text:
Enabling Solutions in Cloud Infrastructure and for Network Functions Virtualization
- Branden Shaw
- 4 years ago
- Views:
1 Enabling Solutions in Cloud Infrastructure and for Network Functions Virtualization Gateway Use Cases for Virtual Networks with MX Series Routers 1
2 Table of Contents Executive Summary... 3 Introduction...4 Introduction to Virtual Networks...4 Key Gateway Features for MX Series Routers...6 Use Cases...6 Internet Gateway...6 Interdomain Gateway...7 Data Center Interconnect...9 Internetwork Gateway Hardware Appliance Insertion...11 Virtual Private Cloud for Enterprise VPNs...12 Enterprise VPN Service Chains (Virtual CPE)...13 Service Chaining Gateway for Subscriber Networks...14 Conclusion...15 About Juniper Networks Table of Figures Figure 1: MX Series router supporting several gateway use cases for virtual networks... 3 Figure 2: leverages protocols and architectural principles from L3 VPNs as used in WANs... 5 Figure 3: An MX Series router acting as a gateway to the Internet for a set of virtual networks...7 Figure 4: MX Series platform using VRFs to connect between virtual networks in different domains...8 Figure 5: MX Series platform using VRFs to connect virtual networks in different data centers...9 Figure 6: MX Series routers acting as a gateway to bare metal servers connected to VLANs or VMs connected to VLANs Figure 7: MX Series platform enabling insertion of a physical appliance between two virtual networks...11 Figure 8: MX Series platform acting as a gateway between enterprise VPNs and virtual networks in a data center...12 Figure 9: Virtual appliances can be inserted into enterprise VPNs to support on-demand services...13 Figure 10: Virtual appliances connected as a service chain into a VPN using virtual networks...14 Figure 11: Service chaining through service delivery gateway with service- and application-aware steering
3 Executive Summary Cloud automation and Network Functions Virtualization (NFV) are potentially disruptive and transformative networking technologies, and they have captured the attention of network operators and hosting service providers around the world. There are many active programs investigating how best to take advantage of these technologies to enable delivery of new services and improve the quality and operational efficiency of existing ones. The justification for implementing any new technology requires a business case that demonstrates the potential for new revenue, CapEx reduction, or OpEx reduction. The combination of Juniper Networks virtual networking solution and MX Series 3D Universal Edge Routers can deliver value on all three of these axes based on the impact of Moore s law increasing the compute power of the x86 platform (including network processing), the powerful automation features that cloud architectures deliver, and the proven industry-standard protocols supported in both Juniper Networks Junos operating system and. Juniper customers using virtual networking in combination with MX Series routers improve the flexibility of how their networks are architected, bringing opportunities for creating new service combinations that meet the needs of an ever more demanding world. This document describes how MX Series routers can be deployed to perform gateway functions in a variety of use cases when is managing virtual networks in service provider and enterprise environments. The key capabilities that the MX Series provides are: The ability to interoperate between different virtual network domains (OpenStack, VMware, etc.); The ability to bridge geographically distributed virtual network domains; The ability to connect virtual networks and physical networks (enterprise VPNs, public Internet, etc.); The ability to anchor virtual service chains when network services are applied to specific traffic flows in mobile access networks, broadband/fixed access networks, and enterprise VPNs; and The ability to anchor both physical and virtual network elements in a service chaining environment virtual networks are implemented as network overlays that can be deployed on existing data center switched networks. uses standards-based control protocols and encapsulations, including, MPLS, and Virtual Extensible LAN (VXLAN), so interoperating with MX Series routers is straightforward and seamless, and leverages the same Junos OS features that are already in use in today s most demanding networks. MX Series routers can scale to meet any business need, and they support a rich set of features for resilience and high availability that are not available in software-based gateways. The combination of optimized silicon, systems built using that silicon, and Junos OS software delivers high performance with low power per Gbps of throughput. This document will also show how MX Series routers can be used as gateways between domains, between domains and other physical and virtual networks, and how domains can be leveraged to extend gateway functionality in physical networks. Internet MX Series router performing multiple gateway functions: Internet access Data center interconnect Enterprise private cloud MX Series L3 VPN Data center switches carry encapsulated traffic between servers in the domain and to MX gateway cluster manages virtual networking for the domain Enterprise sites connected using L3 VPN Remote data center containing a domain Tenant workloads running in VMs on hypervisors with vrouter /OpenStack domain Figure 1: MX Series router supporting several gateway use cases for virtual networks 3
4 Introduction The use cases explored in this white paper fall into three general categories: Data Center: Gateway use cases where virtual networks need to be connected to other networks within the same data center or other data centers, or to the Internet Enterprise VPN Services: Where cloud infrastructure is used to augment enterprise VPNs with virtual private cloud and network services such as firewall or intrusion detection Service Chaining for Subscriber Networks: Where traffic flows are directed into chains of virtualized services, such as optimizers and parental control, using subscriber- and application-aware filtering The use cases described in this document are as follows: Category Use Case Description Data Center Internet gateway Provide Internet connectivity to a set of virtual networks in a data center by linking a gateway router into virtual networks Enterprise VPN Services Subscriber Networks Interdomain gateway Data center interconnect Internetwork gateway Appliance insertion Virtual private cloud Enterprise VPN service chains (vcpe) Service chains Enable connectivity between virtual networks in different administrative domains in a data center Allow geographically separated domains to easily be linked since the virtual networks inside each data center use the same protocols as the WAN between them Provide gateway between virtual networks and VLANbased networks, including VMware virtualized servers and physical servers Insert hardware appliances such as firewalls and load balancers between virtual networks Enable access to virtual private cloud infrastructure from within a VPN while preserving the security and quality-of-service (QoS) guarantees of the VPN Use virtualized service chains to support on-demand network services for enterprise customers without deploying hardware onsite Use subscriber- and application-aware steering into virtualized service chains in mobile and wireline networks to support new services and improve operational efficiency Each use case illustrates a different facet of what is possible using the solution in combination with MX Series routers. The flexibility and power of Junos OS in the MX Series routers allows multiple gateway use cases to be combined as needed to satisfy business and technical requirements. Introduction to Virtual Networks The founding principle of was to take the protocols and architectural principles that the world relies on in the world s largest physical networks, and apply them inside data centers. This enabled the team to leverage the fact that many problems of scaling, resilience, and performance in networking had known architectural solutions that had been thought through by leading vendors and operators in standards bodies and were in everyday use in core networks. Supporting industry-standard protocols such as and MPLS allows virtual networks to easily interconnect with today s physical networks so that cloud environments using can seamlessly access other virtual and physical networks. Additionally, the benefits of cloud automation and virtualization can be applied in new ways to networks themselves, which has the potential to radically improve the flexibility of networks and allow a raft of new services to be offered. The use cases described in this document cover both scenarios. Figure 2 shows how the concepts of route exchange, encapsulation tunnels, and scoped route lookup in virtual routing and forwarding (VRF) have been carried over from the implementation of Layer 3 VPNs in physical networks into the virtual world. A VRF is a virtual instance of a router within which local route lookup is performed, and it is the fundamental building block of VPNs. A physical router may contain thousands of VRFs, each corresponding to a different VPN that is connected to that router. 4
5 L3 VPNs for Inter-Site Connectivity Traffic segmentation in the WAN MPLS over MPLS label encapsulation tunnels route signaling Virtual Networkd in Data Centers Traffic segmentation in the LAN MPLS over GRE or VXLAN label encapsulation tunnels XMPP (with payload) route signaling Route Reflector OpenStack Cloud Manager Customer Site CE Router PE Router Customer VRF Encapsulation Tunnel Provider Network XMPP () VM Hypervisor with vrouter Server Tenant VRF Encapsulation Tunnel Data Center Figure 2: leverages protocols and architectural principles from L3 VPNs as used in WANs In the physical network, the route reflector performs exchange of routes between VRFs in different routers with matching VRF identifiers (route targets). The routes may be statically configured, or they may have been learned through peering with other routers or route reflectors. The result is that all sites connected to VRFs with the same route target have routes to each other. Traffic is passed between sites by means of encapsulation tunnels between provider edge (PE) routers that take customer traffic through the provider network without that network having visibility into the customer source and destination. The controller is integrated with a cloud management system such as OpenStack, and its function is to ensure that when a virtual machine (VM) is created, it has network connectivity based on the policies applied to it. Virtual machines are associated with virtual networks (groups of IP addresses), and network policies identify which virtual networks should be able to communicate with each other. The implementation of network policy happens in the vrouter, which is installed into each hypervisor and provides Layer 3 VPN routing in place of the hypervisor s native Layer 2 switching capability. When a virtual machine is created by the cloud manager, the controller configures routes in the vrouter connected to the VM just created; these allow the new VM to reach other VMs in the same virtual network, as well as VMs in other virtual networks that network policies allow them to communicate with. Additionally, the controller adds a route to the new VM in all vrouters connected to VMs that can communicate with it, allowing reverse traffic flows. The controller effectively performs the function of route reflection in software and publishes the results to vrouters, whereas an actual route reflector may initiate a series of interactions with routers before reaching steady state. The controller communicates with vrouters using Extensible Messaging and Presence Protocol (XMPP), which is a robust, publish/subscribe messaging protocol. The messages are essentially a superset of route updates, with the additional ability to create VRFs and install routes to local interfaces. Additionally, controllers support native, and are able to peer with physical routers and route reflectors. When a packet is sent from one VM to another, the source vrouter looks up the address of the destination VM and will get back a next hop, which is the address of the server that the destination VM is running on, as well as a label which identifies the interface in the vrouter to which the destination VM is connected. The original packet is encapsulated with a new header that contains the label and destination. The encapsulation protocol can be MPLS over generic routing encapsulation (GRE) or VXLAN. When the encapsulated packet is sent into the data center switching network, the switches only see the outer header and direct the packet to the destination server. When the packet reaches the server, the outer header is stripped off by the vrouter and the label is used to identify the interface of the destination VM. The original packet is then sent to the VM interface. The concepts of route distribution, tunnel encapsulation, and interface labeling used in virtual networks are exactly the same as used in today s wide area networks. 5
6 controller software is typically deployed in a distributed fashion for scale and high availability, with multiple instances of each software component ensuring that there is no single point of failure. This is referred to as a cluster. The group of servers whose virtual networking is managed by a cluster is referred to in this document as a domain. The servers are connected by a set of Layer 2 switches that carry encapsulated traffic between vrouters running on each server in its hypervisor. Details of the architecture and its operation can be found in Open Architecture Documentation 1. Key Gateway Features in MX Series Routers MX Series routers are the latest products to benefit from the rich heritage of Juniper routers and Junos OS. Juniper has been a leader in creating the protocols that run the major networks that form the Internet, as well as service provider and business enterprise networks. MX Series routers support a comprehensive range of protocols and features used in the gateway use cases described later in this document. The key features of the MX Series routers that are used in the gateway use cases are listed in the table below. Table 1: MX Series Gateway Features Use Case Multiprotocol Border Gateway Protocol (MP-) Dynamic tunnels using MPLS-over-GRE or VXLAN Routing instances (VRF) Routing and policy-based forwarding API for programming Description Control protocol that allows routes to be exchanged between network domains that may employ different networking protocols. This is used to exchange routes between domains, and between domains and physical networks. Allows network overlay encapsulation to be applied so that user network packets can be carried from point to point in a transport network without the transport network seeing the user packet details (source/destination). This technique is used to carry packets between vrouters within a domain in a data center, and between vrouters in a domain and an MX Series router acting as a gateway. A physical router can contain multiple routing instances that allow local routing tables to be applied to network packets. Tunnels between routing instances using an overlay encapsulation allow VPNs to be implemented. The term virtual routing and forwarding (VRF) is used for routing instances that support Layer 3 VPNs using overlay encapsulation. This provides the ability to send traffic between routing instances within a router and to routing instances on other physical or virtual routers using signaled routing (via or other control protocol) or forwarding based on rules applied to traffic entering a routing instance. This enables the ability to programmatically change the configuration of a router through a published interface and API. For instance, MX Series routers support Netconf with XML command payloads. Most or all of these features are used in each of the use cases described in the following sections. Use Cases The following section describes a variety of use cases, including Internet Gateway, Interdomain Gateway, Data Center Interconnect, Internetwork Gateway, Hardware Appliance Insertion, Virtual Private Cloud for Enterprise VPNs, Enterprise VPN Service Chains (Virtual CPE), and Service Chaining Gateway for Subscriber Networks. Internet Gateway In the Internet Gateway use case, connecting to the Internet from a virtual network is enabled through standards-based route exchange with the MX Series gateway using, and by the MX Series platform natively supporting the same encapsulation that vrouters use for communicating amongst themselves. From the perspective of, the MX Series router becomes part of a virtual network; from the point of view of the router, the vrouters appear as other routers to which packets destined for the VMs attached to them should be sent. The MX Series routers thus integrate seamlessly with the domain. Alternative approaches require use of a software gateway that is itself running as a virtual machine. This can require traffic to take additional inefficient paths within the data center, and can also result in the software gateway becoming a bottleneck due to its own packet forwarding capability or CPU contention on the hypervisor on which it is running. 1 The software is an open-source distribution available at Open.Org. The document can be found at: 6
7 Benefit The use of MX Series routers as gateways to virtual networks brings simplicity and resiliency to cloud infrastructures, which in turn allows service providers to offer strong service-level agreements (SLAs) to their customers while incurring low risk and internal costs. Proven architectures and protocols deliver high performance and resilience. Detail This use case applies to enterprises and service providers (hosting and Infrastructure as a Service) who use and OpenStack to manage cloud infrastructure and where the virtualized resources need access to the Internet (e.g., Virtual Desktop Infrastructure), or resources need to be accessed from the Internet (web servers). The use case relies on the ability of to associate publically addressable floating IP addresses to interfaces of VMs in the virtual environment. Internet public addresses advertised in Internet Public VRF with vrf-table-label imports and exports tenant communities Route exchange using auto-export VRFs with route targets matching virtual networks also import from public community Encapsulation tunnels from MX VRFs to vrouters MX Series MX configuration XMPP MX advertised to vrouters in domain as next hop for Internet /OpenStack domain Figure 3: An MX Series router acting as a gateway to the Internet for a set of virtual networks The router is configured to peer via to an Internet gateway router and also with the controller. The Internet gateway router is specified as a next hop for the default route (Internet). A routing instance is created that will be used to aggregate traffic from a set of VRFs created for each virtual network. The routing instance is configured to advertise the pool of network addresses that can be used by for floating IP addresses into the Internet. Each VRF has a route target that matches that of a virtual network, which enables communication between each vrouter and its network s VRF on the MX Series via an encapsulation tunnel. The MX Series router is configured with logical tunnels between each VRF and the Internet routing instance. This provides a route to the Internet for each of the VRFs, and these routes to the Internet, in turn, are advertised into the virtual networks. Thus, VMs in the data center configured with floating IP addresses have a route to addresses on the Internet. In most cases, Internet access will be provided by a pair of routers configured either to load-balance traffic, or to act as an active/standby pair. virtual networking supports either of these models, but for clarity the second router is not shown in Figure 3. Interdomain Gateway When multiple domains are present in a data center, MX Series routers provide a convenient means to connect virtual networks in different domains, and to allow a virtual network to span multiple domains. Seamless integration between domains gives users in the data center the freedom to place workloads where needed, while preserving connectivity between different workloads and their users. The same MX Series router can also be used for connecting to the Internet, reducing costs since multiple separate devices do not need to be purchased. 7
8 Benefit Interdomain gateway allows seamless expansion of cloud infrastructure without fragmenting into multiple zones. Operational costs are lowered and workload downtime caused by unproductive migrations is eliminated. Detail For administrative and operational reasons, data centers will contain more than one cluster, each of which forms a separate autonomous system. MX Series routers can be used to allow traffic to flow between virtual networks in different domains, and can enable a virtual network to span multiple domains. The MX Series router is configured to exchange routes with each of the controllers (using ), and VRFs are created that correspond to each of the virtual networks, as shown in Figure 4. MX VRFs with route targets matching virtual networks Encapsulation tunnels from MX VRFs to vrouters XMPP MX VRFs are advertised into domains as next hops for VMs in other domains /OpenStack domain Figure 4: MX Series platform using VRFs to connect between virtual networks in different domains The route targets in each VRF are set to correspond to those in the virtual networks in the domains. The VRFs can be configured to extend the same virtual network between domains, or to allow VMs in different virtual networks (with different route targets) to communicate. When VMs are created in a virtual network in one domain, the route to that new VM will be sent as an update to the MX Series platform, and a new route installed in the corresponding VRF. The route will be advertised to the other controllers and routes to the new VM will be installed in each vrouter with VMs in virtual networks that have policies that allow communication with the new VM. The routes to the new VM will have the MX Series router as next hop with a label that identifies the correct VRF. In the diagram, a single MX Series router is shown, but normally a pair of routers will be configured to operate in active/ active or active/standby configuration in order to provide high availability. This use case shows how use of standards-based signaling and common encapsulation protocols allows MX Series routers to easily act as a gateway between domains. This use case can also be combined with the previous use case where a single MX Series router can be an interdomain gateway and provide Internet access. 8
9 Data Center Interconnect Interconnecting data centers is easily achieved by extending virtual networks onto VRFs configured on MX Series gateway routers, and by using standard route exchange between gateway routers. Using to exchange IP routes avoids complications that occur when networks are connected at Layer 2, specifically broadcast floods across the interconnect for address resolution (ARP). Benefit Interconnecting -managed data centers using MX Series routers is simple and efficient, since the connection is formed using the same Layer 3 VPN technology in the WAN that was initially based on. Detail This use case illustrates how MX Series routers can be used to interconnect multiple data centers, each of which contain multiple clusters. Using MX Series routers as gateways dramatically reduces control plane traffic between data centers, leading to better stability and performance while simplifying the network architecture and reducing the probability of configuration errors. Figure 5 shows two data centers with clusters connected to a pair of MX Series routers in each data center. There are several ways to configure pairs of MX Series routers to provide resilience, including Virtual Chassis technology and multichassis link aggregation, but what is important here is the configuration of VRFs in each one. Routes to VMs in other data center are advertised with next hop to corresponding VRF in other MX MX MX Encapsulation tunnel carries traffic between VRFs VRFs with route targets matching virtual networks XMPP /OpenStack domain Data Center 1 /OpenStack domain Data Center 2 MX VRFs are advertised into domains as next hops for VMs in other data center Figure 5: MX Series platform using VRFs to connect virtual networks in different data centers Gateway routers may be connected via IP, in which case GRE tunnels will be automatically created using the dynamic tunnels option; or the connection may be via MPLS, in which case a tunnel can be created dynamically using LDP, or statically using RSVP (which allows control of the bandwidth of the interconnection). The tunnels encapsulate packets traveling between VRFs on different gateways in the same way that packets are encapsulated between vrouters. Each MX Series gateway in a data center is configured with a VRF for each virtual network that needs to extend to another data center. Standard route exchange between the MX Series routers allows each gateway to be informed of routes to VMs in the other data center and form the interconnection. A separate VRF is used for each virtual network to ensure that virtual networks with overlapping IP addresses don t cause conflicts and to ensure isolation of each virtual network s traffic. A refinement to the method is to have separate address blocks for virtual networks in each data center, which then allows the blocks to be advertised by each gateway router, rather than all the individual host routes. In large environments, this can be used to reduce control plane traffic between data centers when VMs are created and destroyed. Using address blocks in the gateways corresponds exactly to how VPNs are implemented in carrier networks. The difference here is that the VPNs are extended inside the data centers as virtual networks, whereas carrier VPNs terminate at the gateway (PE router). 9
10 Internetwork Gateway Assets that are connected to Layer 2 switch networks using VLANs, including VMware virtualized servers and physical servers, can be seamlessly integrated with virtual networks by configuring VRFs on MX Series routers to act as gateways between the switched data center network and virtual networks. This allows existing assets to be leveraged in cloud infrastructures, ensuring a smooth evolution from conventional data center networks to overlay virtual networks while preserving the value of legacy assets. Benefit Existing assets are not stranded since applications created in new cloud infrastructures can communicate with systems in legacy environments. This is a critical capability, since most environments are not greenfield. Detail In most data centers, some applications run on physical servers and virtual servers that are connected using VLANs configured on physical switches in the data center. These applications need to be reachable and integrated into the virtual network environment. Examples include legacy database applications and certain video streaming applications that can t be virtualized. Additionally, existing virtualization implementations based on VMware may also need to be accessible from virtual networks. Such systems are connected to the network via Ethernet and are usually placed in VLANs configured in data center switches. The MX Series router can act as a gateway between virtual networks and the VLANs that physical devices and servers are connected to. This is achieved by creating a VRF with the same route target as a virtual network and by configuring the VLAN interfaces that physical devices are connected to as part of the VRF. Finally, the VRF is configured with one or more static routes that identify which server addresses can be reached on each VLAN. These static routes are advertised on the virtual network so that VMs on the virtual network can now reach the physical devices. MX Series VRFs with route targets matching virtual networks and configured with VLANs and/or interfaces Directly connected server Encapsulation tunnels from MX VRFs to vrouters Physical servers and VMs connected to MX on VLANs XMPP MX VRFs are advertised into domains as next hops for servers and VMs in L2 switched domain domain L2 switched domain Software defined virtual networks VLANs configured in switches Figure 6: MX Series routers acting as a gateway to bare metal servers connected to VLANs or VMs connected to VLANs 10
11 Hardware Appliance Insertion Use of static routes in VRFs allows physical devices to be inserted into the data path between virtual networks. This enables existing data center assets, such as firewalls and load balancers, to be leveraged in cloud infrastructure. The solution using MX Series routers and is simple to deploy and manage because the routes into the physical devices are automatically advertised using. No configuration is required in the domain, only the VRFs on the MX Series router. Benefit The hardware appliance insertion use case allows continued use of appliances and network devices that provide value in the network, and around which operational procedures and corporate policies have been developed. Detail This use case illustrates how MX Series routers can be used to insert physical devices into the path of traffic flowing between two virtual networks. An example would be a stateful firewall used to control types of traffic flowing between networks, or intrusion detection and prevention (IDP) for traffic coming into the data center from external sources. Most customers have such systems in place in their data centers, and have developed enterprise security policies around the specific capabilities of the devices they own. It is therefore highly desirable that these systems can be integrated into the virtual networks in a cloud infrastructure in order to preserve existing capabilities. MX Series routers can be configured to direct traffic flowing between two virtual networks to flow through a physical device. This is achieved by creating two VRFs on the router, each with a route target of a virtual network, and with an interface that connects to the device configured in the VRF, as shown in Figure 7. Routes are configured in each VRF such that the next hop to get to the other network is the interface connected to the physical device. These routes are advertised to the rest of each network so that any traffic from a source in one network to a destination in the other will be directed first to the VRF on the MX Series router that is in the source network, then to the physical device, and will then emerge in the VRF in the destination network. Each VRF is configured with static route that points into interface to physical appliance as route to the other virtual network MX Physical appliance e.g. firewall, media cache, load balancer XMPP MX VRFs are advertised into domains as next hops to the other virtual network /OpenStack domain Figure 7: MX Series platform enabling insertion of a physical appliance between two virtual networks The technique of advertising static routes to an interface in a VRF can be applied when physical devices have other than two interfaces to be connected to the virtual environment. This can be useful, for example, when a physical firewall is connected to multiple virtual networks. Once again, use of standards-based control and data plane enables MX Series routers to be easily configured in order to bridge the physical and virtual worlds. 11
12 Virtual Private Cloud for Enterprise VPNs The ability to extend VPNs up to and inside data centers allows network service providers to offer cloud services to their VPN customers while preserving the performance and security SLAs of the VPN from each customer site right up to VMs that may be running critical customer applications. This will provide new business opportunities for network service providers and give customers access to the operational and financial benefits brought by hosting applications on cloud infrastructure. Benefit The Virtual Private Cloud for Enterprise VPNs use case creates new revenue opportunities for network service providers who can capitalize on their existing customer base, installed infrastructure, and a reputation for reliability and security. Detail This use case illustrates how a service provider can extend an enterprise MPLS VPN to include virtual networks created within cloud data centers using technology. Route Reflector Routes to VMs in other data center are advertised with next hop to corresponding VRF in data center MX Static routes to virtual networks are normally configured to be advertised by each VRF to avoid host routes in customer VPNs MX Provider Network Encapsulation tunnel carries traffic between VRFs VRFs with route targets matching customer and virtual networks /OpenStack domain Data Center XMPP MX VRFs are advertised into domains as next hops for addresses in each customer VPN Figure 8: MX Series platform acting as a gateway between enterprise VPNs and virtual networks in a data center In this scenario, a provider of MPLS VPN services can offer additional cloud services by configuring customer VRFs on a gateway router that is in a data center where is managing virtual networks. Similar to the data center interconnect use case, VRFs on the gateway router have route targets which correspond to customer VPN route targets and to those of virtual networks inside the data center. Although the VM addresses could be advertised individually in each VPN, the VRFs are more typically configured to advertise the entire address space of a virtual network as a single route, which is consistent with how PE routers in the VPN network advertise a route to the sites they are connected to. VMs created on a customer virtual network can communicate with destinations in the corresponding VPN, since routes to each site will become present on the VRFs on the gateway router as a result of peering between the data center gateway and the provider network gateway. The VRFs on the data center gateway are implementing the same network isolation technology that is relied on in all major carriers so, in combination with, a consistent security stance can be maintained end-to-end, all the way up to individual virtual machines. From the perspective of the provider network, the domains appear as another provider supporting common VPNs. There are standard ways to make connections between provider networks. The connection method shown in Figure 8 corresponds to Inter AS Option A, where matching VRFs are created on each side of the connection. Alternatively, the MX Series router inside the data center could peer directly with the provider route reflector, and no VRFs would be required in the connecting router. This corresponds to Inter AS Option AB. The connection option depends on the policies of the network provider and whether the data center is provider- or partner-owned. Typically, customers will be given access to a portal that allows them to create VMs inside the data center on demand. The VMs placed on a virtual network connected to the VRFs on the gateway will be accessible from other sites in the same VPN, but VMs can also be placed in virtual networks in the data center with policies that allow access only to other virtual networks. This allows customers to create applications where, for instance, a web server is accessible from anywhere on the customer network, but the underlying application and database servers are only accessible by administrators through the cloud management portal. 12
13 A key advantage that network operators have over public cloud service providers in offering this kind of service is that the network operator is able to offer end-to-end service-level guarantees for network performance and security, since the traffic remains within the operator network and does not have to traverse the Internet at any point. For most large enterprises and for local and national governments, lack of security guarantees, in particular, prevents them from taking advantage of the lower costs and increased flexibility offered by cloud service providers. Extension of VPNs up to and inside data centers solves this problem, and it is a great example of how the use of industry standards in and on MX Series routers can enable new business solutions. Enterprise VPN Service Chains (Virtual CPE) Virtualizing network services such as firewall, intrusion detection, distributed denial of service (DDoS) detection, SSL gateway, and media cache which until recently have been deployed as specialized appliances gives service providers the flexibility to offer new services without having to deploy new equipment at the customer s premise (CPE). Virtualized services are deployed in pools of servers that can be located locally to PE routers, regionally in metro areas, or in centralized data centers, depending on the performance requirements of the service (e.g., latency) and business constraints of the service provider (availability of space, power, and cooling). By leveraging cloud automation, virtual networking, and MX Series routers, customers can order services from providers that can be provisioned automatically and inserted into the customer VPNs for immediate use. Benefit The combination of and MX Series routers provides a platform that allows network service providers to offer new services to their existing customer base. The compute infrastructure required to support the services can grow with service uptake, and the mix of services deployed can match customers individual needs. The use of standards-based signaling and MPLS label encapsulation enables network service providers to reinvent how they deliver services and opens up the possibility of new types of service offerings that align with the needs of their customers, while at the same time being able to turn up these services in minutes rather than weeks. Detail In this use case, virtualized appliances are inserted into the data path between two physical networks, allowing network service providers to offer additional services to existing Layer 3 VPN customers. Rather than extending customer VPNs to a centralized data center (although this is possible), data centers are more likely to be located close to the PE routers (in the same metro area or colocated with PE routers). The intent is to attach virtualized appliances to customer VPNs to support services such as Internet access, security services (firewall, IDP, UTP, SSL), and media caching (content delivery network or CDN). Route Reflector Provider Network Compute resources located locally to PE routers allow virtualized network services to be deployed where and when needed according to specific customer needs domain Figure 9: Virtual appliances can be inserted into enterprise VPNs to support on-demand services To form customer VPNs, each PE router is configured with a VRF for each customer with a connection to that PE, and each VRF contains the interfaces that connect to that customer s sites. is used to exchange routes between customer VRFs on all PE routers in the provider network, so a host on any customer site can reach destinations on any other site belonging to that customer. 13
14 When a customer orders a new service, operational systems determine how many virtual machines will be required to support the required performance, and where they should be located, based on which PE routers the customer has connections to. The VMs are inserted into the customer s VPN by advertising new routes into the VPN that divert traffic into the newly created services. For example, in Figure 10, a customer has requested a combination of Internet access, firewall, and intrusion detection that are implemented in two VMs configured as a service chain between the VPN and the Internet. is used to deploy service instances in each provider point of presence (POP) where the customer has a connection to a PE router. Virtualized network services configured specifically for this computer Provider POP Internet peering point Routes in vrouters send traffic through virtualized services XMPP () Internet Externally connected VRF advertises local customer network into Internet Default route to Internet in customer VPN VRF sends traffic into service chain route exchange within provider network Traffic for destinations at other VPN sites are carried in encapsulation tunnels as normal Figure 10: Virtual appliances connected as a service chain into a VPN using virtual networks The service instances are created from previously defined service templates, which can contain fixed configurations to support specific services, or service instances can be dynamically configured with customer-specific detail after initialization. configures the VRFs in the vrouters along the service chain with routes that send Internet traffic from the customer side through each service in turn, and traffic destined for addresses in the customer network in the reverse direction. The route target of the VRF at the start of the service chain matches that of the customer VPN, so route exchange causes a route to the Internet via the service chain to be installed in the customer VRF in the PE router. Similarly, the route target of the VRF at the end of the service chain matches that of a VRF on the PE router that is configured with a route to the Internet via some Internet peering point. route exchange causes the public IP addresses for the customer site to be advertised on the Internet. Each customer site gains access to the Internet via a local peering point, and incoming traffic is protected by firewall and intrusion detection services specific to that customer located in the local provider s POP for each site. Service Chaining Gateway for Subscriber Networks Subscriber- and application-aware steering into service chains allows mobile, cable, and wireline operators to introduce virtualized services into their networks. This is achieved by configuring MX Series routers as service control gateways with standards-based interfaces to policy and charging rules function (PCRF) or authentication, authorization, and accounting (AAA) for policy enforcement, and optionally configured with deep packet inspection (DPI) that can determine websites visited, media being downloaded, and other traffic types. This granular detail allows flows to be steered to a specific service chain based on offerings purchased by individual subscribers and on the details of each traffic flow. Examples include parental control, content optimization, and content cache (CDN). Benefit The combination of MX Series routers configured as a service control gateway, and service chains configured by from virtualized service instances connected using virtual networking, allows operators to dramatically reduce time to market for new service offerings. It also enables many different offerings to coexist on shared cloud infrastructure. Services can be scaled down for trials and be targeted at small, geographically distributed markets that could not have supported a business case previously. Services can be scaled up for high volume services by simply deploying more virtual service instances. Cloud automation with virtual networking allows services to be deployed according to business need at the most appropriate location. 14
15 Detail This use case applies the service chaining method described in the previous use case to both wireline and mobile subscriber networks. In the previous use case, service chains were created to meet the needs of each customer, and traffic was directed into a service chain using routing in a specific VPN. In subscriber networks, individual users have a specific set of services that they have purchased, and steering into a service chain can depend on knowing the subscriber identity, the specific destination being accessed, and the content being accessed. Routing, which is based on destination IP address only, does not have sufficient granularity in this case. Integration with subscriber policy management systems such as PCRF or AAA, in combination with DPI, can allow such fine-grained steering to be performed. In contrast to the previous use case, where each service instance has to deal with the traffic for a small number of customer sites, in the subscriber gateway use case, the services may see a large fraction of the traffic flow in a significant fraction of a network. Scale and performance become important, and service chains must be designed to handle the expected traffic flows. Important issues such as dynamic scaling of services come into play, ensuring that forward and reverse flows pass through the same instances of stateful services, and supporting reverse steering into the correct service chain must be dealt with. These issues are all solved in the subscriber service chaining architecture using and MX Series routers, but details are beyond the scope of this document. An MX Series router configured for subscriber- and application-based steering is called a service control gateway. Such a device is installed with a number of service cards that manage subscriber sessions and also maintain a connection to a policy control system such as PCRF. When a new subscriber flow arrives at the service control gateway, the packet header and the results of DPI inspection of the first part of the payload are used as input to a filter function that matches a set of predefined criteria that defines the destination, traffic type, and content of the flow. The matching criteria, together with source IP address (used to identify the subscriber), are sent to the PCRF whose response identifies which service chain the traffic should be sent to. Policy Control (PCRF/AAA) XMPP () RADIUS/ DIAMETER Subscriber/applicationaware filter Virtualized service instances with virtual networks connecting to VRFs on router Mobile Access Internet peering point Broadband Access Traffic is forwarded into service chain according to filter matching criteria and policy control Service Control Gateway (MX Series Router) Internet Figure 11: Service chaining through service delivery gateway with service- and application-aware steering Service chains are deployed in similar fashion to the previous use cases and can be composed of physical and virtual service instances. Instead of routes being exported from the entry and exit VRFs, the filter function sends traffic directly into the VRFs using filter-based forwarding. This allows finer grained steering than is possible using routing alone (based just on the destination IP address). Conclusion Juniper Networks MX Series 3D Universal Edge Routers can be configured as gateways for virtual networks, meeting a wide variety of use cases. The solutions build on the fact that integration of the MX Series gateway with virtual networks is easily achieved, since both support industry standards such as and MPLS. The use cases cover a wide variety of situations, including intra-data center, inter-data center, physical and virtual services, business VPNs, and subscriber networks. The use of Layer 3 virtual networks allows the solutions to be simply and easily configured, and the resulting network architectures deliver high scale, resilience, and flexibility of deployment. 15
16 About Juniper Networks Juniper Networks is in the business of network innovation. From devices to data centers, from consumers to cloud providers, Juniper Networks delivers the software, silicon and systems that transform the experience and economics of networking. The company serves customers and partners worldwide. Additional information can be found at Corporate and Sales Headquarters Juniper Networks, Inc Innovation Way Sunnyvale, CA USA Phone: 888.JUNIPER ( ) or Fax: APAC and EMEA Headquarters Juniper Networks International B.V. Boeing Avenue PZ Schiphol-Rijk Amsterdam, The Netherlands Phone: Fax: Copyright 2015 Juniper Networks, Inc. All rights reserved. Juniper Networks, the Juniper Networks logo, Junos and QFabric are registered trademarks of Juniper Networks, Inc. in the United States and other countries. All other trademarks, service marks, registered marks, or registered service marks are the property of their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice EN Feb 2015
White Paper. Juniper Networks. Enabling Businesses to Deploy Virtualized Data Center Environments. Copyright 2013, Juniper Networks, Inc.
White Paper Juniper Networks Solutions for VMware NSX Enabling Businesses to Deploy Virtualized Data Center Environments Copyright 2013, Juniper Networks, Inc. 1 Table of Contents Executive Summary...3More information
Increase Simplicity and Improve Reliability with VPLS on the MX Series Routers
SOLUTION BRIEF Enterprise Data Center Interconnectivity Increase Simplicity and Improve Reliability with VPLS on the Routers Challenge As enterprises improve business continuity by enabling resource allocationMore information
OVERLAYING VIRTUALIZED LAYER 2 NETWORKS OVER LAYER 3 NETWORKS Matt Eclavea (firstname.lastname@example.com) Senior Solutions Architect, Brocade Communications Inc. Jim Allen (email@example.com) Senior Architect, LimelightMore information
SDN PARTNER INTEGRATION: SANDVINE SDN PARTNERSHIPS SSD STRATEGY & MARKETING SERVICE PROVIDER CHALLENGES TIME TO SERVICE PRODUCT EVOLUTION OVER THE TOP THREAT NETWORK TO CLOUD B/OSS AGILITY Lengthy serviceMore information
Virtualization, SDN and NFV
Virtualization, SDN and NFV HOW DO THEY FIT TOGETHER? Traditional networks lack the flexibility to keep pace with dynamic computing and storage needs of today s data centers. In order to implement changes,More information
Transforming Service Life Cycle Through Automation with SDN and NFV
Transforming Service Life Cycle Through Automation with SDN and NFV Automated workflows improve TCO for service delivery 1 Table of Contents Executive Summary... 3 Introduction... 3 Today s Challenges...More information
Demonstrating the high performance and feature richness of the compact MX Series
WHITE PAPER Midrange MX Series 3D Universal Edge Routers Evaluation Report Demonstrating the high performance and feature richness of the compact MX Series Copyright 2011, Juniper Networks, Inc. 1 TableMore information
Customer Benefits Through Automation with SDN and NFV
Customer Benefits Through Automation with SDN and NFV Helping service providers solve specific challenges they are facing today while improving the overall customer service life cycle 1 Table of ContentsMore information
White Paper SECURE CLOUD CONNECTIVITY FOR VIRTUAL PRIVATE NETWORKS Next-Generation Virtualized Managed Services for the Enterprise with Secure-on-Network Links to the Copyright 2014, Juniper Networks,More information
Service Automation Made Easy
Service Automation Made Easy Networks that know how to customize the network experience for every subscriber Challenge Service providers want to quickly develop and deliver personalized services theirMore information
SoLuTIoN guide. CLoud CoMPuTINg ANd ThE CLoud-rEAdy data CENTEr NETWork
SoLuTIoN guide CLoud CoMPuTINg ANd ThE CLoud-rEAdy data CENTEr NETWork Contents BENEfITS of ThE CLoud-rEAdy data CENTEr NETWork............................3 getting ready......................................................................3More information
Juniper Solutions for Turnkey, Managed Cloud Services
Juniper Solutions for Turnkey, Managed Cloud Services Three use cases for hosting and colocation service providers looking to deliver massively scalable, highly differentiated cloud services. ChallengeMore information
the Data Center Connecting Islands of Resources Within and Across Locations with MX Series Routers White Paper
White Paper Integrating SDN into the Data Center Connecting Islands of Resources Within and Across Locations with MX Series Routers Copyright 2013, Juniper Networks, Inc. 1 Table of Contents ExecutiveMore information
The Distributed Cloud: Automating, Scaling, Securing & Orchestrating the Edge
White Paper The Distributed Cloud: Automating, Scaling, Securing & Orchestrating the Edge Prepared by Jim Hodges Senior Analyst, Heavy Reading www.heavyreading.com on behalf of www.juniper.net OctoberMore information
Reasons to Choose the Juniper ON Enterprise Network
Reasons to Choose the Juniper ON Enterprise Network Juniper s enterprise access products meet the always-on needs of today s enterprises by delivering solutions that are reliable, simple, and smart. TheMore information
White Paper. SDN 101: An Introduction to Software Defined Networking. citrix.com
SDN 101: An Introduction to Software Defined Networking citrix.com Over the last year, the hottest topics in networking have been software defined networking (SDN) and Network ization (NV). There is, however,More information
SDN CONTROLLER. Emil Gągała. PLNOG, 30.09.2013, Kraków
SDN CONTROLLER IN VIRTUAL DATA CENTER Emil Gągała PLNOG, 30.09.2013, Kraków INSTEAD OF AGENDA 2 Copyright 2013 Juniper Networks, Inc. www.juniper.net ACKLOWLEDGEMENTS Many thanks to Bruno Rijsman for hisMore information
Multitenancy Options in Brocade VCS Fabrics
WHITE PAPER DATA CENTER Multitenancy Options in Brocade VCS Fabrics As cloud environments reach mainstream adoption, achieving scalable network segmentation takes on new urgency to support multitenancy.More information
Network Virtualization Network Admission Control Deployment Guide
Network Virtualization Network Admission Control Deployment Guide This document provides guidance for enterprises that want to deploy the Cisco Network Admission Control (NAC) Appliance for their campusMore information
Simplify the Data Center with Junos Fusion
Simplify the Data Center with Junos Fusion Juniper Networks Fabric Technology 1 Table of Contents Executive Summary... 3 Introduction: Network Challenges in the Data Center... 3 Introducing Juniper NetworksMore information
SOFTWARE DEFINED NETWORKING Bringing Networks to the Cloud Brendan Hayes DIRECTOR, SDN MARKETING AGENDA Market trends and Juniper s SDN strategy Network virtualization evolution Juniper s SDN technologyMore information
RIDE THE SDN AND CLOUD WAVE WITH CONTRAIL Pascal Geenens CONSULTING ENGINEER, JUNIPER NETWORKS email@example.com BUSINESS AGILITY Need to create and deliver new revenue opportunities faster ServicesMore information
VMware vcloud Networking and Security Overview
VMware vcloud Networking and Security Overview Networks and Security for Virtualized Compute Environments WHITE PAPER Overview Organizations worldwide have gained significant efficiency and flexibilityMore information
Transform Your Business and Protect Your Cisco Nexus Investment While Adopting Cisco Application Centric Infrastructure
White Paper Transform Your Business and Protect Your Cisco Nexus Investment While Adopting Cisco Application Centric Infrastructure What You Will Learn The new Cisco Application Centric InfrastructureMore information
DATASHEET JUNIPER CARE PLUS ADVANCED SERVICES CREDITS Service Overview Today s organizations are under constant pressure to meet dynamic market demands while increasing their return on investment. IT departmentsMore information
White Paper USING SOFTWARE-DEFINED DATA CENTERS TO ENABLE CLOUD ADOPTION Juniper-VMware Areas of Collaboration By: Daniel McGinniss, Juniper Networks Scott Lowe, VMware Copyright 2014, Juniper Networks,More information
Delivering Managed Services Using Next Generation Branch Architectures
Delivering Managed Services Using Next Generation Branch Architectures By: Lee Doyle, Principal Analyst at Doyle Research Sponsored by Versa Networks Executive Summary Network architectures for the WANMore information
WHITE PAPER. Network Virtualization: A Data Plane Perspective
WHITE PAPER Network Virtualization: A Data Plane Perspective David Melman Uri Safrai Switching Architecture Marvell May 2015 Abstract Virtualization is the leading technology to provide agile and scalableMore information
SDN and NFV in the WAN
WHITE PAPER Hybrid Networking SDN and NFV in the WAN HOW THESE POWERFUL TECHNOLOGIES ARE DRIVING ENTERPRISE INNOVATION rev. 110615 Table of Contents Introduction 3 Software Defined Networking 3 NetworkMore information
Contrail Networking. Product Description. Your ideas. Connected. Data Sheet. Product Overview
Contrail Networking Product Overview Contrail Networking is a simple, open, and agile cloud network automation product that leverages SDN technology to orchestrate the creation of highly scalable virtualMore information
vsrx Services Gateway: Protecting the Hybrid Data Center
Services Gateway: Protecting the Hybrid Data Center Extending Juniper Networks award-winning security products to virtualized, cloud-based, and hybrid IT environments Challenge Virtualization and cloudMore information
Junos Space Virtual Control
Proiduct Overview The proliferation of virtual switches in the data center has presented data center operators with a significant challenge namely, how to manage these virtual network elements in conjunctionMore information
JUNIPER. One network for all demands MICHAEL FRITZ CEE PARTNER MANAGER. 1 Copyright 2010 Juniper Networks, Inc. www.juniper.net
JUNIPER One network for all demands MICHAEL FRITZ CEE PARTNER MANAGER 1 Copyright 2010 Juniper Networks, Inc. www.juniper.net 2-3-7: JUNIPER S BUSINESS STRATEGY 2 Customer Segments 3 Businesses ServiceMore information
Juniper Networks MetaFabric Architecture
Juniper Networks MetaFabric Architecture Enabling a Simple, Open, and Smart Data Center 1 Table of Contents Executive Summary... 3 Introduction... 3 Data Center Myths vs. Realities...4 Myth #1: The dataMore information
Lecture 02b Cloud Computing II
Mobile Cloud Computing Lecture 02b Cloud Computing II 吳 秀 陽 Shiow-yang Wu T. Sridhar. Cloud Computing A Primer, Part 2: Infrastructure and Implementation Topics. The Internet Protocol Journal, Volume 12,More information
Leveraging SDN and NFV in the WAN
Leveraging SDN and NFV in the WAN Introduction Software Defined Networking (SDN) and Network Functions Virtualization (NFV) are two of the key components of the overall movement towards software definedMore information
Transformation of the enterprise WAN with dynamic-path networking
Transformation of the enterprise WAN with dynamic-path networking Greg Ferro November 24, 2014 This report is underwritten by Sonus Networks. TABLE OF CONTENTS Executive summary... 3 How dynamic-path networkingMore information
EVOLVED DATA CENTER ARCHITECTURE A SIMPLE, OPEN, AND SMART NETWORK FOR THE DATA CENTER DAVID NOGUER BAU HEAD OF SP SOLUTIONS MARKETING JUNIPER NETWORKS @dnoguer @JuniperNetworks 1 Copyright 2014 JuniperMore information
CLOUD NETWORKING FOR ENTERPRISE CAMPUS APPLICATION NOTE EXECUTIVE SUMMARY This application note proposes Virtual Extensible LAN (VXLAN) as a solution technology to deliver departmental segmentation, businessMore information
Solutions Guide. Ethernet-based Network Virtualization for the Enterprise
Solutions Guide Ethernet-based Network Virtualization for the Enterprise Introduction The concept of Tunnelling Layer 2 and Layer 3 connections across a shared Layer 2 network used to be the preserve ofMore information
Network Virtualization Solutions
Network Virtualization Solutions An Analysis of Solutions, Use Cases and Vendor and Product Profiles October 2013 The Independent Community and #1 Resource for SDN and NFV Tables of Contents IntroductionMore information
White Paper AN INTEGRATED SECURITY SOLUTION FOR THE VIRTUAL DATA CENTER AND CLOUD Protecting Physical and Virtual Workloads Copyright 2013, Juniper Networks, Inc. 1 Table of Contents Executive Summary...3More information
Testing Challenges for Modern Networks Built Using SDN and OpenFlow
Using SDN and OpenFlow July 2013 Rev. A 07/13 SPIRENT 1325 Borregas Avenue Sunnyvale, CA 94089 USA Email: Web: email@example.com www.spirent.com AMERICAS 1-800-SPIRENT +1-818-676-2683 email@example.com information
White Paper TOPOLOGY-INDEPENDENT IN-SERVICE SOFTWARE UPGRADES ON THE QFX5100 Juniper Innovation Brings ISSU to Data Center Top-of-Rack Switches Copyright 2014, Juniper Networks, Inc. 1 Table of ContentsMore information
Data Center Networking Designing Today s Data Center
Data Center Networking Designing Today s Data Center There is nothing more important than our customers. Data Center Networking Designing Today s Data Center Executive Summary Demand for application availabilityMore information
Addressing Inter Provider Connections With MPLS-ICI
Addressing Inter Provider Connections With MPLS-ICI Introduction Why migrate to packet switched MPLS? The migration away from traditional multiple packet overlay networks towards a converged packet-switchedMore information
VXLAN: Scaling Data Center Capacity. White Paper
VXLAN: Scaling Data Center Capacity White Paper Virtual Extensible LAN (VXLAN) Overview This document provides an overview of how VXLAN works. It also provides criteria to help determine when and whereMore information
Junos Space for Android: Manage Your Network on the Go
Junos Space for Android: Manage Your Network on the Go Combining the power of Junos Space and Android SDKs to build powerful and smart applications for network administrators Challenge It is importantMore information
Best Effort gets Better with MPLS. Superior network flexibility and resiliency at a lower cost with support for voice, video and future applications
Best Effort gets Better with MPLS Superior network flexibility and resiliency at a lower cost with support for voice, video and future applications A White Paper on Multiprotocol Label Switching October,More information
CloudLink - The On-Ramp to the Cloud Security, Management and Performance Optimization for Multi-Tenant Private and Public Clouds
- The On-Ramp to the Cloud Security, Management and Performance Optimization for Multi-Tenant Private and Public Clouds February 2011 1 Introduction Today's business environment requires organizationsMore information
Panel: Cloud/SDN/NFV 黃 仁 竑 教 授 國 立 中 正 大 學 資 工 系 2015/12/26
Panel: Cloud/SDN/NFV 黃 仁 竑 教 授 國 立 中 正 大 學 資 工 系 2015/12/26 1 Outline Cloud data center (CDC) Software Defined Network (SDN) Network Function Virtualization (NFV) Conclusion 2 Cloud Computing Cloud computingMore information
Software-Defined Networks Powered by VellOS
WHITE PAPER Software-Defined Networks Powered by VellOS Agile, Flexible Networking for Distributed Applications Vello s SDN enables a low-latency, programmable solution resulting in a faster and more flexibleMore information
White Paper JUNOS PULSE APPCONNECT A Micro VPN That Allows Specific Applications on Mobile Devices to Independently Leverage the Connect Secure Gateway Copyright 2014, Juniper Networks, Inc. 1 Table ofMore information
Cisco Unified Network Services: Overcome Obstacles to Cloud-Ready Deployments
Cisco Unified Network Services: Overcome Obstacles to Cloud-Ready Deployments What You Will Learn Deploying network services in virtual data centers is extremely challenging. Traditionally, such LayerMore information
How Network Virtualization can improve your Data Center Security
How Network Virtualization can improve your Data Center Security Gilles Chekroun SDDC, NSX Team EMEA firstname.lastname@example.com 2014 VMware Inc. All rights reserved. Security IT spending Security spending isMore information
WHITE PAPER. Addressing Inter Provider Connections with MPLS-ICI CONTENTS: Introduction. IP/MPLS Forum White Paper. January 2008. Introduction...
Introduction WHITE PAPER Addressing Inter Provider Connections with MPLS-ICI The migration away from traditional multiple packet overlay networks towards a converged packet-switched MPLS system is nowMore information
Networks that know data center virtualization
Networks that know data center virtualization EBOOK VITRUALIZATION Your ideas. Connected. Copyright August 2014, Juniper Networks, Inc. Preface In both legacy IT data centers and emerging private and publicMore information
Networks that virtualization
Networks that know virtualization EBOOK VITRUALIZATION Your ideas. Connected. Copyright August 2014, Juniper Networks, Inc. Preface In both legacy IT data centers and emerging private and public clouds,More information
HOW SDN AND (NFV) WILL RADICALLY CHANGE DATA CENTRE ARCHITECTURES AND ENABLE NEXT GENERATION CLOUD SERVICES Brian Levy CTO SERVICE PROVIDER SECTOR EMEA JUNIPER NETWORKS CIO DILEMA IT viewed as cost centerMore information
DECODING SOFTWARE DEFINED NETWORKING (SDN) Nico Siebelink Technical Director Northern Europe
DECODING SOFTWARE DEFINED NETWORKING (SDN) Nico Siebelink Technical Director Northern Europe JUNIPER AND SDN IN THE NEWS 2 Copyright 2013 Juniper Networks, Inc. www.juniper.net WHY DO WE NEED SOFTWAREMore information
Testing Network Virtualization For Data Center and Cloud VERYX TECHNOLOGIES
Testing Network Virtualization For Data Center and Cloud VERYX TECHNOLOGIES Table of Contents Introduction... 1 Network Virtualization Overview... 1 Network Virtualization Key Requirements to be validated...More information
Networking for the Virtual World
White Paper Contrail for Service Providers Networking for the Virtual World Copyright 2013, Juniper Networks, Inc. 1 Table of Contents Executive Summary...3 Moving to the Clouds...3 Cloud Networking inMore information
Scalable Approaches for Multitenant Cloud Data Centers
WHITE PAPER www.brocade.com DATA CENTER Scalable Approaches for Multitenant Cloud Data Centers Brocade VCS Fabric technology is the ideal Ethernet infrastructure for cloud computing. It is manageable,More information
Business Case for Open Data Center Architecture in Enterprise Private Cloud
Business Case for Open Data Center Architecture in Enterprise Private Cloud Executive Summary Enterprise IT organizations that align themselves with their enterprise s overall goals help the organizationMore information
White Paper NETWORK AUTOMATION AND ORCHESTRATION Building an Agile Data Center Infrastructure with Juniper Networks Copyright 2013, Juniper Networks, Inc. 1 Table of Contents Executive Summary...3 Introduction...3More information
J-Flow on J Series Services Routers and Branch SRX Series Services Gateways
APPLICATION NOTE Juniper Flow Monitoring J-Flow on J Series Services Routers and Branch SRX Series Services Gateways Copyright 2011, Juniper Networks, Inc. 1 APPLICATION NOTE - Juniper Flow MonitoringMore information
Software Defined Network (SDN)
Georg Ochs, Smart Cloud Orchestrator (firstname.lastname@example.com) Software Defined Network (SDN) University of Stuttgart Cloud Course Fall 2013 Agenda Introduction SDN Components Openstack and SDN Example ScenarioMore information
The New IP Networks: Time to Move From PoC to Revenue
White Paper The New IP Networks: Time to Move From PoC to Revenue Prepared by Roz Roseboro Senior Analyst, Heavy Reading www.heavyreading.com on behalf of www.brocade.com February 2015 Introduction TheMore information
The Road to SDN: Software-Based Networking and Security from Brocade
WHITE PAPER www.brocade.com SOFTWARE NETWORKING The Road to SDN: Software-Based Networking and Security from Brocade Software-Defined Networking (SDN) presents a new approach to rapidly introducing networkMore information
Enhancing Cisco Networks with Gigamon // White Paper
Across the globe, many companies choose a Cisco switching architecture to service their physical and virtual networks for enterprise and data center operations. When implementing a large-scale Cisco network,More information
Extending Networking to Fit the Cloud
VXLAN Extending Networking to Fit the Cloud Kamau WangŨ H Ũ Kamau Wangũhgũ is a Consulting Architect at VMware and a member of the Global Technical Service, Center of Excellence group. Kamau s focus atMore information
SDN Architecture and Service Trend
2013 SDN 高 峰 論 壇 SDN Architecture and Service Trend Dr. Yu-Huang Chu Broadband Network Lab Chunghwa Telecom Co., Ltd., Taiwan 10/09/13 1 Outlines SDN & NFV introduction Network Architecture Trend SDN ServicesMore information
WHITE PAPER. Copyright 2011, Juniper Networks, Inc. 1
WHITE PAPER Network Simplification with Juniper Networks Technology Copyright 2011, Juniper Networks, Inc. 1 WHITE PAPER - Network Simplification with Juniper Networks Technology Table of Contents ExecutiveMore information
Welcome to this overview about Software-Defined Networking, or SDN, and Network Virtualization. This training course will not only provide the technical background to SDN, but will also show the valueMore information
BRINGING NETWORKS TO THE CLOUD ERA SDN enables new business models Aruna Ravichandran VICE PRESIDENT, MARKETING AND STRATEGY firstname.lastname@example.com SOFTWARE DEFINED NETWORKING (SDN), JUNIPER NETWORKSMore information
VMware vcloud Networking and Security
VMware vcloud Networking and Security Efficient, Agile and Extensible Software-Defined Networks and Security BROCHURE Overview Organizations worldwide have gained significant efficiency and flexibilityMore information
White Paper ALTERNATIVES FOR SECURING VIRTUAL NETWORKS A Different Network Requires a Different Approach Extending Security to the Virtual World Copyright 2013, Juniper Networks, Inc. 1 Table of ContentsMore information
White Paper CONNECTING PHYSICAL AND VIRTUAL WORLDS WITH WARE NSX AND JUNIPER PLATFORMS A Joint Juniper Networks-ware White Paper Copyright 2014, Juniper Networks, Inc. 1 Connecting Physical and VirtualMore information
Networking in the Era of Virtualization
SOLUTIONS WHITEPAPER Networking in the Era of Virtualization Compute virtualization has changed IT s expectations regarding the efficiency, cost, and provisioning speeds of new applications and services.More information
Stretched Active- Active Application Centric Infrastructure (ACI) Fabric
Stretched Active- Active Application Centric Infrastructure (ACI) Fabric May 12, 2015 Abstract This white paper illustrates how the Cisco Application Centric Infrastructure (ACI) can be implemented asMore information
RA-MPLS VPN Services. Kapil Kumar Network Planning & Engineering Data. E-mail: firstname.lastname@example.com
RA-MPLS VPN Services Kapil Kumar Network Planning & Engineering Data E-mail: firstname.lastname@example.com Agenda Introduction Why RA MPLS VPNs? Overview of RA MPLS VPNs Architecture for RA MPLS VPNs TypicalMore information
Introduction to Software Defined Networking (SDN) and how it will change the inside of your DataCentre
Introduction to Software Defined Networking (SDN) and how it will change the inside of your DataCentre Wilfried van Haeren CTO Edgeworx Solutions Inc. www.edgeworx.solutions Topics Intro Edgeworx Past-Present-FutureMore information
Testing Software Defined Network (SDN) For Data Center and Cloud VERYX TECHNOLOGIES
Testing Software Defined Network (SDN) For Data Center and Cloud VERYX TECHNOLOGIES Table of Contents Introduction... 1 SDN - An Overview... 2 SDN: Solution Layers and its Key Requirements to be validated...More information
BROCADE SOFTWARE DEFINED NETWORKING: INDUSTRY INVOLVEMENT Rajesh Dhople Brocade Communications Systems, Inc. email@example.com 2012 Brocade Communications Systems, Inc. 1 Why can t you do these thingsMore information
Securing Virtual Applications and Servers
White Paper Securing Virtual Applications and Servers Overview Security concerns are the most often cited obstacle to application virtualization and adoption of cloud-computing models. Merely replicatingMore information
Network Configuration Example
Network Configuration Example Configuring a Two-Tiered Virtualized Data Center for Large Enterprise Networks Published: 2014-01-10 Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, CaliforniaMore information
Network Virtualization for Large-Scale Data Centers
Network Virtualization for Large-Scale Data Centers Tatsuhiro Ando Osamu Shimokuni Katsuhito Asano The growing use of cloud technology by large enterprises to support their business continuity planningMore information
Virtual Private LAN Service (VPLS)
White Paper Virtual Private LAN Service (VPLS) Scalable Ethernet-Based Enterprise Connectivity and Broadband Delivery Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, California 94089 USA 408.745.2000More information
IP/MPLS-Based VPNs Layer-3 vs. Layer-2
Table of Contents 1. Objective... 3 2. Target Audience... 3 3. Pre-Requisites... 3 4. Introduction...3 5. MPLS Layer-3 VPNs... 4 6. MPLS Layer-2 VPNs... 7 6.1. Point-to-Point Connectivity... 8 6.2. Multi-PointMore information
Cisco Dynamic Workload Scaling Solution
Cisco Dynamic Workload Scaling Solution What You Will Learn Cisco Application Control Engine (ACE), along with Cisco Nexus 7000 Series Switches and VMware vcenter, provides a complete solution for dynamicMore information
Branches as Nimble as the Cloud: Unleashing Agility with Nuage Networks Virtualized Network Services EXECUTIVE SUMMARY
Branches as Nimble as the Cloud: Unleashing Agility with Nuage Networks Virtualized Network Services EXECUTIVE SUMMARY The principles of cloud computing are transforming the delivery of information servicesMore information
Definition of a White Box. Benefits of White Boxes
Smart Network Processing for White Boxes Sandeep Shah Director, Systems Architecture EZchip Technologies firstname.lastname@example.com Linley Carrier Conference June 10-11, 2014 Santa Clara, CA 1 EZchip OverviewMore information
Global Headquarters: 5 Speen Street Framingham, MA 01701 USA P.508.872.8200 F.508.935.4015 www.idc.com
Global Headquarters: 5 Speen Street Framingham, MA 01701 USA P.508.872.8200 F.508.935.4015 www.idc.com W H I T E P A P E R O r a c l e V i r t u a l N e t w o r k i n g D e l i v e r i n g F a b r i cMore information
Dynamic Service Chaining for NFV/SDN
Dynamic Service Chaining for NFV/SDN Kishore Inampudi A10 Networks, Inc. Agenda Introduction NFV Reference Architecture NFV Use cases Policy Enforcement in NFV/SDN Challenges in NFV environments PolicyMore information
Use Case Brief CLOUD MANAGEMENT SOFTWARE AUTOMATION
Use Case Brief CLOUD MANAGEMENT SOFTWARE AUTOMATION Cloud Management Software can coordinate and automate server, network, and storage operations within the modern datacenter. This brief describes howMore information
Vyatta Network OS for Network Virtualization
Complete Security and Compliance for Virtual Environments Vyatta takes the concept of virtualization beyond just applications and operating systems and allows enterprise IT to also virtualize network componentsMore information
Business Case for BTI Intelligent Cloud Connect for Content, Co-lo and Network Providers
Business Case for BTI Intelligent Cloud Connect for Content, Co-lo and Network Providers s Executive Summary Cloud computing, video streaming, and social media are contributing to a dramatic rise in metroMore information
The Global Attacker Security Intelligence Service Explained
White Paper How Junos Spotlight Secure Works The Global Attacker Security Intelligence Service Explained Copyright 2013, Juniper Networks, Inc. 1 Table of Contents Executive Summary...3 Introduction...3More information
SINGLE-TOUCH ORCHESTRATION FOR PROVISIONING, END-TO-END VISIBILITY AND MORE CONTROL IN THE DATA CENTER JOINT SDN SOLUTION BY ALCATEL-LUCENT ENTERPRISE AND NEC APPLICATION NOTE EXECUTIVE SUMMARY ServerMore information
White Paper. BTI Intelligent Cloud Connect. Unblocking the Cloud Connectivity Bottleneck. btisystems.com
White Paper BTI Intelligent Cloud Connect Unblocking the Cloud Connectivity Bottleneck 2 BTI Intelligent Cloud Connect Contents Executive Summary... 2 Cloud Connectivity Challenges.... 3 BTI IntelligentMore information


text:
View Cart
cPanel Add-ons
Yes, thanks to Universal SSL.
The idea is that an SSL certificate on CloudFlare's network that will accept HTTPS connections for domains and subdomains, will now be automatically provisioned. Those certificates include an entry for the root domain (e.g., example.com) as well as a wildcard entry for all first-level subdomains (e.g., www.example.com, blog.example.com, etc.).
Among the benefits of Universal SSL there is usage of the ECDSA cipher suite, SPDY protocol support and a free app that detects an outdated browser.
NOTE: Universal SSL is not supported with CloudFlare signups through us.
In case you signed up for a free plan directly with CloudFlare, you are able to use Universal SSL, but for it to work correctly, a modern browser is required.
If having an HTTPS connection is a must for your website, you should consider CloudFlare's paid plans which support an encrypted connection for legacy browsers.
All details and additional useful information can be found at https://blog.cloudflare.com/introducing-universal-ssl/.
That's it!
Need any help? Contact our HelpDesk
We welcome your comments, questions, corrections and additional information relating to this article. Your comments may take some time to appear. Please be aware that off-topic comments will be deleted.
If you need specific help with your account, feel free to contact our Support Team. Thank you.
Need help? We're always here for you.
Chat with a Live Person

subset: commoncrawl


text: Joerg wrote: > OK, when the last discussion was going on, I started out with the opinion > that the change would be good and changed it to not so good, because if > proprietary stuff that *is* part of the windows kernel (or drivers) needs > to be implemented, this can't be done with an LGPLed wine. My final idea > (which I never mailed) was, that maybe a X11-licensed kernel (including > wineserver and driver emulation) and LGPLed dlls for the rest would be > the best solution. I'm not sure why a re-implementation of proprietary stuff can't be done with an LGPLed Wine. If that was the case, wouldn't it be next to impossible for just about any LGPLed product to mimic the behaviour of a proprietary application? (eg KDevelop vs MSVC?) Regards Chris Green Massey-Green Software Labs


text:
Join us this week in our Thanksgiving episode as Steve talks with a pair of (famous?) Canadians – Tim from The Nerd Room and Cory from Tumbling Saber (both members of the Star Wars Commonwealth) – as we discuss what's coming up in holiday merchandise and comics, how to help your spouse do right by you, and drop some thoughts about all the upcoming Star Wars content!
Shouts to:
- The Nerd Room – http://TheNerdRoom.net
- The Tumbling Saber – http://TumblingSaber.com
- The Star Wars Commonwealth – https://StarWarsCommonwealth.com
Remember to check us out on our website, www.sandiegosabers.net.
If you like our show, give us a review on iTunes, Google, or where ever you listen!
Facebook: SDSabers
Instagram: sdsabers
Twitter: sdsaberspodcast
Email us at podcast@sandiegosabers[dot]net if you have questions, comments, or give us suggestions for what we should talk about next!
As a proud member of the Star Wars Commonwealth podcast network (http://www.starwarscommonwealth.com), do yourself a favour and check out the other podcasts in the network: Talk Star Wars, The Generation X-Wing Podcast, Tumbling Saber, The Nerd Room, The Rogue Squadron Podcast, Tatooine Sons, The Skyhoppers Podcast, Less Than 12 Parsecs, and Retro, Inc!


text: YIELD:4 servings 1/2 teaspoon salt 1/8 teaspoon pepper 1/2 teaspoon ground coriander 4 salmon fillets (6 ounces each) 2 teaspoons olive oil 2 garlic cloves, minced 2 teaspoons lime juice 1/4 to 1/2 teaspoon hot pepper sauce In a small dish, combine the salt, pepper and coriander. Sprinkle over salmon. In a nonstick skillet, cook…Read More


text:
Julia Michaels Shows Off Tattoo on the Palm of Her Hand
Julia Michaels has a lot to be thankful for in 2017.
The songwriter finally got recognized as a solo artist with her first solo hit, "Issues," and she learned she's never going to tattoo the palm of her hand again!
"It says 'I love you,' but it was very ironic" because it hurt soooo much, she tells Z100 New York's Mo' Bounce.
"It was very painful. I wouldn't wish this kind of pain on anybody."
Watch the whole interview below.


text:
More in thisCategory
More ByTereena Clarke
King Parrot cross stitch pattern... This counted cross stitch pattern was created from the artwork of Margaret Wight. Image courtesy of Creek's Bend Country Retreat http://www.creeksbend.com/index.html. Only full cross stitches are used in these patterns.
Price: $9.95 USD (online download)
©Crosstitch.com - all images and designs copyright and may not be used or shared without permission.


text:
Adobo Cheese Sandwich20 - 25 mins 5 - 10 people
A Filipino take on the classic grilled cheese!
2 cups, Leftover adobo, shredded
2 tbsp, Butter
10, Bread slices
165 g, Eden Melt Sarap, sliced
Heat leftover adobo in a pan.
Butter the bread slices and assemble sandwich by placing 2 scoops of adobo on one side of bread. Top with Eden Melt Sarap. Place another bread slice on top.
Place sandwich in a sandwich press or fry in butter in a pan until slices are toasted and cheese is melted.


text: These adorable Paw Print Green Stampers are a must-have for your next puppy or dog party! Great for Paw Patrol get-togethers, these cute stampers measure about 1.5" and are great game prizes, favors, goody bag fillers and stocking stuffers. Ink is safe and non-toxic; allow to dry after stamping. (6 per pack)


text:
New Friends30th May 2012 by admin 1 Comment
Brian bounded around the corner with customary zeal.
I grinned ear to ear when I saw him.
In tow, a woman from Oklahoma named Dusty kept pace, with a bright smile and a lovely energy.
We met, introduced ourselves and started walking toward the restaurant for dinner.
Without hesitation, we fell into lively conversation, throwing ideas and concepts back [...]


text:
About Us
Welcome to Southdowns Shepherds Huts, we hire luxury loos for your wedding, party or other celebration. We are a family run business based at the foot of the stunning South Downs in the glorious Sussex Countryside. We aim to provide an exceptional level of service with attention to detail at the top of our agenda.
Having organised big family celebrations in recent years - 21st and 50th birthdays and our daughter's wedding most recently - we spent quite some time researching portable toilet hire and realised there was a gap in the market. While it was easy to hire 'Luxury Loos' none offered a clean flush system, they all used recycled chemicals. We couldn't understand why portable had to mean blue chemicals.
We worked with The English Shepherds Hut Co. to manufacture these high-quality, clean flushing, luxury loos. And now they are available to hire .
A new offering for 2018, we are please to announce we are now hiring showers, "Shower Shacks" these can be hired separately or with ours Shepherds Hut loos, they are aimed at those organising a party, wedding or event where your guests are camping or stay over and you need additional facilities. Please have a look at our "Shower Shack" page for further details.
Please contact us for more information or a free, no obligation quote. We look forward to hearing from you.
The Southdowns Shepherds Hut Team


text:
We love to share. We share everything. We often get the "pass this onto your address book" – and we do ! We see something, we take a pic with […]Read more
Category: Mobile Web Africa 2011
Mobi Sluts, Stalking, Youth MXit-ing up – Who says IT conference are boring ! Day 2 of Mobile Web Africa
…and so we continue onto Day 2 of the Mobile Web Africa conference. If you missed Day 1 it here: Top Mobile Marketing Tips from the Gurus on Day 1 […]Read more
Top Mobile Marketing Tips from the Gurus on Day 1 of Mobile Web Africa
A quick intro: I have been asked to share the information that I had learnt in the Mobile Web Africa conference. Originally, I was going to summarise the 3 days […]Read more
How Hubs, Swarms, Clusters & a Hat can make such an impact– at Mobile Web Africa
I knew that this week was going to be a mad week for Mobile in South Africa. What I didn't know is just how valuable this week would be. It […]Read more
Mobile Web in Africa 2011– THE carnival Mobile Tech event
There are events that are nice to go to. There are events that as someone in the industry you should attend. But then there are events that you absolutely-positively-without-fail must […]Read more


text:
It will all be worth it in the end. The Q at Parkside (the blog) appreciates your patience.
In the meantime, how about those new stores opening up on the Flabenue? Like next to Kreations, an "exotic intimate apparel shop" (near my fave pile of tree-pit garbage, which, due to constant complaining by the Q, I can confidently say that the management at 225 Parkside has finally been given notice that it's THEIR responsibility and has started cleaning it up fairly regularly). That's right. Exotic! Intimate! Apparel! (actually the apparel probably doesn't deserve an exclamation point). Given some of the blush-inducing sexy outfits regularly seen around these parts that AREN'T "intimate" I think we're all on pins and needles to see what this shop has in store (literally, in the store.)
And the new joint opening in the old Dork Klub spot? An honest to goodness Atticus Finch by the name of Joyce B. David. Here's her deets:
Joyce B. David, Esq., P.C.
664 Flatbush Avenue
Brooklyn, N.Y., 11225
718-643-5242 (fax)
I'd like to make some sort of witty connection between the intimate apparel shop and a criminal defense lawyer but I came up with nothing. Joyce was kind enough to send me a shout out, and I'm shouting back: "Hey Joyce!! Good luck with your shingle hanging!"
Joyce, btw, wrote a book brilliantly titled What You Should Know If You're Accused of a Crime (Shut up and call a lawyer!) Of course, by giving away the ending in the title, she probably cut her sales in half. And she was the first woman president of the Kings County Criminal Bar Association, if Google is telling the truth. And if google isn't telling the truth, does it even matter what the truth is?


text:
NBROS Japan – Dual Headphone Hanger
Model number: NB – HSTA 05 UD / JAN: 4562198672613 Dual headphone stand
For headphone stand / 2 units installed under a strong desk.
NB – HSTA 05 UD is
a dual headphone stand that is mounted under a desk with a strong adhesive tape .
Load capacity: 4.0 kg
* There are occasions when the strength varies
depending on the mounting surface. For safety, please do not hang more than 4.0 kg.
Package Contents:
– Product NB-HSTA05UD Dual Headphone Stand
– Instruction Manual Material: Iron (SPCC) / Processing: Black paint
– Package dimensions: approx. 125 mm x 210 mm x 45 mm / gross weight: About 85g.
– Producing area: Made in Japan / Made in JAPAN.
– It is a dual headphone stand that can store two headphones under the desk.
– Excellent strength is realized with all metal and super strong adhesive tape! It is! Load capacity 4 KG
* The case where strength differs depending on the mounting surface is the Onza. For safety, please do not hang more than 4.0 kg.
※ This product is designed on the premise of hanging headphones. Please do not use it for another purpose.
Compact design, space-saving and versatile scenes.
– The hook part adopted cushion for scratch prevention.
– Integrated production in Japan [Made in JAPAN.]
It is a genuine domestic product which carries out a series of processes from planning, designing, manufacturing and packaging all within Japan.
I can think of "Entry soul" for all products, and finish it carefully by hand.
– Product Specification
· Material: SPCC (iron) / treatment: black paint
· Load capacity: 4 KG
· Package contents: Product body · Instruction manual
· Package dimensions: approx. 125 mm × 210 mm × 45 mm
· Gross weight: 85 g
· For direct or indirect damage, damage or breakdown caused by using this product
We assume no responsibility for it.
· Please do not apply strong impact / impossible force to this product. Also please do not process or remodel.
· Please note that children do not touch this product.
· Do not use or store this product in a place with high humidity or in high temperature / high humidity place.
· Minor abrasions in the manufacturing process of the product · Some plating unevenness may occur.
· Please install this product in a place that is not movable in the flat.


text:
It's pretty hard to come up with something unique for the obligatory New Year blog post. What could I write about the New Year that hasn't been written on a thousand blogs already?
You are supposed to write about new year resolutions or about how you have grown so much in the last year. But if I am honest with myself I don't want to make myself feel bad and think over all the things I said I would do last year but never did. We are supposed to look forward. Put the past behind us and be positive about tomorrow. A new start. A fresh page.
But what if you can't see a way to start again and you already feel, just two days into the New Year that you are already cruising down the same path you took last year. What if the things or the issues that you are dealing with, still exist and that midnight on January 1st 2012 didn't bring the magic turnaround in circumstances or feelings that we are made to believe it is supposed to.
In fact a lot of people find themselves in this position. They are still dealing with depression, or addiction, financial worries or any number of things that is making their life a misery. This blog is for them. It's for the people who find themselves stuck. The people for whom it could just as easily be the 2nd January 2011 as it is 2012.
In 2011 I did something that I had wanted to do for a long time and finally got off my ass doing. When I went for my first meeting with a counsellor in September I was scared, excited and slightly relieved. But ultimately having someone who I could talk to about things in my past and help me deal with them in a way that would bring me freedom and some hope, was an amazing experience for me.
And that is why this year I will be looking back more. Because if I learned nothing else from counselling it was this.
Sometimes looking back is the only way you can look forward.
Sometimes dealing with our past is the only way we can have a fulfilling and hope filled future.
Maybe you need to do this to get out from the stone you find yourself. Maybe you need to remember a time when you were happy and free and remind yourself that person is still in you somewhere. No matter how muffled their voice has become. Are there things from yesterday that are preventing you from creating tomorrow?
Because there has to be hope. Sometimes we need to fight for it and if a fight is what is needed, fight. Find people who can fight for and along with you if you can't. Maybe they are the ones who will help you look back.
Because this year your past might just be your new future.
And we need you.


text:
This brush features:
- thick handle
- easy application of mineral, liquid and cream foundation
- soft and dense synthetic bristles
- easy to clean and storage
- creates amazing velvety finish
- buffs and blends very well
- 100% cruelty-free
Dome shaped soft synthetic bristles, fluffy, dense and still makes applying foundation a dream. Cream, liquid and even mousse is not a problem any more. Possibilities are endless
Nanshy Foundation Brush Set <-click for set of brushes


text:
Forget about collecting thousands of points to redeem for things you don't really need. Our FREE Kasasa Cash Back® checking account will reward you with 3% cash back on up to $250 in everyday debit card purchases when qualifications are met.
Receive rewards by meeting simple monthly qualifications:
At least 12 debit card purchases posted and settled during each monthly qualification cycle.
Be enrolled and log into online banking each monthly qualification cycle.
Be enrolled and receive eStatement notice.
Great Rewards!
Every month qualifications are met account holders receive:
3% cash back on debit card purchases up to $250 that post and settle
Nationwide ATM fee refunds up to $20 per cycle
No Penalties
If you don't qualify during a monthly cycle, your KASASA Cash Back account is still:
100% FREE (no min. balance & no monthly fees).
Able to earn rewards the next monthly qualification cycle.
Important Disclosures
When monthly qualifications are met, you receive 3% cash back on debit card purchases that post and settle to account during Monthly Qualification Cycle up to total cash back of $7.50 per Monthly Qualification Cycle. Qualifying transactions must post and settle to account during Monthly Qualification Cycle. "Monthly Qualification Cycle" means a period beginning one day prior to the first day of the current statement cycle through one day prior to the close of the current statement cycle. "Statement Cycle" means the period of time for which Washington Savings Bank provides a summary of the financial activities and transactions that post and settle to the accountholder's account. Transactions may take one or more banking days from the date transaction was made to post and settle to account. ATM-processed transactions do not count towards qualifying debit card transactions. Domestic ATM fees incurred during qualification cycle will be reimbursed up to $20.00 if qualifications are met within Monthly Qualification Cycle and credited to account on the last day of Monthly Statement Cycle when qualifications are met. Limit one account per SSN. Account approval, qualifications, limits and other requirements apply. Contact a Washington Savings Bank customer service representative for additional information and details.


text:
ENT Nerve Integrity Monitoring
Nerve integrity monitoring during ear, nose and throat procedures helps surgeons reduce the risk of nerve damage in these sensitive areas. Franciscan Health offers nerve integrity monitoring in real time for ENT surgeries.
Nerve Integrity Monitoring
Minimally invasive surgery in the ear, nose and throat is a relatively safe procedure in the hands of a skilled surgeon. However, there is a risk of injury to the adjacent nerves. Particularly in throat surgery or in surgery involving glands in the throat, surgeons must take special care around the laryngeal nerve - the nerve that controls the voicebox. Damage to this nerve can result in a patient having difficulty speaking, breathing and/or swallowing.
A complement to the surgery, nerve integrity monitoring gives your surgeon a unique set of tools to identify hard to locate nerves, trace and confirm the nerve path, and monitor nerve function in real-time to help preserve nerve function and improve patient safety.
Locations Near Me
Franciscan Physician Network Woodland Health Center
530.7 Miles
Michigan City, IN 46360


text:
PropertyTalk Was Born In 2003
PropertyTalk came online in September 2003, as discussion forums for property investment talk. We were living in Australia at the time and were keen to connect with property investors for advice and support. Over a glass of wine we decided we'd create our own property talk and invite people like you to join us in the discussion. It didn't take long for our "baby" to take off and become a huge resource for anyone interested in the real estate industry. Every event, good and bad, our thousands of users have discussed is now searchable and it's used extensively particularly in New Zealand as a timeline of events that hav impacted on the property sector like the GFC (Global Financial Crisis).
Fast forward to today, and our visitor and social media follower numbers are in the tens of thousands and growing. In recognition of our growing audience and rising demand for more information, we've added a PropertyTalk Blog for high-quality articles on 'all things' property. Our readers say they're enjoying our articles and they want us to continue to provide real experiences. They want us to educate, motivate and support them while they invest in or work with property.
We love property, and it's an honour to own and operate PropertyTalk.com.
Check out our very first photo with a few property investors back in 2003
We also love getting feedback from you, our readers. You can contact us directly at [email protected], follow us on PropertyTalk Facebook and PropertyTalks Twitter, and join our LinkedIn group.
PropertyTalk Is For You
You might be wondering if PropertyTalk is the site for you. Are you in the right place? If you're looking for useful, valuable and topical advice on 'all things' property and real estate, yes you are. Our readers are people who are looking for advice on support on investing in property or working with it in any way that will help them turn a profit. Even though it has its ups and downs, real estate is always an interesting prospect if you're looking for the best ways to invest your money or you just want to get stuck into a project. Finding accurate and helpful information on property can prove difficult, though. There can be a lot of misinformation, and some resources might only apply to certain countries or situations.
If you are involved in property investment, or you're interested in becoming involved with it, PropertyTalk delivers what you're looking for. You can find valuable articles that help you navigate your way through the trials of property investment, as well as our discussion forums for further advice and support. You deserve to have access to resources that will really benefit you as you grow your understanding of how to work within the property market. You can stay up to date with property news from around the world and learn about topics ranging from financing and insurance to legal issues right here on the PropertyTalk site. We're always interested in listening to what you have to say and what you want to hear. PropertyTalk is as much yours as it is ours, so don't hesitate to get involved.
We have terms of service, a disclosure statement and privacy policy and all members of our discussion forums abide by our forum rules.


text:
Can Small Sustainable Farms Feed the World?
Nick Ziggelbaum over at Cane Creek Farm—a purveyor of some of the most delicious sustainably-reared pork and beef I have ever taste—has clearly gotten tired of answering questions about the viability of small-scale sustainable agriculture to feed the world. In a post entitled Feeding the Masses, Nick cites the UN report on how agroecology could double food production,and lays out why hunger is primarily a problem of distribution, not production. He also makes the case for why we need to move away from feeding grains to animals as much as possible. Finally, he points out a bitter irony of the world hunger problem—many of the poorest people most at risk of hunger are indeed farmers:
The poorest people in the world, the ones that are starving, are FARMERS. Supporting localized, sustainable food systems around the world means funneling money towards the people that need it in order to buy food. You might think it strange that farmers don't have access to food, but many of these farmers don't actually own the food they grow. They work for corporations, which own the crop that is barely edible anyway for people (feed grade corn is not the sweet corn of late summer). If we buy more food from small farmers we empower them to grow a more diverse crop, increase their profit and our money comes back through the local economy in the form of jobs (construction, labor, mechanics, trucking).
He's got me convinced. Anyone else care to argue?