This is the textbook for a course I am doing at the moment. To be honest the book is kind of old and nothing special, but I read it so it gets at least a brief mention here. Overall the book is too dated to be particularly useful, and I find it hard to believe…
Tag: networking
The BeyondCorp papers
Google’s BeyondCorp effort would probably be what we would now call Zero Trust, although I am surprised by how little name recognition BeyondCorp has when I talk to security people about Zero Trust. Perhaps there are subtle differences between the two, but if there are they aren’t obvious to me. I find myself reading the…
Linux bridges have their MTU overwritten when you add an interface
I discovered last night that network bridges on linux have their Maximum Transmission Unit (MTU) overwritten by whatever is the MTU value of the most recent interface added to the bridge. This is bad. Very bad. Specifically this is bad because MTU matters for accurately describing the capabilities of the network path the packets will…
Setting up VXLAN between nested virt VMs on Google Compute Engine
I wanted to play with a VXLAN mesh between VMs on more than one hypervisor node, but the setup for VXLAN ended up being a separate post because it was a bit long. Read that post first if you want to follow the instructions here. Now that we have a working VXLAN mesh between our…
Setting up VXLAN on Google Compute Engine
So my ultimate goal here is to try out VXLAN between some VMs on instances in Google compute engine, but today I’m just going to get VXLAN working because that took a fair bit longer than I expected. First off, boot your instances — because I will need nested virt later I chose two instances…