Network Break

Take a Network Break! A trio of standards bodies remove and then reinstate Huawei from their memberships, China’s military will reportedly dump the Windows OS and develop a home-grown alternative, and Mellanox introduces new telemetry capabilities called What Just Happened?

Google plans to make ad blockers less effective on Chrome–except for paid enterprise versions, Equifax gets downgraded by the Moody’s credit ratings agency, Marvell sells its Wi-Fi and Bluetooth business and picks up an ASIC designer.

Palo Alto spends hundreds of millions on a pair of acquisitions, and reports its quarterly financials. Last but not least, a pair of U.S. Energy Department officials rebrand LNG as “freedom gas.”

As always, links are below for more details.

Sponsor: ExtraHop

ExtraHop is the enterprise cyber analytics company delivering performance and security from the inside out. ExtraHop offers complete visibility with machine learning to help you make quick, confident decisions about your IT environment. Explore the ExtraHop Performance Platform at extrahop.com/packetpushers.

Sponsor: Tufin

Tufin has pioneered a policy-based approach to network security management using automation and analytics. As a result, you can make network changes in minutes instead of days, reliably and securely. Tufin. The Security Policy Company. Find out more at tufin.com.

Tech Bytes: NetBeez

Stay tuned after the news for a sponsored Tech Bytes conversation with NetBeez, which makes hardware and software agents to monitor network connectivity and performance from the end user perspective. We’ll talk about how the product works and hear how customers are using it to spot problems and speed troubleshooting.

Show Links:

IEEE tells contributors with links to Chinese corp: Don’t let the door hit you on Huawei out – The Register

Huawei’s membership with SD, WiFi and Bluetooth alliances restored – The Star

Huawei was reinstated in the SD Association (Updated) – Android Authority

HUAWEI Nano Memory Card – HUAWEI UK

Microsoft stays silent on potential Huawei Windows ban – The Verge

US Huawei Ban Threatens Internet Access in Rural Areas, Some Providers May Fold – CircleID

Openness, Collaboration and Development: Building a Secure Digital Society – Huawei

Huawei Files Motion in US Federal Court Calling Ban Unconstitutional, an Assault on Human Rights – CircleID

Take a Network Break! We get an FU about coffee beans, and then dig into the giant mess that is the U.S. government’s restrictions on American tech companies doing business with Huawei.

We report on DNS observations from the RIPE 78 conference, explore new capabilities in Mellanox Ethernet switches, and discuss a new telemetry feature from Mellanox called “What Just Happened?”

HPE buys Cray for $1.3 billion, SpaceX launches a test batch of satellites for Space Internet, and IT service provider HCL exposes sensitive employee and customer information.

An industry analyst throws cold water on the notion that carrier spending on 5G will lift the fortunes of infrastructure providers, and a U.S. federal judge rules that Qualcomm violated antitrust laws.

See the links below to get more details on each story.

Sponsor: Virtual Design Clinic

Join the Packet Pushers and a group of smart engineers for our live, online Virtual Design Clinic on June 6th. Get your network design and troubleshooting questions answered in Ask Me Anything sessions, see tech presentations on Wi-Fi 6/802.11ax and on The Art Of Network Maintenance, and learn about network automation with sponsor Anuta Networks. Get details and sign up at packetpushers.net/vdc.

Show Links:

Factbox: Global tech companies shun Huawei after U.S. ban – Reuters

Huawei gets limited reprieve from ban on buying U.S. components – Axios

Advice for Huawei Customers – National Cyber Security Centre

Huawei Placed on U.S. Tech Blacklist, Killing Huawei’s Consumer Device Business Outside China – Techsponential

Huawei: ARM memo tells staff to stop working with China’s tech giant – BBC News

Huawei’s use of Android restricted by Google – BBC News

Huawei gets limited reprieve from ban on buying U.S. components – Axios

Microsoft has pulled Huawei’s products from its Azure Stack catalog – Bloomberg

SoftBank, KDDI pull sales of new Huawei smartphones – Telegeography

Huawei has enough inventory to ‘weather’ US blacklist for months: Analyst – CNBC

Archives – RIPE 78 – RIPE

Take a Network Break!

We start with an FU from Daniel Dib who adds a little color to our coverage of Cisco’s SD-WAN Cloud onRamp for CoLocation.

In the news, it appears the entire Internet is borken as Microsoft, Cisco, and Intel get hit by critical vulnerabilities. ARIN revokes almost three quarters of a million IPv4 addresses from fraudsters, and Arista launches a new 400G switch.

Extreme adds AI to IoT security, the US government takes more shots at Huawei and China, and VMware buys Bitnami for application packaging.

Cisco Meraki notches 2 million networks (whatever it means by “networks”), and Cisco reports strong Q3 earnings.

Sponsor: TeleGeography

We’re also sponsored by TeleGeography,  a telecommunications market research firm. TeleGeography wants you to know about its  WAN Cost Benchmark. This is a tool that lets you model your hybrid WAN expansion plans and compare costs based on over 2 million data points. Head to benchmark.telegeography.com to learn more.

Sponsor: ThousandEyes

ThousandEyes gives you performance visibility from every user to every app over any network, both internal and external, so you can migrate to the cloud, troubleshoot faster and deliver exceptional user experiences. Sign up for a free account at thousandeyes.com/packetpushers and choose a free ThousandEyes t-shirt.

Tech Bytes: Silver Peak And Dunelm

Stay tuned after the news for a sponsored Tech Bytes conversation with Dunelm, a UK homeware retailer that’s using Silver Peak’s SD-WAN EdgeConnect appliances to migrate off MPLS and go to direct Internet access. We discuss the migration, and how a better-performing WAN improves the customer experience inside their stores.

Show Links:

Prevent a worm by updating Remote Desktop Services (CVE-2019-0708) – Microsoft

A Cisco Router Bug Has Massive Global Implications – Wired

Cisco Secure Boot Hardware Tampering Vulnerability – Cisco

Cisco IOS XE Software Web UI Command Injection Vulnerability – Cisco

Thrangrycat – Red Balloon

Weekly Show 422: Hardware Supply Chains And Trusted Execution – Packet Pushers

Ian Coldwater Twitter Thread on Intel CPU Vulnerabilities

ZombieLoad Attacks May Affect All Intel CPUs Since 2011: What to Do Now – Tom’s Guide

CPU Fail

Close to 735K Fraudulently Obtained IP Addresses Have Been Uncovered and Revoked, ARIN Reveals – CircleID

Take a Network Break! We start with a few FU’s regarding last episode’s Dell announcements, as well as a correction on our reporting on Juniper’s SD-WAN capabilities.

On the news front, Microsoft has announced it will include a Linux kernel in Windows, VMware and Dell EMC partner to deliver on-premises infrastructure that’s operated and paid for as if it was in the cloud, and Cisco announces an “SD-WAN for colocations” offering.

China has reportedly repurposed U.S. hacking tools to use against Western countries, internal vendor security continues to be a problem, and Microsoft recommends that admins use separate workstations for administrative duties as a security measure.

The Public Internet Registry, which runs the .org domain, wants to eliminate price controls. Last but not least, Symantec’s CEO resigns as the company reports its Q4 and full fiscal year results.

Sponsor: ExtraHop

ExtraHop is the enterprise cyber analytics company delivering performance and security from the inside out. ExtraHop offers complete visibility with machine learning to help you make quick, confident decisions about your IT environment. Explore the ExtraHop Performance Platform at extrahop.com/packetpushers.

Sponsor: TeleGeography

We’re also sponsored by TeleGeography,  a telecommunications market research firm. TeleGeography wants you to know about its  WAN Cost Benchmark. This is a tool that lets you model your hybrid WAN expansion plans and compare costs based on over 2 million data points. Head to benchmark.telegeography.com to learn more.

Sponsor: Gluware Intent

Join the Packet Pushers  in New York City on Tuesday, May 14th for a live event with Gluware. This half-day event will feature technical talks on data center automation,  you’ll hear from Gluware customer Merck, and more. After the event you can mingle with your IT peers, Gluware hosts, and the Packet Pushers. Tickets are free but the spaces are limited. Get details and sign up at packetpushers.net/gluware.

Tech Bytes: SnapRoute

Stay tuned after the news for a sponsored Tech Bytes conversation with SnapRoute, the startup behind the Cloud Native Network OS (CN-NOS). We get an introduction to its network OS, learn how SnapRoute differentiates itself from other network OSs, and drill into the operational capabilities it enables.

Follow Up Links:

Dell EMC Networking Virtual Edge Platform – Dell EMC

Contrail Service Orchestration (CSO) Deployment Guide – Juniper Networks (PDF)

Heavy Networking 448: An Inside Look At What’s New In Juniper’s Contrail SD-WAN (Sponsored) – Packet Pushers

News Links:

Announcing WSL 2 – Windows Command Line Tools For Developers – Microsoft

Take a Network Break! Pack a few extra virtual donuts because today our news cup runneth over.

Dell EMC flooded the market with a host of new products including VMware on Azure, an OEM deal with Big Switch, and a new server that bundles VeloCloud SD-WAN. And is Dell World shrinking?

Cisco Systems released three new Wi-Fi 6/802.11ax APs and a new Catalyst campus core switch, and also releases a string of new security patches including a fix for a hardcoded SSH key.

Cumulus releases version 2 of its NetQ switch management software, infrastructure provider Citycomp gets breached, and Bloomberg hypes a Huawei story for clicks.

SpaceX gets approval for a revised plan for satellite broadband, Aryaka lands $50 million in a series F investment, Arista Networks releases its quarterly financials, and Russia creates the legal framework for a national Internet.

Get links to all these stories after our sponsor messages.

Sponsor: Open Systems

In the crowded SD-WAN market, don’t overlook Open Systems. Open Systems brings security, automation and expert management to let you focus on other aspects of your network. Get visibility, flexibility and control combined with performance, simplicity and security with SD-WAN from Open Systems. To find out more, go to www.open-systems.com/packetpushers.

Sponsor: Meet The Packet Pushers At Gluware Intent

Join the Packet Pushers  in New York City on Tuesday, May 14th for a live event with Gluware. This half-day event will feature technical talks on data center automation,  you’ll hear from Gluware customer Merck, and more. After the event you can mingle with your IT peers, Gluware hosts, and the Packet Pushers. Tickets are free but the spaces are limited. Get details and sign up at packetpushers.net/gluware.

Show Notes:

Power Up Your Network, from Edge to Core to Cloud – Direct2DellEMC

Dell Technologies and Microsoft expand partnership with new VMware Solutions – The Official Microsoft Blog

Dell Technologies and Microsoft Expand Partnership to Help Customers Accelerate Their Digital Transformation – VMware

VMware Cloud Solutions on Azure – Microsoft Azure

Big Switch Networks Deepens Open Networking Collaboration with Dell EMC OEM Agreement and Dell EMC Ready Stack Validated Designs – Big Switch

Dell Technologies Transforms IT from Edge to Core to Cloud – Dell Technologies Colombia

Take a Network Break!

On today’s show we parse Apple’s spending on AWS and why it may be worth it, read between the lines of a G7 communication that wants Internet companies to provide access to encrypted data, and track whether core Internet routers have hit 786,000 IPv4 routes in their tables.

Pica8 releases new switch management software, Russia looks to homegrown technology for its 5G deployment, and Britian’s National Security Council gives Huawei a green light to sell to UK operators–just not in the network core.

Hertz sues Accenture for a botched site rollout, and Juniper, Amazon, and Microsoft release quarterly earnings.

Sponsor: ExtraHop

ExtraHop is the enterprise cyber analytics company delivering performance and security from the inside out. ExtraHop offers complete visibility with machine learning to help you make quick, confident decisions about your IT environment. Explore the ExtraHop Performance Platform at extrahop.com/packetpushers.

Sponsor: TeleGeography

We’re also sponsored by TeleGeography,  a telecommunications market research firm. TeleGeography wants you to know about its  WAN Cost Benchmark. This is a tool that lets you model your hybrid WAN expansion plans and compare costs based on over 2 million data points. Head to benchmark.telegeography.com to learn more.

Gluware Intent

Join the Packet Pushers  in New York City on Tuesday, May 14th for a live event with Gluware. This half-day event will feature technical talks on data center automation,  you’ll hear from Gluware customer Merck, and more. After the event you can mingle with your IT peers, Gluware hosts, and the Packet Pushers. Tickets are free but the spaces are limited. Get details and sign up at packetpushers.net/gluware.

Show Links:

Apple spends more than $30 million on Amazon’s cloud every month, making it one of the biggest AWS customers – CNBC

Corey Quinn Twitter Thread

Combating the Use of the Internet for Terroist and Violent Extremist Purposes – G7 (PDF)

Leaders of the G7: A Safer World Means Strong, Secure Communication – Internet Society

G7 Comes Out in Favor of Encryption Backdoors – Schneier on Security

Canada says Facebook broke privacy laws and ‘refused to act responsibly’ – The Guardian

News release: Facebook refuses to address serious privacy deficiencies despite public apologies for “breach of trust” – Office of the Privacy Commissioner of Canada

Take a Network Break! Today’s episode examines what CloudGenix’s $65 million VC infusion means for the SD-WAN market, discusses Nubeva’s new cloud-based packet processor, and parses FCC chair Ajit Pai’s recommendation to block China Mobile from providing telecom services in the United States.

Apple relents in a long-standing legal battle against Qualcomm just before the trial starts, a reporter outlines reasons to avoid first-generation 5G phones, and Fortinet settles with the United States for misleading government resellers.

Facebook reveals that it exposed millions, not thousands as previously stated, of Instagram accounts to internal employees; and Blackberry Messenger announces that the end has come for its consumer service.

Sponsor: Gluware Intent

Join the Packet Pushers live in New York City on May 14th for a free, half-day conference on data center and network automation with Gluware. Hear case studies from Gluware customers including Merck, see technology demos, and attend a live Packet Pushers recording. Tickets are free but space is limited, so register now.

Show Links:

CloudGenix Announces $65 Million in Funding, 300% Year-Over-Year Growth and the Industry’s Largest Gen-1 SD-WAN Replacement – Globe Newswire

Analysts: SD-WAN 5-year annual growth rate tops 40% – Network World

Nubeva Launches New Prisms Service Processor with Elastic Packet Processing for Public Cloud Networks – Nubeva

Tech Bytes: Nubeva Enhances Cloud Packet Broker With New Processing Capabilities (Sponsored) – Packet Pushers

FCC chief seeks to block China Mobile from operating in U.S. – Axios

Ajit Pai proposes blocking China-owned telecom from US phone market – Ars Technica

Qualcomm and Apple agree to drop all litigation – Apple

Qualcomm just beat Apple into submission – SemiAccurate

Why did Intel kill off their modem program? – SemiAccurate

Apple-Qualcomm deal reshapes U.S. chip business – Axios

Take a Network Break! We start with corrections from last week’s show (and please do send corrections, opinions, and responses to things we say).

Then we pivot to news from Google Next ’19 including Anthos for hybrid cloud, plus Cisco makes ACI available in AWS, and Juniper launches an SD-WAN service.

Sungard files for Chapter 11 bankruptcy; a VPN flaw bites Palo Alto, Cisco, and Pulse Secure; and HPE and Nutanix partner around HCI.

Chef is going to an entirely open-source code base under an Apache 2.0 license, the law catches up to Julian Assange and the second incarnation of the Dread Pirate Roberts, and Yahoo makes an $117.5 million offer to settle its breach lawsuits.

Last but not least, we offer a cautionary tale of why you should bring a Wi-Fi scanner to your next AirBnB stay.

Sponsor: ExtraHop

ExtraHop is the enterprise cyber analytics company delivering performance and security from the inside out. ExtraHop offers complete visibility with machine learning to help you make quick, confident decisions about your IT environment. Explore the ExtraHop Performance Platform at extrahop.com/packetpushers.

Sponsor: TeleGeography

We’re also sponsored by TeleGeography,  a telecommunications market research firm. TeleGeography wants you to know about its  WAN Cost Benchmark. This is a tool that lets you model your hybrid WAN expansion plans and compare costs based on over 2 million data points. Head to benchmark.telegeography.com to learn more.

Show Links:

Correction: Satellite Broadband – YouTube

Correction: Citrix Layoffs: Reports of Citrix layoffs may be overblown – Tech Target

Introducing Anthos: An entirely new platform for managing applications in today’s multi-cloud world – Google

Anthos – Google

Powering enterprise transformation: Announcing new additions to Google Cloud Networking – Google Cloud Blog

ACI Anywhere Now Extending On-Premises to AWS Cloud – Cisco Systems

Cisco taps into AWS for data center, cloud applications – Network World

Cisco Cloud Application Policy Infrastructure Controller – AWS Marketplace

Juniper Networks’ SD-WAN as a Service Reimagines the Enterprise Branch – Juniper Networks

Take a Network Break!

Aruba announces new 802.11ax APs and ClearPass software for device identification, Intel rolls out a slew of products for the data center including a new Ethernet adapter and a second-gen Xeon processor, and Amazon confirms plans to launch satellites for a broadband service.

Citrix releases an update on the breach it announced in March, Kemp Technologies gets acquired by a private equity firm, Google dissolves its AI Ethics panel, and Cisco’s Catalyst 6500 turns twenty.

Get links to all these stories after our sponsor message.

Sponsor: WAN Summit

The WAN Summit is the place to learn from your IT peers and experts on WAN transformation. It’s happening right now in New York City, April 8th and 9th. Go to twitter.com/WANSummit to check it out.

Summits are also happening in London, Frankfurt, Sydney, and Singapore in 2019. You can see a full list at WANSummit.com. And it’s under $99 for enterprise registrants. Our listeners can get an extra 20% off with the code PACKETPUSHERS when they register.

Show Links:

Aruba Simplifies Enterprise IoT Adoption with New Automated Security and Next-Gen Wireless Solutions – Aruba Networks

Intel Announces Broadest Product Portfolio for Moving, Storing and Processing Data – Intel

Is Intel’s “Innovation Day” Innovative Enough for Carrier Cloud? – CIMI Corp.

Tech Field Day : Intel Ethernet Technology Innovations – YouTube

Server Speed and Capacity for Business Application Demands – Cisco

Amazon to offer broadband access from orbit with 3,236-satellite ‘Project Kuiper’ constellation – GeekWire

Citrix mysteriously quiet amid whisperings of senior layoffs: Executives, teams logged out, it is claimed – The Register

Citrix provides update on unauthorized internal network access – Citrix Systems

Mill Point Capital Partners with Management to Acquire Kemp Technologies – Kemp Technologies

Mill Point Buys Kemp Technologies – Private Equity Professional

Google’s brand-new AI ethics board is already falling apart – Vox

An ext...

Take a Network Break! Attackers infiltrate ASUS’s update servers to propagate malware to customers, Cisco gets caught issuing a lazy security patch for its RV320 and RV325 routers, and Huawei takes four years to fix vulnerable code.

Britain’s Huawei Cyber Security Evaluation Centre (HCSEC) Oversight Board gives Huawei poor marks for software engineering and security hygiene practices, AWS announces Voice Collector for toll bypass as part of its Chime collaboration package, and Microsoft rolls out Data Box hardware for hybrid Azure use cases.

Cisco launches Decibel, an independent venture capital firm to spur enterprise startups, OpenDaylight debuts the Neon release of its SDN controller, and a former startup employee takes some shine off the startup dream.

Citrix rebrands XenServer to Citrix Hypervisor, and Office Depot gets smacked with a $25 million fine from the FTC for scamming customers with crooked malware scans.

Sponsor: ExtraHop

ExtraHop is the enterprise cyber analytics company delivering performance and security from the inside out. ExtraHop offers complete visibility with machine learning to help you make quick, confident decisions about your IT environment. Explore the ExtraHop Performance Platform at extrahop.com/packetpushers.

TechBytes: Arrcus And LSVR

Stay tuned after the news for a conversation about a new data center protocol, Link State Vector Routing (LSVR). We talk with sponsor Arrcus about how its ArcOS network operating system leverages LSVR to help you build a BGP-based data center fabric.

Show Links:

Malicious updates for ASUS laptops – Kaspersky Lab official blog

Hackers Hijacked ASUS Software Updates to Install Backdoors on Thousands of Computers – Motherboard

Hackers dropped a secret backdoor in Asus’ update software – TechCrunch

ASUS response to the recent media reports regarding ASUS Live Update tool attack – ASUS

How Microsoft found a Huawei driver that opened systems to attack – Ars Technica

Cisco bungled RV320/RV325 patches, routers still exposed to hacks – ZDNet

Huawei’s half-arsed router patching left kit open to botnets: Chinese giant was warned years ago – then bungled it – The Register

Huawei cyber security evaluation centre oversight board: annual report 2019 – Huawei Cyber Security Evaluation Centre (HCSEC) Oversight Board (PDF)

Huawei savaged by Brit code review board over pisspoor dev practices – The Register