IPv6 Is Finally Ready for Prime Time. Now What?
Symantec
MAY 28, 2019
IPv6 has the potential to make the Internet a safer place. Here’s what you need to know about deploying the new networking protocol
Bogons: Do not let them in or through your networks
CTOvision
AUGUST 11, 2013
With this post we will dive a bit deeper into bogosity in networks, paying particular attention to the fundamental element of bogosity, the Bogon. We will then articulate a use case for the Centripetal Networks RuleGate which can ensure bogons never get to your enterprise. Filtering private IP addresses requires only a few rules.
IPv6 
96
96 Join 49,000+
Insiders
Sign Up for our Newsletter
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Webinars
Apache Airflow®: The Ultimate Guide to DAG Writing
From Start to Scale: Driving Growth Through Seamless Payments Implementation
Trending Sources
Using Rust for Kentik’s New Synthetic Network Monitoring Agent
Kentik
AUGUST 28, 2020
We recently launched Kentik Synthetic Monitoring , a major new product feature that combines synthetic network testing with real-time traffic monitoring to provide thorough insight into network performance and reliability. IPv4 raw sockets are able to send the full packet starting with the IP header.
Network 125
125 
How Netflix uses eBPF flow logs at scale for network insight
Netflix Tech
JUNE 7, 2021
By Alok Tiagi , Hariharan Ananthakrishnan , Ivan Porto Carrero and Keerti Lakshminarayan Netflix has developed a network observability sidecar called Flow Exporter that uses eBPF tracepoints to capture TCP flows at near real time. Without having network visibility, it’s difficult to improve our reliability, security and capacity posture.
Network 131
131 
To cope with stricter data regulation, enterprises should look to fully open APIs
TechCrunch
FEBRUARY 8, 2022
Jean-Paul Smets is the CEO of Rapid.Space , a hyper open cloud provider offering virtual private servers (VPS), content delivery networks (CDN) and global IPv6 (SDN). Jean-Paul Smets. Contributor. Share on Twitter.
Open Source 216
216 
Kubernetes Version 1.21: What You Need to Know
Aqua Security
APRIL 12, 2021
In addition to the deprecation of PodSecurityPolicies , we’ll also look at some newly promoted features being put in place to block Kubernetes vulnerabilities and things like the new IPv6 support which will be one to take account of when designing cluster network security controls.
IPv6 143
143 
CCNA vs CCNP – Detailed Guide and Differences
The Crazy Programmer
JUNE 17, 2022
CCNA and CCNP, both are Cisco approved certification courses, which are very popular among those who seek a career in the computer networking line. Cisco is a very reputed and well-settled organization that manufactures and sells network-related equipment and solutions. Cisco Certified Network Associate (CCNA).
LAN 173
173 
Transparent Security Outperforms Traditional DDoS Solution in Lab Trial
CableLabs
MAY 20, 2021
P4”-based) and uses in-band network telemetry (INT) technology for device identification and mitigation, blocking attack traffic where it originates on the operator’s network. These factors contribute to a trend of malicious traffic increasingly using upstream bandwidth on the access network.
IPv6 105
105 
Thinking About Glue
O'Reilly Media - Ideas
JULY 13, 2021
In networking, we have standards for what data means and how to send it. The fields in the header have been defined precisely, and new protocols have been built successfully at every layer of the network stack. In a network stack, TCP talks to TCP; HTTPS talks to HTTPS. Is data integration a problem that can be solved?
IPv6 145
145 
OpenStack Delivers Ussuri Update
DevOps.com
MAY 13, 2020
In addition, the community has added IPv6 support to the Kuryr project for integrating OpenStack with container networking […]. The post OpenStack Delivers Ussuri Update appeared first on DevOps.com.
IPv6 99
99 
All About BIND DNS: Who, How, & Why
Linux Academy
JANUARY 14, 2020
For small or uncomplicated networks, BIND by itself is well suited to provide all DNS-related service functions. Typically, the people who manage BIND DNS servers day to day are network administrators or system administrators who are comfortable in Linux/UNIX. Who Uses BIND? BIND also gives you very granular control over a DNS server.
IPv6 22
22 
Microsoft’s August 2024 Patch Tuesday Addresses 88 CVEs
Tenable
AUGUST 13, 2024
A remote attacker could exploit this across a network by dispatching a specially crafted print task to Windows LPD Service, if successful it would result in RCE on the server. An attacker could remotely exploit this vulnerability by sending specially crafted IPv6 packets to a host. The flaw was assigned a CVSSv3 score of 9.8
IPv6 126
126 
Facebook’s historic outage, explained
Kentik
OCTOBER 4, 2021
According to a statement published last night, Facebook Engineering wrote, “Configuration changes on the backbone routers that coordinate network traffic between our data centers caused issues that interrupted this communication.” That’s where network observability comes in. See for yourself.
IPv6 145
145 
Mach37 Spring 2014 Cohort Companies: Watch these hot new disruptors as they accelerate
CTOvision
APRIL 3, 2014
They are: Axon Ghost Sentinel – Hugh Brooks, President, Harrisonburg, VA – Inspired by natural self-organizing systems, Axon Ghost Sentinel’s cyber security products provide lightweight, adaptive, scalable, and decentralized security for mobile and traditional devices, and enterprise networks. CardKill Inc. Fast Orientation, Inc.
IPv6 103
103 
Concerns Grow As AFRINIC’s Funds Are Frozen Over IPv4 Dispute
Kentik
AUGUST 5, 2021
As the available supply of IPv4 addresses became exhausted and IPv6 adoption lagged, the demand for IPv4 naturally increased. Markets were established and what had once simply been a network configuration setting was now an increasingly valuable virtual commodity.
IPv6 145
145 
DDoS: Understand The Growing Threat From Botnet #14
CTOvision
NOVEMBER 14, 2016
If IoT devices supporting IPv6 over Low power Wireless Personal Area Networks (6LoWPAN) are introduced, the potential for larger DDoS attacks compounds. These sensors would be deployed in a Machine to Machine (M2M) network, but could utilize 6LoWPAN to connect to the internet.
IPv6 112
112 
Can VPC Lattice replace AWS Transit Gateway?
Xebia
AUGUST 29, 2023
Transit VPCs are a specific hub-and-spoke network topology that attempts to make VPC peering more scalable. However, this requires a self-managed network router in the Transit VPC and you need to take great care to avoid overlapping CIDR ranges across VPCs. At the highest level, VPC Lattice distinguishes Services and Service Networks.
AWS 130
130 
Hyper Scale VPC Flow Logs enrichment to provide Network Insight
Netflix Tech
MAY 26, 2020
Without having network visibility, it’s not possible to improve our reliability, security and capacity posture. Network Availability: The expected continued growth of our ecosystem makes it difficult to understand our network bottlenecks and potential limits we may be reaching. 43416 5001 52.213.180.42 43416 5001 52.213.180.42
Network 62
62 
Scaling BGP Peering in Kentik's SaaS Environment
Kentik
DECEMBER 18, 2019
When it comes to analyzing network traffic for tasks like peering, capacity planning, and DDoS attack detection, there are multiple auxiliary sources that can be utilized to supplement flow information. IPv6 peerings are starting to outgrow a single node. It also allowed mirroring the setup for our IPv6 fabric.
IPv6 13
13 
Quick Guide: Understanding AWS IP Address Types
ParkMyCloud
OCTOBER 6, 2020
IP addresses will be either an IPv4 or IPv6 address. While you can give your instance multiple private IPv4 and IPv6 IP addresses, it’s important to note that the number of interfaces and private IP addresses you can specify for an instance depends on the instance type. This is a virtual network that is dedicated to your AWS account.
AWS 75
75 
Is 200-125 CCNA Exam Worth Taking?
The Crazy Programmer
JUNE 12, 2018
Cisco Certified Network Associate (CCNA) 200-125 exam is designed to test candidate’s understanding and skills in networking basics , LAN and WAN technologies, IPv4 and IPv6 technologies, services, security and management of infrastructure. Attaining a Cisco certification is a gateway to a great career in networking.
WAN 100
100 
A Reference Architecture for the Cloudera Private Cloud Base Data Platform
Cloudera
JULY 15, 2021
This blog post provides an overview of best practice for the design and deployment of clusters incorporating hardware and operating system configuration, along with guidance for networking and security as well as integration with existing enterprise infrastructure. Networking . IPV6 is not supported and should be disabled.
Architecture 108
108 
How Tenable Helps Federal Agencies Meet CISA’s Binding Operational Directive 23-01
Tenable
OCTOBER 18, 2022
Accurate and up-to-date accounting of assets residing on federal networks is also critical for CISA to effectively manage cybersecurity for the Federal Civilian Executive Branch (FCEB) enterprise.". This directive applies to all IP-addressable networked assets that can be reached over IPv4 and IPv6 protocols. New requirements.
IPv6 53
53 
AWS — Site-to-Site VPN Connections Overview
Perficient
MAY 11, 2023
Agenda Autonomous System and BGP what is Site-to-Site VPN Flow Diagram and Architecture Site-to-Site VPN features Site-to-Site VPN limitations Customer gateway and Virtual Gateway Limitation Alternate VPN Demo What is Autonomous System: The Internet is a network of networks, and autonomous systems are the big networks that make up the Internet.
AWS 64
64 
RouterFreak on Kentik Network Performance Monitoring
Kentik
DECEMBER 22, 2016
We really respected their thoroughness and the fact that they are practicing network engineers, so as we’ve come up with cool new gizmos in our product, we’ve asked them to extend their review. Following here, from their latest review, are some excerpts that focus on Kentik NPM, our enhanced network performance monitoring solution.
Network 40
40 
Customer Newsletter Q4 2024 – October
Firemon
OCTOBER 24, 2024
Cisco IOS/Nexus IPv6 Link-Local Routing Support: Enhanced visibility into IPv6 Link-Local Routing to simplify management of IPv6 environments, especially for large-scale internal and meshed networks. If communication errors are flagged, verify network connectivity and access.
IPv6 52
52 
Customer Newsletter Q4 2024 – October
Firemon
OCTOBER 24, 2024
Cisco IOS/Nexus IPv6 Link-Local Routing Support: Enhanced visibility into IPv6 Link-Local Routing to simplify management of IPv6 environments, especially for large-scale internal and meshed networks. If communication errors are flagged, verify network connectivity and access.
IPv6 52
52 
NETGEAR Router Misconfiguration Opens The Door For Remote Attacks
Tenable
DECEMBER 5, 2022
The contest includes a special challenge, a small office/home office (SOHO) “smashup” to simulate a real world attack where an attacker would chain vulnerabilities in multiple devices in order to compromise a home network. A network misconfiguration present in versions prior to V1.0.9.90
WAN 58
58 
A Tutorial For Enhancing Your Home DNS Protection
CTOvision
APRIL 25, 2017
The operator played a critical function in establishing a global telephone network where any phone could talk to any phone. And when you authorize any device to join your home network, your network and your device are smart enough to automatically configure themselves to use your ISP's DNS service.
IPv6 71
71 
Implementing a Secure Transit DMZ Architecture with Next-Gen Firewalls
Aviatrix
OCTOBER 16, 2018
Amazon Virtual Private Cloud (Amazon VPC) lets you provision a logically isolated section of the AWS Cloud where you can launch AWS resources in a virtual network that you define. You can use both IPv4 and IPv6 in your VPC for secure and easy access to resources and applications.
Firewall 53
53 
The (Net)Flow That Kentik Makes Go: Know Your Traffic Flow Data Protocols
Kentik
DECEMBER 8, 2016
In networking terms, a “flow” defines a uni-directional set of packets sharing common attributes such as source and destination IP, source and destination ports, IP protocol, and type of service. J-Flow : J-Flow is a flow monitoring implementation from Juniper Networks. What if you don’t have any network devices that can export flow?
IPv6 40
40 
BGP Routing Tutorial Series: Part 1
Kentik
FEBRUARY 8, 2016
For reasons of enforced obfuscation by RFC writers, routes are also called Network Layer Reachability Information (NLRI). As of December 2015, there are over 580,000 IPv4 routes and nearly 26,000 IPv6 routes. Another foundational concept is the Autonomous System (AS), which is a way of referring to a network.
IPv6 49
49 
NetFlow, sFlow, and Flow Extensibility, Part 1
Kentik
MARCH 28, 2016
How flow protocols adapt as network needs evolve. Network flow records today are an integral part of the network operations landscape. What about capturing MAC address, or VLAN tag, or IPv6? IPv6, MAC addresses, VLAN, and MPLS) makes it more limited than other alternatives.
IPv6 40
40 Introducing Cloud Playground: Even More Hands-On Training Features
Linux Academy
FEBRUARY 11, 2019
IPv6 is another major addition to the platform, reflecting the next generation of networking. You’re able to set a master node with child nodes to see how they interact, and you’re able to configure container networking between different servers, to name a few examples. Upgraded interface and server logs.
Training 60
60 
Radar Trends to Watch: September 2023
O'Reilly Media - Ideas
SEPTEMBER 5, 2023
Security Proof-of-work makes it to the Tor network. Among other things, this change is intended to accelerate IPv6 adoption. It has a museum… And Flash games will run in a modern browser using Ruffle , a Flash Player emulator that is written in WebAssembly. It is used as a defense against denial of service attacks.
Trends 95
95 Stuff The Internet Says On Scalability For October 19th, 2018
High Scalability
OCTOBER 19, 2018
four petabytes : added to Internet Archive per year; 60,000 : patents donated by Microsoft to the Open Invention Network; 30 million : DuckDuckGo daily searches; 5 seconds : Google+ session length; 1 trillion : ARM device goal; $40B : Softbank investment in 5G; 30 : Happy Birthday IRC!; They'll love it and you'll be their hero forever.
Scalability 49
49 
Demystifying ‘Internet of Value’
Zensar
AUGUST 16, 2018
You and your friend visit a noisy club and like everyone, both of you get on the club’s free wifi network. In the world of ‘internet of value’, your application will act as a node which connects to another peer node irrespective of what kind of network you leverage. The post Demystifying ‘Internet of Value’ appeared first on.
Internet 40
40 Stuff The Internet Says On Scalability For June 22nd, 2018
High Scalability
JUNE 22, 2018
40 million : Netflix monthly spend on cloud services; 5% : retention increase can increase profits 25%; 50+% : Facebook's IPv6 traffic from the U.S, Setting aside the network quality & performance, which is objectively superior with Google, outside of GCE almost every other GCP product is offered as a managed service.
Scalability 45
45 
Monitoring DNS with Kentik Detect
Kentik
AUGUST 21, 2017
No matter how well your network is routing IP traffic, the network is essentially down without DNS to resolve hostnames like www.google.com to their underlying IP addresses. As with any critical component, network operations needs to be able to continuously monitor DNS performance and to respond quickly to any issues that may arise.
IPv6 40
40 NetFlow, sFlow, and Flow Extensibility, Part 2
Kentik
APRIL 18, 2016
Also, to cut down on CPU and network bandwidth, flows are usually only “exported” on average every 10 seconds to a few minutes. sFlow, on the other hand, is based on interface counters and flow samples created by the network management software of each router or switch. This can result in very bursty traffic on sub-minute time scales.
How Analyzing External Attack Surface Data Boosts Your Security Strategy
Tenable
JANUARY 26, 2023
Record types : It’s useful to know, for example, that a record type is an A record vs an AAAA record because the reason one user can see the content and another can’t see it might have everything to do with the fact that they aren’t able to connect to IPv6 from their house, while another user can.
Strategy 52
52 
MadoMiner Part 2 - Mask
AlienVault
OCTOBER 29, 2018
Sogou.exe is the payload that contains the CPUInfo scanner, however, it has been set to scan for IPV6 addresses. In addition, in Sogou.exe, MadoMiner appears to search for IPV6 addresses that are vulnerable to EternalBlue, as well as installs some tasks. Sogou is saved as Conhost.exe in C:WindowsInstaller.
Malware 40
40 Optimizing Long?—?Haul TCP Throughout
taos
OCTOBER 8, 2019
Non-Optimized Performance Without specific performance optimizations for high-bandwidth long-haul networks, TCP throughput is a function of network latency. Window Scaling IETF RFC 1323 defines TCP window scaling, as an optional feature to improve performance over “Long, Fat Networks”. Optimizing Performance?—?Window
WAN 8
8 
New Features and Benefits with AWS – Quarterly Update – Q2– 2022
Apps Associates
JUNE 22, 2022
M6id instances also provide customers up to 50 Gbps of networking speed and 40 Gbps of bandwidth to Amazon Elastic Block Store , twice that of comparable previous generation instances. Customers moving to IPv6 can simplify their network stack by running their databases on a network that supports both IPv4 and IPv6.
AWS 52
52 
Let's personalize your content