• Digital säkerhet
  • Traditionell säkerhet
  • Nyhetsbrev

Tough times foster the finest intentions


Foto: Albert Law/porkbellystudio.com

Intent Based Networking is on a roll. It looks like covid-19 has barely touched the brakes

David Cheriton is a computer science professor at Stanford University with a serious reputation for advanced thinking on Distributed Systems. Unlike most academics I know, he combines that with uncanny insight into technology market opportunities. He was among the first to invest in Google, and the 20 plus companies he has invested in include VMware, Arista and his latest venture, Apstra – a company that, since he co-founded it in 2014, has launched IBN (Intent Based Networking) into the stratosphere of (oft-misapplied) industry buzzwords.

What, in a nutshell, is Apstra all about?

I somewhat unkindly begin by reminding David about some advice he gave at a NetEvents keynote to a room full of Venture Capitalists: “never invest in anything you can’t explain to your mother”. Could he explain Apstra in such terms?

– Automate the configuration, monitoring and root cause identification of your network so you need fewer people – reducing cost, improving reliability and allowing faster deployments, he says

For those who grok easier with metaphors, Sasha Ratkovic from Apstra likens the composition of IT resources to an orchestra:

– Imagine an orchestra where players cannot hear other players or see the conductor in real time. The resulting performance would be disastrous. We see these disasters and outage horror stories today when the real-time operational analytics capability is not present.Whereas an Intent Based Network is akin to having players listen in real time to what other players as well as conductor are doing and reacting to it.

More basic is Apstras president For Mansour’s comparison with an automated vehicle.

– Find the nearest free space and park is a simple intent that embraces an extremely complex array of instructions, operations and real-time decisions. So you want a vehicle (or network) operating system with sufficient intelligence to grasp the intent, compare it with the entire current network status (compare with vehicle position, orientation, speed etc.) and then make informed, ongoing decisions towards realizing the intent.

A great idea, but was it timely?

Still seeking to stretch David on the rack of past opinions, I quote another of his investment tips: “never investing in a start-up that only exists for one reason”. Could he name three reasons for investing in Apstra? Again, he could:

  1. The Total Cost of Network Ownership is dominated by operations costs – almost entirely people. That cost is getting higher, not just in dollars but in (lack of) reliability.
  2. Networks are going multi-vendor with Arista and white-box, making them harder to manage.
  3. Network devices now have APIs, making them possible to manage automatically.

I did not expect great dissent from such a well-knit team, but it is worth comparing their responses. Mansour – with his great track record for launching high tech infrastructure companies – began with a broad vision:

– The increased importance and complexity of networking is a foundation of everything we do.

Again he points to the human factor:

– It was clear software was going to be far speedier, far more reliable, and far smarter than humans at managing networks of increasing scale and complexity.

Second came APIs: he points out that customers were compelling vendors to open up their APIs and “without these APIs, there wouldn’t have been a way for our software to interface with networking devices”. His third reason reflected that – with the surge in vendors, cloud, ML and AI – it was becoming a lot more difficult to build networks sourced from a single vendor.

Sasha’s emphasis is not so much on operations as initiation. First, the growing pain of composing infrastructure involving more components from more diverse vendors playing more roles and with greater dynamism. Secondly: “more and more technologies becoming available to deal with this problem, especially in the area of distributed systems.” Finally he concluded with a wonderfully pragmatic observation from a man renowned as a thought leader in domain abstractions and data model driven automation.

Where are we six years later?

It is always fascinating to look back at previous predictions in the light of current knowledge. David Cheriton had said that, when he first began suggesting the IBN concept, people asked “what’s the point, if everything is moving to the cloud?”. Back then they thought that the private database had had its day – David does not agree.

– The so-called public cloud is now viewed more as surge space and experimental space than a place to run your 24/7 IT operations, he says.

But is this just a swing of the pendulum between public and private systems? Although the public cloud continues to grow:

– I also don’t see the world returning to the hype that everything is moving to the public cloud.  I think the cycle will be more along the lines of out-sourcing vs. bringing it in-house, perhaps at the management layer of IT, rather than at the hardware level.  For example, if I have a private cloud plus use several public clouds for certain apps, who is managing all this?  Do I contract this out or do I have people on staff to run it?

For Mansour:

– When you look at private versus public clouds, it’s always going to be a balance, where some applications are going run in private clouds, some in a public cloud. Some apps, which are less critical, are running in a public cloud. But ultimately, customers are going to be evaluating and re-evaluating, especially where public cloud bills are getting too big.

Back then, Gartner commended the Apstra solution but commented that the company faced a difficult task of “changing how enterprise network teams think about the build and operation of their data center networks”. How has that task progressed since 2014?

– While networking teams are generally conservative, they have no choice but to transform how they operate their networks. Why? Digital transformation… Quoting Gartner, ‘businesses are three times more likely to fail in their digital transformation efforts if they don’t transform their networks first’, says For Mansour.

The impact of covid-19

Apstra is in the business of improving networks and so, ultimately, optimizing human business and communications. That placed it squarely among those fortunate companies that could gain from lockdown – as opposed to those, like hospitality, live entertainment and transport, with so much to lose.

Mansour points out that the Coronavirus crisis is forcing all businesses to accelerate their digital transformation efforts (notably secure networking to the edge), and David took that further:

– With the pandemic, IT technologies in general are providing enormous value – allowing work-from-home, better information, support for vaccine development. With the new normal of social distancing, automation is key to reducing the number of people required and the proximity with which they need to work, and the network is the foundation for it all, so network automation is fundamental.

Specifically addressing lockdown Mansour adds that working from home: “has forced all organisations to beef up their networks and apply policies, not only to their headquarters or certain locations, but to every home. Metrics are getting a lot more distributed with a lot more remote sites. And you need to manage this without sending someone to every one of those locations. You need to apply the policies, and make sure the network is running reliably. You can’t do this without an intent-based networking layer providing full automation and remote control”.

Sasha once wrote that “Change is not our enemy, it is a fact of life”. Since then G2 2020 has seen unprecedented changes – how we are all now adapting to the current “facts of life”?

– The context of that article was that operators need to embrace change… IT services will evolve, service will evolve, innovations will be coming their way and they need to be ready to deal with that transformation. Apstra AOS enables you to deal with these changes reliably, and therefore you are guaranteed to be future proofing your IT investment as you will be comfortable knowing that you can handle transformations coming your way, says Sasha.

Looking ahead

There is no doubt that Apstra in 2020 is in a strong position and – unlike many companies that started the year on a high note – continues to forge ahead. One of the key things that attracted David Cheriton to the Apstra concept was that it had what he described as “the potential to add real value to the world”. Sasha had made the point that, in these times of uncertainty, Apstra was adding even greater value.

Now in 2020, what technologies other than IBN, are adding, or are going to add, real value to the world?

– Under this umbrella term ‘automation’, there is a large scale, sophisticated one that Gartner calls ‘hyper-automation’. Secondly: as computational needs are exploding it is natural to place data collection and processing as close to the source as possible which was the primary reason for emergence of edge computing. Finally, cloud as an experience will continue its momentum, but the lines between public and private cloud will be blurred, both from the implementation and consumption perspective. Democratization of technology will allow enterprises to consume IT in the way only cloud providers were able to offer in the past. Democratization of technology will also raise and augment human skills, for example enabling developers to generate data models without needing the skills of a data scientist, says Sasha.

For Mansour networking is still the key focus: “The more powerful and far reaching our network is, the more life changing applications on top of networking will become.” He backs that with three examples:

  1. Self-driving cars will have a profound effect on our transportation infrastructure. They require countless sensors communicating with processors both in the cars and in nearby centers of data near those cars, over high bandwidth networks at the core.
  2. The biggest advances in healthcare require high resolution imaging with augmented reality capabilities, coupled with precise remote control of robots. These require powerful networks.
  3. Working from home has the potential to transform our towns, cities and transportation systems. COVID has shown that working from home is possible, and often more productive, but this is early days. We need many more technological advances to enhance the “WFH” experience – eg background noise cancelling, higher resolution, more reliable and enhanced video etc. Advances in networking are at the core of all such potential innovations.


Säkra leverantörskedjan

Hot och risker kopplat till leverantörskedjan är ett gissel som går tillbaka många år. Många är de incidenter där just underleverantören och deras bristande...


Sofistikerade DDoS-attacker överlistar statiska skydd – nu krävs uppdaterade försvarstekniker

Det här är en opinionstext. Åsikter som uttrycks är skribentens egna.DDoS-attacker, distribuerade överbelastningsattacker, är enkla att förstå i stora drag. Det handlar om att...


Nyckelfri vardag för din bostadsrättsförening

– I en bostadsrättsförening finns det många fysiska nycklar, där förvaltaren måste låsa upp för de boende när de tappat bort sina nycklar. Detta...

Cyberhot mot sjukvården fortsätter öka

Under det senaste året har attackerna ökat med 78 procent och stigit till ett genomsnitt på 1 426 attacker per organisation och vecka, en...


Teknik för en säkrare energibransch

Ett ställverk på en avlägsen plats. En transformatorstation djupt inne i skogen. Mängder av viktiga – och geografiskt spridda – byggnader. Så ser verkligheten...

Ny försäljningschef på Basalt

Ulrika Wergens har under många år arbetat med försäljning, ledning, förändringsledning och affärsutveckling inom bland annat IT- säkerhets- och utbildningssektorn.– Att få arbeta...

CSG får fortsatt förtroende som trygghetsvärdar av SL

Uppdraget, som startade den 1 oktober 2020, innefattar en löptid om totalt tre år med en option på ytterligare två plus ett år. Trafikförvaltningen...


Vem, mot vem – och hur? En kategorisering av cyberkriminella, deras offer och deras...

Året började med en internationellt uppmärksammad attack mot en oljetank, tätt följt av hackergruppen Lapsus$s angrepp mot Samsung – då en hel del konfidentiella...

OneMore Secure ingår partnerskap med norskt investeringsföretag

OneMore Secure grundades 2022 och släppte i januari 2023 sin Saas-tjänst med en säkerhetsdeklaration, baserad på 40 verifierade kontrollpunkter som visar på företags motståndskraft...

Så kan självkörande bilar bli säkrare

Avancerade förarassistanssystem (ADAS) och automatiserad körning (AD) förbättrar körkomforten och gör trafiken säkrare genom att antalet olyckor på våra vägar minskas. Om man utvecklar...

Utbyggnad av fiber och 5G minskar bredbandsklyftan

Utbyggnaden av fibernät utanför tätort driver på den ökade bredbandstäckning som PTS redovisar i sin årliga kartläggning. Täckningen av 5G-nät har också ökat betydligt...

Möt den grävande journalisten Tom Burgis under Penningtvättsdagarna

Tom Burgis är författare till den storsäljande boken Kleptopia: How Dirty Money Is Conquering the World och kommer att rapportera för den brittiska dagstidningen...

Tempest Security inför AI-driven larmfiltrering

– U-Filter visade sig vara upp till tre gånger mer effektivt vid filtrering av falsklarm än andra lösningar. Vi använder U-filter i skarp drift i...

Ny HR-chef på Heras

Maria Mäki tillträde sin nya roll som HR-chef för Heras AB i november 2022. Huvudkontoret har sitt säte i Helsingborg, men rollen innebär ansvar...

IMY startar innovationshub

I april 2021 fick Integritetsskyddsmyndigheten (IMY) i uppdrag av regeringen att genomföra metod- och kunskapsutvecklande insatser för att höja kunskapen om integritets- och dataskyddsfrågor...

Technopolis signerar långsiktigt avtal med Rapid Säkerhet

– Det som avgjorde vårt val av Technopolis är helheten. Det finns mycket bra här – närhet till våra kunder, lokalernas utformning och potential,...

Du kan aldrig skydda det du inte vet finns

Det här är en opinionstext. Åsikter som uttrycks är skribentens egna.Tyvärr finns det inga tecken på att cyberattackerna minskar. Faktum är att de viktiga...

Advenica blir medlem i forskningssamarbetet Software Center

Software Center har som mission att avsevärt förbättra Software Engineering-kapaciteten och digitaliseringsförmågan hos mjukvaruintensiv industri. Forskningen handlar därför om hur digital transformation påverkar ett...

Sofistikerade DDoS-attacker överlistar statiska skydd – nu krävs uppdaterade försvarstekniker

Det här är en opinionstext. Åsikter som uttrycks är skribentens egna.DDoS-attacker, distribuerade överbelastningsattacker, är...