The Fat Pipe - All Packet Pushers Pods

Today’s show dives into the notion of SDN federation.

Any organization running a sufficiently-sized infrastructure is going to have a variety of software controllers for automation and orchestration.

You may have one in the data center, one for SD-WAN, one for security, one for wireless, and so on.

How do these software controllers federate? That is, how do they organize and coordinate to act in a unified manner to ensure that operational, policy, and security goals are met?

My guest is Rob Sherwood, an Internet researcher and open source enthusiast. The former CTO of the SDN startup Big Switch, Rob is currently a software engineer at Facebook.

We discuss:

* Whether all these controllers can and should be federated

* The technical and organizational barriers

* How to find a common language for each network silo

* How vendors are approaching the problem

* Whether a master controller can work

* How do we get interoperability? What’s the protocol?

* The role of analytics and visibility

Sponsor: ITProTV

Get over 65 hours of free technical training from ITProTV. ITProTV offers online instruction in CompTIA, Cisco, VMWare, Microsoft and more. You can stream courses live and on demand on your favorite device. Sign up for a free membership at itpro.tv/packet-pushers and try it with no obligation.

Sponsor: ThousandEyes

ThousandEyes gives you performance visibility from every user to every app over any network, both internal and external, so you can migrate to the cloud, troubleshoot faster and deliver exceptional user experiences. Sign up for a free account at thousandeyes.com/packetpushers and choose a free ThousandEyes t-shirt.

Show Links:

Rob Sherwood on LinkedIn

Today's Network Break examines the causes of Cloudflare's outage, analyzes Broadcom's motivation for buying Symantec, discusses why big tech companies are considering manufacturing locations outside of China, and more tech news.

Take a Network Break! We start with FUs (follow-ups) on Aerohive and Extreme, L2TPv3, and the relationship between Aruba and HPE.

On the news front, Cloudflare burns itself with a Web Application Firewall update, Broadcom secures loans to buy Symantec, and Equifax’s former CIO gets jail time for insider trading.

Rising costs and uncertainty over US tariffs has tech giants reconsidering their manufacturing plans, Huawei may or may not be blacklisted by the United States, and Reuters digs into the years-long Cloud Hopper attacks.

A British government agency whacks British Airways with a hefty fine for a 2018 security breach, the fallout from ransomware attacks bedevils US cities and towns, and another BGP mishap goes unnoticed for a week.

Get links to all these stories below.

Sponsor: ExtraHop

ExtraHop is the enterprise cyber analytics company delivering performance and security from the inside out. ExtraHop offers complete visibility with machine learning to help you make quick, confident decisions about your IT environment. Explore the ExtraHop Performance Platform at extrahop.com/packetpushers.

Show Links:

Cloudflare outage caused by bad software deploy – Cloudflare

Broadcom Makes Progress on Symantec Deal With Financing, Savings – Bloomberg

Broadcom: The EU Investigation Sounds Foreboding – Seeking Alpha

Former Equifax employee sentenced for insider trading – USAO-NDGA – Department of Justice

CEO who led Equifax during data breach gets huge raise – NY Post

Equifax CEO Richard Smith Who Oversaw Breach to Collect $90 Million – Fortune

HP, Dell and Microsoft join electronics exodus from China – Nikkei Asian Review

Big Tech’s China exodus – Financial Times

China’s trade war manufacturing exodus could be hastened by EU-Vietnam trade deal, analysts say – South China Morning Post

Trump Throws Huawei a Lifeline, but It Hasn’t Reached Safe Harbor Yet – WSJ

Yuge U-turn: Prez Trump walks back on Huawei ban… at least the tech sector seems to think so – The Register

Today is a wide-ranging Future of Networking episode with a pair of special guests: Dave Temkin, VP of Networks at Netflix; and Steve Chalmers, a former Distinguished Architect at HP and an independent consultant.

Today is a wide-ranging Future of Networking episode with a pair of special guests: Dave Temkin, VP of Networks at Netflix; and Steve Chalmers, a former Distinguished Architect at HP and an independent consultant.

We discuss a broad range of topics and ideas, including how the public Internet is changing, edge computing, the challenges of recruiting the next generation of engineers, Gen Z fabrics, addressing BGP route leak issues, and more.

Sponsor: Tufin

Tufin has pioneered a policy-based approach to network security management using automation and analytics. You can make network changes in minutes instead of days, reliably and securely. Tufin. The Security Policy Company. Find out more at tufin.com.

Sponsor: ITProTV

Get over in-depth technical training from ITProTV. ITProTV offers online instruction in CompTIA, Cisco, VMWare, Microsoft and more. You can stream courses live and on demand on your favorite device. Sign up at itpro.tv/packet and save 25%. Use the code PACKET25 when you check out.

Show Links:

Steve Chalmers on LinkedIn

Dave Temkin on LinkedIn

BGP filtering study resources – NANOG

MANRS Implementation Guide – Online Version – manrs.org

Gen-Z – Wikipedia

Computer Industry Alliance Revolutionizing Data Access – Gen-Z Consortium

3D XPoint – Wikipedia

Hello, IT architect. Business person here. We have this huge new project for you. We have an idea for this new system that’s going to make us all sorts of money.

It can never go down, because it’s going to be SO IMPORTANT. It’s got to be super secure, too, obviously. Your budget is…three dollars!

Right. Okay, that’s a somewhat silly scenario, but it represents a problem many of us in IT face. The organization needs a technology solution to a business problem. There are objectives and constraints.

How do you design the solution? If your answer was “on a napkin at the bar!” Hey, not a bad idea, but we’re going to discuss a more formal approach today on the Datanauts podcast.

Our guest is Adam Post, a principal consultant at IT Partners, with a focus on virtualization and cloud technologies.

We discuss:

* The bad things that can happen without a design or design process

* The absolute necessity of information-gathering from stakeholders

* Similarities and differences when designing for the data center and the cloud

* VMware’s recommended design process and its general principles

* The AWS Well Architected Framework and general principles

* The role of documentation

* More

Sponsor: Quest Software

Quest Software is your go-to for everything Microsoft. Migrate to a new SharePoint or Office 365 environment, move to OneDrive for Business, consolidate Active Directory and Exchange, secure your AD from insider threats, and much more! Learn more at Quest.com/DatanautsPod, and join Quest at The Experts Conference for Active Directory and Office 365 training and earn up to 7 CPEs. Get details here.

Show Links:

Adam Post on Twitter

Semi-Technical.com – Adam’s blog

Adam Post on LinkedIn

Breaking down the conceptual design, RCARs and AMPRS …. VCDX style (Primer on the VMware-recommend design process) – JeffreyKusters.nl

Virtual Design Master: Conceptual, Logical, Physical – Technicloud

The 5 Pillars of the AWS Well-Architected Framework – AWS

Hello, IT architect. Business person here. We have this huge new project for you. We have an idea for this new system that’s going to make us all sorts of money.

It can never go down, because it’s going to be SO IMPORTANT. It’s got to be super secure, too, obviously. Your budget is…three dollars!

Right. Okay, that’s a somewhat silly scenario, but it represents a problem many of us in IT face. The organization needs a technology solution to a business problem. There are objectives and constraints.

How do you design the solution? If your answer was “on a napkin at the bar!” Hey, not a bad idea, but we’re going to discuss a more formal approach today on the Datanauts podcast.

Our guest is Adam Post, a principal consultant at IT Partners, with a focus on virtualization and cloud technologies.

We discuss:

* The bad things that can happen without a design or design process

* The absolute necessity of information-gathering from stakeholders

* Similarities and differences when designing for the data center and the cloud

* VMware’s recommended design process and its general principles

* The AWS Well Architected Framework and general principles

* The role of documentation

* More

Sponsor: Quest Software

Quest Software is your go-to for everything Microsoft. Migrate to a new SharePoint or Office 365 environment, move to OneDrive for Business, consolidate Active Directory and Exchange, secure your AD from insider threats, and much more! Learn more at Quest.com/DatanautsPod, and join Quest at The Experts Conference for Active Directory and Office 365 training and earn up to 7 CPEs. Get details here.

Show Links:

Adam Post on Twitter

Semi-Technical.com – Adam’s blog

Adam Post on LinkedIn

Breaking down the conceptual design, RCARs and AMPRS …. VCDX style (Primer on the VMware-recommend design process) – JeffreyKusters.nl

Virtual Design Master: Conceptual, Logical, Physical – Technicloud

The 5 Pillars of the AWS Well-Architected Framework – AWS

Extreme Networks spends approx. $227 million to buy Aerohive Networks to add a cloud-managed WLAN to its portfolio, a route leak resulted in cascading failures on June 24th, Oracle will retire Dyn managed DNS services, Mist Systems rolls out a new 11ax AP, and more tech news on today's Network Break podcast.

Take a Network Break!

We start the show with a few Follow Ups on Li-Fi, certifications, HPE’s relationship with Aruba, and Helium/LoRa/LoRaWAN.

Then it’s on to news analysis with Extreme’s acquisition of WLAN vendor Aerohive (it’s all about the cloud). We discuss a BGP route leak that caused a cascade of troubles, and opine on why Oracle is retiring Dyn’s managed DNS in favor of Oracle Cloud Infrastructure.

Mist Systems announces a new 802.11ax AP, an edge appliance, and a new support model; Amazon adds traffic mirroring in AWS VPCs, a provider of ransomware recovery services has an interesting business model, and Greg gives a Marketing Banana award to MicroTik’s Cloud Router Switch.

There’s a ton of links below if you’d like more details on anything we’ve covered. And if you want to hit us with an FU, send an email to [email protected] or talk to Drew on Twitter.

Adspot: ThousandEyes

ThousandEyes gives you performance visibility from every user to every app over any network, both internal and external, so you can migrate to the cloud, troubleshoot faster and deliver exceptional user experiences. Sign up for a free account at thousandeyes.com/packetpushers and choose a free ThousandEyes t-shirt.

Tech Bytes: Anuta Networks

Stay tuned after the news for a sponsored Tech Bytes episode with Anuta Networks. Anuta makes network automation software for multi-vendor environments. We discuss Anuta’s capabilities including low-code automation, network device configurations, compliance checks, telemetry collection, and more. The first 30 people who sign up at AnutaNetworks.com/packetpushers can get a snazzy polo shirt.

Show Links:

Follow Up:

IEEE 802.11 (legacy mode) – Wikipedia

RFC 1925 – IETF

News Analysis

Extreme Buys Aerohive. Not bad. – EtherealMind

Aerohive Networks Has A Sales Problem – Aerohive Networks, Inc. (NYSE:HIVE) – Seeking Alpha

Extreme Networks to Acquire Aerohive Networks – Extreme Networks

Investor presentation – Extreme Networks

How Extreme Networks’ $210M Acquisition Spree Is Set To Pay Off In $545M In New Revenue – CRN

BGP filtering study resources (Was: CloudFlare issues?) – NANOG

Cloudflare Users Burned by Internet Routing Pile-...

Somewhere in your network, there’s at least one exploitable vulnerability. Maybe it’s a really bad one. Maybe it’s not that bad.

Do you know what the vulnerability is? Do you have a way to explain to the business the risk it represents? Do you have a strategy to fix it or otherwise mitigate the risk?

Climb aboard with the Datanauts as we fly the good ship Vulnerability Management to Planet Security on today’s episode.

Our guest is Zoë Rose, an ethical hacker and cyber security consultant.

Zoë, Chris, and Ethan discuss:

* Setting a baseline on what we mean by vulnerabilities

* The value of the CVSS

* Different kinds of tools for finding vulnerabilities

* Assigning risk levels in your organization

* How risk levels should influence patching

* The use of compensating controls

* Whether it’s worth patching ephemeral containers

* More

Sponsor: Netrounds

Netrounds software performs active testing and monitoring to ensure your business-critical applications and services are running as expected. Get real-time insights for testing, troubleshooting, and SLA monitoring. Find out more at netrounds.com/packetpushers.

Show Links:

Zoë Rose on Twitter

Rose Security And Intelligence

Common Vulnerability Scoring System – Wikipedia