Scott Lowe

NOVEMBER 28, 2016

This is a liveblog of the AWS re:Invent session titled “Hybrid Architectures: Bridging the Gap to the Cloud” (ARC208). The speaker for the session is Jamie Butler, Manager of Solutions Architecture at AWS (focused on state/local government). At the core of the networking solution is Amazon’s Virtual Private Cloud (VPC).

Architecture 60

Architecture Cloud Storage Vmware 60

CTOvision

MAY 16, 2017

The SFN8722 OCP offers 10GbE performance, which is critical for today’s data centers where ultra scale dominates the market, supports 1000s virtual NICs and dual 10 GbE ports, and provides up to 30 million of packets per second and ultra-low latency under one microsecond. These include leading edge cloud service providers, Web 2.0

Software 194

Software Software Data Center Hardware 194

Phil Windley

AUGUST 28, 2023

Past practices included techniques like virtual private networks (VPNs) that tried to emulate the idea of an intranet where trusted computers and people were protected from hackers by a firewall that "kept the bad stuff out." This not only reduces the attack surface, but also minimizes potential damage.

Authentication 85

Authentication Policies Applications Firewall 85

SecureWorld News

JUNE 23, 2021

CISA mentions that firewalls could have been used to neutralize the malware, limiting the impact of the breach. Does CISA agree that the SolarWinds malware could have been neutralized had victim agencies placed firewalls in front of the servers running SolarWinds Orion and configured them to block outgoing connections to the internet?".

Firewall 70

Firewall Malware Network Internet 70

CTOvision

MAY 9, 2017

Delivers 1000s Virtual NICs for Ultimate Scalability with the Lowest Possible Latency. Hardware based firewall – Filtering packets in both directions at a record rate of 250 nanoseconds, offering the fastest filter execution available on the market. Marty Meehan. These include leading edge cloud service providers, Web 2.0

Software 151

Software Software Data Center Hardware 151

CIO Business Intelligence

MARCH 20, 2024

Consider today’s IT architecture world: on premises, outsourced data center, public cloud, multicloud, hybrid cloud, the edge. Tools to Rein In Complexity Thankfully, In the IT and security worlds we’re being offered tools to simplify and integrate virtually every part of our IT ecosystems. Password strategies. Incident response plans.

Government 64

Government Tools Training Applications 64

SecureWorld News

JUNE 23, 2021

CISA mentions that firewalls could have been used to neutralize the malware, limiting the impact of the breach. Does CISA agree that the SolarWinds malware could have been neutralized had victim agencies placed firewalls in front of the servers running SolarWinds Orion and configured them to block outgoing connections to the internet?".

Firewall 52

Firewall Malware Network Internet 52

CTOvision

OCTOBER 27, 2014

Palo Alto unveils latest release of virtual firewall series. Enterprise security company, Palo Alto Networks has announced the latest release of its virtual firewall series (VM-Series). Defense Daily’s 2014 Open Architecture Summit, … Read more on Defense Daily Network (subscription).

Dell 258

Dell Big Data Firewall Storage 258

CIO Business Intelligence

AUGUST 15, 2022

Cloud networking comprises three layers: first from on-premises data centers to the cloud, then within a cloud that has multiple accounts or virtual private clouds, and finally, between individual clouds in a multicloud environment. It’s more complicated than standard networking, Hoag says. Hoag brought in Alkira to help tackle the challenge.

CTO 97

CTO Network Cloud Data Center 97

Scott Lowe

AUGUST 6, 2021

I saw this blog post about Curiefense , an open source Envoy extension to add WAF (web application firewall) functionality to Envoy. Via Alex Mitelman’s Systems Design Weekly 015 , I was pointed to this AWS article on multi-site active-active architectures. Virtualization. Operating Systems/Applications.

Open Source 105

Open Source Load Balancer WAN Architecture 105

CTOvision

SEPTEMBER 20, 2016

The problem is that threat actors are able to get through the castle gates (firewalls) and once in, are able to evade the castle guards (IPS). The argument is that today with the expansion of n-tier distributed systems and massively parallel architectures, east-west traffic has increased exponentially. Microsegmentation will fix this.

Network 150

Network Security Vmware Virtualization 150

CIO Business Intelligence

NOVEMBER 2, 2023

We even copied that perimeter defense strategy to our cloud environments by building virtual firewalls to control access to those applications. And not only in terms of architecture and technology. As mentioned, we had to do this because it was the only way. And it worked.

Data Center 142

Data Center Network Applications Security 142

CIO Business Intelligence

NOVEMBER 14, 2023

data, security, development, architecture) as well. Workloads with unpredictable demand such as mobile apps or websites may belong in public cloud, whereas efficient, virtualized, steady-state applications with predictable usage may not benefit from migration. Cloud Architecture, Cloud Computing, Cloud Management

Strategy 145

Strategy Cloud Applications Agile 145

SecureWorld News

OCTOBER 6, 2022

Back then, much of the cybersecurity discussion might have been around strengthening passwords, updating anti-virus software, and maybe deploying the latest firewalls to protect the enterprise perimeter. This is the essence of the Zero Trust security architecture, which is gaining popularity in virtually all sectors.

Security 84

Security Network Authentication Virtualization 84

TM Forum

JANUARY 27, 2022

Prior to stepping up to the role of CTO in September 2021, Leboucher was Vice President Digital IT, Customer Relation Solutions and Global Architecture, Orange Labs Services, where he played an instrumental role in transforming Orange’s IT systems. Working with hyperscalers.

CTO 130

CTO Network Cloud Virtualization 130

CIO Business Intelligence

MAY 23, 2023

Firewalls have come a long way from their humble beginnings of assessing network traffic based on appearance alone. Here are six predictions for the future of the firewall. Convergence also is happening in different formats; now security convergence is happening in appliances, virtual machines, cloud-delivered services, and containers. Convergence

Firewall 98

Firewall Network WAN Security 98

Scott Lowe

AUGUST 6, 2021

I saw this blog post about Curiefense , an open source Envoy extension to add WAF (web application firewall) functionality to Envoy. Via Alex Mitelman’s Systems Design Weekly 015 , I was pointed to this AWS article on multi-site active-active architectures. Virtualization. Operating Systems/Applications.

Open Source 60

Open Source Load Balancer WAN Architecture 60

Scott Lowe

OCTOBER 27, 2017

Russell Bryant has a post on Open Virtual Network (OVN) , a project within the Open vSwitch (OVS) community. specifically, the new container network firewall functionality. When I was using Fedora, I needed some useful information on firewall-cmd , and found this article to be helpful. Virtualization. Servers/Hardware.

Firewall 60

Firewall Virtualization Network Storage 60

Scott Lowe

MAY 6, 2013

I’ve had a few conversations about network virtualization and software-defined networking (SDN) recently (see here and here ) and the amorphous use of the term “software-defined.” Hey, where’s the network virtualization support? Similar Posts: On Network Virtualization and SDN. Technology Short Take #23.

Storage 116

Storage Virtualization Vmware Network 116

Linux Academy

MARCH 28, 2019

As organizations increase their use of Kubernetes in public and Hybrid cloud architectures, it is important not to let a maiden voyage end like a Titanic catastrophe. Kubernetes nodes rely on underlying virtual servers for both the master control plane and for worker nodes. The immutable server is a best-practice for virtualization.

Policies 68

Policies Linux Security Virtualization 68

Scott Lowe

JUNE 20, 2016

I’d heard of Plumgrid, but wanted to take this time to better understand their architecture. As it turns out, their architecture is quite interesting. Using eBPF, Plumgrid has created in-kernel virtual network functions (VNFs) that do things like bridging, routing, network address translation (NAT), and firewalling.

Meeting 60

Meeting Linux Storage Network 60

Scott Lowe

AUGUST 11, 2016

In this post you’ll find a collection of links to articles discussing the major data center technologies—networking, hardware, security, cloud computing, applications, virtualization…you name it! (If Numan Siddique describes the native DHCP support available in OVN (Open Virtual Network). Welcome to Technology Short Take #70!

Vmware 60

Vmware Hardware Storage Linux 60

Scott Lowe

MARCH 17, 2016

Russell Pope at Kovarus recently wrote about using security groups to manage the VMware NSX distributed firewall. Two articles in particular stood out to me: one by Christos Karamanolis on erasure coding with VSAN 6.2 , and one by my good friend Jase McCarty on the use of sparse virtual swap files. Virtualization.

Vmware 60

Vmware Linux Network Open Source 60

Scott Lowe

SEPTEMBER 3, 2013

Art Fewell takes a deeper look at the increasingly important role of the virtual switch. A discussion of “statefulness” brought me again to Ivan’s post on the spectrum of firewall statefulness. Virtualization. Networking Security Storage Virtualization CLI OpenFlow OpenStack Puppet VMware vSphere'

Vmware 60

Vmware Data Center Storage Disaster Recovery 60

CIO Business Intelligence

APRIL 13, 2023

For example, he says, web application firewalls don’t only protect applications but cut networking costs by reducing spurious and malicious traffic. Christensen further suggests explaining how security can cut costs or increase productivity.

Security 111

Security Budget Information Security Applications 111

Scott Lowe

SEPTEMBER 12, 2012

Using 1 GbE would have required too many ports, too many cables, and too many switches; 10 GbE offered Expedient a 23% reduction in cables and ports, a 14% reduction in infrastructure costs, and offered a significant bandwidth improvement (compared to the previous 1 GbE architecture). it’s not a great general-purpose solution.

Intel 109

Intel Virtualization Data Center Network 109

Scott Lowe

MARCH 2, 2017

Tony Sangha took PowerNSX (a set of PowerShell cmdlets for interacting with NSX) and created a tool to help document the NSX Distributed Firewall configuration. I just noticed this article about using Nova flavor extra-specs to pass QoS data down to the virtualization layer. Virtualization. What’s that? Check it out on GitHub.

Linux 60

Linux Devops Open Source Virtualization 60

CIO Business Intelligence

APRIL 28, 2022

Under this assumption, firewalls and secure web gateways took precedence, while endpoint security faded in the background. Today, the endpoint repertoire includes a whole host of devices ranging from servers, virtual machines, laptops, smartphones, and tablets. Unifying endpoint security architecture.

Security 52

Security Malware Network Tools 52

Scott Lowe

APRIL 29, 2015

For Carrier Ethernet, Cisco ME3600—a very expensive switch—will allow you to implement such an architecture. Products that support IPv6 and IPv4 host route-based forwarding include Hyper-V Network Virtualization, Juniper Contrail, and Cisco DFA. VMware NSX has a stateful IPv6 firewall that provides RA guard and ND inspection services.

IPv6 60

IPv6 Firewall Network Mobile 60

SecureWorld News

JUNE 12, 2023

The course will revolve around real-world system architectures, the threats and exploits that could result in a data breach , and the defense mechanisms that could be employed to protect a network. Focusing on TCP/IP protocol suites, this certification centers around the methods used when creating and configuring firewall solutions.

Course 60

Course IBM Security Industry 60

Scott Lowe

FEBRUARY 2, 2017

Michael Kashin has a great article on how Open Virtual Network (OVN, part of the Open vSwitch project) implements virtual networks in OpenStack. Vivek Gite over at nixCraft explains how to use ufw (Uncomplicated Firewall) on Ubuntu to limit SSH connections. Virtualization. Good advice. Not sure what a bastion host is?

Linux 60

Linux Network Virtualization IPv6 60

Fountainhead

MAY 5, 2009

Insights into Data Center Infrastructure, Virtualization, and Cloud Computing. With the explosive growth of virtualization, this segment of technology is hotter than ever. In the way virtualization abstracts & configures the software world (O/S, applications, etc.), skip to main | skip to sidebar. Fountainhead.

Data Center 100

Data Center Virtualization Disaster Recovery Storage 100

Dataconomy

SEPTEMBER 12, 2023

Server virtualization can do the trick for you if you also struggle to scale your applications to meet growing demands without breaking the bank. Server virtualization is a game-changing technology that has revolutionized the way organizations deploy and manage their IT infrastructure.

Virtualization 78

Virtualization Storage Hardware Disaster Recovery 78

Scott Lowe

MAY 12, 2016

I recently spoke at Interop 2016 in Las Vegas, and while I was there I scribbled down some notes pertaining to how decomposing applications into microservices-based architectures was similar in some respects to decomposing networks into an overlay network and an underlay (physical) network. Virtualization. Networking. Servers/Hardware.

Vmware 60

Vmware Windows Network Agile 60

CTOvision

FEBRUARY 4, 2015

Implementing an Enterprise Data Hub — Technical perspectives for implementing enterprise data hub architectures, converged analytics for workflow optimization, and the essential role of open standards and frameworks to ensure continuous innovation. Steve joined Intel as part of the acquisition of Sarvega, Inc. where he was their CSO.

Fractional CTO 150

Fractional CTO CTO CTO Hire Big Data 150

SecureWorld News

MARCH 10, 2022

It's probably best to think of it as a second Great Firewall—which severely limits what content goes in and out of Russia—rather than a "Runet" as some have called it. Of course, people in Russia who can convince the Internet they aren't in Russia can still access these services through use of a VPN—a virtual private network.

Internet 74

Internet Telecommunications Media Government 74

CTOvision

JANUARY 18, 2015

Implementing an Enterprise Data Hub — Technical perspectives for implementing enterprise data hub architectures, converged analytics for workflow optimization, and the essential role of open standards and frameworks to ensure continuous innovation. Steve joined Intel as part of the acquisition of Sarvega, Inc. where he was their CSO.

Program Management 150

Program Management Fractional CTO CTO Programming 150