The Fat Pipe - All Packet Pushers Pods

On today's Network Break we examine Cumulus's move into campus networking, Thoma Bravo's multi-billion-dollar bid for Sophos, and the limited debut of 5G in the UK. We also try to parse a buzzword-laded press release announcing stealthy startup Pensando Systems, discuss the EU's interim measures against Broadcom for anti-competitive behavior, and more tech news.

DDoS is a significant problem. The volume of DDoS traffic is increasing by leaps and bounds, enabled in part by botnets of compromised hosts such as IoT devices.

On today’s sponsored Heavy Networking, we talk with Juniper Networks and Corero about how they’ve partnered on a unique solution to thwart DDoS attacks at the network edge.

The solution encompasses Juniper’s MX routers and Corero’s SmartWall Threat Defense Director (TDD). Juniper and Corero’s solution can be used by service providers, enterprises, and in the cloud.

Our guests are Ashley Stephenson, CEO of Corero; and Mark Denny, Product Manager, Senior Staff at Juniper Networks.

We discuss:

* The growing frequency and sophistication of DDoS attacks

* The integration between MX routers and Corero’s SmartWall TDD

* How Junos and Corero coordinate on attack detection and response

* Leveraging the MX router’s ASIC

* How the solution filters malicious traffic from legitimate packets

* The benefits of DDoS mitigation at the network edge

* More

Show Links:

Juniper Networks

Corero

Juniper Networks And Corero: A Modern Approach To DDoS Protection At Scale – Juniper Networks (PDF)

Juniper MX and Corero SmartWall Demo – YouTube

Today's IPv6 Buzz dives into IPv6 special addresses--what they are, how they're used in production, potential issues, and more.

VPCs. Vnets. DirectConnect. Kubernetes. Calico. Public clouds. Hybrid clouds. Networking is no small feat when it comes to the cloud. How does an organization keep their cloud networks from turning into a flying spaghetti monster? Day Two Cloud tackles this critical question with guest Andrew Wertkin, Chief Strategy Officer at BlueCat Networks. We discuss design tips, the critical role of DNS, monitoring and troubleshooting options, and more.

Today's Tech Bytes podcast looks at how to implement sensible network segmentation to ensure compliance with security policies and accelerate business agility. Tufin is our sponsor, and we speak with guest Sagi Bar-Zvi, Strategic Pre-Sales Manager at Tufin.

Today’s Heavy Networking dives into LTE on the WAN with sponsor Cradlepoint.

Cradlepoint provides wireless WAN networking using LTE for enterprise and public safety customers with a variety of use cases, including branch and remote office connections, fleet tracking, IoT, and more.

The company also offers a cloud management platform to monitor and manage wireless connectivity.

Our guest is Marc Bresniker, Vice President of Product Management at Cradlepoint. Marc joins us to provide some background on using LTE for WAN connections and the benefits of using Cradlepoint’s LTE solutions as part of your SD-WAN strategy.

We discuss:

* LTE as a WAN technology

* Speeds and capabilities of LTE

* Managing LTE costs

* How LTE enables IoT and mobility

* Using Cradlepoint for primary and secondary SD-WAN connections

* Customer case studies

* More

Learn more about Cradlepoint’s cloud-managed LTE solutions at cradlepoint.com/packetpushers.

Show Links:

Cradlepoint

Cradlepoint Blog

Cradlepoint on Twitter

Cradlepoint on Facebook

Cradlepoint on YouTube

Today's Network Break podcast is chock full of inspirational cynicism. We cover fresh funding for Forward Networks, Vodafone trialing OpenRAN gear, SUSE closing the door on OpenStack, Extreme Networks shifting StackStorm to the Linux Foundation, and more tech news.

Today on Heavy Networking we go deep on segment routing. Segment routing is way to encode into a packet the path it should take through the network. And why would you want to do that? Lots of reasons, including traffic engineering and service chaining.

Sound scary? Step all over everything you think you know about dynamic routing and path selection?

To make sure you leave this podcast with a head full of segment routing knowledge is our guest, Ron Bonica, Distinguished Engineer at Juniper Networks, our sponsor for today’s detailed look into SR, SRv6, SRv6+, path computation, recovering from failure states, and more

We discuss:

* An overview of segment routing and its use cases

* Ingress, transit, and egress nodes in an SR domain

* Key differences among segment routing options, including SR-MPLS, SRv6, and SRv6+

* How segment routing works with nodes that aren’t in an SR domain

* Hardware and software requirements to use segment routing

* More

This is deep, detailed show, so grab a stack of virtual donuts and a pot of coffee, and let’s go down the rabbit hole. And if you want even more information, check out the list of resources below.

Show Links:

Juniper Networks Segment Routing

Segment Routing (SR) and Traffic Engineering (TE): Part One – Juniper Forums

Segment Routing (SR) And Traffic Engineering (TE): Part Two – Juniper Forums

SRv6+ Segment Routing Headers – Why We Want Them – Juniper Forums

A Segment Routing Renaissance – Juniper Forums

Segment Routing: Policies, Paths, and Segments – Juniper Forums

Segment Routing (SR) With Multiprotocol Label Switching (MPLS) – Juniper Forums

The IPv6 Compressed Routing Header (CRH) – IETF

Today on Heavy Networking, a network transformation. OK, that sounds like marketing, but it isn’t.

This is a discussion about a migration to Cisco ACI and VMware NSX technologies, paired with some automation, by a network engineer who was new to both products. It wasn’t all beers and cheers on the way to success. There were rocks and pitfalls.

Joining us for detailed conversation about running ACI and NSX in the same data center is Derek Wilson, a Principal Network Consultant at a big company you’ve heard of but we won’t mention.

We discuss:

* The impetus for a hardware refresh that led to ACI

* Why he chose a spine-leaf design

* How ACI simplified the physical infrastructure

* Why the organization chose NSX for the overlay

* How ACI and NSX interact (and don’t)

* The learning curves on each product

* How the team decided between Terraform and Ansible for automation tooling

* More

Sponsor: Cumulus Networks

Cumulus Networks is announcing a brand-new networking certification: the Cumulus Certified Open Networking Professional. Learn Linux networking fundamentals, including essential concepts and commands behind Linux-based open networking, and master the Cumulus Core–everything you need to know to become proficient in Cumulus Linux. Get details at cumulusnetworks.com/cert.

Sponsor: InterOptic

InterOptic is your reliable data interconnect company. Stop paying OEM prices for optics, and get brand-equivalent transceivers at a fraction of the cost.  Find out more at Interoptic.com/packet-pushers.

Show Links:

Setting the Record Straight: Confusion about ACI on VMware Technologies – Cisco Systems

Heavy Networking 438: VMware NSX Evolution For Cloud Networking And Security (Sponsored) – Packet Pushers

PQ 137: WhiteSpider & Real-World Cisco ACI Deployments (Sponsored) – Packet Pushers

MidSouth Bank serves Louisiana and Texas with 49 branches and nearly two billion dollars in assets.

When Daniel Hereford joined the bank as SVP and CIO, the organization was transitioning to a hybrid cloud model and needed more flexibility from its WAN to support this transformation.

On today’s Tech Bytes podcast, sponsored by Silver Peak, we talk with Hereford about how he migrated off MPLS and onto DIA and broadband to enable new levels of application visibility and performance for the bank’s mission-critical applications such as voice and banking systems, while also cutting costs.

Hereford discusses the ongoing rollout, how he’s retiring routers in favor of Silver Peak’s EdgeConnect devices, and steps he’s taking to ensure security and privacy meet regulatory requirements.

Show Links:

Silver Peak