Packet Pushers - Weekly Show

On today's Heavy Networking podcast, sponsored by Juniper Networks, we discuss how metro networks are evolving to Cloud Metro, how to apply cloud principles and automation to these locations, and how the attack surface changes when you transition to Cloud Metro. We also talk about how Juniper supports active assurance and zero trust security in these environments. The post Heavy Networking 659: Securing Cloud Metro With Zero Trust (Sponsored) appeared first on Packet Pushers.

Today on Heavy Networking, modeling your network with Batfish. Batfish is an open-source project that builds a model of your production network based on a snapshot of your network and device configurations. Engineers can then test and validate changes against this model before making those changes to the production network. Guest Rick Donato walks us through how Batfish works, use cases, and more. The post Heavy Networking 658: Using Batfish To Model And Test Your Network appeared first on Packet Pushers.

Today on Heavy Networking, a discussion with sponsor VMware about SD-WAN and SASE. We’re diving into announcements from VMware Explore Barcelona 2022 covering a new SD-WAN client and more. With this client, you’ll be able to connect your users to the SASE cloud with software--no hardware edge box required. We dive into how it works, the network architecture, use cases, and more. The post Heavy Networking 657: New VMware Client Connects Users To SASE, SD-WAN (Sponsored) appeared first on Packet Pushers.

On today's Heavy Networking we look at the idea of embedding zero trust into applications. The way we do cyber security these days has failed in significant ways. What if we could extend the AAA or RBAC model to all applications? Better yet, what if we take the RBAC model, make authentication more robust than username & password, assess endpoint security posture constantly, and evaluate each request individually up at layer 7 for all applications? Guest Galeal Zino has opinions on what embedded zero trust looks like. We discuss. The post Heavy Networking 656: Embedding Zero Trust Into Applications appeared first on Packet Pushers.

Heavy Networking welcomes sponsor Netris to the show with a special episode for you network nerds who are really getting into automation, infrastructure as code, pipelines, and so on. Netris is all about bringing that public cloud VPC experience to the network you’ve already got. Imagine being able to consume your existing network with APIs and being able to stand up VLANs, VXLANs, elastic load balancers, firewalls, Internet gateways, and more the same way you do in the cloud, but on premises. The post Heavy Networking 655: On-Prem VPC Networking With Netris (Sponsored) appeared first on Packet Pushers.

Today on Heavy Networking we have a round-table discussion about Data Processing Units (DPUs). These devices let you bring networking, security, and storage capabilities closer to server workloads without burdening server CPUs. Guests Pete Lumbis and Aaron Glenn help us dissect DPUs, identify use cases, discuss adoption and operational challenges, and more. The post Heavy Networking 654: What’s Up With DPUs? appeared first on Packet Pushers.

Today’s Heavy Networking, sponsored by Nokia, dives into Nokia's fabric-based approach to data center automation and operations. That approach includes its SR Linux network OS, its Fabric Services System intent-based platform, its NetOps Development Kit, or NDK, and how all this ties together to address your operational life cycle across Day zero, Day 1, Day Two, and beyond. The post Heavy Networking 653: Design, Deploy, And Operate With Nokia Data Center Fabric Solution (Sponsored) appeared first on Packet Pushers.

On today’s Heavy Networking episode, I talk with Nick Carter about Flock Networks, his routing protocol stack startup, as well as Nick’s love of the Rust programming language. As a network engineer, maybe you don’t think you care about Rust. Nick’s here to explain why the discerning network engineer might prefer their routing daemons to have been written in Rust. We also talk about the pleasures and travails of startup life. The post Heavy Networking 652: Why Networkers Should Want Routing Protocols Written In Rustlang appeared first on Packet Pushers.

As carriers and service providers look to embrace disaggregated infrastructure and software, and drive new business through technologies such as network slicing, it’s critical to have management and orchestration capabilities to coordinate  hardware and software resources in the RAN, the transport layer, and the network core. On today's sponsored Heavy Networking, sponsored by Juniper, we dive into Juniper's Service Management and Orchestration (SMO) platform, which is designed to provision, manage and monetize custom network services on demand. The post Heavy Networking 651: How Juniper Networks’ SMO Enables Network Slicing (Sponsored) appeared first on Packet Pushers.

On today’s Heavy Networking podcast, Kevin Myers joins us for a whitebox conversation. Kevin helps Internet Service Providers build their networks, and has noticed increased adoption of whitebox switches. Why? Are the problems whitebox solves for these ISPs the same you might have at your company? Should you consider whitebox instead of Cisco, Juniper, or Arista? Maybe…and maybe not. The post Heavy Networking 650: Whether And How To Adopt Whitebox Switches appeared first on Packet Pushers.

On today’s sponsored Heavy Networking we dive into new features of Cisco’s Network Services Orchestrator, or NSO. NSO is a network orchestration platform for large enterprises and service providers that offers multi-vendor automation, configuration management, service creation, ongoing monitoring and upgrades, and more. The post Heavy Networking 649: Cisco NSO 6.0 Boosts Performance, Improves Usability (Sponsored) appeared first on Packet Pushers.

Encrypted traffic poses a problem for enterprise policy enforcement. On today's Heavy Networking, we explore the notion of zero knowledge middleboxes, which use a variety of techniques to allow firewalls or other middleboxes to enforce policy without the need for decryption. Our guest is Dr. Paul Grubbs, whose research into zero knowledge middleboxes prompted this episode.

A full zero trust architecture goes up and down the stack, bringing in policy and enforcement strategies from the application layer, all the way down into the network. On today's Heavy Networking podcast we discuss zero trust network access, or ZTNA, with sponsor Fortinet. ZTNA is but one part of a robust zero trust architecture, but what a crucial component it is. Alex Samonte, Director of Technical Architecture, joins us to get into nerdy specifics about Fortinet’s ZTNA.

Today on Heavy Networking, aerospace networking. We talk with Lexie Cooper, who works for Blue Origin as an Avionics Integration Engineer. That’s right. Lexie does networking for rockets. We talk about the challenges of building networks for spacefaring vehicles, differences between aerospace and the typical enterprise, continuous learning, the pros and cons of building a social media presence, and more.

On today’s episode of Heavy Networking, we discuss secure wireless planning and design with Jennifer "JJ Minella. JJ is the author of the book "Wireless Security Architecture." We talk about the goals for planning a wireless design, why it's worth the upfront investment, keeping operators in mind as you design your deployment, the importance of communication, design iteration, and more.

Today's Heavy Networking podcast explores what it's like to set up a temporary network to support thousands of users at a live event. We discuss planning and preparation, defining requirements, design options, performance and security issues, and what to keep in your bag for that last-minute emergency. Our guests are Jim Troutman, Jason Davis, and Alex Latzko.

What does privacy have to do with running a network? Is protecting the privacy of users, customers, and the organization one of the responsibilities of the networking team? If so, what kind of information has to be kept private and how? Should privacy efforts focus on compliance, or on risk reduction? How are those different? On today’s Heavy Networking podcast we welcome Russ White to tackle these perplexing privacy questions.

Single pair Ethernet. That’s right. Ethernet over a single twisted pair, rather than the four you’re used to. Or two if you’ve got a little gray in your beard. Now, single pair Ethernet isn’t fast in the way we network engineers would normally think of fast. SPE runs at 10 megabits per second. But in the use cases SPE was designed for, 10Mbps is very fast indeed. To tell us all about single pair Ethernet is Peter Jones. Although Peter wears many hats in the networking industry, today he comes to the microphone as the chairperson of the Ethernet Alliance.

Today on Heavy Networking, we discuss NVMe over fabric, where your Ethernet and IP network is the fabric. Many NVMe over fabric discussions focus on what’s happening inside the storage packets themselves. This conversation focuses on the network. What does the topology need to be? What are the latency and loss characteristics of an NVMe transport fabric? What QoS tools should you be considering, how do they work, and when should you use them? Our guest for this vendor-neutral conversation is J Metz.

What’s been your experience with architecture vs. engineering roles? Are those distinct functions or combined in your organization? How do the roles interact? Does the architecture team hand down holy designs from their ivory tower the engineering team is expected to implement them? Is the architecture and engineering function more combined, where experienced engineers are expected to create an architecture and help put it in place? Ethan Banks and guest Pat Allen share their experiences with architecture and engineering roles from organizations they've worked in.