The Fat Pipe - All Packet Pushers Pods

Today's Heavy Networking opens NetBox, an open-source IPAM and DCIM project that can also be used to model your network and serve as a source of truth. Our guest is NetBox contributor John Anderson.

Today’s Heavy Networking looks at sources of network truth. Specifically, with NetBox. What is NetBox? To quote netbox.readthedocs.io:

“NetBox is an open source web application designed to help manage and document computer networks. Initially conceived by the network engineering team at DigitalOcean, NetBox was developed specifically to address the needs of network and infrastructure engineers.”

NetBox is growing in popularity among networkers. Here to talk to us about why NetBox is so great is John Anderson. He’s a network automation engineer at NetworkToCode, and a NetBox contributor.

We discuss:

* What NetBox is – IPAM and DCIM (Data Center Infrastructure Management) software

* What NetBox is not – a network management system, a network discovery tool, or DNS/DHCP server

* How to deploy NetBox

* How you model the intended state of your network and import data to it

* The kinds of information it can contain and what you can do with it

* Its support for IPv6

* More

Sponsor: Open Systems

In the crowded SD-WAN market, don’t overlook Open Systems. Open Systems brings security, automation and expert management to let you focus on other aspects of your network. Get visibility, flexibility and control combined with performance, simplicity and security with SD-WAN from Open Systems. To find out more, go to www.open-systems.com/packetpushers.

Sponsor: Tufin

Tufin has pioneered a policy-based approach to network security management using automation and analytics. As a result, you can make network changes in minutes instead of days, reliably and securely. Tufin. The Security Policy Company. Find out more at tufin.com.

Show Links:

NetBox

John Anderson on GitHub

NetworkToCode

Today's IPv6 Buzz podcast discusses key approaches to getting IPv6 deployed in the enterprise. Guest Enno Rey talks about how to identify quick wins, being liberal and flexible as you deploy, and more. The IPv6 crew also talks about IPv6 security, and Enno shares highlights from his recent RIPE78 presentation.

Security is a top concern when it comes to cloud applications and services.

Given internal configuration errors and external malicious actors, it’s reasonable to assume that at some point your cloud services will be attacked.

What strategies can be applied to make sure the bad actor is trapped and the damage is limited? Let’s discuss.

Guiding us through the dark and dangerous clouds of security is David Redekop, Founder of Adam Networks and Co-founder of Nerds On Site.

We discuss:

* Default security settings of cloud services and when you need to go beyond those defaults

* How encryption can stymie traffic inspection

* The need for egress control in cloud services

* The complexities of IP-based egress control

* DNSSEC vs. DNS over HTTPS/TLS

* Using DNS domains and subdomains to create egress whitelists

* The role of logging

* Using tools such as OSquery

Sponsor: Netrounds

Netrounds software performs active testing and monitoring to ensure your business-critical applications and services are running as expected. Get real-time insights for testing, troubleshooting, and SLA monitoring. Find out more at netrounds.com/packetpushers.

Show Links:

DNS over HTTP/S – Wikipedia

osquery from Facebook – Osquery.io

Dnsmasq by Simon Kelly – thekellys.org

Google Transparency Report – Google

David Redekop on Twitter

Adam Networks

Your Host:

Ned Bellavance on Twitter

Ned In The Cloud – Ned’s blog

Today's Day Two Cloud episode dives into egress control for cloud security. Guest David Redekop explains why outbound control is essential to protect cloud services, how to use DNS to restrict outbound connections, and the value of logging tools such as OSquery.

Today's Network Break dives into the ongoing battle of U.S. vs. Huawei, discusses DNS research from RIPE 78, explores new switch capabilities and telemetry from Mellanox, and more tech news.

Take a Network Break! We get an FU about coffee beans, and then dig into the giant mess that is the U.S. government’s restrictions on American tech companies doing business with Huawei.

We report on DNS observations from the RIPE 78 conference, explore new capabilities in Mellanox Ethernet switches, and discuss a new telemetry feature from Mellanox called “What Just Happened?”

HPE buys Cray for $1.3 billion, SpaceX launches a test batch of satellites for Space Internet, and IT service provider HCL exposes sensitive employee and customer information.

An industry analyst throws cold water on the notion that carrier spending on 5G will lift the fortunes of infrastructure providers, and a U.S. federal judge rules that Qualcomm violated antitrust laws.

See the links below to get more details on each story.

Sponsor: Virtual Design Clinic

Join the Packet Pushers and a group of smart engineers for our live, online Virtual Design Clinic on June 6th. Get your network design and troubleshooting questions answered in Ask Me Anything sessions, see tech presentations on Wi-Fi 6/802.11ax and on The Art Of Network Maintenance, and learn about network automation with sponsor Anuta Networks. Get details and sign up at packetpushers.net/vdc.

Show Links:

Factbox: Global tech companies shun Huawei after U.S. ban – Reuters

Huawei gets limited reprieve from ban on buying U.S. components – Axios

Advice for Huawei Customers – National Cyber Security Centre

Huawei Placed on U.S. Tech Blacklist, Killing Huawei’s Consumer Device Business Outside China – Techsponential

Huawei: ARM memo tells staff to stop working with China’s tech giant – BBC News

Huawei’s use of Android restricted by Google – BBC News

Huawei gets limited reprieve from ban on buying U.S. components – Axios

Microsoft has pulled Huawei’s products from its Azure Stack catalog – Bloomberg

SoftBank, KDDI pull sales of new Huawei smartphones – Telegeography

Huawei has enough inventory to ‘weather’ US blacklist for months: Analyst – CNBC

Archives – RIPE 78 – RIPE

On today's Heavy Networking, recorded live at Gluware Intent 19, the Packet Pushers dive into network automation, learn about sponsor Gluware's capability to bring automation into brownfield environments and derive business intent from existing networks, and explore real-world use cases from customers Merck and Terracon.

Today’s Heavy Networking was recorded at Gluware Intent 19, a live event in New York City sponsored by Gluware.

The Packet Pushers dive into network automation, learn about Gluware’s capability to bring automation into brownfield environments and derive business intent from existing networks, and explore real-world use cases from customers Merck and Terracon.

Our guests are Jeff Gray, CEO of Gluware; Michael Haugh, VP of Product Management at Gluware; Jamie Hughes, Infrastructure Architect at Terracon; and Salvatore Rannazzisi, Associate Director, Merck.

We discuss:

* What Gluware means by intelligent network automation

* The concept of intent engineering and how Gluware derives intent from your existing networks and configurations

* How Gluware differs from standalone tools such as Ansible

* Working with multi-vendor networks

* Real-world use cases from Merck and Terracon on configuration management, OS upgrades, and more

* The technical and human challenges of automating an enterprise network

* Lessons learned on bringing automation into production

Show Links:

Gluware

Packet Pushers Gluware Intent 19 Live Stream – YouTube

Greg Ferro, Packet Pushers podcast network co-founder, has commandeered the Datanauts bridge to take over today’s episode.

At the recent Google Next 19 conference, Greg sat down for a far-ranging roundtable conversation with three IT professionals who shared their expertise on chaos engineering, why cloud networking is hard, and cloud migration, among other topics.

Ethan Banks beams in after the fact to introduce the show and provide the takeaways.

Greg’s guests are Ana Medina, Chaos Engineer at Gremlin; Leticia Kemp, Head of Business Intelligence at Crunch Simply Digital; and Marisabel Rodriguez, Tech Director at Globant.

They discuss:

* The pros and cons of breaking things on purpose (chaos engineering)

* How business intelligence tackles metrics and reporting

* Lift-and-shift vs. incremental movement to the cloud

* Whether there’s a skills gap in enterprise IT

* Service meshes

* More

Sponsor: Open Systems

Open Systems brings security, automation, and expert management to SD-WAN. Get visibility, flexibility, and control combined with performance, simplicity and security with SD-WAN from Open Systems. To find out more, go to Open-systems.com/packetpushers and get a free beanie and a Gartner report on the economics of SD-WAN.

Sponsor: Quest Software

Quest Software is your go-to for everything Microsoft. Migrate to a new SharePoint or Office 365 environment, move to OneDrive for Business, consolidate Active Directory and Exchange, secure your AD from insider threats, and much more! Learn more at Quest.com/DatanautsPod.

Show Links:

Ana Medina on Twitter

Ana Medina on LinkedIn

Leticia Kemp on Twitter

Leticia Kemp on LinkedIn

Marisabel Rodriguez on Twitter

Marisabel Rodriguez on LinkedIn