Kentik

SEPTEMBER 10, 2021

If I don’t like the results from the above, I might launch a ping or a TCP traceroute to see if I get any packet loss or high-latency responses. If the response comes back like the above, I’ll probably reboot my computer, my internet router or maybe both and hope that this fixes the problem. We know this. How did it change?

Application 113

Application Cloud Routers IP Address 113

Kentik

JANUARY 10, 2022

If you’re a person who works from home, you almost certainly have to deal with occasional internet connection issues. Or, perhaps one or more of the 10-20 routers in the path needed to reach the destination gets busy for a hundred milliseconds or so. The use of ICMP vs. TCP or UDP to carry the ping can also be a factor.

IP Address 98

IP Address DNS TCP Application 98

Kentik

JANUARY 13, 2021

Send these pings using the Internet Control Message Protocol (ICMP) or TCP to one or any of the devices you believe to be involved. Ping is a utility that’s available on practically every system, be it a desktop, server, router, or switch. Get the Path with Traceroute. Could it be a misconfiguration issue?

Network 114

Network Networking TCP Protocol 114

Kentik

MAY 8, 2023

Additional network resilience mechanisms Successfully routing a packet over the internet from its source to its destination is not trivial. Message integrity and guaranteed delivery with TCP/IP Because IP does not require acknowledgments from endpoints, it does not ensure delivery; therefore, it is considered an unreliable protocol.

Network 52

Network Networking IP Address TCP 52

Kentik

FEBRUARY 8, 2016

Designed before the dawn of the commercial Internet, the Border Gateway Protocol (BGP) is a policy-based routing protocol that has long been an established part of the Internet infrastructure. Why is an understanding of BGP helpful in understanding Internet connectivity and interconnectivity? One or multiple border routers.

Advertising 49

Advertising Routers Internet Protocol 49

The Network DNA

JULY 9, 2024

Replacing cEdge in Cisco SDWAN environment Replacing the cEdge router with another cEdge through an RMA process for Cisco SDWAN , we need to put the basic configuration on the new RMA router and should be reachable via vManage. It is important that you should know the new router serial number should be learned to vManage NMS.

Routers 52

Routers IP Address MPLS WAN 52

CATO Networks

MAY 21, 2018

Todays business lives and depends on the Internet. More and more companies rely on the Internet for voice and video. The public Internet, though, is a challenging environment to deliver business-quality real-time services. The public Internet reorganizes to solve issues without regard for the impact on applications.

Internet 40

Internet MPLS WAN Media 40

CATO Networks

OCTOBER 30, 2019

We all get the concept: to transmit data over a TCP/IP network like the Internet requires the data be broken down into small packets (usually less than 1500 bytes) containing the relevant application data (payload) and headers. Common causes of packet loss include: Routers with heavy CPU load. Ping statistics for 203.0.113.2:

WAN 52

WAN Routers TCP Protocol 52

CATO Networks

JUNE 1, 2020

For example, the trombone effect (the inefficient backhauling of cloud bound traffic through a specific network endpoint) often meant MPLS connectivity to cloud assets was worse than standard Internet connections. As a result, businesses turned to SD-WAN and Internet-based VPN solutions as an alternative. The solution?

Network 52

Network Networking TCP MPLS 52

Kentik

MAY 21, 2019

The Mirai botnet was first discovered back in 2016, but has continued to persist and abuse common vulnerabilities and exposures (CVEs) on IoT devices, including home routers and many other network-connected devices. These addresses were apparently port scanning IP addresses that belonged to the company sending the letter.

Port 81

Port IP Address Internet Network 81

Kentik

OCTOBER 12, 2021

The Internet Engineering Task Force (IETF) is also working toward changes that will impact pervasive monitoring. The IETF community’s technical assessment is that pervasive monitoring (PM) is an attack on the privacy of internet users and organizations. HTTP is the new TCP. The IETF declares “pervasive monitoring is an attack”.

Encryption 84

Encryption DNS IP Address Protocol 84

Kentik

JUNE 7, 2023

For example, an audit may be warranted if unexpected TCP traffic is flowing into a MariaDB instance but isn’t entering on port 3306. In addition, the map visualizes Dedicated Interconnect attachments, VM interfaces, and VPN gateways with their associated on-prem and cloud routers.

Cloud 97

Cloud Gateway Port IP Address 97

Kentik

MARCH 13, 2019

Distributed denial-of-service (DDoS) attacks have been a continuous threat since the advent of the commercial Internet. A common DDoS mitigation technique is Remotely-Triggered Black Hole (RTBH), which requires extensive pre-configuration of discard routes and/or uRPF on all edge routers. Introducing Kentik’s New BGP Flowspec Support.

IP Address 49

IP Address Port Routers DNS 49

Kentik

DECEMBER 18, 2019

Given that we only have one IP active in on each node, the next step was to have this landing node act as a router for inbound BGP connections with policy routing as the high-level design. On top of that, since our BGP nodes were identical, the distribution of sessions should be balanced.

Server 13

Server Topology TCP Network 13

Kentik

SEPTEMBER 20, 2016

In this post we’ll talk about using Kentik’s NPM solution to watch the TCP performance of traffic as reported to Kentik Detect from a Kentik nProbe host agent. TCP is the key. Specifically TCP, which is used in over 90% of network transactions. As an example, we’ll use traffic from Kentik’s own servers.

Network 40

Network Networking TCP Server 40

Kentik

NOVEMBER 15, 2017

Last week’s big story in the networking space was the route leak at major backbone provider Level 3 Communications, which triggered disruptions to Internet service nationwide. that we don’t typically get from flow data that comes from routers and switches. You might deliver an Internet-facing service from AWS, Azure, or GCE.

Internet 40

Internet Application Network Networking 40

Kentik

APRIL 24, 2023

Rather than collecting only flow data from routers, or only eBPF information from containers, the fact that application traffic traverses so many devices means we need much more data to get an accurate view of what’s happening. Some of these devices an enterprise network engineer owns and manages, and a lot of it they don’t.

Network 52

Network Networking DNS Data Centers 52

CATO Networks

OCTOBER 5, 2020

All Cisco products running IOS were impacted, including IOS XR Software, NX-OS Software, and RV160 VPN Router. Overall, there were 28 high impact and 13 medium impact vulnerabilities in these advisories, with a total 46 new CVEs. The sheer quantity of vulnerabilities should raise alarms but so should the severity.

Firewall 52

Firewall Protocol SASE Network 52

Kentik

MARCH 27, 2017

These datacenters each have multiple BGP Internet peerings to facilitate resilience and performance. Service components and dependencies are spread across datacenters, the cloud, and the Internet, and applications involve increased east-west traffic flows, which makes end-to-end performance heavily reliant on predictable network behavior.

Cloud 40

Cloud Internet Bandwidth Network 40

Kentik

DECEMBER 19, 2016

The link may be almost full, but there may be no TCP retransmits, and the latency may be good. If you run hybrid Cloud, and you’re running at least some of your own infrastructure, then again switches, routers, BGP tables, but to get that sort of augmented information, it can come from the host agent. Absolutely, it is.

Network 40

Network Networking Application Server 40

Kentik

DECEMBER 18, 2017

So it’s interesting to see that Juniper Networks, at 49.6%, is the leading maker of routers and switches sending flow to Kentik Detect. Here’s one that’s probably not too surprising: there appears to be a tendency towards larger packets on the Internet, with most of the traffic being made up of packets greater than 1000 bytes.

Protocol 40

Protocol UDP port Port TCP 40