
Labs as Code, Part 2: Real Images, Real Topology
Import cEOS into netlab, then build an eight router design, an OSPF ring with three egress DCs, one route in BGP, and eBGP multihop steering exits.

Import cEOS into netlab, then build an eight router design, an OSPF ring with three egress DCs, one route in BGP, and eBGP multihop steering exits.

routerjockey now has a hand-picked networking news feed. A few links a week, each with the source's excerpt and a link to the original, plus its own RSS feed.

Container networking for network engineers. What Docker's default bridge does, why Pi-hole needs a real LAN address, and how macvlan gets it there.

Sir Patrick Stewart died October 28 at 86. I was seven when The Next Generation premiered, and I taped every episode I could. A lot of us had a captain first.

Eleven Tailscale and headscale findings, led by an SSH bug that turns one compromised device into root on its peers. Tailscale 1.104.4 fixes the worst.

How vPC, MLAG, MC-LAG, VLT, VSX and CLAG spoof one LACP System ID across two switches, how each keeps the lie consistent, and the IEEE standard they ignored.

What IEEE 802.1AX mandates, what it deliberately leaves to the vendor, and why a single flow on a 4x10G bundle still tops out at 10G.

An AI agent designs an SRv6 L3VPN lab, BGP comes up with zero prefixes, and the agent debugs its own configs. Taran Deshpande's live demo at CHI-NOG 13.

netlab turns nine lines of YAML into a running, converged lab. Install it, build your first FRR topology, and stop hand wiring labs.

Your first useful Docker Compose stack, with Pi-hole. Volumes, environment variables, healthchecks, and how to keep your home lab from being a single point of forgetting.

Git workflows that scale to teams. Pull request etiquette, branch protection, signed commits, and how to make CI work for your network configs the way it works for code.

Eight eMudhra intermediate CAs shipped with single-byte private keys. Browsers were covered within hours. Your scripts, appliances and decrypting firewall were not.

Your YubiKey fires a Yubico OTP on any short touch, because slot 1 ships that way. Two commands fix it, and one has a catch worth knowing first.

Every security vendor wants SSL decryption at the edge, but HTTPS interception breaks the TLS trust chain and invites MitM attacks. The case for the endpoint.

A guide for vendors presenting at Tech Field Day. Read the bios, kill the NASCAR slide, send the deck afterward, and stop treating delegates like leads.

Tim Cook built Apple's supply chain into a fortress. Apple's software got measurably worse on his watch. John Ternus has one chance to fix it.

A certificate expired on May 9, 2023 and vEdge 100, 1000 and 2000 routers started losing service. Cisco fumbled a 10 year cert again, eight years after the WLC one.

Two days of workshops and operator talks in Chicago. RPKI hands-on labs, Nokia AI fabric design, and conversations with engineers who actually operate networks.

RouterJockey merch is back. 'PCAP or it didn't happen' t-shirts, polos, notebooks. Higher quality than the 2015 store, fewer products, more care.

NFD40 delegate lineup and agenda: AI networking, network automation, silicon, and vendor pitches from Arista, Cisco, Nokia, Netris, and others.