Much less noise.  That was my initial thought when this box was first powered.  The 4500 sounds like a jet engine.  I was particularly excited about the Juniper EX4550 because it addressed a number of things that were less than ideal about the EX4500. Soem of the differences ciuyld be argued as either oa pro or con depending on deployment scanerio, but for what we’re looking for, the 4550 is far better. 4550 Single PFE, 4500 dual PFE Single PFE being more desirable for us since cross box…

It was recently announced that Juniper Networks would be purchasing WANDL, a long time partner and

sudo ip netns exec uc2b ip link list ip netns exec uc2b ifconfig uc2b1 192.80.111.⁵⁸⁄₂₄ up sudo ip netns exec uc2b ifconfig uc2b1 192.80.111.⁵⁸⁄₂₄ up sudo ovs-vsctl add-port br-int uc2b1 ip netns exec uc2b ip link set uc2b1 up sudo ip netns exec uc2b ip link set uc2b1 up sudo brctl addbr uc2bbr sudo brctl ifbr uc2bbr uc2b1 sudo brctl addif uc2bbr uc2b1 sudo brctl delbr uc2bbr sudo ovs-vsctl add-port br-int uc2b1 sudo ovs-vsctl add-port br-int uc2b1 sudo ovs-vsctl add-br uc2bbr uc2b1…

Networks are insecure, they just are. I once worked with an FBI agent who said that if you wanted a secure network you should turn everything off, smash it, then set it on fire - and I don’t disagree. However, there are things we can do to understand our networks that will aid immeasurably in how they are secured and initially and how they remain secured over time. At their very core networks are not secure based simply on the fact that humans are involved in their construction, operation,…

SDN gateways have a much more traditional look and feel. They have a flat SDN OpenFlow network with a default gateway for client traffic by either controller proxy or direct reachability by the client host. Note that both approaches suffer from lack of adoption and maturity, which adds risk to any early production SDN.  IPv6-like

I want to preface this by saying that this was an experiment for me.  That said, I know there are folks that want to run everything under the sun on a pi.  So, since I love the platform as well, I set out to try to make the raspberry pi a perfsonar “probe”.

Buzz, Buzz, Buzz. The SDN sites are all abuzz with talk about how your enterprise network can take advantage of the deluge of new products and services out there aimed at that market, and that’s great - there are some cool options out there for that space. But, like I always do, I want to talk about the other pieces that most people do not see. The gritty plumbing and complex interconnections of the last mile providers, because there are a lot of very interesting moving parts there that…

I recently had a very interesting and enjoyable conversation about firewall placement in a campus environment.   Firewall in the center Firewall at the edge Firewall closest to the resource it needs to protect