Scott Lowe

JUNE 24, 2022

BPFDoor, as it is known, is a passive backdoor that allows threat actors to remotely connect to a Linux shell. Tetragon is Isovalent’s newly open-sourced security framework. I think the headline (“defeats ’the last line of security’”) is a bit sensationalist, but I guess that’s the world we live in.

Vmware 74

Vmware Linux Storage Virtualization 74

Scott Lowe

JANUARY 15, 2021

The content this time around seems to be a bit more security-focused, but I’ve still managed to include a few links in other areas. Rory McCune points out that Kubernetes is a router , and users should not rely on the fact that pods are not accessible from the outside by default as any form of a security barrier. Networking.

Linux 60

Linux Firewall Open Source Vmware 60

Scott Lowe

SEPTEMBER 8, 2023

Michael Kashin has a good post on source IP address selection in Linux. Security Michael Tsai weighs in on the Microsoft signing key that was stolen, sharing several links with commentary on this matter. It was, therefore, very satisfying to see not one but two Velero-related posts emerge recently from the VMware blogging community.

Vmware 74

Vmware Network Hardware Cloud 74

Scott Lowe

OCTOBER 8, 2021

There’s some networking stuff, a few security links, and even a hardware-related article. Jimmy Mankowitz talks in some detail about using NSX-T in vSphere with Tanzu to secure applications. Operating Systems/Applications. Eric Sloof has a link to a white paper from VMware on host power management in vSphere 7.0.

IPv6 60

IPv6 Storage Hardware Vmware 60

Scott Lowe

JUNE 18, 2021

Via Ivan Pepelnjak, I was pointed to Jon Langemak’s in-depth discussion of working with Linux VRFs. Patrick Kremer walks through using Postman to implement BGP route filtering with VMware Cloud on AWS. John Gruber’s post on “Secure Intent” on Apple devices was, for me at least, an informative read.

Vmware 60

Vmware Hardware Load Balancer Apple 60

Scott Lowe

FEBRUARY 16, 2017

The rise of the disaggregated network operating system (NOS) marches on: this time, it’s Big Switch Networks announcing expanded hardware support in Open Network Linux (ONL) , upon which its own NOS is based. I use OTR with Adium on OS X, and OTR with Pidgin on my Fedora Linux laptop.). Operating Systems/Applications.

Vmware 60

Vmware Linux Storage Load Balancer 60

Scott Lowe

NOVEMBER 25, 2020

Operating Systems/Applications. You may have heard of eBPF, the Linux technology that is reshaping Linux applications (and in some ways reshaping Linux itself). You may have heard of eBPF, the Linux technology that is reshaping Linux applications (and in some ways reshaping Linux itself).

Linux 60

Linux Vmware Open Source Examples 60

Scott Lowe

APRIL 15, 2022

Although Linux is often considered to be superior to Windows and macOS with regard to security, it is not without its own security flaws. I, personally, would posit that Linux can be more secure than other platforms, but it requires proper configuration and can still be undone by a loose nut behind the keyboard.

Linux 74

Linux Load Balancer IPv6 Licensing 74

Scott Lowe

JANUARY 27, 2023

I’ve got another collection of links to articles on networking, security, cloud, programming, and career development—hopefully you find something useful! Security Adrian Mouat reviews some of the security-focused changes in Go 1.20. Welcome to Technology Short Take #164! to version 8.0.

Programming 90

Programming Open Source Cloud Devops 90

Scott Lowe

OCTOBER 28, 2022

Alejandro Villanueva shares 26 AWS security best practices to adopt in production. William Lam writes about the beta for VMware Cloud Consumption Interface (CCI). Operating Systems/Applications. Nicholas Schmidt takes on using cloud-init with vSphere , using openSUSE as the Linux platform. Using Auth0? Programming.

Open Source 79

Open Source Apple Vmware Cloud 79

Scott Lowe

AUGUST 27, 2021

I have a fairly diverse set of links for readers this time around, covering topics from microchips to improving your writing, with stops along the way in topics like Kubernetes, virtualization, Linux, and the popular JSON-parsing tool jq along the way. Michael Kashin shares the journey of containerizing NVIDIA Cumulus Linux.

Linux 60

Linux Load Balancer Malware Virtualization 60

Scott Lowe

MARCH 17, 2016

At DevOps Networking Forum 2016, I had the opportunity to share a presentation on some Linux networking options. I recently came across a couple useful troubleshooting guides, one for Open vSwitch (OVS) and OpenStack Neutron and one for VMware NSX. Operating Systems/Applications. Have fun reading! Networking.

Vmware 60

Vmware Linux Network Open Source 60

Scott Lowe

JANUARY 28, 2016

The rise of Linux in importance in the networking industry continues, with Arista announcing enhancements to Arista EOS to support—among other things—Docker containers. As a partial counterpoint to the increased use/visibility of Linux in the networking industry, check out Ivan’s take on Dell’s OS10 announcement. Networking.

Vmware 60

Vmware Linux Open Source Devops 60

Scott Lowe

JANUARY 19, 2018

This is pretty cool: a WYSIWYG topology designer for VMware NSX. Barry Peddycord shares an update on Ansible support for the Cumulus Linux NCLU. The VMware Cloud-Native Apps group has a breakdown of some of the new features/functionality found in the 1.9 Operating Systems/Applications. Servers/Hardware. or higher).

Vmware 60

Vmware Open Source Linux Cloud 60

Scott Lowe

FEBRUARY 9, 2018

Sam McGeown has a nice diagram of the communications channels between the various VMware NSX components. I’m not really sure if this belongs in networking or not (how does one classify OS kernel-level work on networking and security?), Security is a many-faceted area, and one facet is appropriately protecting credentials.

Vmware 60

Vmware Linux Network Storage 60

Scott Lowe

JUNE 2, 2016

Anthony Burke has written a script that uses VMware NSX to protect VMware Log Insight instances. The first article provides a blueprint for migrating applications to VMware NSX ; the second article supplies some tips for creating filtering policies in VMware NSX. Operating Systems/Applications. Networking.

Vmware 60

Vmware Virtualization Linux Windows 60

Scott Lowe

NOVEMBER 17, 2016

Cumulus Networks recently introduced the Cumulus Linux Network Command Line Utility (NCLU) , which provides a more unified front-end to configuring switches running Cumulus Linux. Marcos Hernandez has a pair of great articles on integrating next-generation security services into OpenStack by leveraging NSX (see part 1 and part 2 ).

Linux 60

Linux Vmware Storage Network 60

Scott Lowe

JULY 21, 2016

First up, there’s a great article on using IPVLAN with Docker and Cumulus Linux (with a tie back to sFlow, naturally!). Here’s a walkthrough by Cody Bunch on setting up BGP on Linux with Cumulus Quagga. These posts are a bit slanted toware VMware vSphere environments, but very detailed, very thorough, and very useful.

Vmware 60

Vmware Linux Storage Hardware 60

Scott Lowe

FEBRUARY 11, 2021

I’ve got a wide range of topics for you this time around—eBPF, Falco, Snort, Kyverno, etcd, VMware Code Stream, and more. I recently mentioned on Twitter that I was considering building out a new Linux PC to replace my aging Mac Pro (it’s a 2012 model, so going on 9 years old). Operating Systems/Applications.

Vmware 60

Vmware Storage Study Network 60

Scott Lowe

NOVEMBER 10, 2017

VMware recently released an updated to PowerCLI (version 6.5.3), and with it comes a set of cmdlets that provide low-level access to the NSX-T REST API. Major Hayden talks about ansible-hardening , a new role that grew out of an OpenStack-related security role. Here’s a quick note about AWS security groups and traffic flows.

Vmware 60

Vmware Storage Engineering Network 60

Scott Lowe

DECEMBER 22, 2018

My colleague Josh Rosso has a post up on securing communication to the Kubernetes controller manager and Kubernetes scheduler. Operating Systems/Applications. Kyle Ruddy helps folks get started with the Desired State Configuration Resources (DSCR) for VMware , a new way of using PowerShell DSC with VMware vSphere environments.

Vmware 60

Vmware Linux Hardware Case Study 60

Scott Lowe

AUGUST 11, 2016

In this post you’ll find a collection of links to articles discussing the major data center technologies—networking, hardware, security, cloud computing, applications, virtualization…you name it! (If Thinking of using a hardware VTEP (VXLAN Tunnel Endpoint) with VMware NSX? and Trend Micro’s Deep Security in this article.

Vmware 60

Vmware Hardware Storage Linux 60

Scott Lowe

NOVEMBER 7, 2014

It was good to read this post on Cumulus Linux first impressions by Jeremy Stretch. I’m a fan of Cumulus, but I’m admittedly a Linux guy (see here ) so you might say I’m a bit biased. Jeremy is a “hard-core” networking professional, and so hearing his feedback on Cumulus Linux was, in my opinion, useful.

Vmware 69

Vmware Linux Storage Virtualization 69

Scott Lowe

APRIL 27, 2018

VMware has released a PowerCLI preview/fling for NSX-T; Kyle Ruddy has a write-up here. Cilium, the open source project working to bring eBPF-powered networking and security to Kubernetes environments, has hit the 1.0 Sysdig has a Kubernetes security guide available that may be worth reviewing. Operating Systems/Applications.

Vmware 60

Vmware Storage Open Source Security 60

Scott Lowe

DECEMBER 29, 2016

Andrey Khomyakov shares some information on automating the setup of whitebox switches running Cumulus Linux in part 2 of this series on learning network automation. James Green shares some information on Docker Bench , a tool designed to help secure Docker environments. Operating Systems/Applications. Alpine Linux 3.5

Vmware 60

Vmware Linux Open Source Data Center 60

Scott Lowe

DECEMBER 8, 2016

Jake Bennett discusses strengthening your AWS security posture by protecting application credentials and rotating EC2 and IAM keys. Gert van Dijk has a great article on upgrading your SSH keys to take advantage of new key types and enhanced security. Blueprints that demonstrate VMware-Chef integration. Good times.

Vmware 60

Vmware Storage Intel Virtualization 60

Scott Lowe

NOVEMBER 30, 2018

Christian Kellner provides a brief reminder that not all USB-C ports are Thunderbolt ports, and updates everyone on the status of bolt (Linux utility for working with Thunderbolt ports and peripherals). Operating Systems/Applications. For those of us in the IT field, we are definitely living in interesting times.

Vmware 60

Vmware Authentication Virtualization Storage 60

Scott Lowe

OCTOBER 17, 2017

It’s a toolkit, part of the Moby Project, that is used for building secure, portable, and lean operating systems for containers. It uses the moby tooling to build system images. Linux containers on Windows (LCOW) preview support. Multi-arch build system. Fully immutable system images.

Linux 60

Linux Architecture Open Source Vmware 60

Scott Lowe

MAY 22, 2015

Welcome to Technology Short Take #51, another collection of posts and links about key data center technologies like networking, virtualization, cloud management, and applications/operating systems. Here’s one way , using Ravello Systems. Flavio Leitner has a nice article comparing OVS internal ports with Linux veth devices.

Vmware 60

Vmware Network Virtualization IPv6 60

Scott Lowe

AUGUST 8, 2014

It would be great to see Docker get support for connecting containers directly to Open vSwitch (OVS), which is generally considered the de facto standard for networking on Linux hosts. Jason Horn provides an example of how to script NSX security groups. Another series on VMware NSX has popped up, this time from Jon Langemak.

Vmware 60

Vmware Linux Virtualization Network 60

Scott Lowe

DECEMBER 6, 2013

Of course, I am a fan of network virtualization, since I work with/on VMware NSX.). Martijn Smit has launched a series of articles on VMware NSX. Want some additional information on layer 2 and layer 3 services in VMware NSX? Operating Systems/Applications. Here’s a good source. Any thoughts?

Vmware 60

Vmware Storage Linux Network 60

Scott Lowe

MAY 27, 2022

Researchers have uncovered a potential security flaw in Apple Silicon CPUs; more details in this 9to5Mac article. I’m not sure how I feel about security researchers calling this flaw “not that bad.” Via Teri Radichel , I saw this article from Google Project Zero about zero-click security vulnerabilities in Zoom.

Virtualization 79

Virtualization Storage Network Programming 79

Scott Lowe

JANUARY 28, 2016

The rise of Linux in importance in the networking industry continues, with Arista announcing enhancements to Arista EOS to support—among other things—Docker containers. As a partial counterpoint to the increased use/visibility of Linux in the networking industry, check out Ivan’s take on Dell’s OS10 announcement. Networking.

Vmware 60

Vmware Open Source Linux Devops 60

Scott Lowe

OCTOBER 9, 2016

That prompted Cody Bunch to write this article on setting up a topology with BGP on Linux using the topology converter , which I’m now mentioning in this Technology Short Take. PowerShell on Cumulus Linux on a network switch? Clifford Haas has a review of VMware NSX (this is from back in January). Operating Systems/Applications.

Vmware 60

Vmware Case Study Linux Network 60

Scott Lowe

JUNE 18, 2017

Colin Lynch shares some details on his journey with VMware NSX (so far). I wouldn’t take this information as gospel, but here’s a breakdown of some of the IPv6 support available in VMware NSX. Operating Systems/Applications. Servers/Hardware. This post has a list of 5 Docker utilities you may find helpful. Virtualization.

Windows 60

Windows Vmware Virtualization Linux 60

Scott Lowe

JUNE 18, 2017

Colin Lynch shares some details on his journey with VMware NSX (so far). I wouldn’t take this information as gospel, but here’s a breakdown of some of the IPv6 support available in VMware NSX. Operating Systems/Applications. Servers/Hardware. This post has a list of 5 Docker utilities you may find helpful. Virtualization.

Windows 60

Windows Vmware Virtualization Linux 60

Scott Lowe

OCTOBER 5, 2018

Sathyajith Bhat covers five open source tools for container security. Cory O’Daniel explains how to use role-based access control to assign Pod Security Policies (PSPs) to Kubernetes workloads. Cory O’Daniel explains how to use role-based access control to assign Pod Security Policies (PSPs) to Kubernetes workloads.

Hardware 60

Hardware Open Source Vmware Linux 60