Deploy the Zscaler ZPA App Connector with Docker
A working docker run command for the Zscaler Private Access App Connector, what each flag does, and what to check before you put it into production.
-
-
Load balancing Exchange with HAProxy
During a migration to Exchange Online, our load balancer could not take the extra traffic without a costly upgrade. HAProxy on a small Debian VM did the job: the full configuration.
-
Build VPP Debian packages from source
The steps I use to build FD.io VPP from source into .deb packages on Debian 12, from cloning the repository to make pkg-deb.
-
Change the master role in a Juniper Virtual Chassis
How to move the master role of a Juniper Virtual Chassis back to member 0 with a single command, and what to expect while it switches.
-
Configure a Virtual Chassis on Juniper QFX5100-48S-6Q
Step-by-step configuration of a preprovisioned two-member Virtual Chassis on Juniper QFX5100 switches, from serial numbers and VC ports to per-member management addresses.
-
Show BGP advertised routes on MikroTik RouterOS 7
RouterOS 7 now has a direct command to show the routes advertised to a BGP peer: /routing/bgp/advertisements print. An update to my earlier workaround.
-
Hyper-V networking: MAC addresses, adapter names and VLANs
PowerShell commands to find the MAC address of a Hyper-V virtual machine's adapters, rename an adapter, and configure it as a VLAN trunk.
-
How the internet really works: IP transit, peering and provider tiers
How ISPs connect to each other through peering and paid IP transit, what Tier-1, Tier-2 and Tier-3 providers are, and why two providers on two routers is the topology to aim for.
-
BGP and RPKI: why you should implement route origin validation
BGP trusts whatever routes its neighbours announce. RPKI lets you sign which AS may originate your prefixes and drop announcements that contradict it. What it protects against, what it does not, and how to deploy it.
-
Measuring bandwidth usage: 95th percentile, CIR and actual usage
How 95th percentile billing works, why the top 36 hours of the month are free, and how it compares with a committed information rate and volume-based billing.
-
Show BGP advertised routes on MikroTik RouterOS 7 (the old way)
Before RouterOS had a proper command, seeing what you advertise to a BGP peer meant saving the sent attributes and reading them from a pcap. Kept for reference.
-
Find the VTP primary server on a Cisco switch
"VTP VLAN configuration not allowed when device is in CLIENT mode" means VLANs are managed elsewhere. One show command tells you which switch is the VTP primary.
-
Run BGP on Windows Server 2019
Windows Server 2019 can speak BGP without third-party software. How to install the routing role, configure the router and a peer, announce prefixes and apply policies.
