Kentik

SEPTEMBER 20, 2021

Not as difficult as time travel, but it’s difficult enough so that for 30+ years IT professionals have tried to skirt the issue by adding more bandwidth between locations or by rolling out faster routers and switches. Each switch and router we pass through introduces a bit of latency that adds up quickly. How latency is measured.

TCP 116

TCP Routers Bandwidth IP Address 116

Kentik

MARCH 13, 2023

What changed Over the last 15 years, though, the quality of the public internet has improved significantly. Yes, there’s something to say about how applications are written, but on the public internet side, we’ve seen a decrease in latency, cost, and a massive increase in available bandwidth. Yes, of course, I’m oversimplifying here.

WAN 98

WAN Wide Area Network Topology Internet 98

Kentik

OCTOBER 12, 2021

Some NPM vendors started pairing DNS lookup records with flow data in order to separate business applications from non-business applications hosted on the same IP address. The problem is that many companies have several DNS servers spread out in far-reaching locations, and not all DNS vendors allow access to the logs.

Encryption 84

Encryption DNS IP Address Protocol 84

Network Engineering

MAY 7, 2023

We would like to configure SDWAN for our branch site that only has broadband internet. Because the Public IP changes from time to time, We would like to use FQDN, and so we need to configure DDNS on the internet interface. So my question, Assuming there is no other device (router/server) that can be used as DDNS client.

Internet 52

Internet Routers Server DNS 52

The Network DNA

JULY 9, 2024

Replacing cEdge in Cisco SDWAN environment Replacing the cEdge router with another cEdge through an RMA process for Cisco SDWAN , we need to put the basic configuration on the new RMA router and should be reachable via vManage. It is important that you should know the new router serial number should be learned to vManage NMS.

Routers 52

Routers IP Address MPLS WAN 52

Kentik

MAY 8, 2023

Additional network resilience mechanisms Successfully routing a packet over the internet from its source to its destination is not trivial. IP address abstraction and failover capabilities with DNS Domain Name System (DNS) is a system for mapping domain names to IP addresses. Let’s highlight some of the primary protocols.

Network 52

Network Networking IP Address TCP 52

Kentik

JULY 8, 2019

Border Gateway Protocol (more commonly known as BGP ) is the routing protocol that makes the internet work. It is the language spoken by routers to determine how packets can be sent from one router to another to reach their final destination. One way to think about it is that RPKI is to BGP what DNSSEC is to DNS.

Routers 58

Routers Protocol Internet Advertising 58

CATO Networks

JUNE 23, 2019

The infamous malware that crippled global DNS provider Dyn, French Web host OVH and security journalist Brain Krebs Web site with botnets of infected home routers, baby monitors and other IoT devices is now infecting enterprise network equipment, according to a recent Palo Alto Networks blog and Network Computing article.

IoT 52

IoT WAN Routers IP Address 52

Kentik

MARCH 13, 2019

Distributed denial-of-service (DDoS) attacks have been a continuous threat since the advent of the commercial Internet. A common DDoS mitigation technique is Remotely-Triggered Black Hole (RTBH), which requires extensive pre-configuration of discard routes and/or uRPF on all edge routers. Introducing Kentik’s New BGP Flowspec Support.

IP Address 49

IP Address Port Routers DNS 49

CATO Networks

JUNE 4, 2017

For SD-WAN s, the Internet has been their weakness. These backbones use cloud intelligence and Internet economics to seamlessly combine networking with advanced security at a fraction of the cost of MPLS. Redundant Provider Edge (PE) MPLS-enabled routers, switches, and other appliances were needed in each point-of-presence (PoP).

MPLS 52

MPLS Internet Bandwidth WAN 52

The Network DNA

NOVEMBER 26, 2024

10.10.10.100 inside NDNA-ASA(config)# dhcpd dns 112.110.112.5 Configure an ACL to allow access to the DMZ server from the Internet NDNA-ASA(config)# access-list OUTSIDE-DMZ permit ip any host 10.10.2.3 Cisco ASA in a Network Configuring DHCP, AAA, and SSH NDNA-ASA(config)# dhcpd address 10.10.10.3-10.10.10.100 255.255.255.0

Firewall 52

Firewall IP Address VPN Port 52

Kentik

FEBRUARY 13, 2017

This project took a feed of DNS data and performed a streaming analysis of flow data. Using source AS or DNS matching it was possible to detect the percent of traffic in a given network that was from CDNs as well as the cumulative (overlapping) percentage. It takes a lot of $24.99/month month subscribers to make that pay. Come join us!

Routers 40

Routers DNS Protocol Engineering 40

Kentik

APRIL 24, 2023

Rather than collecting only flow data from routers, or only eBPF information from containers, the fact that application traffic traverses so many devices means we need much more data to get an accurate view of what’s happening. Some of these devices an enterprise network engineer owns and manages, and a lot of it they don’t.

Network 52

Network Networking DNS Data Centers 52

CATO Networks

NOVEMBER 18, 2018

When backhoes cut a wiring duct, squirrels chewed through wires, or router updates blew up the network, the MPLS provider was charged with fixing the problem. With SD-WAN based on Internet connectivity, its up to you and your team to monitor all of the last-mile links around the globe, identify problems, and engage with local ISPs.

WAN 52

WAN MPLS Routers DNS 52

Kentik

JANUARY 19, 2018

project to build cloud computing solutions (Pittsburgh Post-Gazette) Carnegie Mellon University (CMU) has a big investment in a new program “to build a smarter solution for edge devices — like a router or larger access point to a network — to operate on the cloud,” according to the Pittsburgh Post-Gazette. Carnegie Mellon is home to a $27.5M

Network 40

Network Networking Routers Artificial Intelligence 40

Kentik

NOVEMBER 1, 2016

In the wake of the recent takedown of DNS provider Dyn, it’s common knowledge that Distributed Denial of Service (DDoS) attacks pose a serious and growing threat to the Internet and its component networks. The “black hole” part of RTBH refers to the fact that edge routers are typically provisioned with a static route (commonly 192.0.2.1)

Routers 40

Routers Network Networking DNS 40

CATO Networks

MARCH 23, 2017

Smith noted in his keynote that the lack of international norms guiding nation state behavior on the Internet has led us into dangerous territory where nation states take action against civilians. The Mirai botnet that launched the DDOS attack DYNs DNS, for example, used home routers, cameras and other IOT devices.

Cloud 52

Cloud Network Networking Wide Area Network 52

Kentik

DECEMBER 18, 2019

These include SNMP, DNS, RADIUS and streaming telemetry. Given that we only have one IP active in on each node, the next step was to have this landing node act as a router for inbound BGP connections with policy routing as the high-level design. BGP routing data is another important data source.

Server 13

Server Topology TCP Network 13

Kentik

FEBRUARY 22, 2018

[vc_row][vc_column][vc_column_text] The Internet of Things (IoT) represents a massive threat to network infrastructure as already seen in widely publicized IoT-based DDoS attacks. Another Mirai botnet variant was used in extortion attacks against a number of banks and Internet service providers in the United Kingdom and Germany.

IoT 40

IoT Advertising Internet Network 40

Kentik

MARCH 6, 2017

One key point, as revealed in Akamai’s Q3 2016 State of the Internet Security Report, is that the vast majority of DDoS attacks — over 98% — are focused on disrupting access to network or server infrastructure rather than on targeting application limitations or vulnerabilities. Static policies that quickly fall out of sync with reality.

IoT 40

IoT DNS IP Address Server 40

CATO Networks

APRIL 19, 2017

Security meant protecting the companys central Internet access point and deploying endpoint security on clients. With MPLS that would normally mean connecting a location with an active MPLS line and a passive Internet connection thats only used for an outage.

WAN 40

WAN MPLS Wide Area Network Firewall 40

Kentik

MARCH 27, 2017

These datacenters each have multiple BGP Internet peerings to facilitate resilience and performance. Service components and dependencies are spread across datacenters, the cloud, and the Internet, and applications involve increased east-west traffic flows, which makes end-to-end performance heavily reliant on predictable network behavior.

Cloud 40

Cloud Internet Bandwidth Network 40

Kentik

JUNE 5, 2023

In the summer of 2022, I joined a team of BGP experts organized by the Broadband Internet Technical Advisory Group (BITAG) to draft a comprehensive report covering the security of the internet’s routing infrastructure. Below is an edited version of my take on the internet’s most notable BGP incidents.

IP Address 145

IP Address DNS Internet Routers 145