Why should an infrastructure engineer leverage REST APIs? I'm sure most IT workers have at least heard of REST APIs, or heard a sales pitch where a vendor insists that while a requested functionality doesn't exist, you could build it yourself by "using the API". Or, participate in discussions where people …

Read More

Have you ever seen this error before? This is a really important issue in enterprise infrastructure because unauthenticated TLS connections teach our end users to be complacent and ignore this error. TLS Authentication SSL/TLS for internal enterprise administration typically only addresses the confidentiality aspects …

Read More

Cryptographic security is an important aspect of hosting any business-critical service. When hosting a public service secured by TLS, it is important to strike a balance between compatibility (The Availability aspect of CIA), and strong cryptography (the Integrity or Authentication and Confidentiality aspects of CIA). …

Read More

Here's how to set both static IPv4 and IPv6 addressing on Debian 11. The new portions are outlined in italics. First, edit /etc/network/interfaces 1auto lo 2auto ens192 3iface lo inet loopback 4# The primary network interface 5allow-hotplug ens192 6iface ens192 inet static 7 address {{ ipv4.address }} 8 gateway …

Read More

Note: I created a common baseline for pre-requisites in this previous post. We'll be following VMware's Avi + NSX-T Design guide. This will be a complete re-install. Avi Vantage appears to develop some tight coupling issues with using the same vCenter for both Layer 2 and NSX-T deployments - which is not an issue that …

Read More

After a recent VCSA reboot, I was seeing the infamous no healthy upstream error from vCenter. The first place to check for issues like this is VMware's Virtual Appliance Management Interface (VAMI), located by default via HTTPS on port 5480. An administrator can use the appliance root password for this particular …

Read More

VMworld 2021 is online this year I'll really miss some of the sessions and exploration we've had in past years in person, but I think VMware made the right call this year. We can expect to see a fundamental shift with online conventions - and this will need some unique strategy compared to previous years. The Basics I …

Read More

DNS is a vital component of all computer networks. Also known as the "Internet Yellow Pages," this service is consumed by every household. DNS services are typically deployed in several patterns to support users and systems: DNS Forwarder: This deployment method is the most common. Everybody needs name …

Read More

TL;DR If you see either of these errors, check grep 'ERROR' /opt/avi/log/cc_agent_go_{{ cloud }} for the potential cause. In my case, the / character was not correctly processed by Avi's Golang client (facing vCenter). The Problem When trying to configure NSX ALB + NSX-T on my home lab, I am presented nothing but the …

Read More

World WiFi Day We (human beings) have several weird superpowers, but the ability to communicate over vast distances has always fascinated me the most. I've had the privilege of meeting some of the most truly capable pioneers in this field - but the reality here is that we're faced with a very unequal world. Authors …

Read More