|
Here is a link to my Network World Blog on Core Networking and Security.
My latest contributions to NetworkWorld.com.
Here is a link to the Infoblox IPv6 Center of Excellence blogs.
Here is a link to my contributions to the Cisco Champions blog.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Here is a list of the articles that I have written. The newest blogs are at the top of the list.
DHCP and DHCPv6: Commonalities and Differences
6/26/24
Measuring IPv6 Deployment Progress
3/27/24
Large-Scale IPv6 Internet Reconnaissance (Part 2 of 2)
12/13/23
Large-Scale IPv6 Internet Reconnaissance (Part 1 of 2)
12/12/23
Creating a New IPv6 Extension Header
9/13/23
The Global IT Industry Ripple Effect of IPv6 Mandates
8/28/23
Configuring Infoblox vNIOS for IPv6-Only Networks: Using DHCP Option 108 to Disable IPv4
12/1/22
Attempting to Quantify the Hidden Costs of IPv4 Addressing
11/21/22
Review: RHEL 9 delivers better security, management
7/6/22
You Thought There Was No NAT for IPv6, But NAT Still Exists
12/28/21
MTU size issues, fragmentation, and jumbo frames
10/20/21
IPv6-Only Where You Can, Dual-Stack Where You Must
9/29/21
IPv6 Enhances Zero-Trust Network Architectures
9/1/21
The Enterprise Effect and the COVID Effect on IPv6
4/27/21
5 top Linux server distros: How to choose the right one
3/9/21
Getting grounded in AWS cloud skills
12/4/20
How the network can support zero trust
8/17/20
7 points your security team needs to know about IPv6 (but probably doesn't)
7/6/20
Understanding DHCPv6 Lease Times
6/15/20
Why your providers should support IPv6
11/12/19
How to prevent IPv6 VPN breakout
10/15/19
The IPv6 Tipping Point Effect
10/15/19
IPv6 and Internet Privacy
8/30/19
IPv6 upsides: Faster connections, richer data
6/10/19
IPv4 the Hard Way, IPv6 Made Easy
5/20/19
Does your cloud-access security broker support IPv6? It should.
4/28/19
IPv6: It’s Not You, It’s Me
3/13/19
Free configuration management using Ansible, Ubuntu, VirtualBox
2/25/19
Can IoT networking drive adoption of IPv6?
2/6/19
IPv4 Addresses are Only Locally Significant
11/24/18
DNS over HTTPS seeks to make internet use more private
11/20/18
When Will We Stop Using IPv4?
10/2/18
Why You Should Dual-Stack Your DNS Nameservers
8/7/18
Celebrating the Sixth Year Anniversary of World IPv6 Launch
6/5/18
DNS in the cloud: Why and why not
5/21/18
IPv6 DDoS and Protection Measures
4/2/18
IPv6 Support by Certificate Authorities (CAs)
2/5/18
How to eliminate the default route for greater security
2/1/18
Life as an IPv6 Technology Laggard
12/13/17
Geolocation with IPv6
11/7/17
IPv6 deployment guide for enterprises
11/6/17
IPv6 Addressing for Enterprises
11/2/17
IPv6-Enabled Access Networks Are Priority for Enterprises
10/11/17
Where Are You On The IPv6 Adoption Curve?
9/13/17
FE80::1 is a Perfectly Valid IPv6 Default Gateway Address
8/9/17
Common IPv6 Newbie Questions
7/12/17
Why Should We Separate A and AAAA DNS Queries?
6/14/17
Highlights from 2017 North American IPv6 Summit
5/1/17
Consistent Container Connectivity with Cisco Contiv
4/21/17
Using a Content Delivery Network to IPv6-Enable your Site
4/12/17
No-IPv4 or IPv4less or Simply IPv6-only?
3/8/17
Even More Methods of Providing IPv4 as a Service (IPv4aaS) (Part 3)
2/8/17
Methods of Providing IPv4 as a Service (IPv4aaS) (Part 2)
1/11/17
Amazon Web Services Is Getting into the IPv6 Holiday Spirit
12/14/16
6 network and security trends you can expect in 2017
12/9/16
AWS re:Invent re:Emphasizes the Importance of Cloud Security
12/5/16
IPv4 as a Service (IPv4aaS) (Part 1)
11/16/16
6 tips for buying or selling a smart home
What should remain in the house upon sale?
11/14/16
A dozen extensions to TCP/IP that optimize internet connections
Optimizations to the original TCP, UDP and Internet protocols that improve performance
10/17/16
IPv6 is Accelerating as IPv4 is Nearing its Peak
10/12/16
Bringing SDN to Federal Networks: VMware NSX STIG Released
9/28/16
IPv6 Security Vulnerability Scanning
9/14/16
Could SD-WAN Change IPv6 Adoption in Enterprises?
8/10/16
Highlights from Cisco Live U.S. 2016
7/15/16
Disabling IPv6 Router Advertisements in the Data Center
7/13/16
Converge Your Teams for Greater SDN/NFV Benefits
6/14/16
Can IPv6 Really Be Faster than IPv4? (Part 2)
6/8/16
Can IPv6 Really Be Faster than IPv4? (Part 1)
5/11/16
How Many IPv6 Nodes Can You Have on a LAN?
4/13/16
5 reasons to move to an SD-WAN
Software-defined WANs can save money and improve network performance.
3/21/16
Resources abound to make cloud services more secure
Learning to securely develop and use cloud services
3/7/16
Home Networking with IPv6
3/8/16
IETF Proposed Solutions for Improved DNS Privacy (Part 2 of 2)
2/9/16
DNS Privacy in the Face of Pervasive Monitoring (Part 1 of 2)
1/12/16
Could Wireless 802.11ac be Propelling IPv6 Adoption?
12/7/15
IPv6 in Rural Communities
11/11/15
Only You Can Prevent IPv6 Prefix Disaggregation
10/14/15
ARIN Finally Runs Out of IPv4 Addresses
IPv4 Address Cupboards are Bare in North America.
9/22/15
Getting to Know Your Neighbors with IPv6 First Hop Security
9/4/15
VMworld 2015 Action Review
9/4/15
Applying Agile Methodology to IPv6 Deployment
8/12/15
North America’s IPv4 Address Shortage
7/1/15
IPv4 Address Trading for Fun and Profit
6/16/15
Cisco Live DevNet Zone: Larger Than Ever
6/16/15
Different Personalities of the Nexus 9000 in NX-OS Mode
6/6/15
2015 North American IPv6 Summit Review
4/27/15
Improving E-Mail Security with DomainKeys Identified Mail (DKIM)
4/9/15
Is an SDN Switch A New Form of a Firewall?
SDN switches can behave like a firewall, but they may not be a replacement for the real thing
4/1/15
Deploy IPv6 Now, But You Will Still Experience the IPv4 Address Shortage
3/4/15
With Cisco ACI, Do You Still Need A Firewall?
3/2/15
Holding IPv6 Neighbor Discovery to a Higher Standard of Security
2/10/15
Annual Security Reports Predict What We Can Expect in 2015
Recent security reports give insight into security best practices often missed.
1/12/15
Do You Really Need a Subnet Calculator for IPv6?
1/9/15
Mobile Apps for Troubleshooting IPv6
11/18/14
SDN Security Attack Vectors and SDN Hardening
Securing SDN deployments right from the start.
10/28/14
High Availability DHCPv6
10/21/14
Still Using DHCP On Your Routers? You Can’t Do That With IPv6!
9/15/14
IPv6 and OpenStack
8/17/14
OpenFlow Supports IPv6 Flows
Software Defined Networking systems are gaining IPv6 capabilities
7/31/14
Making a New Product? Make it Dual Protocol!
6/22/14
Promise Theory
Can you really trust the network to keep promises?
7/1/14
Why You Must Use ICMPv6 Router Advertisements (RAs)
6/16/14
ACI Details Revealed at Cisco Live 2014
5/27/14
Software Containers: Used More Frequently than Most Realize
Containers are being used more often to secure applications and create cloud services
5/26/14
Finding and Fixing Open DNS Resolvers
5/13/14
ARIN Reaches Phase 4 IPv4 Exhaustion
4/23/14
ARIN Enters Phase 4 of IPv4 Exhaustion
ARIN is now down to their final /8 equivalent block of IPv4 addresses.
4/23/14
Handling the Heartbleed OpenSSL Vulnerability
4/16/14
DNS-based Authentication of Named Entities
4/14/14
Windows XP: Goodbye and Good Riddance
If you are still running Windows XP, your organization has bigger problems
3/31/14
Not your Father’s Flow Export Protocol (Part 2)
What is AppFlow and how does it differ from other flow analysis protocols?
3/19/14
The Fragmented Internet
3/17/14
Your Father’s Flow Export Protocol (Part 1)
History of flow analysis protocols and how we use them
3/14/14
Improved Security Through DNS Inspection (Part 2)
2/18/14
The erosion of IT's middle class
Evolve your career with the changing face of IT, or risk getting left behind
2/18/14
Improved Security Through DNS Inspection (Part 1)
1/29/14
Clos Networks: What's Old Is New Again
What goes around, comes around – Clos Networks are back
1/11/14
Using SDN to Create a Packet Monitoring System
Packet-level Monitoring Use Case with Cisco XNC and Monitor Manager
12/15/13
gogoNET LIVE 4! IPv6 Conference Recap
IPv6 conference provide information to both physical and virtual attendees
11/17/13
Dual-Protocol Routing with Raspberry Pi
Using a Raspberry Pi as a low-cost dual-protocol router
11/12/13
Raspberry Pi as a Network Monitoring Node
Using an inexpensive Raspberry Pi system for remote network troubleshooting
10/30/13
Understand and Obey the Laws of Networking
Ignorance of the laws of networking is no excuse.
10/5/13
Traceroute and DNS Interaction
9/16/13
OSPFv3 for IPv4 and IPv6
Cisco IOS support for OSPFv3 for multiple address families
9/2/13
IPv6 Network Management
Consider how you will manage IPv6 as you prepare to deploy it
7/24/13
Mobile Devices and BYOD are Driving IPv6 Adoption
A mobile population needs IP addresses to communicate
6/24/13
Jumbo Frames
Does your network support Jumbo Frames and should you enable it?
6/3/13
Stages of IPv4 Address Exhaustion
5/24/13
MTU Size Issues
Issues related to MTU size, PMTUD and packet fragmentation
5/18/13
Life in a Dual Stack World
What life might be like when we are using two Internet protocols?
4/23/13
Kali Linux: The Next BackTrack
The most popular open source pen testing distribution just got better
3/24/13
Using Dual Protocol for SIEMs Evasion
Attackers using IPv4 and IPv6 can avoid detection by IPS, SIEMs, reputation filtering, and more
2/24/13
Core Networking and Security 100th Blog Post
Four years of blogging about Core Networking and Security (and IPv6)
2/03/13
IPv6 Certifications
If you are pursuing an IT certification in 2013, IPv6 questions may be on the test
1/26/13
9 Common Spanning Tree Mistakes
Frequent spanning tree protocol misconfigurations cause network problems
1/02/13
Time to Upgrade Cisco Catalyst 6500 Non-E-Series Chassis
Support for older 6500 chassis ended yesterday
12/1/12
U.S. Government Progress on IPv6 Deployment
Monitoring the country's IPv6-enabled government services.
11/26/12
IPv6 Is Not an All-or-Nothing Proposition
You don't have to switch directly from IPv4 to IPv6
10/07/12
Achieving PCI Compliance When Using IPv6
Does the PCI DSS really require NAT for IPv6?
10/07/12
IPv6 NAT - You can get it, but you may not need or want it.
10/07/12
RIPE NCC IPv4 Address Exhaustion
9/14/12
Web Application Firewalls and IPv6
Does your WAF protect against IPv6 attacks?
9/11/12
Dual-Stack Will Increase Operating Expenses
More IT staff required when running IPv4 and IPv6 simultaneously.
7/31/2012
Life After World IPv6 Launch
What is next for the next-generation Internet Protocol?
6/23/12
Preparing Your Enterprise for World IPv6 Launch
Things you should be doing even if you are not participating
5/19/12
What About Stream Control Transmission Protocol (SCTP)?
What is SCTP and why are we not using it?
4/30/12
IPv6 Summit Recap
Review of 2012 North American IPv6 Summit
4/15/12
Ramp Up On IPv6 at a 2012 IPv6 Event Near You
2012 IPv6 events are coming to a town near you
3/10/12
Should You Allow Inbound E-mail Over IPv6?
Why you may not want to allow inbound e-mails over IPv6 transport?
3/4/12
Clear Choice Test: IPv6 deployment starts at the network edge
Six ADCs deliver IPv6 capabilities to apps hosted on IPv4 Web servers
2/13/12
Internet Edge IPv6 Deployment
Start at your Internet edge when deploying IPv6
2/13/12
IPv6 Week and World IPv6 Launch
Lengthier World IPv6 Day Events in 2012
2/12/12
IPv4 NAT is the Killer App for IPv6
2/6/12
2012 North American IPv6 Summit
1/30/12
The Future of Firewall Policies
How IPv6 will change the way we configure firewall policies
1/19/12
I Want IPv6 for Christmas - Part II
IPv6 gifts can you give for the holidays
12/20/11
Measuring IPv6 Growth
Several recent sources of IPv6 adoption statistics
11/21/11
Techniques for Prolonging the Lifespan of IPv4
May the road rise up to meet you, may the wind be ever at your back and may you outlive IPv4
11/09/11
Death to Firewalls; Long Live Firewalls
Changing firewall architectures as the pendulum swings from centralized to distributed firewalls
10/17/11
Peeling the Security Onion
Security Onion saved me so much time it made my eyes water
09/10/11
Stronger IPsec VPN Configurations Needed
Should you be using IPsec with IKEv2, SHA-2 and AES?
08/22/11
Firewall Administration Techniques and Tools
Methods and tools to help you gain control of your firewalls
07/31/11
New IPv6 DNS and BIND Book
New book provides important information for IPv6 BIND configuration
07/05/11
World IPv6 Day Results: New Internet Protocol Proves It's Ready
06/08/11
Preparing for World IPv6 Day
How should you prepare for World IPv6 Day on June 8th?
05/29/11
Troubleshooting IPv6 Networks and Systems
Techniques for finding problems in a dual-protocol environment
05/20/11
Rocky Mountain IPv6 Summit has Avalanche of Attendees
2011 IPv6 Summit provided valuable information to attendees
05/01/11
Cost of Running an IPv4 Network Will Increase
Operating an IPv4 network will become increasingly costly and make IPv6 more attractive
04/03/11
IPv6 Training Resources
Here are some resources to help you avoid "IPv6 brain drain"
03/17/11
Cisco USB Console Ports
Cisco products now come with USB ports that allow console access
03/11/11
Recent Annual Security Reports - Valuable Insight on Internet Threats
The latest vendor annual security reports share state of Internet security threats
02/21/11
When it Comes to IPv6; Go Native
Do not fear deploying dual-protocol web sites
02/02/11
Top 10 Tasks for IPv6 Application Developers
Things to consider when creating dual-protocol applications
01/23/11
IPv6 New Year Predictions
How did my predictions for 2010 turn out and what might occur in 2011?
01/01/11
IPv4 Reputation Filtering Not a Long-Term Solution
As carriers deploy Large Scale NAT (LSN) reputation filtering will lose its effectiveness
12/11/10
IPv6 Subnet Calculators
IPv6 subnetting and IPv4 subnetting are very different so you may need a tool to assist you
11/22/10
The Incredible Shrinking Bogon List
As the global IPv4 free pool reduces so does the size of the IPv4 bogon list
11/06/10
Network Packet Monitoring Matrix Switches
New devices can eliminate limitations of using taps and SPAN ports
10/24/10
My Seven Secret Weapons for Network Management on a Budget
Here's a list of my favorite free or open source tools to keep your network humming.
10/11/10
Tier 1 for IPv4 != Tier 1 for IPv6
Will we see a changing of the ISP guard with IPv6?
09/11/10
Allow Both TCP and UDP Port 53 to Your DNS Servers
DNS queries are getting bigger so we do not want to accidentally block them
08/22/10
IPv6 Enabled Web Browsers
Know where you are going and with which IP version before you get there
07/24/10
Testing NAT64 and DNS64
Setting up an IPv6-only network with Ecdysis and surfing the IPv4-only Internet
07/08/10
IPv6 Summit Was a Huge Hit
Rocky Mountain IPv6 Summit is Largest IPv6 Conference of the Year
05/31/10
Future-Net Debrief
The 2010 Future-Net was Enlightening and Fun
05/16/10
Comcast IPv6 Adoption Monitor
Site gives insight into IPv6 usage
05/07/10
Rocky Mountain IPv6 Summit
3rd annual IPv6 Summit is set to be a great event
04/23/10
NIST Gives Guidelines for Securing IPv6
NIST Draft of Special Publication 800-119 will help secure IPv6 ahead of deployment
04/16/10
Rickrolling and Web Security
What can Rickrolling teach us about web security?
03/24/10
Cisco ASA Version 8.3
Cisco’s latest ASA software version adds significant functionality
03/14/10
Newest Security Reports Show Changing Threats
Look at the recent annual security reports to find attack trends
03/06/10
Spanning Tree: Long Path Cost
Increases in link bandwidth will require eventual path-cost length upgrade
02/16/10
BackTrack 4 Final Released
BackTrack 4 is a supremely useful security assessment toolkit
02/15/10
Domain-Name Jail is Not Fun
My trials and tribulations of restoring my domain name
01/23/10
2010 Predictions
My predictions for 2010; Let’s see if they come true
01/03/10
Service Provider Contradiction Affliction
Service providers advertize both blazing downloads and advocate rate-limiting
12/15/09
gogoNET by gogo6: New Social Networking Site for IPv6
IPv6 people unite on gogoNET.gogo6.com
12/14/09
10GE and Network Oversubscription Ratios
10Gbps Ethernet is changing how we think about network design oversubscription models
12/11/09
BackTrack4 Uses IPv6 to Cover Tracks
Security assessment toolkit uses Miredo as back-channel
11/23/09
Observe IPv6 Traffic Encapsulated Within IPv4 Packets
Understanding your network means understanding IPv6 tunneled packets
11/05/09
New IPv6 Features in Cisco IOS 15.0
A few new IPv6 features in Cisco’s latest software
10/19/09
Windows 7 and IE8 Slowness Problems Fixed
IE8 slowness was driving me crazy until I found a fix
10/09/09
The IPv6 Internet is Growing
Evidence that IPv6 Internet Traffic is Increasing
09/27/09
10 in IPv6 Does Not Equal 10 in IPv4
A Funny Thing Happened on the Way to Configuring an IPv6 Tunnel
09/17/09
I Remember When I Used a Public IPv4 Address
When was the last time you actually used a public IPv4 address?
09/06/09
Networking around the World
Realization that the Internet world is not flat
08/30/09
Finding an IPv6 ISP
Advice on Choosing and IPv6-capable Internet Service Provider
08/07/09
CCIE Recertification – Not Again!
Passing the CCIE Recertification Exam for the 8th Time – Priceless
08/02/09
NANOG46 and Cisco Live had Significant Focus on IPv6
IPv6 was a Key Focus Topic at NANOG46 and Cisco Live
07/21/09
IPv6 Traffic: Do Not be Overly Alarmed
Be aware of IPv6 traffic and its security implications – No need to Beware
07/15/09
Take Care of Your Brain
Be a Better IT Professional by Taking Care of your Brain
07/10/09
Cisco Live 2009 San Francisco
Educational and Fun all Rolled into One
07/05/09
Ethernet on a Ring
Methods of using Ethernet in a ring topology
06/29/09
VMPS: Put a Fork in it
VLAN Membership Policy Server VMPS
06/22/09
Forget Five-9s – Go for 100%!
05/30/09
What’s New in Cisco ASA Firewall Release 8.2?
05/17/09
Review of 2009 Future-Net-Expo
05/10/09
Annual Security Reports
05/04/09
IPv6 Summit Reaches Pinnacle
04/26/09
High Expectations of Network Availability
04/12/09
Routers versus Switches for Enterprise Internet Routing
03/26/09
Google IPv6 Implementors Conference
03/22/09
Free IT Training – A Reality in 2009
03/15/09
Recycling – A Key Part of a Green IT Strategy
03/08/09
Security at 10Gbps
02/28/09
Tagging the Native VLAN
02/19/09
Cisco Adds Features to Firewall Services Module
02/15/09
Spanning Tree - Oh Woe Is Me
02/09/09
IPv6 Capabilities in Cisco’s IPS Software Version 6.2
02/01/09
Windows 7 IPv6 Support
01/29/09
Practical BGP Security
01/24/09
Cisco IPv6 Support Comes Standard
01/19/09
Configuration Management on a Budget
01/14/09
IPv6 on Your Mobile Phone
01/11/09
Increasing Network Availability with Visio
01/04/09
I Want IPv6 for Christmas
12/24/08
Welcome to Scott Hogg's Network World Blog
12/24/08
|
Blog
