The Fat Pipe - All Packet Pushers Pods

Greg Ferro, Packet Pushers podcast network co-founder, has commandeered the Datanauts bridge to take over today’s episode.

At the recent Google Next 19 conference, Greg sat down for a far-ranging roundtable conversation with three IT professionals who shared their expertise on chaos engineering, why cloud networking is hard, and cloud migration, among other topics.

Ethan Banks beams in after the fact to introduce the show and provide the takeaways.

Greg’s guests are Ana Medina, Chaos Engineer at Gremlin; Leticia Kemp, Head of Business Intelligence at Crunch Simply Digital; and Marisabel Rodriguez, Tech Director at Globant.

They discuss:

* The pros and cons of breaking things on purpose (chaos engineering)

* How business intelligence tackles metrics and reporting

* Lift-and-shift vs. incremental movement to the cloud

* Whether there’s a skills gap in enterprise IT

* Service meshes

* More

Sponsor: Open Systems

Open Systems brings security, automation, and expert management to SD-WAN. Get visibility, flexibility, and control combined with performance, simplicity and security with SD-WAN from Open Systems. To find out more, go to Open-systems.com/packetpushers and get a free beanie and a Gartner report on the economics of SD-WAN.

Sponsor: Quest Software

Quest Software is your go-to for everything Microsoft. Migrate to a new SharePoint or Office 365 environment, move to OneDrive for Business, consolidate Active Directory and Exchange, secure your AD from insider threats, and much more! Learn more at Quest.com/DatanautsPod.

Show Links:

Ana Medina on Twitter

Ana Medina on LinkedIn

Leticia Kemp on Twitter

Leticia Kemp on LinkedIn

Marisabel Rodriguez on Twitter

Marisabel Rodriguez on LinkedIn

Today's Network Break tackles a string of vulnerabilities from Microsoft, Cisco, and Intel. We also look at a new 400G switch from Arista, an IoT security announcement from Extreme, Cisco financial results, and more tech news.

Take a Network Break!

We start with an FU from Daniel Dib who adds a little color to our coverage of Cisco’s SD-WAN Cloud onRamp for CoLocation.

In the news, it appears the entire Internet is borken as Microsoft, Cisco, and Intel get hit by critical vulnerabilities. ARIN revokes almost three quarters of a million IPv4 addresses from fraudsters, and Arista launches a new 400G switch.

Extreme adds AI to IoT security, the US government takes more shots at Huawei and China, and VMware buys Bitnami for application packaging.

Cisco Meraki notches 2 million networks (whatever it means by “networks”), and Cisco reports strong Q3 earnings.

Sponsor: TeleGeography

We’re also sponsored by TeleGeography,  a telecommunications market research firm. TeleGeography wants you to know about its  WAN Cost Benchmark. This is a tool that lets you model your hybrid WAN expansion plans and compare costs based on over 2 million data points. Head to benchmark.telegeography.com to learn more.

Sponsor: ThousandEyes

ThousandEyes gives you performance visibility from every user to every app over any network, both internal and external, so you can migrate to the cloud, troubleshoot faster and deliver exceptional user experiences. Sign up for a free account at thousandeyes.com/packetpushers and choose a free ThousandEyes t-shirt.

Tech Bytes: Silver Peak And Dunelm

Stay tuned after the news for a sponsored Tech Bytes conversation with Dunelm, a UK homeware retailer that’s using Silver Peak’s SD-WAN EdgeConnect appliances to migrate off MPLS and go to direct Internet access. We discuss the migration, and how a better-performing WAN improves the customer experience inside their stores.

Show Links:

Prevent a worm by updating Remote Desktop Services (CVE-2019-0708) – Microsoft

A Cisco Router Bug Has Massive Global Implications – Wired

Cisco Secure Boot Hardware Tampering Vulnerability – Cisco

Cisco IOS XE Software Web UI Command Injection Vulnerability – Cisco

Thrangrycat – Red Balloon

Weekly Show 422: Hardware Supply Chains And Trusted Execution – Packet Pushers

Ian Coldwater Twitter Thread on Intel CPU Vulnerabilities

ZombieLoad Attacks May Affect All Intel CPUs Since 2011: What to Do Now – Tom’s Guide

CPU Fail

Close to 735K Fraudulently Obtained IP Addresses Have Been Uncovered and Revoked, ARIN Reveals – CircleID

On today’s Tech Bytes, sponsored by Silver Peak, we talk with homeware retailer Dunelm about how they rearchitected their WAN to improve the in-store experience for customers, lower IT costs, and boost the bottom line.

Head of Infrastructure and DevOps for Dunelm, Tonino Greco, discusses how the company is migrating away from a single MPLS circuit at each location to dual dedicated Internet links, enabled by the Silver Peak EdgeConnect SD-WAN edge platform.

The migration will cut costs and ensure the highest levels of performance for the retailer’s network and applications for its more than 170 stores located across England, Wales, Scotland, and Northern Ireland.

MPLS outages and poor performance had impeded key business functions such as inventory management and price updates.

After migrating to an SD-WAN, the company was able to deploy new initiatives including mobile Point Of Sale systems to streamline purchases and let shoppers check product availability in-store and online. Greco says the new system is already boosting revenue.

Dunelm also rolled out in-store Wi-Fi for customers that’s securely segmented from store systems, while using Silver Peak to prioritize business applications.

Show Links:

Silver Peak

On today’s Tech Bytes, sponsored by Silver Peak, we talk with homeware retailer Dunelm about how they rearchitected their WAN to improve the in-store experience for customers, lower IT costs and boost the bottom line.

Today's Heavy Networking digs into VyOS, an open-source, Linux-based network OS for routing. Forked from the Vyatta Core, VyOS includes a full routing stack and features including firewalling, VPN, and more. Guest Yuriy Andamasov, the project coordinator, gives us a guided tour.

Today’s Heavy Networking is all about VyOS, an open-source OS for routing that’s based on Debian GNU/Linux.

VyOS “provides a free routing platform that competes directly with other commercially available solutions from well-known vendors. Because VyOS is run on standard amd64, i586 and ARM systems, it is able to be used as a router and firewall platform for cloud deployments.”

Here to catch us up on VyOS is Yuriy Andamasov, the project coordinator.

We discuss:

* VyOS’s origins (it’s a fork of Vyatta Core)

* Primary features, including routing, firewalling, NAT, QoS, VPN and more

* Routing protocols supported, including FRR

* Where it’s being deployed

* Use cases

Sponsor: ExtraHop

ExtraHop is the enterprise cyber analytics company delivering performance and security from the inside out. ExtraHop offers complete visibility with machine learning to help you make quick, confident decisions about your IT environment. Explore the ExtraHop Performance Platform at extrahop.com/packetpushers.

Sponsor: INE

If you’re looking for training, consider INE.com. INE is a training resource for networking and a whole lot more. Visit ine.com/packetpushers to get a free 3-day trial. INE–experts at making you an expert.

Show Links:

VyOS

VyOS blog

VyOS docs

VyOS Appliance – GNS3

VyOS Project 2019 – March Update – VyOS.io

The IPv6 Buzz crew talks MAP-T, MAP-E and Happy Eyeballs with Andrew Yourtchenko, co-author of the original Happy Eyeballs RFC. We discuss the role of Happy Eyeballs given current rates of IPv6 adoption, the differences between MAP-T and MAP-E, and more.

Solo is building a group of abstractions on service mesh to make them useful. 

You see, the problem with cloud is that you lose the control of the networking. The abstraction of the network in AWS or Azure means that you have a few problems, incompativluty 

But the real problem is that you lose control of the network, so you want to build a new one so that you get control of the traffic and insert L7 fucntionality. So using a service mesh overlay gives you back your visibility and control but also offers opportunities that aren’t possible with traditional networking. 

Solo.io starts with Using Envoy as a an L7 Load Balancer – its called an API Gateway in cloud speak, but its a L7 proxy that does rate control, decryption etc. To make it specifically useful Solo Gloo is container aware and built with tools for knowing what’s in containers. 

So far, it’s a good idea. 

But you can build apps on the API gateways to automate various functions. examples apps are a inline debugger tool. 

Super Gloo: the assumption is that you will have more than one service mesh because, well, Kubernetes doesn’t work so well at hosting many apps. Smaller K8S is currently the way forward instead of one big one. 

Now operating istio service mesh is not a simple thing. SSL certificate management, enforced sidecar deployment, 

Super Gloo aims to make this smoother. – 

* SuperGloo takes charge of launching and managing key mesh functionalities, including encryption, telemetry, and tracing

* installation process of all supported service meshes, bypassing the often-complicated implementation-specific installation process.

* SuperGloo provides a f 

* SuperGloo makes it easy to connect multiple service meshes across namespaces, across clusters, or across clouds, providing flat networking and policy.

A quick look at Solo.io and their service mesh offering