We had a great time at the North American IPv6 Summit last week. I recommend everyone check out the virtual downloads and sessions, as there was so much great content this year. Most of this year’s excitement is how IPv6 intersects with things like Software Defined Networking (SDN), OpenStack, Whitebox networking, and Network Functions Virtualization […]
IPv6 Whitebox Networking Presentation Read More »
Here in Denver, Jeremy Duncan (@nacnud) will be speaking on the IPv6 capabilities of whitebox networking at the North American IPv6 Summit on Thursday, 25 September, 1:30 – 2:30 pm. More details on this presentation, as well as other great talks, are located on the conference website here: http://www.rmv6tf.org/na-ipv6-summit/2014-na-ipv6-summit/2014-speakers-topics Presentation Synopsis Jeremy will outline all
Speaking on IPv6 Capabilities of Whitebox Networking Read More »
We are excited to announce Tachyon Dynamics is now a Bronze Sponsor for the North American IPv6 Summit. This summit has turned out to be the largest collection of IPv6 experts, vendors and enthusiasts in North America – we would argue the world. So much great and new content will be talked about this year
Tachyon Dynamics Sponsoring the North American IPv6 Summit Read More »
In a previous post, I warned everyone that accessing the DoD’s Approved Products List Integrated Tracking System (APLITS) will require a client certificate. Currently, the APLITS system accepts the use of a DoD Common Access Card, or CAC, to access. However, this limits access to the APLITS site to only DoD civilian, military and contractor
DoD APLITS Requiring Client Certificates Read More »
A few weeks ago, the IETF updated the newest in a long line of what I like to call “IPv6 capitulations.” Going on a rant here – the IETF fought long and hard to have a robust, secure, and interoperable protocol with IPv6. This is one of the many examples where it is being systematically
OSPFv3 Authentication Trailers – IPv6 Capitulations Read More »
Completing the hurdle of DoD Unified Capabilities Testing (UC APL) in a decent amount of time is already a challenge. However, if you have Microsoft Windows workstations (Vista, 7, 8, etc) or Windows Servers (2008, 2008 R2, 2012, etc), then your validation, hardening and testing gets so much more complicated. For the DoD, Windows security
DoD UC APL Testing and Windows Security: DoD IAVerify Read More »
Actually, the site will require CAC-only (DoD Common Access Card) logins starting 28 March. After that time, no vendors, sponsors or testers can login to the site using a user name and password – ever. What Does This Mean for You?* If you are a DoD contractor, civilian or uniformed military you will not be
DoD UC APL Site APLITS requiring 2-Factor Authentication Read More »
The key to any secure network in stopping 100% of UDP-based DNS amplification DDoS attacks is simple: follow BCP38. You ask, “but it’s 2014, and BCP38 came out in 2000, why bring it up?” Well, simply not enough networks are following the Best Common Practice. Why I Bring Up BCP38 This last week saw the
Stopping Amplification DDoS Attacks – BCP38 Basics Read More »
A few months back, I wrote an article called DNS for Network Engineers. Basically, it is a back-to-basics look on what each of the DNS record types were, and a few examples of what they looked like using Dig. Well, the feedback I received was a desire for more Dig. So I give you: Learning
DNS Part 2: Learning Dig Read More »
OSPFv3 AF Authentication is finally fixed! Unless you are a regular follower of this blog, you may not have heard that Cisco’s OSPFv3 with Address Families (AF) Authentication support was broken. By broken I mean it took down OSPFv3 adjacencies. Not good. Read here for that article. Anyway, I have been using the IOS-XE version
Cisco OSPFv3 AF Authentication Fixed! Read More »