lukasz.bromirski.net

…on the performance of virtualized network stack different cloud providers. plus - couple of slides and some speculations about how AWS is built.

…people using dialup connections. those poor people stay need them to take advantage of restricted Internet services provided by AOL. a year ago at that time, still around 2.6 million of US citizens were connecting to internet that way.

some time ago I changed my BIND at home to Unbound, due to the change of the default DNS server in FreeBSD (yes, I do have my own DNS server at home, and it serves all local queries). actually, I have four right now ;) back in BIND times, i used a lot of…

…but my wine glass is full.

it’s better not to know, how thick the wall is. you may have too short run. anonymous

quite recently i described my own new workstation. it has dual Xeon processors, and today i decided to upgrade memory from 128GB to 256GB (yeah, i use to run a lot of VMs). so below you can see the outcome - 256GB RAM, 2 physical CPUs, 16 cores, 32 thread…

…gave me food for thought. i counted 18 books in different places around my house, that i was trying to read at the same time. today in the morning i decided it doesn’t make any sense, and it’s exactly the opposite approach i should take. so, books landed…

…i’m reading right now an interesting book - Essentialism. it beatifully demonstrates how to decide where it is worth to invest your time and energy. and it gives you great framework for doing just that. another theory, you’ll say?

…or who needs them anyway today?

…supports BGP and it’s already out. do you like BGP on your firewalls?

in 2002 it was calculated that to reach closest star (Proxima Centauri), multigenerational crew would need to start with at least 150 to 180 men and women. latest simulations show however, that to guarantee gen variance you’d need to take between 10000 and

all memory and CPU related features in IPv6 world is major challenge even for modern hardware. unfortunately this is emphasized with lack of best practices followed by developers writing code. i just noticed there’s Microsoft Windows problem with IPv6 RA.…

let me quote book i’m reading now: A quick hypothesis: say one million monkeys speculate on the stock market.

it will be unique opportunity in Poland and in this part of Europe. with group of my dear friends and design masters - Piotr Jabłoński, Sebastian Pasternacki and Piotr Matusiak i’ll be delivering bootcamp-type of training for CCDE. we’re starting on 5th of

…workstation requires two!

don’t start your php upgrade at 2:40 in the morning. as you’ll stay awake until 5am :)

Jennifer Lawrence phenomenon (i can’t quite get Hunger Games popularity, but i love Silver Linings Playbook. how you should do proper conference badges (oh yeah, we’re learning!)

it seems that GPUs can be reasonably well tasked to handle additional work that x86 CPUs simply can’t. i’m talking about network monitoring and NetFlow processing - good reading when travelling or before sleep.

Christmas are coming, and traditionally that means good time of the year to push people to buy things they don’t need. in Poland, companies generally don’t care what Customer wants. and don’t listed in the process of ignoring him/her. why are companies se…

you spend a lot of time preparing OVA to save time in future and enable cloning. then, during importing to remote ESXi you get following error message: Failed to deploy OVF package: The task was canceled by a user.. i didnt’ cancel anything!

…so I decided to use youtube to find my favorite Monty Python series, Program will resume soon (quite specific Polish series - BTW, never published on DVD!).

i just got hold of interesting document. let me quote it: As remarked in this table the Windows version of TrueCrypt 7.0a deviates from the Linux version in that it fills the last 65024 bytes of the header with random values whereas the Linux version fills

after reading ridiculous, made up story of british SAS, hiding under alias “Andy McNab”, trying to tell his version of Rambo&Commando-style fictious account of Iraq operation i couldn’t find story that was so exaggerated and made-up. in reality, his total…

on the upcoming thursday, 10th of october at 7pm i’ll do a short talk with Maciej Broniarz from Warsaw University about security from not-so-typical point of view. please register and see you in Leon Koźmiński Academy hall.

…are better at building TCP stacks than we are. i came across the track of an interesting project - RemyCC, providing greater efficiency and at the same time a better division and lower delays (on average). it is worth to look.

for a moment, let’s assume those are rumblings of man worn out by pulling couple of all-nighters in one row. we have to assume that security intelligence services will want to listen to everything and everywhere. that includes NSA sniffing all traffic in…

Maciej Broniarz invited us to take part in new security focused conference.

…a book by Steve Davies is a very interesting coverage of USA pilots testing Russian Soviet-era MiG 15s, 17s, 19s, 21s and 23s at Tonopah range. the same that was used to test Lockheed F-117 and launch to simulated sorties with F-4, F-14, F-15, F-16 and F…

you could meet me sometimes during late night hours on Call of Duty Modern Warfare 2 multiplayer servers. now, i decided to change environment a bit and return to love of my life - flight simulators. i dusted off CD with Microprose Falcon 4.0 and i’m down…

…you have to get back to good old CLI. i’m trying to export VM from very remote VMware vSphere 5.1 to OVA. unfortunately, packing 40GB is not apparently easy, as the whole process fails at different stages with error called by VMware simply timeout (yeah,…

next thursday, april 11th, i’ll be visiting Warsaw University on invitation from Maciej Broniarz to have a chat about security from service provider point of view. note it will be mechnism and best practice related talk, not vendor pitch. i’ll mention bla…

last CloudFlare DDoS demonstrated, that 300Gbps is no longer some magic barrier for attackers. given such throughput, you can easily drop country like Poland from Internet. of course, immediately such concepts like ‘critical infrastructure’, country finan…

i’ve just stumbled upon this gem - it’s hard to find these days such well aggregated and summarized information.

as you probably know already, next, jubilee edition of PLNOG is just around the corner. apart from stand and presentations, we’re be there with extended team to discuss our new products and solutions. and traditionally, we’ll also conduct couple of worksh…

i’ve stumbled upon an article of Michael Leonard from Juniper. he decided to take a stab at LISP. i usually call such articles with the title of this post, and the article mentioned is all about it. while we’re discussing in open forums with engineers and…

it seems that EU has made a reasonable choice to oppose ITU’s taking control over internet. consequences of handing over real control over future of internet to entity that’s slowly sliding into oblivion and has hardly any real influence on the development

amazing sweet photo. you can watch this until you drop dead, looking for all details. and this landscape in the background…

if you haven’t noticed by now, in the IOS 15M line we introduced IOS shell. firing it up is just as easy as doing: C2#conf t C2(config)#shell processing full now you have new, UNIX-like commands and options to chain them, including nested grep.

we’re back with Cisco security focused conference in the fall. during Cisco SECURE 2012 we’ll demonstrate you the whole security architecture. during two full days of presentations, we’ll try to showcase you all interesting bits and pieces from our portfo…

…how tightly coupled should it be?

very interesting experiment (it’s worth looking other from the series!).

i highly recommend this article from Wired. while we have to live with situation where such wealthy people like Kaspersky himself can influence ITU decisions, we still can stand up and work to make internet free and independent. it’s kind of naive of cour…

using our new blogging platform, i just published short piece about just announced onePK. i’m watching live discussions for over two years now about network control capabilities. i was one of those distanced guys when it comes to OpenFlow “explosion” in p…

there’s a lot of wisdom in books, presentations and trainings covering “how to achieve success” (however we choose to define it). this can be applied to working with people, managing them - or companies. one of great books helps reader achieve the success…

i just made a short post describing a bit behavior and characteristics of new Sup720-10GE switching matrix that can be installed in Catalyst 6500 - for cisco-nsp@ folks: In old Sup720 design, the Supervisor itself is connected to the fabric using one chan…

interesting enhancement to transport traffic in HTTP sessions proposed by Google is starting to gain popularity and traction. while i don’t use Chrome browser, in Firefox starting from version 11 you can turn the protocol on (about:config -> network.http.…

…and inside, you’ll find a lot of completely new features overall (MediaTrace 2.0, IPv6 for GETVPN data plane, new IPv6 IP SLA extensions, LISP extensions), or for the first time available on software routing platforms like ISR G2s (BGP PIC Edge and Core,…

i’ve had a opportunity today to take the CCDE exam in London again. accompanied by two fellow SEs and one of the engineers working for Cisco Partner in Poland, we’ve took our chances. and it’s definitely better - feedback works. out of 6 scenarios you work

i highly recommend reading this good article about moving network stacks forward. it’s great addendum to network hardware bible. and yes, let’s stop ACTA - we’re not deploying IPv6 just to make our governments to force upon us adoption of poor technical s…

FreeBSD 9.0 did an unannounced appearance lately. it introduces a bunch of different features, two of which are of great interest to me. firstly, we can select different mechanisms to fight traffic congestion for TCP. to do that, you need to change sysctl…