Kentik

MARCH 13, 2023

So what does this mean for today’s enterprise network engineer? I haven’t even mentioned CASBs, NaaS, containerized network services, and NFV, so you can imagine how the concerns of today’s network engineer are so vastly different from an engineer from yesteryear trying to figure out NHRP and BFD settings.

WAN 98

WAN Wide Area Network Topology Internet 98

Kentik

APRIL 4, 2023

More than anything, reliability becomes the principal challenge for network engineers working in and with the cloud. Even the most detailed reliability engineering can be easily undermined in an insecure network. While there is much to be said about cloud costs and performance , I want to focus this article primarily on reliability.

Cloud 104

Cloud Network Networking Bandwidth 104

Network Engineering

JANUARY 4, 2025

[I'm unsure whether this should be posted on Network Engineering, Server Faults or Android Enthusiasts] We have a hotspot service that connects into MikroTik routers, using the built-in hotspot facility. From a networking point of view, DNS is functional and there are no firewall entries that can restrict the traffic.

Firewall 52

Firewall DNS Gateway Routers 52

DoorDash Engineering

JANUARY 16, 2024

The cost increase prompted our engineering team to investigate alternative ways to provide the same level of service more efficiently. Internal Envoy routers allow communication between the global cell and replicated cells. Clients leverage DNS names to dynamically discover all pod IP addresses of desired services.

Cloud 84

Cloud IP Address DNS Routers 84

Network Engineering

AUGUST 19, 2020

The problem is that when ESXi is down it takes down all the network with it, so I have to boot up another router to log in to it. default-router 10.0.0.1 dns-server 10.0.0.2 default-router 10.0.10.1 dns-server 10.0.0.2 default-router 10.0.20.1 dns-server 10.0.0.2 default-router 10.0.30.1

IP Address 52

IP Address DNS Routers Server 52

Network Engineering

OCTOBER 7, 2015

We have a Cisco 3825 router with an IPSec Remote Access VPN configured to authenticate against a radius server. We changed the radius-server host line in our config accordingly and the router is able to communicate with the new radius server. We're retiring the old server and moving to a new one (Windows Server 2012).

VPN 52

VPN Port Routers Server 52

Kentik

APRIL 24, 2023

What do network engineers working in the trenches, slinging packets, untangling coils of fiber, and spending too much time in the hot aisle really want from all their efforts? Some of these devices an enterprise network engineer owns and manages, and a lot of it they don’t. The answer is simple. So how do we get there?

Network 52

Network Networking DNS Data Centers 52

Kentik

JULY 8, 2019

It is the language spoken by routers to determine how packets can be sent from one router to another to reach their final destination. One way to think about it is that RPKI is to BGP what DNSSEC is to DNS. This method pairs routers with a server, which is aptly called a “validator”.

Routers 58

Routers Protocol Internet Advertising 58

Kentik

FEBRUARY 13, 2017

What does a top-notch engineering team do for fun? At a recent on-site in our San Francisco headquarters, Kentik engineers both local and remote came together to confer on work in progress, discuss technical topics, and plan for the year ahead. This project took a feed of DNS data and performed a streaming analysis of flow data.

Routers 40

Routers DNS Protocol Engineering 40

Kentik

MARCH 13, 2019

For example, during an attack, service provider network engineers need to be skilled at finding attacks, choosing an appropriate mitigation strategy, and have proper access to the infrastructure to apply it. The victim can update DNS to point at a different IP address in an attempt to get their application back up. Action Type.

IP Address 49

IP Address Port Routers DNS 49

Rule 11

JUNE 21, 2024

Dozens of policing agencies are currently using cell-site simulators (CSS) by Jacobs Technology and its Engineering Integration Group (EIG), according to newly-available documents on how that company provides CSS capabilities to local law enforcement. Which is, well, ironic.

Energy 40

Energy Routers Topology DNS 40

Kentik

NOVEMBER 1, 2016

In the wake of the recent takedown of DNS provider Dyn, it’s common knowledge that Distributed Denial of Service (DDoS) attacks pose a serious and growing threat to the Internet and its component networks. The “black hole” part of RTBH refers to the fact that edge routers are typically provisioned with a static route (commonly 192.0.2.1)

Routers 40

Routers Network Networking DNS 40

Network Engineering

MAY 7, 2023

So my question, Assuming there is no other device (router/server) that can be used as DDNS client. What I want, is obviously the value would be the Public IP of SNAT from the broadband modem not the private ip of palo alto interface. DDNS Configuration: DDNS Info: NoIP record: Our environment: PANOS 10.2.4 If it is, how to do it?

Internet 52

Internet Routers Server DNS 52

CATO Networks

JUNE 4, 2017

Part of that has to do with delivering a managed services, which requires more engineering and operations than unmanaged Internet service, but thats not the full story. Redundant Provider Edge (PE) MPLS-enabled routers, switches, and other appliances were needed in each point-of-presence (PoP).

MPLS 52

MPLS Internet Bandwidth WAN 52

Kentik

DECEMBER 18, 2019

These include SNMP, DNS, RADIUS and streaming telemetry. Last month at DENOG11 in Germany, Kentik Site Reliability Engineer Costas Drogos talked about the SRE team’s journey during the last four years of growing Kentik’s infrastructure to support thousands of BGP sessions with customer devices on Kentik’s multi-tenant SaaS (cloud) platform.

Server 13

Server Topology TCP Network 13

CATO Networks

APRIL 19, 2017

Easy and Rapid Configuration For years, WAN engineering has meant learning CLIs and scripts, mastering protocols like BGP, OSPF, PBR, and more. Some companies lack the internal engineering expertise, others have the expertise, but far too many elements in their networks.

WAN 40

WAN MPLS Wide Area Network Firewall 40

CATO Networks

MARCH 23, 2017

The Mirai botnet that launched the DDOS attack DYNs DNS, for example, used home routers, cameras and other IOT devices. Its not just that our users increasingly work from the home. Its also that homes house new, more powerful devices that are being used to launch attacks against us.

Cloud 52

Cloud Network Networking Wide Area Network 52

Kentik

JUNE 5, 2023

In this incident, a software bug caused a router to announce a large part of the IP address ranges present in the global routing table as if they were originated by AS7007. Two competing methodologies, RPSL and RPKI, are used to inform the defensive configuration of routers.

IP Address 145

IP Address DNS Internet Routers 145

Kentik

JULY 28, 2021

It isn’t so much that packet loss is a huge problem — TCP and QUIC were engineered in anticipation that lost packets would be inevitable. Bad hardware (the switch or router port). Overwhelmed router. Congestion in the form of high-connection utilization or an overworked router in the path is another common source of trouble.

Cloud 116

Cloud TCP Routers Protocol 116

High Scalability

NOVEMBER 25, 2019

This is a guest post by Kalpesh Patel , an Engineer, who for Egnyte from home. Keep it simple: New engineers join every month so the goal is to have them productive from week one - a simple architecture ensures easy induction. A fairly distributed engineering team at the start but now gravitating mostly in Mountain View, Poland, India.

Data Centers 21

Data Centers Server Engineering Cloud 21