show to packetpushers@gmail.com. We want to hear from you! Subscribe in iTunes and RSS You can subscribe to Packet Pushers in iTunes by clicking on the logo here. Media Player and MP3 Download You can subscribe to the RSS feed or head over to the Packet Pushers website to download the MP3 file directly from the blog post for that episode. Also, subscription options for Zune, Boxee and a range of other podcatchers. | 11/29/10 | Free | View In iTunes |
|
82 |
Show 26 – Virtual Connect – The Conversion ? | This week we are joined by Ken Henault from HP. Ken is a leader in the VirtualConnect product from HP. In the past, Greg has ranted about the the VirtualConnect product and how crap it looks so we got in touch to 'go at it' and see if he can be convinced that VC has value. How did it go ? ..... you be the judge. Thanks also to the people who tweeted their questions during the recording of the podcast. | 11/21/10 | Free | View In iTunes |
|
83 |
Show 25 – Omniscient Logic – HP Networking in the Data Centre | This week with talk the Lin Nease, Director for Advanced Technologies for HP Networking. | 11/7/10 | Free | View In iTunes |
|
84 |
Show 24 – Internet Exchange and Peering Points | We talk with Stephen Wilcox and Russell Heiling about Internet Exchange and Peering Points covering purposes, some technology and looking into the peering industry. | 10/31/10 | Free | View In iTunes |
|
85 |
Unplugged – Show 2 – Virtual Access Points | This is the second podcast from the Packet Pushers devoted to Wireless Networking. After Jennifer Huber joined the Packet Pushers, we agreed that an occasional wireless podcast about would be worth doing. Herewith, is the second episode of Packet Pushers Unplugged on wireless networking. The Content Item 1 - Importance of a site survey and the types of site surveys (Active, Passive, Predictive) Item 2 - Wireless Tech Field Day coming up next year - Have you put in your .02 about who you’d like to see there? Please go to the survey at http://www.surveymonkey.com/s/GKM2W6Q and tell us what you think. Item 3 - Emerging Wi-Fi Uses in Retail Enterprises (business analytics, real-time location services, multi channel guest interaction, guest connections, employee use of personal devices such as the iPad) and Andrews blog post on the topic here Item 4 - A quick discussion on Virtual AP Threat and how to handle them - also more detail on a blog here. The Guests @revolutionwifi @Samuel_clements @jenniferlucille Craig Schnarrs is at http://thewifiguy.net and @the_wifi_guy Jeff Russell doesn't have a Twitter account or a blog. Yet. The Hosts Jennifer Huber is @jenniferlucille and her blog http://jenniferhuber.blogspot.com/ Feedback Follow the Packet Pushers on Twitter (@packetpushers | Greg @etherealmind | Dan @rovingengineer | Ethan @ecbanks), and send your queries & comments about the show to packetpushers@gmail.com. We want to hear from you! Subscribe in iTunes and RSS You can subscribe to Packet Pushers in iTunes by clicking on the logo here. Media Player and MP3 Download You can subscribe to the RSS feed or head over to the Packet Pushers website to download the MP3 file directly from the blog post for that episode. Also, subscription options for Zune, Boxee and a range of other podcatchers. | 10/25/10 | Free | View In iTunes |
|
86 |
Runt Packet No. 7 – Big Things Ahead for Juniper Certifications | Liz Burns, Global Manager for Juniper Networks certifications and Kieran Milne, one of the technical leads with the Juniper certifications team join Ethan Banks for a discussion of the upcoming changes in the Juniper certification world. There's a LOT of great information Liz and Kieran share, so be prepared to listen through this a time or two if you're keen on Juniper certs. What You'll Hear Let's talk about the Juniper certification tiers moving forward. What's the best way to prepare for a Juniper certification exam? Check out the Juniper Fast Track learning portal. How does real-world experience and lab work factor into a candidate's ability to pass a Juniper exam? How hard is it to make the jump to JUNOS if you're more of an IOS engineer? What prerequisites are in place to be allowed to take Juniper certification exams? How does this compare Cisco prerequisites? Where do you go to take a Juniper exam, and what is the exam like (multiple choice, etc.)? Liz wields the word "psychometric" with great confidence. If a candidate fails an exam, what is the retake policy? What is Juniper doing to preserve the integrity and reliability of their certifications? Beyond the Twitter account @JuniperCertify, what is the Juniper certification social media strategy (and why should you care)? How often does a Juniper certification holder need to recertify? Does a JNCIE have to retake the lab exam to maintain that credential? How is Juniper improving the benefits they extend to certification holders? Liz talks more about protecting the integrity of Juniper exams, including Juniper's implementation of fraud detection for both testing centers and individuals. Don't take a test for someone else, and don't use braindumps. Juniper will know and take action against you. Feedback Follow the Packet Pushers on Twitter (@packetpushers | Greg @etherealmind | Ethan @ecbanks), and send your queries & comments about the show to packetpushers@gmail.com. We want to hear from you! | 10/19/10 | Free | View In iTunes |
|
87 |
Show 23 – We Love the Love and Love Your Questions | So many listeners have written in with many questions, suggestions and worthy advice that we felt it was time to do another "Answer Your Questions" session in what will probably become a regular feature of the show. This week, Greg and Ethan join with Russell Heilling (Twitter Russell ) and Tom Hollingsworth (Twitter networkingnerd. Packet Pushers are now on Facebook. Come on and be friends with us. This week, we are sponsored again by Ascolta Training Tom is in the final stages of his CCIE Lab and talks about his latest attempt and some of the lessons that he learned and his $1400 coke can. Helmuth relaises the limit Twitter 140 characters and asks about using Ethernet WAN circuits to directly connect workstations or should you use routers ? Talk a little bit about how the IEEE resolutely opposes changing the Ethernet frame format and why they have that view. Renee asks why we talk the impact of silicon in networking switches and its impact on switch and network design. Joel Wheeller asks about whether In-Band or Out-of-Band management and they Pushers talk over the entire issue. This detours into a discussion of SNMPv3 vs SNMPv2. Thanks to all the listeners who have written in to say thanks, it helps to keep us motivated. Gary Linderbergh discovered us and asks how we get our information about the industry and we discuss our preferred techniques. We get deeply into the Braindumps and their impact on exam questions. Ethan makes the very good point that exams are becoming "Trivial Pursuit" questions searching for obscure facts and data that make it very difficult for those learning normally to complete and be successful and this drives more people to the alternative. Until the vendors commit significant resources to solving the problem, this seems unlikely to change. A shout out to GNS3vault.com and Tom gives them a glowing review. Martin asks for some general advice around the vendor TAC / Help Desk / Tech Support organisations and we put our own experiences around this. Feedback Follow the Packet Pushers on Twitter (@packetpushers | Greg @etherealmind | Dan @rovingengineer | Ethan @ecbanks), and send your queries & comments about the show to packetpushers@gmail.com. We want to hear from you! Subscribe in iTunes and RSS You can subscribe to Packet Pushers in iTunes by clicking on the logo here. Media Player and MP3 Download You can subscribe to the RSS feed or head over to the Packet Pushers website to download the MP3 file directly from the blog post for that episode. Also, subscription options for Zune, Boxee and a range of other podcatchers. | 10/17/10 | Free | View In iTunes |
|
88 |
TFD Bonus 3 – Peter Wohlers of Force10 Presents to Tech Field Day San Jose 09/16/2010 | On September 16 & 17, Pushers Greg Ferro and Ethan Banks attended the GestaltIT.com Tech Field Day event in San Jose, California. This TFD bonus edition podcast is the third in a series of edited vendor presentations that PacketPushers.net is releasing over the next few weeks. Notes on the audio: the presentations were recorded with a conference table microphone so as to pick up both the presenters and the delegates as there was back and forth dialog from time to time. In post-edit, noise filtering and leveling was applied to make the quality as listenable as possible. That said, the audio is not perfect. We know. Audio quality is important to us, too, and we promise we’re trying to make it as good as we can. What You’ll Hear Peter Wohlers, Systems Engineer with Force10 Networks, presents to the Tech Field Day delegation about the Force10 product line "speeds and feeds". The conversation gets geeky with a lot of back and forth between Peter and the delegates. In the conversation, you'll hear Greg Ferro, Ivan Pepelnjak, and Brandon Carroll from the TFD delegation, as well as Stephen Garrison, Vice President of Marketing for Force10. Force10's flagship product is the E-series. This is Force10's first product, and has evolved over time. Peter claims there's hardly a transaction you do on the Internet that doesn't touch this gear at some point or another. Greg and Peter discuss the E-series fabric cards as compared to the Cisco Nexus 7000 fabric cards. Peter talks about how the forwarding load is distributed throughout the chassis and line cards. The E-series backplane is completely passive. Customers Force10 is allowed to discuss include Facebook, NYSE, Yahoo, and SalesForce. The economic version of the E-series is the midrange C-series chassis. Performance claimed to compare well against the Cisco 6500 series. Many of the high-performance features of the E-series in a more economical bundle. Different line cards from the E-series. More merchant silicon as compared to the E-series. The top-of-rack switch is the S-series. 24 & 48 GbE PoE and non-PoE versions in a 1U form-factor 4x10GbE uplinks Ridiculously deep buffering Several other configuratations - hit the link above for more detail. Peter philosophizes on stacking in the rack, stacking in the core, and his intense fear of split-brain. "Split brain is no brain," so says Peter. So say we all. The delegation corners Force10 on their FCoTR strategy, and Peter hints at what plans Force10 might have for FDDI. Greg raises the issue of QoS management across the Force10 platforms. Everyone loves the party bus! Feedback Follow the Packet Pushers on Twitter (@packetpushers | Greg @etherealmind | Dan @rovingengineer | Ethan @ecbanks), and send your queries & comments about the show to packetpushers@gmail.com. We want to hear from you! | 10/16/10 | Free | View In iTunes |
|
89 |
Show 22 – Configuration Management – Whys, Wherefores and War Stories | Terry Slattery, founder of Netcordia and the first CCIE, joins us to talk practical experiences on Network Management and good configuration practices. | 10/9/10 | Free | View In iTunes |
|
90 |
Show 21 – IPv6 for the Win! Part 2 | What You’ll Hear This week on the Packet Pushers podcast, Greg and Ethan continue an IPv6 technical deep-dive with Matt Ryanczak, Network Operations Manager at ARIN (where they’ve been running IPv6 since 2003) and Jan Bervar from NIL who has done several enterprise IPv6 deployments. This is part 2 of 2. In case you missed it, part 1 was posted here. Running dual-stack IPv4 and IPv6 on my network scares me! Should I be scared? How long have vendors been including IPv6 features in their operating systems? There's a useful DNS trick in a dual-stack environment: you can run an IPv4 name server to serve up IPv6 addresses. What routing protocol considerations does IPv6 bring to the table? Is OSPF still OSPF? What does my BGP configuration look like? Did you know that you can exchange IPv6 BGP routes via an IPv4 BGP neighbor? Not that you'd want to normally...but you could. Do we really have a globally connected IPv6 Internet at this time (late 2010)? IPv6 transition challenges aren't just technical: some carrier provisioning systems aren't ready to accept IPv6 addresses as input. We got used to IPv4 summarization when we were designing large internetworks. Is summarization still a valid technique when using IPv6? IPv6 access-lists and prefix lists: different or the same when compared to IPv4? Mostly the same, but with some interesting quirks. What systems that we find commonly connected to our networks are truly IPv6 ready? Juniper, F5, Brocade, etc. Another neat transition trick possible with some load-balancers: present an IPv6 address as your virtual address, and use it to hide IPv4 hosts serving the content. What's the best way to connect IPv6 islands when all you've got is IPv4 transit between them? Tunnels (the duct tape of the Internet) are one way, but with the same old challenges: MTU, PMTUD, and fragmentation. What is the performance penalty when pushing IPv6 traffic through switching silicon optimized for IPv4? Probably a lot while the vendors ramp up. When planning an IPv6 deployment, don't forget to make sure your applications are ready for IPv6. Many applications are not expecting anything other than an IPv4 address - will they break when fed an IPv6 address? Go and do it! Time is of the essence. IPv4 address space will be gone in 2011. If you as a network engineer aren't playing with IPv6 now, you're putting your business at a disadvantage. Feedback Follow the Packet Pushers on Twitter (@packetpushers | Greg @etherealmind | Dan @rovingengineer | Ethan @ecbanks), and send your queries & comments about the show to packetpushers@gmail.com. We want to hear from you! | 10/3/10 | Free | View In iTunes |
|
91 |
TFD Bonus 2 – Gary Oliverio of CradlePoint Presents to Tech Field Day San Jose 09/16/2010 | On September 16 & 17, Pushers Greg Ferro and Ethan Banks attended the GestaltIT.com Tech Field Day event in San Jose, California. This TFD bonus edition podcast is the second in a series of edited vendor presentations that PacketPushers.net is releasing over the next few weeks. Notes on the audio: the presentations were recorded with a conference table microphone so as to pick up both the presenters and the delegates as there was back and forth dialog from time to time. In post-edit, noise filtering and leveling was applied to make the quality as listenable as possible. That said, the audio is not perfect. We know. Audio quality is important to us, too, and we promise we’re trying to make it as good as we can. What You’ll Hear Gary Oliverio, CTO and Founder of CradlePoint Technology, talks to the Tech Field Day delegation about CradlePoint's 3G/4G routers and adapters. Gary’s bio reads as follows, “Gary brings more than twenty-five years of experience in high technology business including semiconductor, wireless, and embedded software. Prior to CradlePoint, Gary was the VP of Sales at Sandbridge Technologies from 2003 to 2004 and was the VP of Software Licensing at RidgeRun from 2001 to 2002. Prior to that, he was Director of Business Development at Cygnus Solutions/Red Hat from 1998 to 2001. In his early career, Gary held sales, sales management and business development positions in Motorola’s Semiconductor and Wireless Sectors. Gary graduated with an SBEE from the Massachusetts Institute of Technology.” With CradlePoint, Gary want to make mobile broadband technology a standard ingredient in the business world. While listening, you might also hear members of the Tech Field Day delegation interact with Gary. As he speaks, Gary covers the following high-level topics: CradlePoint's history and origin: where'd they come from, what's their market space, and what's "WiPipe" all about? What carrier owns the most commercially available 3G/4G spectrum today? Let's talk through some of key CradlePoint products and design, including the design challenges inherent in cramming a whole lot of radios into the same appliance. Where can you buy CradlePoint gear? Sure, CradlePoint is enterprise-focused, but did you know Best Buy carries some of their consumer gear? Cool stuff for the future...like a 3G/4G 802.11n gateway access point that can VPN back to the office, while providing an enterprise SSID for the telecommiter and guest SSID for everyone else in the hotspot. Feedback Follow the Packet Pushers on Twitter (@packetpushers | Greg @etherealmind | Dan @rovingengineer | Ethan @ecbanks), and send your queries & comments about the show to packetpushers@gmail.com. We want to hear from you! | 10/1/10 | Free | View In iTunes |
|
92 |
Show 21 – IPv6 for the Win! Part 1 | What You'll Hear This week on the Packet Pushers podcast Greg and Ethan do an IPv6 technical deep-dive with Matt Ryanczak, Network Operations Manager at ARIN (where they've been running IPv6 since 2003) and Jan Bervar from NIL who has done several enterprise IPv6 deployments. This is part 1 of 2...we'll release part 2 on the week of 10/3/2010 - watch PacketPushers.net or iTunes for the next show. Let's talk about IPv6 addressing. Colons and letters and chazwazzas, oh my! Are we supposed to use an IPv6 equivalent of RFC1918 addressing and then NAT? What about proxies to help with the IPv4 to IPv6 transition? What's the process for getting IPv6 address space from the regional internet registries? Or do enterprises just get IPv6 addresses from their ISPs? There's globally addressable, link-local, unique local, multicast, anycast and other types of IPv6 addresses. What are they and how do they work? Are we really, really going to have to use IPv6? Is there *any* chance we can wish IPv6 away? Did you know IPSEC and QoS were originally developed for IPv6 and back ported to IPv4? How do you size enterprise IPv6 subnets? We love our IPv4 /24s, but do /24s make sense in an IPv6 world? Could switch silicon even handle that? We discuss how network discovery works for IPv6 hosts showing up on the wire, and how frames get made. ARP no longer exists in IPv6. It's all about ICMP now, my friends. Did you know that while you can, you don't *have* to use DHCP in IPv6? In IPv6, the importance of IPv6's reliance on ICMP messages needs to be considered when writing access lists. ARP spoofing from far, far away becomes possible in an interesting way which we discuss. How is DNS behavior different in IPv6? Or is it? Feedback Follow the Packet Pushers on Twitter (@packetpushers | Greg @etherealmind | Dan @rovingengineer | Ethan @ecbanks), and send your queries & comments about the show to packetpushers@gmail.com. We want to hear from you! | 9/26/10 | Free | View In iTunes |
|
93 |
TFD Bonus 1 – Doug Gourlay of Arista Presents to Tech Field Day San Jose 09/17/2010 | On September 16 & 17, Pushers Greg Ferro and Ethan Banks attended the GestaltIT.com Tech Field Day event in San Jose, California. This TFD bonus edition podcast is the first in a series of edited vendor presentations that PacketPushers.net will release over the next few weeks. It takes time to edit them, but we'll get the best stuff from TFD that we can out there for you. Notes on the audio: the presentations were recorded with a conference table microphone so as to pick up both the presenters and the delegates as there was back and forth dialog from time to time. In post-edit, noise filtering and leveling was applied to make the quality as listenable as possible. That said, the audio is not perfect. We know. Audio quality is important to us, too, and we promise we're trying to make it as good as we can. What You'll Hear Doug Gourlay, Vice President of Marketing for Arista Networks, talks to the Tech Field Day delegation about Arista's ethernet switches. Doug's bio reads as follows, "As Vice President of Marketing, Douglas Gourlay is responsible for product and solutions marketing, communications, and the strategic alliances of Arista Networks. Prior to joining Arista, Doug was the VP of Data Center Marketing at Cisco Systems where he held key roles in sales, product development, and marketing. Doug has filed or holds more than twenty patents in networking technologies." While listening, you'll also hear Terry Slattery, Ivan Pepelnjak, Greg Ferro, Jeremy Filliben, Jeremy Gaddis and other members of the delegation interact with Doug. As he speaks, Doug covers the following high-level topics: Are the conglomerated networking companies too big to fail, or too big not to fail? What goes into the architecture of an Arista switch, and what markets is Arista therefore targeting? How is Arista making the job of a network operator easier? You can download a free, virtualized flavor of the Arista operating system - vEOS. It's not an emulator. What about integration with VMware? What's next on Arista's roadmap? The Arista platform is based on open-source Linux, and OS which you can still get at yourself. What are the typical reactions when IT people hear about this? Are you one of the ones saying make the bad man go away? ;-) Feedback Follow the Packet Pushers on Twitter (@packetpushers | Greg @etherealmind| Dan @rovingengineer | Ethan @ecbanks), and send your queries & comments about the show to packetpushers@gmail.com. We want to hear from you! | 9/21/10 | Free | View In iTunes |
|
94 |
Show 20 – Impromptu Crowdsourcing | What You'll Hear After a busy week of forcing packets to do our nefarious bidding, we found ourselves up against a recording deadline while being less prepared than usual. To save us from ourselves, at the very last minute we invited Josh O'Brien and Jennifer Huber to pull up a mic and add their weighty thoughts to the networking issues of the day. Adding to the impromptu nature of this show, we did our first live solicitation of questions from the audience using the Twitterverse, getting instant feedback. All hail the Intertubes! We're still going to Tech Field Day San Jose and feel perversely compelled to bring it up again. The good news is that Greg leaks all the Twitter hashtags so that you can easily filter the tweets from your timelines. ;-) Those crazy kids at Cisco have published details about security vulnerabilities in their wireless LAN controllers (the boxes that, among other things, help you manage a large WAP deployment). The sinister facts include two denial of service (DoS) vulnerabilities, three privilege escalation vulnerabilities, and two access control list (ACL) bypass vulnerabilities. Read all about it. Stuart Howlette is working from his shed on making a highly prized and outrageously expensive Nokia IP330 appliance into a JUNOS router. You can too, with Olive! Stretch over at packetlife.net continues to build out his community lab with the help of donations, the latest addition being a Cisco Catalyst 3560. Tony Brown e-mails the podcast to ask about MPLS vs. VPLS. To layer 3, or not to layer 3, that is question! We blurt out with heartfelt personal experiences which eventually devolves into gratuitous carrier bashing. The secret is to bang the rocks together, guys... Ralph live-tweeted to ask what vendors the Pushers would consider if we were deploying 10G ethernet in our data centers. Among the usual suspects (Cisco Nexus, Arista, HP, etc.), Josh points out the often overlooked Cisco Catalyst 4900M. Bri from Twitter asks us the age-old question about EIGRP vs. OSPF - which one is right? Some of us say we mostly don't care, but Greg makes the excellent point that open standards are good, and proprietary is bad. Ergo, OSPF is almost always the right answer. Hmm... We talk about firewalling & IPS inside the data center because of a question from Fernando, including a bit about transparent (layer 2) firewalls. The Pushers proclaim the mighty virtue of autonegotiation in gigabit ethernet networks, castigating the heretics who dare to manually set speed and duplex in anything other than the most dire of circumstances. Greg had explained himself on this point in a blog post earlier this year. Feedback Follow the Packet Pushers on Twitter (@packetpushers | Greg @etherealmind | Dan @rovingengineer | Ethan @ecbanks), and send your queries & comments about the show to packetpushers@gmail.com. We want to hear from you! | 9/12/10 | Free | View In iTunes |
|
95 |
Show 19 – Worlds Collide – VMware and Networking | What You'll Hear The show was a little late this week, because as our friend @ioshints put it, we had a "cloud ladder failure" on Sunday: Greg's broadband was out. But when we finally gathered 'round the great big conference room in the sky, we did it up right. Dan was coming in loud and clear on his new Mac Book Pro, Greg reminisced about the good ol' days of FDDI-to-token ring bridging, and Ethan made bold predictions about the virtualized networking future. First up was VMworld. We didn't go, and didn't care (much). Okay, maybe we did want to hang with all the cool kids. But whether here or there, we were paying attention, and some interesting products were announced from Cisco and (naturally) VMware. Cisco's Virtual Security Gateway integrates with the Cisco Nexus 1000V and provides a host-facing firewall as part of a defense-in-depth strategy to secure your virtualized environment. VSG is tightly integrated with your VMs, such that the security policy you build will follow a VM during a VMotion event. Cool stuff, we say. Read more about VSG from Omar Sultan, and watch a 3+ minute overview from Cuong Tran on the Cisco Data Center YouTube channel. Not to be outdone, VMware announced their vShield product family, pushing the mantra of "IT as a service" and trying to make security easier to deliver and flexible during change. Do you want VMware to become the networking provider of a cloudy, virtualized world? Read even more about VMware's long-term networking vision over at Wikibon. The Pushers talk about the networking world colliding with the server world at the junction point of VMware. Do you do VMware? Time for us network geeks to dive into the deep end of the virtualization pool...so say we all! Ethan and Greg are headed over to San Jose on 9/15 - 9/17 for a GestaltIT.com Net Field Day event. We'll be tweeting and live blogging about the vendor presentations, and you can participate! Send us the hardest questions you've got for the vendors, 'cause we're talkin' to the boffins, not the marketing types. Vendor list coming soon. Xsigo would be delighted to sell you an ethernet-attached virtual I/O appliance. Bolt it into your rack, select the modules appropriate to the sort of data you'd like to shovel across your ethernet, and you've got a low-cost way to take advantage of that network you've already got. For example, you can do FCoE without the cost and implementation challenges of a converged network adapter. The ethernet NIC you've already got will work just fine! Xsigo says more modules are coming. Is VEPA a gamble? What about TRILL or FabricPath? What's an architect to do when the network world is changing oh-so-fast, but a data center design must be finalized today? The Pushers give their take on this question from listener Andrew H. "How much time do you guys typically take to implement a new technology into a live network? I always like as much lab time as I can get to make sure I don't run into any gotchas during cutover day, but don't want to put too many hours and end up over thinking the plan." Feedback Follow the Packet Pushers on Twitter (@packetpushers | Greg @etherealmind | Dan @rovingengineer | Ethan @ecbanks), and send your queries & comments about the show to packetpushers@gmail.com. We want to hear from you! | 9/8/10 | Free | View In iTunes |
|
96 |
Runt Packet No 6 – Force 10 Networks | I've been hearing about Force10 Networks as a large scale ethernet switch provider for some time. It's time to touch base and find out what they are doing. I spoke with Steve Garrison from Force10 to get an introduction to the company and their products. I'll let the show speak for itself. One of the more interesting aspects is the Open Automation strategy, due to be announced later in the year, that offers support for a large number of scripting languages and, as I understand it, a collection of scripts for you to use in your own Network Management system. Force10 offers very high density ethernet which results in less equipment, less power and less opex. Combined with their custom silicon for lossless, line rate, non blocking ethernet forwarding they have been a significant player at the high end of the market for many years. Feedback Follow the Packet Pushers on Twitter (@packetpushers | Greg @etherealmind and send your queries and comments about the show to packetpushers@gmail.com. We want to hear from you! | 9/1/10 | Free | View In iTunes |
|
97 |
Show 18 – The Pushers Answer Your Questions | What You'll Hear This week, we get a report about HP Tech Day, and then devote most of the show to answering questions sent in by you, the listener! Greg talks about his visit to sunny California for HP Tech Day (click for various slideshows). We discuss Virtual Connect in detail for no obvious reason, mostly because Ethan has great trouble expressing himself clearly. Greg goes long on the HP Network product range and pontificates on how HP Networking is going to come to market, and depth on the product range, some ideas on their marketing position and pricing strategy. Overall, HP is going to be here to stay whether you like it or not and impact on Cisco position. HP accelerated certification for Cisco certified people comes up as a topic - if you're a CCNP or CCIE, HP wants to give you a crash course on how to make their networking gear do something useful. We see this as a shrewd way for HP to bridge the familiarity gap. The Pushers express colossal ignorance about GVRP or MVRP, but Greg has promised research and a blog post. Dan's getting into optical networking and DWDM a little bit. Citrix Netscalar isn't getting much love from the Pushers. F5 owns us, you see. (Not really.) We learn that, as a child, Greg was forced into the Australian outback where he had to kill harmless animals in order to feed himself. Explains a lot, doesn't it? We discuss a detailed demographic profile of our audience and what we've learned from it. Okay...not THAT detailed. Well actually, we're just making demographics up based on a single e-mail from a listener who's early on in their networking career. Fact of the week - 16 HSRP groups only on a Cisco Catalyst 6500 with Sup 2 engines. So what about getting your CCNP with no networking experience? Realistic or overshooting? How do you pick an IOS? We talk through SafeHarbor, Dan pontificates about only getting the features you need, and we point out MD vs. ED vs. whatever else in Cisco's various release trains. Want to contribute some audio to the show, maybe a question or a comment? Record some and send it along as an attachment. If the quality isn't horrible, we'll see if we can patch it in. Feedback Follow the Packet Pushers on Twitter (@packetpushers | Greg @etherealmind | Dan@rovingengineer | Ethan @ecbanks) and send your queries and comments about the show to packetpushers@gmail.com. We want to hear from you! | 8/30/10 | Free | View In iTunes |
|
98 |
Show 17 – Big Hot and Heavy Switches – Part 2 | A detailed look at the Big, Hot and Heavy Ethernet Switches with a large crew to talk about their practical experiences on design, selection and performance of Cisco Nexus switches. The result ? We don't think the Nexus switches are very exciting. Due to people commitments we recorded a double length show which will be released in two parts. This is Part 2 and Part 1 was released next weekend. What You'll Hear... On the increase in 10GbE in the Data Centre and what's driving that. And looking at why we aren't comfortable with the HP Flex-10 networking module for their blade servers. We are planning on using IP Storage, after consulting with the Server team. The cost of FC doesn't work for us, and FCoE still isn't here. A look at transient traffic loads and how the deployment of VMware DRS changes the way our backbone looks. The importance of dynamic traffic flows to VMware and what we need to do to support that. We take a detailed and critical look at what Cisco doesn't tell you about the Nexus 7000 - the bad things, the missing features such as QoS, MPLS and lack of value. Not to mention the generally underwhelming performance of the product. Also, it's big, it uses a lot of power and runs hot. You can find Jeremy Filliben at http://jeremyfilliben.com and @jfilliben. You can find Steve Rossen on @steve You can find Ivan Pepelnjak at http://ioshints.info and on @ioshints. IOS Hints Live - San Jose September 2010 You can book to join the event at ioshintsdatacenter.eventbrite.com/. There are only a limited number of seats at this unique event where Ivan Pepelnjak and Greg Ferro will both be available to discuss, review and develop your designs. Feedback Follow the Packet Pushers on Twitter (@packetpushers | Greg @etherealmind | Dan@rovingengineer | Ethan @ecbanks) and send your queries and comments about the show to packetpushers@gmail.com. We want to hear from you! | 8/22/10 | Free | View In iTunes |
|
99 |
Unplugged – Show 1 – Lugging That Damn AP | This is the first podcast from the Packet Pushers devoted to Wireless Networking. After Jennifer Huber joined the Packet Pushers on Show 14 - Bum Bugling on Cisco Clean Air we agreed that a wireless podcast about every month or so would be worth doing. Herewith, is the first episode of Packet Pushers Unplugged on wireless networking. The Content We talked briefly about MIMO antennas for 802.11n when used outdoors. And then how to start learning about Wireless Networking. The most important thing to learn is a working knowledge of Radio Frequency and signal propagation. The best place to start to learn is http://cwnp.com. It's vendor neutral and highly recommended. Other recommended blogs and podcasts can be found at: http://wlanpros.com/ www.my80211.com One of the best blogs is Jerome Henry http://wirelessccie.blogspot.com/ who is a Cisco Wireless CCIE. And we touched on some common mistakes that people can make when they are starting out in wireless networking. The Guests Craig Schnarrs is at http://thewifiguy.net and @the_wifi_guy Jeff Russell doesn't have a Twitter account or a blog. Yet. The Hosts Jennifer Huber is @jenniferlucille and her blog http://jenniferhuber.blogspot.com/ Greg @etherealmind and http://etherealmind.com Feedback Send your queries and comments about the show to packetpushers@gmail.com. We want to hear from you! | 8/18/10 | Free | View In iTunes |
|
100 |
Show 16 – Big Hot and Heavy Switches – Part 1 | A detailed look at the Big, Hot and Heavy Ethernet Switches with a large crew to talk about their practical experiences on design, selection and performance of Cisco Nexus switches. The result ? We don't think the Nexus switches are very exciting, HP Flex10 modules are a problem, and so much more. Due to people commitments we recorded a double length show which will be released in two parts. This is Part 1 and Part 2 will be released next weekend. VSS & vPC - the real experience We started with a look at the differences between Cisco's Virtual Switching System (VSS) and their Virtual Port Channel (vPC) implementation of Multi-Chassis Etherchannel and what our preferences are for choosing and implementing. We like vPC both from a design and implementation perspectives but our experiences of VSS have been very poor and we don't choose to use it in the Data Centre. In practical way we don't like the way that VSS is conceptually the same as a stackable switch. We also don't have much time on the Catalyst 4500 because they aren't used in our designs. Also, there are too many modules and Supervisors, and the technology is confusing. The lack of architecture information is poor. Cisco Fabric Extender switches We had a short look at the QoS implementation on the Cat6500, and expressed our dissatisfaction with the configuration and consistency of the implementation and some surprising tips on how to solve the QoS problem. Service Modules We discuss the use of Service Modules in the C6500 chassis and our experiences. The Guests You can find Jeremy Filliben at http://jeremyfilliben.com and @jfilliben. You can find Steve Rossen on @steve You can find Ivan Pepelnjak at http://ioshints.info and on @ioshints. IOS Hints Live - San Jose September 2010 You can book to join the event at ioshintsdatacenter.eventbrite.com/. There are only a limited number of seats at this unique event where Ivan Pepelnjak and Greg Ferro will both be available to discuss, review and develop your designs. Feedback Follow the Packet Pushers on Twitter (@packetpushers | Greg @etherealmind | Dan@rovingengineer | Ethan @ecbanks) and send your queries and comments about the show to packetpushers@gmail.com. We want to hear from you! | 8/15/10 | Free | View In iTunes |
| Total: 100 Episodes |
Customer Reviews
For Geeks, By Geeks
If you work with networks and you are a networking geek - this show is for you.
The only better thing than listening to this show is being invited to be on it. If you are true geek and know your networks, you may as well be. I was!
This podcast makes my flights more enjoyable.
Superb
Engaging, entertaining and educational. I've learned much from this podcast. It's interesting how the fundamental topics you learn about in the ccna program still play a very important role at the higher levels of IT. Hearing real gurus like Ethan, Greg, Marko and Dan talk so fluently about some very complex topics is impressive. This is heavy duty stuff, yet it's discussed in way that's easy to follow, even for a lowly ccna like myself. Looking forward to the next episode.
A Much Needed Podcast for Network Focused People
Finally! A podcast that those of us in networking have been waiting for. I listen to a fair amount of podcasts during my commute to and from work each day. Some of them are quite informative. Some of them are boring, but relevant. However, none of them have me as excited as I am when I have a new episode of Packet Pushers to listen to. They talk about things that I have to deal with on a day to day basis, or things that may be crossing my path in the days to come. The technical level in which they discuss these things is one in which a mid-level network person should be able to understand. Maybe not always, but most of the time. I find it refreshing to hear people discuss things on a more technical level than you typically get on these types of podcasts. If you are in the networking business, you MUST listen to this podcast. It has managed to become my absolute favorite in a manner of 2 months, and I listen to a lot of these technical podcasts. Believe me when I tell you that you will not find a more informed and insightful podcast.
Listeners also subscribed to
- Cisco TAC Security Podcast Series
- Cisco Systems
- View In iTunes
- Cisco Switching Podcast Series
- Cisco Systems
- View In iTunes
- Junos as a Second Language
- Juniper Networks
- View In iTunes
- Cisco Interaction Network's TechWiseTV
- Cisco Interaction Network
- View In iTunes
