The ramblings of a computer geek
Had an issue where we had a client that couldn’t access a particular site, in this case we wanted to determine what encryption ciphers a particular website was offering on its HTTPS server, SSLScan which is a Linux tool available on Ubuntu and other distributions can help, for example:
More...
The resolution of a DNS FQDN requires a number of servers to be queried, typically your machine (or a DNS resolver – on your behalf) will query the root DNS (name) servers, these will then return the (registrar) name servers that serve the TLD (top level domain) e.g. .com, .co.uk etc. for your domain, these […]
More...
DNS name resolution is essential to modern connectivity. The ability for hosts to be able to quickly and reliably resolve DNS domain names (e.g. www.google.com) to their IP address equivalents (e.g. 216.58.204.68 or 2a00:1450:4009:827::2004) to connect and consume services ensures consistent and performant network flows. Due to the essential nature of DNS, DNSSEC is an addition […]
More...I was attempting to run a Python script on a Extreme Networks EXOS switch, but it didn’t work. The fix was simple, add the following line to the Python script to import the “exsh” module.
More...AWS Route53 provides DNS Resolution (and DNS Registrar) services. You can use Route53 to register a domain, host the zone file and provide DNS resolution, alternatively, you can have the domain registered elsewhere, but then use Route53 to host the zone file and provide DNS resolution. There are some different options here, Route53 ties nicely […]
More...Recently Broadcom have moved all VMware customers over to their support portal. Broadcom have a “Site ID” for each customer, so they created one for everyone migrated from VMware. The missing bit was how you get that Site ID, you need this so you can request access to your support and product entitlements. Step 1 […]
More...Although you shouldn’t be working around certificates which are very old or no longer meet modern standards e.g. TLS 1.3 etc. if like me you need to access something using TLS 1, you can use Firefox and change the configuration. Use the URL: about:config Then set: security.tls.version.min (from 2/3 to 1), then attempt to access […]
More...IPerf is a tool that can be used to measure the bandwidth and quality of a network link. Its a useful little tool, so I’ll introduce some of the basics of how you can use it to perform some tests. Bear in mind this is not an exhaustive guide, there are many tweaks that can […]
More...On VOSS/FabricEngine SLPP should be configured on every VLAN at the point where it leaves the fabric and meets a non-fabric loop prevention strategy. This will prevent any loops from impacting the fabric by closing down ports where a loop is detected. The below assumes you already have SLPP configured on your upstream switches. If […]
More...When attempting to deploy a VMWare OVA via vCenter you may see an error such as the following: One possible solution (which might work for you) if you can’t get a suitable replacement OVA is to use the OVFTool (which you can download from VMware) to strip the certificate from the OVA, effectively creating a […]
More...