VXLAN offload using tc flower on ConnectX-5

Overview After exploring XDP for some time for L2TPv3 and VXLAN, I wanted to dig deeper into hardware offload capabilities, specifically for VXLAN, but without using Open vSwitch (OVS). Mellanox has some great blog posts to get me started: https://community.mellanox.com/s/article/Configuring-VXLAN-Encap-Decap-Offload-Using-tcPlus some help from their official documentation:https://community.mellanox.com/s/article/Configuring-VXLAN-Encap-Decap-Offload-Using-tc What follows is a detailed description of me recreating... Continue Reading →

February 15, 2021 0

Container isolation with Kata and gVisor in Docker

Container isolation with Kata and gVisor in Docker Overview Containers are an efficient way to build and distribute workloads free of (most) host and OS dependencies, but they come at the cost of reduced security or isolation compared to virtual machines. This is why public cloud services spin up virtual machines per customer to deploy... Continue Reading →

March 24, 2020 0

iPad and IPMI Serial-Over-LAN (SOL)

IPMI is great to manage servers remotely. A web interface offers full manageability, including power on/off and reset. It also comes with a remote console feature using HTML5 (or Adobe Flash), but that's where I got stuck using just my iPad Pro: it doesn't work. But there is also an option to use Serial-Over-LAN (SOL)... Continue Reading →

February 26, 2020 0

Tether RPi to iPad Pro via Ethernet over USB-C

Tether Raspberry Pi to iPad Pro via Ethernet over USB-CThe new USB-C connector on the 2018 iPad Pro’s opens a new way to communicate with RPi’s: Ethernet over USB, including powering a Pi Zero. The procedure to success was pretty straightforward and documented here for my own reference (so I won’t forget to enable ssh... Continue Reading →

December 2, 2018 23

Macvlan Docker interface with explicit endpoint MAC address

Macvlan Docker interface with explicit endpoint MAC address Probably one of thos “unicorn” problems, but I was in need of running a Juniper vMX Docker Container attached to a network interface using a statically assigned IP and MAC address. The use case is to run vMX on a baremetal server in a public cloud. Macvlan... Continue Reading →

October 1, 2018 0

Post JSON data to URL from Junos, now in Python

Post JSON data to URL from Junos, now in Python In my previous post Post JSON data to URL from Junos, “Event-driven” I wrote the event/op script in SLAX, mainly because my Python skills are still rough and I fell back to my “muscle memory” to get the job done. Well, got some spare time... Continue Reading →

August 27, 2018 1

Post JSON data to URL from Junos, “Event-driven”

Post JSON data to URL from Junos, “Event-driven” Why didn’t I think of that? … was my immediate thought, when I was confronted with the following problem and asked to implement it: Juniper ACX devices are deployed using Zero-Touch-Provisioning (ZTP). The ask was simple: Whenever a link Up is detected, send the learned LLDP information... Continue Reading →

August 24, 2018 1

Deploy Juniper vMX via Docker Compose

Deploy Juniper vMX via Docker Compose Being able to download and run Juniper vMX on KVM and ESXi has really helped me learning more about networking, telemetry and build automation solutions. But the software dependencies combined with manual editing and launch of shell scripts per vMX instance felt a bit outdated to me. Why can’t... Continue Reading →

July 26, 2018 25

Junos BNG Pseudowire Headend Termination (PWHT) demo

Junos BNG Pseudowire Headend Termination (PWHT) demo Maybe it is just me, but I often find myself googling for working configuration examples, followed by searching thru my own files. Well, I was in need of an end-to-end base configuration that terminates DHCP subscriber sessions coming into the BNG over q-in-q within a pseudowire. Before I... Continue Reading →

July 5, 2018 1

BGP over unnumbered interfaces, automated

BGP over unnumbered interfaces, automated Configuring BGP peering between many network devices in a datacenter can become quickly repeatitive, boring and hence open to human errors. Each link requires its own dual stack IP subnet with unique endpoints. The very same endpoint IP addresses must then be used to configure BGP peers on either side... Continue Reading →

June 21, 2018 1

	Mr. Baker on OpenConfig and gRPC Junos Tele…
	Remote PI workflow w… on Tether RPi to iPad Pro via Eth…
	PPPoE Subscriber Ter… on Junos BNG Pseudowire Headend T…
	James Burnett on OpenConfig and gRPC Junos Tele…
	mwiget on OpenConfig and gRPC Junos Tele…

	Mr. Baker on OpenConfig and gRPC Junos Tele…
	Remote PI workflow w… on Tether RPi to iPad Pro via Eth…
	PPPoE Subscriber Ter… on Junos BNG Pseudowire Headend T…
	James Burnett on OpenConfig and gRPC Junos Tele…
	mwiget on OpenConfig and gRPC Junos Tele…

marcelwiget