Altitude: The Unsung Heroes of Cloud Transformation: Recent Episodes
Aviatrix
As enterprises go all in on the cloud, IT leaders and teams either fall behind or rise above. Altitude: The Unsung Heroes of Cloud Transformation explores the stories of IT leaders and teams who are overcoming the challenges of moving to the cloud and driving their businesses to the next level.
Hosted by Bryan “Woody” Woodworth, Sr. Principal Solutions Strategist at Aviatrix, Altitudeshines a light on the unsung heroes who are navigating the cloud and finding new opportunities to innovate. Learn more: https://aviatrix.com/altitude/
In this episode, Woody dives into the world of cloud security using open source systems with our special guest, Susan Hinrichs.
Susan Hinrichs, Chief Scientist at Aviatrix, is a multifaceted professional with a strong background in the open source networking and security space. As a designer and implementer, she has contributed significantly to the development of distributed cloud firewall. Susan's expertise extends well beyond traditional networking, encompassing diverse areas such as cloud routing, application security, policy-based traffic engineering, and distributed systems.
Throughout this insightful conversation, Susan discusses the advantages of open source platforms, Aviatrix contributions to the open source community, and the open source DNA of the Aviatrix Distributed Cloud Firewall. Susan and Woody also explore possible directions for Distributed Cloud Firewall and the role that AI and ML could play in network security.
Learn more about Altitude and Host Woody: https://aviatrix.com/altitude/
Susan’s LinkedIn: https://www.linkedin.com/in/shinrich/
Timestamps:
[00:02:11] Group responsible for traffic termination and scrubbing. Used open source software and contributed back.
[00:06:55] Extended Berkeley Packet Filter (eBPF) enables efficient traffic analysis in kernel space, particularly for dropping network traffic at low levels with minimal effort. It provides a more cost-effective alternative to IP tables for implementing firewall policies.
[00:10:07] Approach: Not everyone is the root. All processes aren't root. Need to elevate. Complicated product made simple.
[00:14:27] Open Stack's limitations revealed as enterprise-scale businesses require dedicated specialists, making it costly. Distributed cloud firewall innovates multicloud security. Scaling security in the cloud is challenging due to layer 3 and up the stack complexities.
[00:16:38] Distributed firewall challenges and solutions summarized.
[00:21:53] Smart groups are created with tags on VMs, subnets, and VPCs. These groups are used to create rules for traffic routing. With Aviatrix fabric, gateways are protected, and traffic routes are understood. The controller analyzes gateways and enforces rules accordingly. Rules are pushed or pulled to the gateways.
[00:26:15] Security group orchestration across different cloud platforms has limitations due to varying models and rule limits. Difficulties arise when translating intermixed allows and denies into only allows, potentially causing networks to split and requiring more rules. Despite extensive work, there are cases where policy expression is not possible. Other tools, like VMware and Cisco, offer similar orchestration capabilities, but the physical enforcement points may still restrict the unified view presented to customers.
[00:30:30] Moving towards intrusion protection, analytics, and service mesh for enhanced security.
[00:34:05] The impact of AI and machine learning on security systems.
[00:35:16] AI helps with alarm fatigue and data correlation.
In this episode of Altitude, Woody sits down with the brilliant Rob DeWeese for an in-depth exploration of cloud networking, architecture, and cost optimization.
As a dedicated problem solver and cloud networking expert, Rob joined IBM six years ago as the lead multicloud architect. Following the separation of IBM's consulting wing, he embraced the consultancy realm, now known as Kyndryl – the world’s largest provider of IT infrastructure services. As the Director of Cloud Networking at Kyndryl, Rob leads 429 network architects across the globe and equips individuals with the skills to understand, simplify, and optimize cloud networking.
This conversation covers the four towers of cloud networking that require careful consideration, cloud networking design principles that pave the way to success, and strategies for simplifying and optimizing cloud networking and related costs, especially in the context of multicloud and complex network architectures. Rob and Woody also discuss the value of centralizing firewall management and the criticality of scalability. Stay tuned for a follow-up discussion in the coming months between the two cloud gurus. There are only so many minutes per podcast episode and so many things to explore.
Learn more about Altitude and Host Woody: https://aviatrix.com/altitude/
Connect with Rob on LinkedIn: https://www.linkedin.com/in/robert-deweese-a9676916/
[00:00:47] Kyndryl: Consulting wing, largest Grid Security Infrastructure (GSI), cloud networking.
[00:06:43] Multicloud is now a real thing – the state of the industry, vendor lock-in.
[00:10:37] High-performance encryption solution.
[00:13:28] The 4 Towers of Cloud Networking.
[00:15:16] Networking, security, and complexity impact cloud cost.
[00:17:46] IBM/Kyndryl separation, moving data centers, and strategies for cost optimization.
[00:21:55] Design principles for building a flexible network. Avoid unnecessary costs and cloud vendor lock-in. Focus on ease of administration and adaptability to different platforms.
[00:25:24] Load balancing types, logging platforms, and simplifying multicloud networking.
[00:28:10] Teaser for part two with Rob and Woody.
In this episode of Altitude, Justin Payne, Senior Infrastructure Security Architect at Mueller Water Products (MWP), shares his firsthand experience of navigating the challenges posed by outdated hardware and limited resources while transitioning to the cloud. With an impressive three decades of IT expertise, Justin has been a dedicated member of the MWP team for the past ten years.
MWP, founded over 160 years ago, is one of the largest manufacturers and distributors of fire hydrants, gate valves, and other water infrastructure products in North America. During the housing downfall in the late 2000s, MWP faced significant obstacles. Outdated hardware and resources hindered their ability to meet the company's growing demands, prompting their migration to AWS cloud. Justin has been at the forefront of cloud transformation, ensuring that MWP keeps up with advancements in cloud technology to maximize efficiency and drive growth.
Learn more about Altitude and the host: https://aviatrix.com/altitude/
In this episode, Woody and Justin discuss:
[00:03:19] Transitioning to AWS to improve agility
[00:08:47] Adapting to cloud, challenges, and research
[00:11:54] AWS setup challenged by limitations and security concerns
[00:15:37] Cloud cost expectations vs reality, MWP’s maturity, cost mitigation, cloud-first strategy
[00:19:40] High cost of bringing in contractors with AWS expertise to bridge the skills gap, seeking the tools and talent to operate moving forward
[00:22:23] Cloud security as a big concern due to lack of control and elevated permissions, creating a secure and efficient infrastructure with Aviatrix, MWP’s zero trust environment with strict security measures
[00:26:24] Relying solely on the Internet for IoT connectivity has proven to be insecure and unreliable; the use of private networks and VPNs as the preferred approach for IoT applications
[00:31:24] What makes moving to the cloud worth it, maximizing product features quickly with AWS
[00:34:21] Proactive maintenance saves time and money.
To connect with Justin, head to his LinkedIn page: https://www.linkedin.com/in/justin-payne-57376b11/
In this episode of Altitude, Woody has the opportunity to sit down with Mohamed Ghassen, Cloud Security Engineer at SAP. He is also an Aviatrix Certified Engineer (ACE) Multicloud Network Design Expert, the highest level of the ACE Multicloud Networking and Security certification track.
Woody and Mohamed discuss the paradigm shift required for cloud security, emphasizing the importance of integrating security during the design phase rather than treating it as an add-on feature. They also discuss the need for improved collaboration between security and DevOps professionals and how multicloud is the current trend that calls for standardization across various cloud providers.
Connect with Mohamed on LinkedIn:
https://linkedin.com/in/mohamed-ghassen-gargouri/
Learn more about becoming certified in multicloud networking:
https://aviatrix.com/ace/
Enlightening, but frightening - what does AI have in store for us? Today, guest Zach Hughes, joins Woody to speculate the answer.
Zach is the VP of IT at CHS, one of the industry's leading agriculture businesses that is uniquely owned by the farmers. He is also one of the industry's leading experts on the principles and practices of leadership.
In their discussion today, Woody and Zach discuss the consumerism state in which AI seems to currently sit, current capabilities, and a brilliant look into the meaning of 'creativity' when it comes to AI with an example in music.
Have a read of Zach's recent words on AI here:
https://zachonleadership.com/the-ai-article/
https://zachonleadership.com/automation-is-for-humans-not-the-other-way-around/
Connect with Zach on LinkedIn: https://www.linkedin.com/in/zacharybhughes/
On this episode of Altitude, Woody is joined by John Bristol, Practice Leader at Enterprise Vision Technologies.
John is highly experienced in the IT industry and through his work at EVT, where he helps customers transform their legacy network environments to a more automated, secure, multicloud network architecture.
In their discussion today, Woody and John discuss cloud networking, but from the angle of the system integrator and the IT practitioner - a new approach for the show. They explore the constraints of native cloud services that increase costs and the problems that a full automation platform would solve for his business and customers.
Follow John on LinkedIn here.
Explore the Enterprise Vision Technologies website here.
On this episode of Altitude, Woody is joined by John Bristol, Practice Leader at EVT Technologies.
A successful business professional, John is highly experienced in the IT industry and through his work at Enterprise Vision Technologies. At EVT, John excels in developing business strategy in sales and operations for leader's looking for an outsider's perspective.
In their discussion today, Woody and John discuss cloud networking, but from the angle of the system integrator and the IT practitioner - a new approach for the show. They explore the constraints of native cloud services, and the problems that a full automation platform would solve for his business and customers.
John can be found on LinkedIn here.
Explore the Enterprise Vision Technologies website here.
In a special episode of Altitude, Woody hosts a roundtable with two great minds in cloud --Toby Foss, Director of Network Operations at Informatica, and Chris McHenry, Head of Security Solutions at Aviatrix. Together, they discuss the outcome of existing security patterns in cloud and how those patterns are working or not working. They explore alternative architectural approaches, what a distributed network security system requires to be successful, and "must-do's" in cloud security.
Toby has been involved in IT since 1992, spanning government, public, and private sectors. He is also in the process of getting a Ph.D. in cybersecurity and computer science. Chris is passionate about cybersecurity and specializes in secure multi cloud networking.
To learn more about Toby and Chris, head to their LinkedIns:
Toby - https://www.linkedin.com/in/tobyfoss
Chris - https://www.linkedin.com/in/chris-mchenry-475a0738/
On this episode of Altitude, Woody speaks with Zac Smith, the Global Head of Edge Infrastructure Services at Equinix, the world's largest operator of interconnected data centers. He is also the co-founder of Packet, which was acquired by Equinix and focused on automating computers and networks for developer-centric infrastructure.
Zac shares insights into the history and culture of Equinix, which has built a global network of over 250 interconnected data centers through a programmatic backbone. You’ll learn how Equinix commits to an open ecosystem model and reduces infrastructure friction, making it easy for customers to build their networks. The conversation also explores how automation is non-negotiable and requires a cultural change to embrace a certain amount of calculated risk. Zac also highlights sustainability in network infrastructure and how virtualization can help reduce waste.
Connect with Zac on LinkedIn
Altitude: The Unsung Heroes of Cloud Transformation is brought to you by Aviatrix. To learn more about how Aegon, IHG Hotels & Resorts, Heineken, Raytheon Technologies, and many more have succeeded in cloud networking, visit aviatrix.com
Welcome to Altitude: The Unsung Heroes of Cloud Transformation, a podcast by Aviatrix.
Today, more and more Enterprises are moving their business up to “the clouds”, as the race to innovate continues. In this multicloud world, IT leaders and teams find themselves behind the wheel, where they are confronted with both new challenges and new opportunities.
On Altitude, we explore the voices and stories of the people who are overcoming these challenges, every day, to drive their business to the next level.
New episodes release bi-weekly, so be sure to subscribe on your preferred listening app.