Have you ever wondered what happened to all the privately-addressed traffic coming from any home network? Well, if it isn't explicitly blocked by the business, it's routed, and this is not good. Imagine what data leakage can occur when a user mistypes a destination IP - the traffic goes out to the Service Provider, who …

Read More

GitOps GitOps, a term coined in 2017, describes the practice of performing infrastructure operations from a Git repository. In this practice, we easily develop the ability to re-deploy any broken infrastructure (like application managers), but that doesn't really help infrastructure engineers. From the perspective of …

Read More

Idempotence and Declarative Methods - not just buzzwords Idempotence Coined by Benjamin Peirce, this term indicates that a mathematical operation will produce a consistent result, even with repetition. Idempotence is much more complicated subject in mathematics and computer science. IT and DevOps use a simplified …

Read More

**Note: This feature has been deprecated by VMware The Jetstreams Cloud operators now provide two completely different classes of service to customers: Self-Service, VMs, Operating System Templates Generally mature, some private cloud operators are smoothing out CMPs or such, but work as intended from a customer …

Read More

Note: This feature has been deprecated by VMware NSX-T 3.2 has been released, and has a ton of spiffy features. The NSX ALB integration is particularly neat, but while repeatedly (repeatably) breaking the integration to learn more about it, I ran into this error: When deploying NSX ALB appliances from the NSX Manager, …

Read More

Have you seen this selector when building machines on vSphere? This causes some fairly common issues in NOS VMs, as most don't really know what distribution the NOS is based on. "Guest OS Version" doesn't just categorize your workload, though. Selecting "Other Linux" instructs vSphere to maximize …

Read More

Why should an infrastructure engineer leverage REST APIs? I'm sure most IT workers have at least heard of REST APIs, or heard a sales pitch where a vendor insists that while a requested functionality doesn't exist, you could build it yourself by "using the API". Or, participate in discussions where people …

Read More

Have you ever seen this error before? This is a really important issue in enterprise infrastructure because unauthenticated TLS connections teach our end users to be complacent and ignore this error. TLS Authentication SSL/TLS for internal enterprise administration typically only addresses the confidentiality aspects …

Read More

Cryptographic security is an important aspect of hosting any business-critical service. When hosting a public service secured by TLS, it is important to strike a balance between compatibility (The Availability aspect of CIA), and strong cryptography (the Integrity or Authentication and Confidentiality aspects of CIA). …

Read More

Here's how to set both static IPv4 and IPv6 addressing on Debian 11. The new portions are outlined in italics. First, edit /etc/network/interfaces 1auto lo 2auto ens192 3iface lo inet loopback 4# The primary network interface 5allow-hotplug ens192 6iface ens192 inet static 7 address {{ ipv4.address }} 8 gateway …

Read More