Here is a link to my Network World Blog on Core Networking and Security.
My latest contributions to NetworkWorld.com.
Here is a link to the Infoblox IPv6 Center of Excellence blogs.
Here is a link to my contributions to the Cisco Champions blog.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Here is a list of the articles that I have written. The newest blogs are at the top of the list.
Configuring Infoblox vNIOS for IPv6-Only Networks: Using DHCP Option 108 to Disable IPv4
Attempting to Quantify the Hidden Costs of IPv4 Addressing
Review: RHEL 9 delivers better security, management
You Thought There Was No NAT for IPv6, But NAT Still Exists
MTU size issues, fragmentation, and jumbo frames
IPv6-Only Where You Can, Dual-Stack Where You Must
IPv6 Enhances Zero-Trust Network Architectures
The Enterprise Effect and the COVID Effect on IPv6
5 top Linux server distros: How to choose the right one
Getting grounded in AWS cloud skills
How the network can support zero trust
7 points your security team needs to know about IPv6 (but probably doesn't)
Understanding DHCPv6 Lease Times
Why your providers should support IPv6
How to prevent IPv6 VPN breakout
The IPv6 Tipping Point Effect
IPv6 and Internet Privacy
IPv6 upsides: Faster connections, richer data
IPv4 the Hard Way, IPv6 Made Easy
Does your cloud-access security broker support IPv6? It should.
IPv6: It’s Not You, It’s Me
Free configuration management using Ansible, Ubuntu, VirtualBox
Can IoT networking drive adoption of IPv6?
IPv4 Addresses are Only Locally Significant
DNS over HTTPS seeks to make internet use more private
When Will We Stop Using IPv4?
Why You Should Dual-Stack Your DNS Nameservers
Celebrating the Sixth Year Anniversary of World IPv6 Launch
DNS in the cloud: Why and why not
IPv6 DDoS and Protection Measures
IPv6 Support by Certificate Authorities (CAs)
How to eliminate the default route for greater security
Life as an IPv6 Technology Laggard
Geolocation with IPv6
IPv6 deployment guide for enterprises
IPv6 Addressing for Enterprises
IPv6-Enabled Access Networks Are Priority for Enterprises
Where Are You On The IPv6 Adoption Curve?
FE80::1 is a Perfectly Valid IPv6 Default Gateway Address
Common IPv6 Newbie Questions
Why Should We Separate A and AAAA DNS Queries?
Highlights from 2017 North American IPv6 Summit
Consistent Container Connectivity with Cisco Contiv
Using a Content Delivery Network to IPv6-Enable your Site
No-IPv4 or IPv4less or Simply IPv6-only?
Even More Methods of Providing IPv4 as a Service (IPv4aaS) (Part 3)
Methods of Providing IPv4 as a Service (IPv4aaS) (Part 2)
Amazon Web Services Is Getting into the IPv6 Holiday Spirit
6 network and security trends you can expect in 2017
AWS re:Invent re:Emphasizes the Importance of Cloud Security
IPv4 as a Service (IPv4aaS) (Part 1)
6 tips for buying or selling a smart home
What should remain in the house upon sale?
A dozen extensions to TCP/IP that optimize internet connections
Optimizations to the original TCP, UDP and Internet protocols that improve performance
IPv6 is Accelerating as IPv4 is Nearing its Peak
Bringing SDN to Federal Networks: VMware NSX STIG Released
IPv6 Security Vulnerability Scanning
Could SD-WAN Change IPv6 Adoption in Enterprises?
Highlights from Cisco Live U.S. 2016
Disabling IPv6 Router Advertisements in the Data Center
Converge Your Teams for Greater SDN/NFV Benefits
Can IPv6 Really Be Faster than IPv4? (Part 2)
Can IPv6 Really Be Faster than IPv4? (Part 1)
How Many IPv6 Nodes Can You Have on a LAN?
5 reasons to move to an SD-WAN
Software-defined WANs can save money and improve network performance.
Resources abound to make cloud services more secure
Learning to securely develop and use cloud services
Home Networking with IPv6
IETF Proposed Solutions for Improved DNS Privacy (Part 2 of 2)
DNS Privacy in the Face of Pervasive Monitoring (Part 1 of 2)
Could Wireless 802.11ac be Propelling IPv6 Adoption?
IPv6 in Rural Communities
Only You Can Prevent IPv6 Prefix Disaggregation
ARIN Finally Runs Out of IPv4 Addresses
IPv4 Address Cupboards are Bare in North America.
Getting to Know Your Neighbors with IPv6 First Hop Security
VMworld 2015 Action Review
Applying Agile Methodology to IPv6 Deployment
North America’s IPv4 Address Shortage
IPv4 Address Trading for Fun and Profit
Cisco Live DevNet Zone: Larger Than Ever
Different Personalities of the Nexus 9000 in NX-OS Mode
2015 North American IPv6 Summit Review
Improving E-Mail Security with DomainKeys Identified Mail (DKIM)
Is an SDN Switch A New Form of a Firewall?
SDN switches can behave like a firewall, but they may not be a replacement for the real thing
Deploy IPv6 Now, But You Will Still Experience the IPv4 Address Shortage
With Cisco ACI, Do You Still Need A Firewall?
Holding IPv6 Neighbor Discovery to a Higher Standard of Security
Annual Security Reports Predict What We Can Expect in 2015
Recent security reports give insight into security best practices often missed.
Do You Really Need a Subnet Calculator for IPv6?
Mobile Apps for Troubleshooting IPv6
SDN Security Attack Vectors and SDN Hardening
Securing SDN deployments right from the start.
High Availability DHCPv6
Still Using DHCP On Your Routers? You Can’t Do That With IPv6!
IPv6 and OpenStack
OpenFlow Supports IPv6 Flows
Software Defined Networking systems are gaining IPv6 capabilities
Making a New Product? Make it Dual Protocol!
Can you really trust the network to keep promises?
Why You Must Use ICMPv6 Router Advertisements (RAs)
ACI Details Revealed at Cisco Live 2014
Software Containers: Used More Frequently than Most Realize
Containers are being used more often to secure applications and create cloud services
Finding and Fixing Open DNS Resolvers
ARIN Reaches Phase 4 IPv4 Exhaustion
ARIN Enters Phase 4 of IPv4 Exhaustion
ARIN is now down to their final /8 equivalent block of IPv4 addresses.
Handling the Heartbleed OpenSSL Vulnerability
DNS-based Authentication of Named Entities
Windows XP: Goodbye and Good Riddance
If you are still running Windows XP, your organization has bigger problems
Not your Father’s Flow Export Protocol (Part 2)
What is AppFlow and how does it differ from other flow analysis protocols?
The Fragmented Internet
Your Father’s Flow Export Protocol (Part 1)
History of flow analysis protocols and how we use them
Improved Security Through DNS Inspection (Part 2)
The erosion of IT's middle class
Evolve your career with the changing face of IT, or risk getting left behind
Improved Security Through DNS Inspection (Part 1)
Clos Networks: What's Old Is New Again
What goes around, comes around – Clos Networks are back
Using SDN to Create a Packet Monitoring System
Packet-level Monitoring Use Case with Cisco XNC and Monitor Manager
gogoNET LIVE 4! IPv6 Conference Recap
IPv6 conference provide information to both physical and virtual attendees
Dual-Protocol Routing with Raspberry Pi
Using a Raspberry Pi as a low-cost dual-protocol router
Raspberry Pi as a Network Monitoring Node
Using an inexpensive Raspberry Pi system for remote network troubleshooting
Understand and Obey the Laws of Networking
Ignorance of the laws of networking is no excuse.
Traceroute and DNS Interaction
OSPFv3 for IPv4 and IPv6
Cisco IOS support for OSPFv3 for multiple address families
IPv6 Network Management
Consider how you will manage IPv6 as you prepare to deploy it
Mobile Devices and BYOD are Driving IPv6 Adoption
A mobile population needs IP addresses to communicate
Does your network support Jumbo Frames and should you enable it?
Stages of IPv4 Address Exhaustion
MTU Size Issues
Issues related to MTU size, PMTUD and packet fragmentation
Life in a Dual Stack World
What life might be like when we are using two Internet protocols?
Kali Linux: The Next BackTrack
The most popular open source pen testing distribution just got better
Using Dual Protocol for SIEMs Evasion
Attackers using IPv4 and IPv6 can avoid detection by IPS, SIEMs, reputation filtering, and more
Core Networking and Security 100th Blog Post
Four years of blogging about Core Networking and Security (and IPv6)
If you are pursuing an IT certification in 2013, IPv6 questions may be on the test
9 Common Spanning Tree Mistakes
Frequent spanning tree protocol misconfigurations cause network problems
Time to Upgrade Cisco Catalyst 6500 Non-E-Series Chassis
Support for older 6500 chassis ended yesterday
U.S. Government Progress on IPv6 Deployment
Monitoring the country's IPv6-enabled government services.
IPv6 Is Not an All-or-Nothing Proposition
You don't have to switch directly from IPv4 to IPv6
Achieving PCI Compliance When Using IPv6
Does the PCI DSS really require NAT for IPv6?
IPv6 NAT - You can get it, but you may not need or want it.
RIPE NCC IPv4 Address Exhaustion
Web Application Firewalls and IPv6
Does your WAF protect against IPv6 attacks?
Dual-Stack Will Increase Operating Expenses
More IT staff required when running IPv4 and IPv6 simultaneously.
Life After World IPv6 Launch
What is next for the next-generation Internet Protocol?
Preparing Your Enterprise for World IPv6 Launch
Things you should be doing even if you are not participating
What About Stream Control Transmission Protocol (SCTP)?
What is SCTP and why are we not using it?
IPv6 Summit Recap
Review of 2012 North American IPv6 Summit
Ramp Up On IPv6 at a 2012 IPv6 Event Near You
2012 IPv6 events are coming to a town near you
Should You Allow Inbound E-mail Over IPv6?
Why you may not want to allow inbound e-mails over IPv6 transport?
Clear Choice Test: IPv6 deployment starts at the network edge
Six ADCs deliver IPv6 capabilities to apps hosted on IPv4 Web servers
Internet Edge IPv6 Deployment
Start at your Internet edge when deploying IPv6
IPv6 Week and World IPv6 Launch
Lengthier World IPv6 Day Events in 2012
IPv4 NAT is the Killer App for IPv6
2012 North American IPv6 Summit
The Future of Firewall Policies
How IPv6 will change the way we configure firewall policies
I Want IPv6 for Christmas - Part II
IPv6 gifts can you give for the holidays
Measuring IPv6 Growth
Several recent sources of IPv6 adoption statistics
Techniques for Prolonging the Lifespan of IPv4
May the road rise up to meet you, may the wind be ever at your back and may you outlive IPv4
Death to Firewalls; Long Live Firewalls
Changing firewall architectures as the pendulum swings from centralized to distributed firewalls
Peeling the Security Onion
Security Onion saved me so much time it made my eyes water
Stronger IPsec VPN Configurations Needed
Should you be using IPsec with IKEv2, SHA-2 and AES?
Firewall Administration Techniques and Tools
Methods and tools to help you gain control of your firewalls
New IPv6 DNS and BIND Book
New book provides important information for IPv6 BIND configuration
World IPv6 Day Results: New Internet Protocol Proves It's Ready
Preparing for World IPv6 Day
How should you prepare for World IPv6 Day on June 8th?
Troubleshooting IPv6 Networks and Systems
Techniques for finding problems in a dual-protocol environment
Rocky Mountain IPv6 Summit has Avalanche of Attendees
2011 IPv6 Summit provided valuable information to attendees
Cost of Running an IPv4 Network Will Increase
Operating an IPv4 network will become increasingly costly and make IPv6 more attractive
IPv6 Training Resources
Here are some resources to help you avoid "IPv6 brain drain"
Cisco USB Console Ports
Cisco products now come with USB ports that allow console access
Recent Annual Security Reports - Valuable Insight on Internet Threats
The latest vendor annual security reports share state of Internet security threats
When it Comes to IPv6; Go Native
Do not fear deploying dual-protocol web sites
Top 10 Tasks for IPv6 Application Developers
Things to consider when creating dual-protocol applications
IPv6 New Year Predictions
How did my predictions for 2010 turn out and what might occur in 2011?
IPv4 Reputation Filtering Not a Long-Term Solution
As carriers deploy Large Scale NAT (LSN) reputation filtering will lose its effectiveness
IPv6 Subnet Calculators
IPv6 subnetting and IPv4 subnetting are very different so you may need a tool to assist you
The Incredible Shrinking Bogon List
As the global IPv4 free pool reduces so does the size of the IPv4 bogon list
Network Packet Monitoring Matrix Switches
New devices can eliminate limitations of using taps and SPAN ports
My Seven Secret Weapons for Network Management on a Budget
Here's a list of my favorite free or open source tools to keep your network humming.
Tier 1 for IPv4 != Tier 1 for IPv6
Will we see a changing of the ISP guard with IPv6?
Allow Both TCP and UDP Port 53 to Your DNS Servers
DNS queries are getting bigger so we do not want to accidentally block them
IPv6 Enabled Web Browsers
Know where you are going and with which IP version before you get there
Testing NAT64 and DNS64
Setting up an IPv6-only network with Ecdysis and surfing the IPv4-only Internet
IPv6 Summit Was a Huge Hit
Rocky Mountain IPv6 Summit is Largest IPv6 Conference of the Year
The 2010 Future-Net was Enlightening and Fun
Comcast IPv6 Adoption Monitor
Site gives insight into IPv6 usage
Rocky Mountain IPv6 Summit
3rd annual IPv6 Summit is set to be a great event
NIST Gives Guidelines for Securing IPv6
NIST Draft of Special Publication 800-119 will help secure IPv6 ahead of deployment
Rickrolling and Web Security
What can Rickrolling teach us about web security?
Cisco ASA Version 8.3
Cisco’s latest ASA software version adds significant functionality
Newest Security Reports Show Changing Threats
Look at the recent annual security reports to find attack trends
Spanning Tree: Long Path Cost
Increases in link bandwidth will require eventual path-cost length upgrade
BackTrack 4 Final Released
BackTrack 4 is a supremely useful security assessment toolkit
Domain-Name Jail is Not Fun
My trials and tribulations of restoring my domain name
My predictions for 2010; Let’s see if they come true
Service Provider Contradiction Affliction
Service providers advertize both blazing downloads and advocate rate-limiting
gogoNET by gogo6: New Social Networking Site for IPv6
IPv6 people unite on gogoNET.gogo6.com
10GE and Network Oversubscription Ratios
10Gbps Ethernet is changing how we think about network design oversubscription models
BackTrack4 Uses IPv6 to Cover Tracks
Security assessment toolkit uses Miredo as back-channel
Observe IPv6 Traffic Encapsulated Within IPv4 Packets
Understanding your network means understanding IPv6 tunneled packets
New IPv6 Features in Cisco IOS 15.0
A few new IPv6 features in Cisco’s latest software
Windows 7 and IE8 Slowness Problems Fixed
IE8 slowness was driving me crazy until I found a fix
The IPv6 Internet is Growing
Evidence that IPv6 Internet Traffic is Increasing
10 in IPv6 Does Not Equal 10 in IPv4
A Funny Thing Happened on the Way to Configuring an IPv6 Tunnel
I Remember When I Used a Public IPv4 Address
When was the last time you actually used a public IPv4 address?
Networking around the World
Realization that the Internet world is not flat
Finding an IPv6 ISP
Advice on Choosing and IPv6-capable Internet Service Provider
CCIE Recertification – Not Again!
Passing the CCIE Recertification Exam for the 8th Time – Priceless
NANOG46 and Cisco Live had Significant Focus on IPv6
IPv6 was a Key Focus Topic at NANOG46 and Cisco Live
IPv6 Traffic: Do Not be Overly Alarmed
Be aware of IPv6 traffic and its security implications – No need to Beware
Take Care of Your Brain
Be a Better IT Professional by Taking Care of your Brain
Cisco Live 2009 San Francisco
Educational and Fun all Rolled into One
Ethernet on a Ring
Methods of using Ethernet in a ring topology
VMPS: Put a Fork in it
VLAN Membership Policy Server VMPS
Forget Five-9s – Go for 100%!
What’s New in Cisco ASA Firewall Release 8.2?
Review of 2009 Future-Net-Expo
Annual Security Reports
IPv6 Summit Reaches Pinnacle
High Expectations of Network Availability
Routers versus Switches for Enterprise Internet Routing
Google IPv6 Implementors Conference
Free IT Training – A Reality in 2009
Recycling – A Key Part of a Green IT Strategy
Security at 10Gbps
Tagging the Native VLAN
Cisco Adds Features to Firewall Services Module
Spanning Tree - Oh Woe Is Me
IPv6 Capabilities in Cisco’s IPS Software Version 6.2
Windows 7 IPv6 Support
Practical BGP Security
Cisco IPv6 Support Comes Standard
Configuration Management on a Budget
IPv6 on Your Mobile Phone
Increasing Network Availability with Visio
I Want IPv6 for Christmas
Welcome to Scott Hogg's Network World Blog