Insights & Articles

Jeremy Duncan • September 29, 2014

IPv6 Whitebox Networking Presentation

We had a great time at the North American IPv6 Summit last week. I recommend everyone check out the virtual downloads and sessions, as there was so much great content this year. Most of this year's excitement is how IPv6 intersects with things like Software Defined Networking…

Read More →

Jeremy Duncan • September 23, 2014

Speaking on IPv6 Capabilities of Whitebox Networking

Here in Denver, Jeremy Duncan ( @nacnud ) will be speaking on the IPv6 capabilities of whitebox networking at the North American IPv6 Summit on Thursday, 25 September, 1:30 - 2:30 pm. More details on this presentation, as well as other great talks, are located on the conference…

Read More →

Jeremy Duncan • August 29, 2014

Tachyon Dynamics Sponsoring the North American IPv6 Summit

We are excited to announce Tachyon Dynamics is now a Bronze Sponsor for the North American IPv6 Summit. This summit has turned out to be the largest collection of IPv6 experts, vendors and enthusiasts in North America - we would argue the world. So much great and new content…

Read More →

Jeremy Duncan • July 28, 2014

DoD APLITS Requiring Client Certificates

In a previous post , I warned everyone that accessing the DoD's Approved Products List Integrated Tracking System (APLITS) will require a client certificate. Currently, the APLITS system accepts the use of a DoD Common Access Card, or CAC, to access. However, this limits access…

Read More →

Jeremy Duncan • April 1, 2014

OSPFv3 Authentication Trailers - IPv6 Capitulations

A few weeks ago, the IETF updated the newest in a long line of what I like to call "IPv6 capitulations." Going on a rant here - the IETF fought long and hard to have a robust, secure, and interoperable protocol with IPv6. This is one of the many examples where it is being…

Read More →

Jeremy Duncan • March 25, 2014

DoD UC APL Testing and Windows Security: DoD IAVerify

Completing the hurdle of DoD Unified Capabilities Testing (UC APL) in a decent amount of time is already a challenge. However, if you have Microsoft Windows workstations (Vista, 7, 8, etc) or Windows Servers (2008, 2008 R2, 2012, etc), then your validation, hardening and testing…

Read More →

Jeremy Duncan • March 10, 2014

DoD UC APL Site APLITS requiring 2-Factor Authentication

Actually, the site will require CAC-only ( DoD Common Access Card ) logins starting 28 March. After that time, no vendors, sponsors or testers can login to the site using a user name and password - ever. What Does This Mean for You?* If you are a DoD contractor, civilian or…

Read More →

Jeremy Duncan • February 15, 2014

Stopping Amplification DDoS Attacks - BCP38 Basics

The key to any secure network in stopping 100% of UDP-based DNS amplification DDoS attacks is simple: follow BCP38 . You ask, "but it's 2014, and BCP38 came out in 2000, why bring it up?" Well, simply not enough networks are following the Best Common Practice. Why I Bring Up…

Read More →

Jeremy Duncan • February 9, 2014

DNS Part 2: Learning Dig

A few months back, I wrote an article called DNS for Network Engineers . Basically, it is a back-to-basics look on what each of the DNS record types were, and a few examples of what they looked like using Dig. Well, the feedback I received was a desire for more Dig. So I give…

Read More →

Jeremy Duncan • February 7, 2014

Cisco OSPFv3 AF Authentication Fixed!

OSPFv3 AF Authentication is finally fixed! Unless you are a regular follower of this blog, you may not have heard that Cisco's OSPFv3 with Address Families (AF) Authentication support was broken. By broken I mean it took down OSPFv3 adjacencies. Not good. Read here for that…

Read More →