Skip to main content

Recently Updated Pages

VXLAN Symmetrical Routing

EVPN-VXLAN Clos Fabric

Updated 1 week ago by Tony Pizzicato

VXLAN Overview

EVPN-VXLAN Clos Fabric

So what is VXLAN ? Simply put, a protocol allowing to encapsulate L2 frames into it's own header ...

Updated 1 week ago by Tony Pizzicato

Fail2ban

NGINX

More details here nano -w /etc/fail2ban/jail.local [nginx-bad-request] enabled = true port ...

Updated 1 week ago by Tony Pizzicato

TLS Caching and Server Signatures

NGINX

## # Server Signature ## more_set_headers "Server: <null>"; ...

Updated 1 week ago by Tony Pizzicato

AppSec WAF

CrowdSec

The AppSec engine works as WAF analyzing traffic and blocking malicious activity based and on the...

Updated 1 week ago by Tony Pizzicato

Updates

CrowdSec

Don't forget to add a cronjob to update the signatures touch /usr/local/sbin/waf-update.sh ch...

Updated 1 week ago by Tony Pizzicato

Reporting

CrowdSec

All the reports can be seen in the CrowdSec Alerts console

Updated 1 week ago by Tony Pizzicato

Installation

CrowdSec

Adding repository curl -s https://install.crowdsec.net | sudo sh Installing security engine ap...

Updated 1 week ago by Tony Pizzicato

Bookstack

NGINX

server { listen 443 ssl; server_name null.somedomain.name; ...

Updated 1 week ago by Tony Pizzicato

HTTPS Redirect

NGINX

server { listen 80; server_name _; return 301 https://$host$request_ur...

Updated 1 week ago by Tony Pizzicato

Introduction

EVPN-VXLAN Clos Fabric

To answer the question of why VXLAN was even invented, let's have a look at what problems it's tr...

Updated 1 week ago by Tony Pizzicato

SD-WAN architecture

SD-WAN

So to deal with the challenges described in the previous chapter while also allowing for simplifi...

Updated 1 week ago by Tony Pizzicato

Introduction

SD-WAN

Generally speaking we have two options when it comes to WAN interconnects - either Point to Point...

Updated 1 week ago by Tony Pizzicato

L2 VPN Components (VPLS Kompella)

MPLS

First of all a couple of words on MPLS L2 VPNs. Generally speaking we have two types - Point to P...

Updated 1 week ago by Tony Pizzicato

L3 VPN Components

MPLS

As was discussed in the Introduction section, it's often required to transport the traffic across...

Updated 1 week ago by Tony Pizzicato

Traffic forwarding with BGP labels

MPLS

In our previous example we could see that both networks (A/24 and B/24) had to be a part of LDP e...

Updated 1 week ago by Tony Pizzicato

EVPN – Local VRF

IPBH Network Layer 3

As mentioned earlier, EVPN was adopted to allow network segmentation at Datalink and Network laye...

Updated 2 weeks ago by Tony Pizzicato

EVPN – Management VRF

IPBH Network Layer 3

Management VRF is a Layer 3 VRF built on top of the existing “Local” L2 VRF used as transport Fr...

Updated 2 weeks ago by Tony Pizzicato

EVPN – Public VRF

IPBH Network Layer 3

Public VRF is built to provide connectivity with public peers (IP Transit) and the Outside Firewa...

Updated 2 weeks ago by Tony Pizzicato

LDP labels propagation

MPLS

LDP is used to exchange, build and maintain labels in MPLS enabled networks and to better underst...

Updated 2 weeks ago by Tony Pizzicato