RPKI ASPA: using the AS-PATH to secure BGP inter-domain routing
RPKI ASPA: a complement to RPKI/ROA that tackles BGP route hijacks through AS path manipulation.
Let's talk About Networks, by Jerome Tissieres
RPKI ASPA: a complement to RPKI/ROA that tackles BGP route hijacks through AS path manipulation.
For anyone who has managed a data center fiber plant over the past decade, the arrival of 400 Gigabit Ethernet came with a painful side effect: singlemode fiber. If your DC was built in the era of 10G or 40/100G BiDi, chances are your structured cabling was entirely multimode, a perfectly reasonable choice at the time. Then, 400G arrived, and all the dominant transceiver options (DR4, FR4, LR4) required singlemode. Overnight, that existing multimode plant became a liability for anyone planning to upgrade.
That situation is now changing, thanks to a transceiver Cisco quietly added to its QSFP-DD portfolio in the last few months: the QDD-400G-BD.
For the past two years, I have been managing a team in charge of the data center infrastructure. It is a medium-sized team in charge of the HPC clusters and bare-metal servers, storage, network, and also virtualization and containers platforms, such as VMWare, OpenStack, and Kubernetes, plus some central services.
This team has a dual mandate: keep daily operations running smoothly and carry out innovative and challenging engineering projects. As the person responsible for resource management and keeping the team’s project schedule on track, one important challenge is to find the right balance between these two responsibilities. This requires a strategic approach to resource allocation and time management. Let me give you my take on operations vs projects balance in IT infrastructure teams.
I just completed the Programming for Network Engineers (PRNE) learning path training on Cisco U and would like to share this with you:
For a limited time, you have FREE access to learn Python AND earn 24 Cisco Continuing Education credits to apply toward recertification.
The PRNE Learning Path must be completed before November 22, 2024.
I recently tested the NVIDIA Air Infrastructure Simulation Platform and would like to share my first experiences with you.
Last week, I attended my 11th Cisco Live in person, in the fabulous Las Vegas. This post is my Cisco Live 2024 Wrap-up.
I can already tell you that the next edition of Cisco Live US will be held June 8-12, 2025 in San Diego, California. If my company agrees to send me there, I’m already looking forward to it, because San Diego is a wonderful city.
Once again this year, Cisco Live US 2024 will take place in Las Vegas, Nevada, from June 2 to 6, 2024.
I’m already registered and I’m looking forward to it! This year will be my 11th time attending Cisco’s annual conference in person, in both Europe and the United States.
It seems like yesterday when I saw my first network automation presentation at a conference. I remember it very well; it was in 2015 at the Cisco Network Innovation Summit in Prague. Mr. Tim Szigeti was presenting the first version of the Cisco APIC-EM, the future Cisco Digital Network Architecture (DNA) controller. I talked already about it in a previous article, written in 2018, about my journey toward network programmability and automation.
After its presentation, and for many years afterward, the question was on everyone’s lips:
Cisco Live US 2023 will take place from June 04 to 08 in Las Vegas. I have just registered, and this will be my 10th time attending. However, the question arises: is the Cisco Live conference worth the price?
During the past three years, I have spent a good portion of my time testing, planning, designing, and then migrating our DC network from Cisco FabricPath and Classic Ethernet environments to VXLAN BGP/EVPN. And simultaneously, from a hierarchical classic two-tier architecture to a more modern Clos 400Gb-based topology.
The migration is not yet 100% completed, but it is well underway. And I have gained significant experience on the subject, so I think it’s time to share my knowledge and experiments with our community.
You have upgraded your MacOS to version 13 (Ventura) and a simple SCP to a network device does not work anymore?
In fact, this is normal, here is the reason and how to solve this problem.
This is a very short post, as a complement to my previous post about PyATS, Genie, and RobotFramework.