Archive

The demands on modern IT organizations are increasing at a rate faster than ever before. Initiatives to “go digital” abound. There is a mounting pressure to be a service provider to internal clients, making it easier for employees and customers to consume a wider range of IT tools on demand and under budget. This burgeoning […]

I attended AWS re:Invent 2016 about three or four weeks ago. Being new to both AWS and to re:Invent I was an outsider again, observing with virgin eyes. This means I learned a lot. Hopefully it means I saw things a bit differently than those more fully entrenched in this new community. So while others have […]

While I find myself traveling far less than in years past (by design), I still get to poke my head out into the world of NOGs and Cons from time to time. One such opportunity is upon us this week; I’m packing up today for the 2016 edition of AWS re:Invent. Heralded as the “largest global […]

After a quick break to catch our breath (and read all those IPv6 Security Resources), it’s now time to look at our tenth and final IPv6 Security Myth. In many ways this myth is the most important myth to bust. Let’s take a look at why: Myth: Deploying IPv6 Makes My Network Less Secure Reality: […]

This article was written for The New IP, and appeared there under the title “IPv4 vs. IPv6 in the New IP” on 6 March, 2015. As you may have noticed, I tend to (re)post everything I write here on my personal blog. This time I’ve decided to publish this article here with it’s original title, […]

We are approaching the end of this 10 part series on the most common IPv6 security myths. Now it’s time to turn our eyes away from security risks to focus a bit more on security resources. Today’s myth is actually one of the most harmful to those who hold it. If you believe that there […]

Most of our IPv6 Security Myths are general notions, often passed on unwittingly between colleagues, friends, conference attendees, and others. Today’s myth is one that most often comes specifically from your vendors or suppliers. Whether it’s a hardware manufacturer, software developer, or Internet Service Provider (ISP), this myth is all about trust, but verify. Myth: […]

Today I’m re-reading an IETF RFC that was published just this month. RFC 7454 is titled “BGP Operations and Security” and that’s exactly what it’s about. The documents’ abstract does a great job of summarizing the content: This document describes measures to protect the BGP sessions itself such as Time to Live (TTL), the TCP […]

This week’s myth is interesting because if we weren’t talking security it wouldn’t be a myth. Say what? The phrase “96 more bits, no magic” is basically a way of saying that IPv6 is just like IPv4, with longer addresses. From a pure routing and switching perspective, this is quite accurate. OSPF, IS-IS, and BGP […]