# ipSpace.net blog

Published articles for ipSpace.net blog.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Sunsetting netlab Vagrant/libvirt provider

DevFeed: [Sunsetting netlab Vagrant/libvirt provider](<https://devfeed.tech/articles/sunsetting-netlab-vagrant-libvirt-provider-34925.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2026/09/sunsetting-vagrant-libvirt/>)

Published: 2026-09-17T05:51:00Z

Content type: article

Language: en

Sources: [ipSpace.net blog](<https://devfeed.tech/sources/ipspace-net-blog.md>)

Topics: [Vagrant](<https://devfeed.tech/topics/vagrant.md>), [Infrastructure as code](<https://devfeed.tech/topics/infrastructure-as-code.md>), [Orchestration](<https://devfeed.tech/topics/orchestration.md>), [Containerlab topology](<https://devfeed.tech/topics/clab-topo.md>), [Oracle-VM-VirtualBox](<https://devfeed.tech/topics/vm-box.md>)

Tags: [change](<https://devfeed.tech/tags/change.md>), [containers](<https://devfeed.tech/tags/containers.md>), [infrastructure](<https://devfeed.tech/tags/infrastructure.md>), [infrastructure-as-code](<https://devfeed.tech/tags/infrastructure-as-code.md>), [netlab](<https://devfeed.tech/tags/netlab.md>), [orchestration](<https://devfeed.tech/tags/orchestration.md>), [vagrant](<https://devfeed.tech/tags/vagrant.md>), [virtualbox](<https://devfeed.tech/tags/virtualbox.md>)

### AI overview

The netlab project is sunsetting its Vagrant/libvirt provider after the vagrant-libvirt plugin became effectively unmaintained and HashiCorp announced the closure of Vagrant Cloud by the end of 2026. Existing support and tests will remain for now, but no new libvirt features or device integration tests are planned; containerlab will become the primary orchestration path.

### Source excerpt

When I started the netlab project, Vagrant was the go-to tool if you wanted to build a virtual environment described in a text configuration file (an idea popularized as infrastructure-as-code). It wasn't ideal for what we were doing, but a tool rarely does a great job when used far away from its intended use case. netlab initially supported Vagrant with VirtualBox, quickly adding support for KVM/libvirt through the vagrant-libvirt plugin. Life was good... until it wasn't. Read more ...

## How vagrant-libvirt Plugin Deals with Duplicate Subnets

DevFeed: [How vagrant-libvirt Plugin Deals with Duplicate Subnets](<https://devfeed.tech/articles/how-vagrant-libvirt-plugin-deals-with-duplicate-subnets-26994.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2026/09/vagrant-libvirt-duplicate-subnets/>)

Published: 2026-09-16T06:27:00Z

Content type: tutorial

Language: en

Sources: [ipSpace.net blog](<https://devfeed.tech/sources/ipspace-net-blog.md>)

Topics: [Vagrant](<https://devfeed.tech/topics/vagrant.md>), [virtual machines](<https://devfeed.tech/topics/virtual-machines.md>), [Linux](<https://devfeed.tech/topics/linux.md>), [Ubuntu](<https://devfeed.tech/topics/ubuntu.md>)

Tags: [debugging](<https://devfeed.tech/tags/debugging.md>), [linux](<https://devfeed.tech/tags/linux.md>), [vagrant](<https://devfeed.tech/tags/vagrant.md>), [virtual-machines](<https://devfeed.tech/tags/virtual-machines.md>), [virtualization](<https://devfeed.tech/tags/virtualization.md>)

### AI overview

The article explains that vagrant-libvirt can fail when an existing libvirt virtual network has the same IP subnet as the desired management network but a different name. It identifies the resulting network-name mismatch and reports that correcting the network definition in the Vagrantfile resolves the problem.

### Source excerpt

TL&DR: Badly. The vagrant-libvirt plugin mysteriously crashes when an existing virtual network (with a different libvirt name) uses the same IP subnet as the desired management network. Background: netlab is using the vagrant-libvirt plugin to manage libvirt/KVM virtual machines with Vagrant. As I already have that infrastructure, I use it to start standalone virtual machines (usually to test various Ubuntu releases) on my Linux server. Things work great... until they don't. Here's how I managed to waste half a day chasing imaginary gremlins caused by a simple error. Read more ...

## MPLS/VPN with SR-MPLS Core

DevFeed: [MPLS/VPN with SR-MPLS Core](<https://devfeed.tech/articles/mpls-vpn-with-sr-mpls-core-26234.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2026/09/sr-mpls-vpn/>)

Published: 2026-09-15T05:45:00Z

Content type: article

Language: en

Sources: [ipSpace.net blog](<https://devfeed.tech/sources/ipspace-net-blog.md>)

Topics: [SR-MPLS](<https://devfeed.tech/topics/sr-mpls.md>), [MPLS VPN](<https://devfeed.tech/topics/mpls-vpn.md>), [networking](<https://devfeed.tech/topics/networking.md>), [BGP](<https://devfeed.tech/topics/bgp.md>), [IS-IS](<https://devfeed.tech/topics/is-is.md>), [Network](<https://devfeed.tech/topics/network.md>), [GitHub](<https://devfeed.tech/topics/github.md>)

Tags: [bgp](<https://devfeed.tech/tags/bgp.md>), [devices](<https://devfeed.tech/tags/devices.md>), [github](<https://devfeed.tech/tags/github.md>), [is-is](<https://devfeed.tech/tags/is-is.md>), [mpls](<https://devfeed.tech/tags/mpls.md>), [mpls-vpn](<https://devfeed.tech/tags/mpls-vpn.md>), [netlab](<https://devfeed.tech/tags/netlab.md>), [sr-mpls](<https://devfeed.tech/tags/sr-mpls.md>), [vpn](<https://devfeed.tech/tags/vpn.md>)

### AI overview

This article explains how to build and test an MPLS/VPN service over an SR-MPLS core. It describes the required lab topology changes, including enabling MPLS/VPN, disabling LDP, configuring PE routers with IS-IS, SR-MPLS, BGP, MPLS, and VRF modules, and moving PE-to-host links into tenant VRFs. It also outlines how to run the lab using GitHub Codespaces, an Arista cEOS container, and netlab.

### Source excerpt

As we discussed in the BGP-Free Core with SR-MPLS blog post, SR-MPLS works as a drop-in replacement for the traditional MPLS control plane. No wonder it works well (when properly implemented) with MPLS/VPN services - the second "fun" scenario in my ITNOG10 Segment Routing workshop. It uses the same topology as the BGP-Free Core scenario: Simplest possible MPLS/VPN network with SR-MPLS core Read more ...

## Configuring Management IP Addresses to Virtual Network Devices

DevFeed: [Configuring Management IP Addresses to Virtual Network Devices](<https://devfeed.tech/articles/configuring-management-ip-addresses-to-virtual-network-devices-11435.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2026/09/network-lab-management-ip/>)

Published: 2026-09-14T05:29:00Z

Content type: article

Language: en

Sources: [ipSpace.net blog](<https://devfeed.tech/sources/ipspace-net-blog.md>)

Topics: [networking](<https://devfeed.tech/topics/networking.md>), [configuration](<https://devfeed.tech/topics/configuration.md>), [Orchestration](<https://devfeed.tech/topics/orchestration.md>), [Vagrant](<https://devfeed.tech/topics/vagrant.md>), [Cloud](<https://devfeed.tech/topics/cloud.md>), [ssh](<https://devfeed.tech/topics/ssh.md>)

Tags: [cli](<https://devfeed.tech/tags/cli.md>), [cloud](<https://devfeed.tech/tags/cloud.md>), [devices](<https://devfeed.tech/tags/devices.md>), [dhcp](<https://devfeed.tech/tags/dhcp.md>), [ip](<https://devfeed.tech/tags/ip.md>), [ipv4](<https://devfeed.tech/tags/ipv4.md>), [ipv6](<https://devfeed.tech/tags/ipv6.md>), [management](<https://devfeed.tech/tags/management.md>), [netlab](<https://devfeed.tech/tags/netlab.md>), [network](<https://devfeed.tech/tags/network.md>), [networking](<https://devfeed.tech/tags/networking.md>), [orchestration](<https://devfeed.tech/tags/orchestration.md>), [server](<https://devfeed.tech/tags/server.md>), [ssh](<https://devfeed.tech/tags/ssh.md>)

### AI overview

The article explains how to assign predictable management IP addresses to virtual network devices. It contrasts manual console-based setup with automated assignment through orchestration, containers, DHCPv4/DHCPv6, custom Vagrant boxes, and IPv6 mechanisms such as SLAAC.

### Source excerpt

It goes without saying that if you want to configure (virtual) network devices with any semi-sane configuration mechanism1, the device must have a working IP address. Here's the time-honored method2 to assign an IP address to a virtual network device: Start the virtual machine (using a GUI)3 Open a new window: either a telnet session to the virtual console port or a full-blown virtual console (GUI) session. Manually configure the IP address, the SSH server, and the user credentials on the first interface. Read more ...

## Worth Reading: NatJack

DevFeed: [Worth Reading: NatJack](<https://devfeed.tech/articles/worth-reading-natjack-11440.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2026/09/worth-reading-natjack-nat-security/>)

Published: 2026-09-11T07:02:00Z

Content type: opinion

Language: en

Sources: [ipSpace.net blog](<https://devfeed.tech/sources/ipspace-net-blog.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>)

Tags: [attacks](<https://devfeed.tech/tags/attacks.md>), [nat](<https://devfeed.tech/tags/nat.md>), [security](<https://devfeed.tech/tags/security.md>), [worth-reading](<https://devfeed.tech/tags/worth-reading.md>)

### AI overview

The article recommends NatJack, a website documenting several attacks against typical NAT implementations. It argues that NAT should not be treated as a security feature and dismisses common objections to that conclusion.

### Source excerpt

Every time I wrote something along the lines of NAT is not a security feature, I got the expected pushback from people defending their bad suboptimal design choices. Fortunately, rational1 engineers no longer need to have that discussion: the NatJack website documents2 a half-dozen attacks on typical NAT implementations. Obvious next step: coping mechanisms like "this is all theoretical", like the "but the remote host cannot reply" argument made 23 years after the Slammer worm 🤦♂. Read more ...

## Worth Reading: An Interactive Introduction to the STP

DevFeed: [Worth Reading: An Interactive Introduction to the STP](<https://devfeed.tech/articles/worth-reading-an-interactive-introduction-to-the-stp-11439.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2026/09/worth-reading-interactive-stp-intro/>)

Published: 2026-09-08T05:55:00Z

Content type: opinion

Language: en

Sources: [ipSpace.net blog](<https://devfeed.tech/sources/ipspace-net-blog.md>)

Topics: [Protocol (disambiguation)](<https://devfeed.tech/topics/protocol.md>), [WebAssembly](<https://devfeed.tech/topics/web-assembly.md>)

Tags: [video](<https://devfeed.tech/tags/video.md>), [webassembly](<https://devfeed.tech/tags/webassembly.md>), [worth-reading](<https://devfeed.tech/tags/worth-reading.md>)

### AI overview

An enthusiastic recommendation for Vincent Bernat's interactive introduction to the spanning tree protocol, which begins with an STP implementation in WebAssembly and is also available as a video.

### Source excerpt

I can't even start imagining how much time Vincent Bernat spent creating his interactive introduction to the spanning tree protocol (starting with STP implemented in WebAssembly); the results are simply phenomenal (there's also a video version for people who forgot how to read). I don't think we'll ever need another STP intro after this one ;)

## Please Help Me Follow Your Content

DevFeed: [Please Help Me Follow Your Content](<https://devfeed.tech/articles/please-help-me-follow-your-content-11434.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2026/09/help-me-follow-your-content/>)

Published: 2026-09-04T05:37:00Z

Content type: opinion

Language: en

Sources: [ipSpace.net blog](<https://devfeed.tech/sources/ipspace-net-blog.md>)

Topics: [RSS Feed](<https://devfeed.tech/topics/rss-feed.md>), [Web Development](<https://devfeed.tech/topics/web-development.md>)

Tags: [blog-post](<https://devfeed.tech/tags/blog-post.md>), [html](<https://devfeed.tech/tags/html.md>), [rss](<https://devfeed.tech/tags/rss.md>)

### AI overview

The author argues that email updates and RSS feeds are reliable ways to follow worthwhile blog content, unlike engagement-driven social media algorithms. They urge creators using static website generators to enable or add an RSS feed.

### Source excerpt

Finding good content in the swamp of AI slop is hard, and whenever I find a blog post worth reading, I'd like to know when the author publishes the next one. For stupid reasons (like a day having only 24 hours, and me having a life), I can't periodically scan all websites I find interesting, but fortunately, I don't have to. Two well-known mechanisms work reliably: email updates and RSS feeds. Read more ...

## BGP-Free Core with SR-MPLS

DevFeed: [BGP-Free Core with SR-MPLS](<https://devfeed.tech/articles/bgp-free-core-with-sr-mpls-11437.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2026/09/sr-mpls-bgp-free/>)

Published: 2026-09-03T05:30:00Z

Content type: article

Language: en

Sources: [ipSpace.net blog](<https://devfeed.tech/sources/ipspace-net-blog.md>)

Topics: [SR-MPLS](<https://devfeed.tech/topics/sr-mpls.md>), [BGP](<https://devfeed.tech/topics/bgp.md>), [networking](<https://devfeed.tech/topics/networking.md>), [Network](<https://devfeed.tech/topics/network.md>), [Routing (disambiguation)](<https://devfeed.tech/topics/routing.md>), [Containers](<https://devfeed.tech/topics/containers.md>), [Linux](<https://devfeed.tech/topics/linux.md>), [GitHub](<https://devfeed.tech/topics/github.md>)

Tags: [bgp](<https://devfeed.tech/tags/bgp.md>), [containers](<https://devfeed.tech/tags/containers.md>), [edge](<https://devfeed.tech/tags/edge.md>), [examples](<https://devfeed.tech/tags/examples.md>), [github](<https://devfeed.tech/tags/github.md>), [is-is](<https://devfeed.tech/tags/is-is.md>), [linux](<https://devfeed.tech/tags/linux.md>), [mpls](<https://devfeed.tech/tags/mpls.md>), [netlab](<https://devfeed.tech/tags/netlab.md>), [network](<https://devfeed.tech/tags/network.md>), [router](<https://devfeed.tech/tags/router.md>), [routing](<https://devfeed.tech/tags/routing.md>), [sr-mpls](<https://devfeed.tech/tags/sr-mpls.md>)

### AI overview

This article demonstrates how to build a BGP-free transport core with SR-MPLS using netlab. It describes a lab topology with IS-IS, BGP, Linux container hosts, and PE routers, then shows how SR-MPLS labels provide end-to-end connectivity without BGP routes on the core router.

### Source excerpt

The beauty of SR-MPLS is that it's a drop-in replacement for the traditional (LDP- or RSVP-based) MPLS control plane. For example, you could replace LDP with SR-MPLS in a network using MPLS to implement a BGP-free transport core, and it just keeps working. This scenario was the first "fun" scenario in the ITNOG10 Segment Routing workshop. The core network uses the same topology as in the previous examples; I added two hosts and BGP routing. Simplest possible network using a BGP-free core Read more ...

## Networking Aspects of Running VMs in Containers

DevFeed: [Networking Aspects of Running VMs in Containers](<https://devfeed.tech/articles/networking-aspects-of-running-vms-in-containers-11436.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2026/09/running-virtual-machines-in-containers/>)

Published: 2026-09-02T05:44:00Z

Content type: article

Language: en

Sources: [ipSpace.net blog](<https://devfeed.tech/sources/ipspace-net-blog.md>)

Topics: [Containers](<https://devfeed.tech/topics/containers.md>), [virtualization](<https://devfeed.tech/topics/virtualization.md>), [networking](<https://devfeed.tech/topics/networking.md>), [Linux](<https://devfeed.tech/topics/linux.md>), [Orchestration](<https://devfeed.tech/topics/orchestration.md>)

Tags: [bridge](<https://devfeed.tech/tags/bridge.md>), [containers](<https://devfeed.tech/tags/containers.md>), [docker](<https://devfeed.tech/tags/docker.md>), [ethernet](<https://devfeed.tech/tags/ethernet.md>), [linux](<https://devfeed.tech/tags/linux.md>), [netlab](<https://devfeed.tech/tags/netlab.md>), [networking](<https://devfeed.tech/tags/networking.md>), [podman](<https://devfeed.tech/tags/podman.md>), [qemu](<https://devfeed.tech/tags/qemu.md>), [virtual-machines](<https://devfeed.tech/tags/virtual-machines.md>), [virtualization](<https://devfeed.tech/tags/virtualization.md>)

### AI overview

The article explains how vrnetlab and a containerlab fork package virtual machines, especially network devices, as containers so container orchestration can provision network topologies. It focuses on connecting QEMU virtual network interfaces, Linux tap interfaces, bridges, and container veth pairs, including why data-plane and management interfaces require different handling.

### Source excerpt

The vrnetlab project and its containerlab fork implement a wonderful idea: let's package virtual machines (primarily network devices that cannot be containerized) as containers to use reliable orchestration tools like containerlab to provision network topologies. That approach might have a few drawbacks (depending on how the container images are built), but the obvious elephant in the room is: how do you make the virtual network plumbing work? Read more ...

## MUST READ: Git - Going Pro

DevFeed: [MUST READ: Git - Going Pro](<https://devfeed.tech/articles/must-read-git-going-pro-11438.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2026/09/worth-reading-git-going-pro/>)

Published: 2026-09-01T05:31:00Z

Content type: article

Language: en

Sources: [ipSpace.net blog](<https://devfeed.tech/sources/ipspace-net-blog.md>)

Topics: [Git](<https://devfeed.tech/topics/git.md>), [GitHub](<https://devfeed.tech/topics/github.md>), [GitHub Actions](<https://devfeed.tech/topics/github-actions.md>), [ssh](<https://devfeed.tech/topics/ssh.md>), [Pull Request](<https://devfeed.tech/topics/pull-request.md>), [Command-line interface](<https://devfeed.tech/topics/cli.md>)

Tags: [article](<https://devfeed.tech/tags/article.md>), [blog](<https://devfeed.tech/tags/blog.md>), [cli](<https://devfeed.tech/tags/cli.md>), [git](<https://devfeed.tech/tags/git.md>), [github](<https://devfeed.tech/tags/github.md>), [github-actions](<https://devfeed.tech/tags/github-actions.md>), [reviews](<https://devfeed.tech/tags/reviews.md>), [ssh](<https://devfeed.tech/tags/ssh.md>), [worth-reading](<https://devfeed.tech/tags/worth-reading.md>)

### AI overview

A recommendation for Tony Mattke's "Going Pro" article, which covers Git fundamentals and professional practices including SSH keys, pre-commit hooks, GitHub Actions, linting, branch protection, pull-request reviews, and the gh CLI.

### Source excerpt

I sure wish Tony Mattke had started publishing his Git-related blog posts in 2017 when I was still struggling with the basics. In his latest Going Pro article he covers: Using SSH keys with Git and GitHub Pre-commit hooks GitHub Actions and linting GitHub Branch protection PR reviews gh CLI Absolutely worth every second you'll spend reading the article!

## Using netlab in Software Testing with Dinesh Dutt

DevFeed: [Using netlab in Software Testing with Dinesh Dutt](<https://devfeed.tech/articles/using-netlab-in-software-testing-with-dinesh-dutt-11429.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2026/08/using-netlab-in-software-testing/>)

Published: 2026-08-28T06:26:00Z

Content type: article

Language: en

Sources: [ipSpace.net blog](<https://devfeed.tech/sources/ipspace-net-blog.md>)

Topics: [Software Testing](<https://devfeed.tech/topics/software-testing.md>), [networking](<https://devfeed.tech/topics/networking.md>), [software-development](<https://devfeed.tech/topics/software-development.md>), [Ansible](<https://devfeed.tech/topics/ansible.md>), [Vagrant](<https://devfeed.tech/topics/vagrant.md>)

Tags: [ansible](<https://devfeed.tech/tags/ansible.md>), [development](<https://devfeed.tech/tags/development.md>), [netlab](<https://devfeed.tech/tags/netlab.md>), [network](<https://devfeed.tech/tags/network.md>), [networking](<https://devfeed.tech/tags/networking.md>), [podcast](<https://devfeed.tech/tags/podcast.md>), [software](<https://devfeed.tech/tags/software.md>), [software-development](<https://devfeed.tech/tags/software-development.md>), [software-gone-wild](<https://devfeed.tech/tags/software-gone-wild.md>), [software-testing](<https://devfeed.tech/tags/software-testing.md>), [testing](<https://devfeed.tech/tags/testing.md>)

### AI overview

This article introduces Episode 208 of Software Gone Wild, a conversation about using netlab to test network management software. It discusses how netlab helps Stardust Systems test new SuzieQ features, along with related history involving Vagrant and Ansible.

### Source excerpt

I know a few software development companies use netlab to test their network management software (and contribute back to netlab - thanks a million!), and I always wanted to chat about that. As I have known Dinesh Dutt for ages, it wasn't hard to decide who to invite to have that chat with ;) As it turns out, it's dangerous to put Dinesh1 and me in the same (virtual) room - we were all over the place, from the ancient history of Vagrant in networking labs to the recent Ansible woes, but we did manage to cover how netlab helps Stardust Systems test new SuzieQ features. Read more ...

## Yak-Shaving netlab Podman Support

DevFeed: [Yak-Shaving netlab Podman Support](<https://devfeed.tech/articles/yak-shaving-netlab-podman-support-11433.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2026/08/yak-shaving-netlab-podman-support/>)

Published: 2026-08-27T05:30:00Z

Content type: article

Language: en

Sources: [ipSpace.net blog](<https://devfeed.tech/sources/ipspace-net-blog.md>)

Topics: [Command-line interface](<https://devfeed.tech/topics/cli.md>), [Orchestration](<https://devfeed.tech/topics/orchestration.md>), [Docker](<https://devfeed.tech/topics/docker.md>), [Ubuntu](<https://devfeed.tech/topics/ubuntu.md>), [Server](<https://devfeed.tech/topics/server.md>)

Tags: [cli](<https://devfeed.tech/tags/cli.md>), [docker](<https://devfeed.tech/tags/docker.md>), [netlab](<https://devfeed.tech/tags/netlab.md>), [orchestration](<https://devfeed.tech/tags/orchestration.md>), [podman](<https://devfeed.tech/tags/podman.md>), [server](<https://devfeed.tech/tags/server.md>), [ubuntu](<https://devfeed.tech/tags/ubuntu.md>)

### AI overview

The article describes the work required to make netlab support Podman as a runtime. It covers containerlab runtime configuration, Ubuntu-related issues, sudoless operation, Podman's socket-based API, installation automation, Docker-compatible commands, and differences in container visibility between Podman and Docker.

### Source excerpt

Long, long time ago, in a long-forgotten PR adding support for Cumulus VX Ignite runtime, an off-the-cuff remark was made saying, "and this is how you use netlab with Podman". That remark was quietly sitting in the documentation for years until someone (A) tried to use Podman and (B) found enough time to report that it doesn't work with netlab. I don't know what that tells us: either very few people use Podman, or nobody (apart from a notable exception) cares enough to spend a few minutes telling us stuff doesn't work1. Anyway, based on Joey Buiteweg's wonderful research, I was able to put together a working solution pretty quickly, but it did involve a lot of yak shaving (more bovine details). Read more ...

## Multivendor SR-MPLS

DevFeed: [Multivendor SR-MPLS](<https://devfeed.tech/articles/multivendor-sr-mpls-11428.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2026/08/sr-mpls-multivendor/>)

Published: 2026-08-25T05:44:00Z

Content type: tutorial

Language: en

Sources: [ipSpace.net blog](<https://devfeed.tech/sources/ipspace-net-blog.md>)

Topics: [SR-MPLS](<https://devfeed.tech/topics/sr-mpls.md>), [networking](<https://devfeed.tech/topics/networking.md>), [Routing (disambiguation)](<https://devfeed.tech/topics/routing.md>), [IS-IS](<https://devfeed.tech/topics/is-is.md>), [GitHub](<https://devfeed.tech/topics/github.md>)

Tags: [github](<https://devfeed.tech/tags/github.md>), [installation](<https://devfeed.tech/tags/installation.md>), [is-is](<https://devfeed.tech/tags/is-is.md>), [mpls](<https://devfeed.tech/tags/mpls.md>), [netlab](<https://devfeed.tech/tags/netlab.md>), [network](<https://devfeed.tech/tags/network.md>), [routing](<https://devfeed.tech/tags/routing.md>), [sr-mpls](<https://devfeed.tech/tags/sr-mpls.md>)

### AI overview

This tutorial demonstrates a multivendor SR-MPLS network built with netlab using Arista EOS, FRRouting, and SR Linux. It explains vendor-specific Segment Routing Global Block ranges, prefix segments, and MPLS LFIB label swapping, then outlines how to launch the lab through GitHub Codespaces.

### Source excerpt

Summer is almost over, and it's time to resume regular programming with the next example from the Segment Routing workshop I had at ITNOG10: multi-vendor SR-MPLS. I used the same lab topology as in the previous examples but deployed Arista EOS on PE1, FRRouting on P, and SR Linux on PE21 Read more ...

## Arista cEOS Does Not Apply ACLs to Control-Plane Traffic

DevFeed: [Arista cEOS Does Not Apply ACLs to Control-Plane Traffic](<https://devfeed.tech/articles/arista-ceos-does-not-apply-acls-to-control-plane-traffic-11421.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2026/08/arista-ceos-acl-control-plane-traffic/>)

Published: 2026-08-24T05:20:00Z

Content type: opinion

Language: en

Sources: [ipSpace.net blog](<https://devfeed.tech/sources/ipspace-net-blog.md>)

Topics: [Network](<https://devfeed.tech/topics/network.md>), [BGP](<https://devfeed.tech/topics/bgp.md>), [Containers](<https://devfeed.tech/topics/containers.md>), [Finite-state machine](<https://devfeed.tech/topics/finite-state-machine.md>), [configuration](<https://devfeed.tech/topics/configuration.md>)

Tags: [bgp](<https://devfeed.tech/tags/bgp.md>), [containers](<https://devfeed.tech/tags/containers.md>), [netlab](<https://devfeed.tech/tags/netlab.md>), [network](<https://devfeed.tech/tags/network.md>), [release](<https://devfeed.tech/tags/release.md>), [security](<https://devfeed.tech/tags/security.md>), [testing](<https://devfeed.tech/tags/testing.md>)

### AI overview

The article reports that Arista cEOS containers do not apply inbound ACLs to control-plane traffic or to traffic sent to the container's own IP addresses. This behavior differs from Arista vEOS virtual machines and can cause BGP connectivity tests using ACLs to produce unexpected results.

### Source excerpt

When someone starts singing the Use Digital Twins to Test Your Network hymn (or, more recently, tells you how AI agents can do that to validate their ideas), ask them about these minor details. If they persist, point them (not that it would help) to this long list of gotchas. That list just got longer: Arista cEOS container does not apply inbound ACLs to control-plane traffic (Arista vEOS VM does). Read more ...

## Worth Reading: Reading the Git Crime Scene

DevFeed: [Worth Reading: Reading the Git Crime Scene](<https://devfeed.tech/articles/worth-reading-reading-the-git-crime-scene-11431.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2026/08/worth-reading-git-crime-scene/>)

Published: 2026-08-20T05:56:00Z

Content type: article

Language: en

Sources: [ipSpace.net blog](<https://devfeed.tech/sources/ipspace-net-blog.md>)

Topics: [Git](<https://devfeed.tech/topics/git.md>), [networking](<https://devfeed.tech/topics/networking.md>)

Tags: [article](<https://devfeed.tech/tags/article.md>), [git](<https://devfeed.tech/tags/git.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [worth-reading](<https://devfeed.tech/tags/worth-reading.md>)

### AI overview

A recommendation for an article explaining how to investigate a Git repository to determine who made specific changes and why.

### Source excerpt

Tony Mattke continues publishing excellent "Git for Networking Engineers" content. In his latest article, he described how to find who made what changes (and why) in a Git repository. Absolutely worth reading if you're new to Git, but even oldtimers might find a few useful tidbits (Git is one of those things one never truly masters).

## Worth Reading: On AI Coding and Its Discontents

DevFeed: [Worth Reading: On AI Coding and Its Discontents](<https://devfeed.tech/articles/worth-reading-on-ai-coding-and-its-discontents-11430.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2026/08/worth-reading-drawbacks-ai-coding/>)

Published: 2026-08-19T06:24:00Z

Content type: opinion

Language: en

Sources: [ipSpace.net blog](<https://devfeed.tech/sources/ipspace-net-blog.md>)

Topics: [ai-coding](<https://devfeed.tech/topics/ai-coding.md>), [coding](<https://devfeed.tech/topics/coding.md>), [Code](<https://devfeed.tech/topics/code.md>)

Tags: [agentic](<https://devfeed.tech/tags/agentic.md>), [ai](<https://devfeed.tech/tags/ai.md>), [ai-coding](<https://devfeed.tech/tags/ai-coding.md>), [blog-post](<https://devfeed.tech/tags/blog-post.md>), [coding](<https://devfeed.tech/tags/coding.md>), [development](<https://devfeed.tech/tags/development.md>), [worth-reading](<https://devfeed.tech/tags/worth-reading.md>)

### AI overview

The article argues that AI coding tools should not be treated like traditional compilers. Unlike deterministic, mature compilers, AI coding tools can produce bugs, and agentic loops do not eliminate that reliability gap. It points readers to Cal Newport's discussion of the drawbacks of AI-assisted coding.

### Source excerpt

A lot of AI-coding enthusiasts are making claims along the lines of "AI coding tools are like compilers; you supply intent, they translate it into code, and who ever looked at the machine-code output?" Unfortunately, there is a bit of a gap between hope and reality; traditional compilers were always deterministic, and are (after decades of development and bug-fixing) pretty much bug-free. AI coding tools are neither, and no amount of "agentic loops" will solve that. Read more ...

## Exploring the BGP Neighbor CONNECT State

DevFeed: [Exploring the BGP Neighbor CONNECT State](<https://devfeed.tech/articles/exploring-the-bgp-neighbor-connect-state-11422.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2026/08/exploring-bgp-connect-state/>)

Published: 2026-08-18T05:16:00Z

Content type: article

Language: en

Sources: [ipSpace.net blog](<https://devfeed.tech/sources/ipspace-net-blog.md>)

Topics: [BGP](<https://devfeed.tech/topics/bgp.md>), [networking](<https://devfeed.tech/topics/networking.md>), [Finite-state machine](<https://devfeed.tech/topics/finite-state-machine.md>), [Routing (disambiguation)](<https://devfeed.tech/topics/routing.md>)

Tags: [bgp](<https://devfeed.tech/tags/bgp.md>), [blog-post](<https://devfeed.tech/tags/blog-post.md>), [debug](<https://devfeed.tech/tags/debug.md>), [routing](<https://devfeed.tech/tags/routing.md>)

### AI overview

An exploration of how Cisco IOS/XE presents the BGP neighbor CONNECT state during an incoming TCP session. The article tests several lab scenarios involving passive neighbors, static discard routes, ACLs, and suppressed ICMP unreachable messages, finding that CONNECT appears in BGP debugging output while the neighbor remains Idle in the displayed operational state.

### Source excerpt

Sakar left an interesting comment on my The Curious Case of the BGP Connect State blog post, claiming that Cisco IOS/XE goes through a CONNECT state when opening an incoming BGP session. I wanted to double-check this behavior, so I needed a scenario where one router would keep sending TCP SYN requests, the other would not (or we wouldn't learn anything), and the two routers could not communicate (or they'd quickly go into the OPEN state). Here's my first attempt at meeting those requirements: Read more ...

## The Never-Ending IPv6 Loopback Prefix Saga

DevFeed: [The Never-Ending IPv6 Loopback Prefix Saga](<https://devfeed.tech/articles/the-never-ending-ipv6-loopback-prefix-saga-11423.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2026/08/ipv6-loopback-saga/>)

Published: 2026-08-17T06:02:00Z

Content type: article

Language: en

Sources: [ipSpace.net blog](<https://devfeed.tech/sources/ipspace-net-blog.md>)

Topics: [Network](<https://devfeed.tech/topics/network.md>), [Hardware](<https://devfeed.tech/topics/hardware.md>), [datacenter](<https://devfeed.tech/topics/datacenter.md>), [BGP](<https://devfeed.tech/topics/bgp.md>)

Tags: [bgp](<https://devfeed.tech/tags/bgp.md>), [datacenter](<https://devfeed.tech/tags/datacenter.md>), [hardware](<https://devfeed.tech/tags/hardware.md>), [ios](<https://devfeed.tech/tags/ios.md>), [ipv6](<https://devfeed.tech/tags/ipv6.md>), [is-is](<https://devfeed.tech/tags/is-is.md>), [netlab](<https://devfeed.tech/tags/netlab.md>), [network](<https://devfeed.tech/tags/network.md>), [ospf](<https://devfeed.tech/tags/ospf.md>), [vxlan](<https://devfeed.tech/tags/vxlan.md>)

### AI overview

The article examines the IPv6 loopback-prefix problem in high-speed routers and data-center switches. OSPFv3 requires loopbacks to be advertised as /128s, which can increase forwarding hardware demands when /64 addressing is preferred. It compares vendor behaviors and suggests IS-IS or BGP as possible alternatives.

### Source excerpt

Remember the sage advice to simplify your life and use the IPv6 /64 prefixes everywhere? Not only does it make your life simpler (and wastes immesuarably less address space than the crazy "let's assign /64 to every device" stupidity), it also reduces the hardware requirements in your high-speed routers layer-3 switches. You see, doing lookups on 64 bits uses half the silicon it takes to do lookups on 128 bits. Alas, some people never got the memo. OSPFv3 standard clearly states in one of the bullets in section 4.4.3.9 that the loopback prefixes should always be advertised as /128s regardless of what's configured on the interface. Read more ...

## Worth Reading: LLM Prompts for Network Engineers

DevFeed: [Worth Reading: LLM Prompts for Network Engineers](<https://devfeed.tech/articles/worth-reading-llm-prompts-for-network-engineers-11432.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2026/08/worth-reading-llm-prompts-for-network-engineers/>)

Published: 2026-08-13T06:07:00Z

Content type: article

Language: en

Sources: [ipSpace.net blog](<https://devfeed.tech/sources/ipspace-net-blog.md>)

Topics: [Large Language Model](<https://devfeed.tech/topics/llm.md>), [Prompt Engineering](<https://devfeed.tech/topics/prompt-engineering.md>), [Network](<https://devfeed.tech/topics/network.md>), [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [llm](<https://devfeed.tech/tags/llm.md>), [network](<https://devfeed.tech/tags/network.md>), [tokens](<https://devfeed.tech/tags/tokens.md>), [worth-reading](<https://devfeed.tech/tags/worth-reading.md>)

### AI overview

A recommendation for network engineers to read a collection of LLM prompt suggestions intended to help them get more value from their tokens.

### Source excerpt

Tony Mattke put together a long list of recommendations that might help you get more out of your LLM tokens. Definitely worth reading instead of yelling at the stupid AI.

## Compress netlab Lab Topologies with Dot Notation

DevFeed: [Compress netlab Lab Topologies with Dot Notation](<https://devfeed.tech/articles/compress-netlab-lab-topologies-with-dot-notation-11427.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2026/08/netlab-compress-lab-topology/>)

Published: 2026-08-12T05:55:00Z

Content type: article

Language: en

Sources: [ipSpace.net blog](<https://devfeed.tech/sources/ipspace-net-blog.md>)

Topics: [Python](<https://devfeed.tech/topics/python.md>), [YAML](<https://devfeed.tech/topics/yaml.md>), [BGP](<https://devfeed.tech/topics/bgp.md>)

Tags: [bgp](<https://devfeed.tech/tags/bgp.md>), [blog](<https://devfeed.tech/tags/blog.md>), [blog-post](<https://devfeed.tech/tags/blog-post.md>), [netlab](<https://devfeed.tech/tags/netlab.md>), [post](<https://devfeed.tech/tags/post.md>), [python](<https://devfeed.tech/tags/python.md>)

### AI overview

An article about using Python Box dotted notation to make netlab lab topology definitions easier to read and more concise, including examples in YAML for BGP routers and IPv4 links.

### Source excerpt

netlab is using the Python Box library to make the code easier to read1. When I started the project, I hated the way you fetch values from Python dictionaries with stuff like node['ospf']['area']; Python Box lets you write node.ospf.area. Even better2, you can tell Python Box to create intermediate dictionaries as needed. node.ospf.area = 1 will automatically create the node.ospf dictionary. But wait, there's more (yes, we're getting to the topic of today's blog post): Box lets you use the same dotted notation in YAML files. Read more ...

## On ACLs and AI-Generated Device Configurations

DevFeed: [On ACLs and AI-Generated Device Configurations](<https://devfeed.tech/articles/on-acls-and-ai-generated-device-configurations-11426.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2026/08/netlab-acls-generated-configs/>)

Published: 2026-08-11T05:11:00Z

Content type: opinion

Language: en

Sources: [ipSpace.net blog](<https://devfeed.tech/sources/ipspace-net-blog.md>)

Topics: [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [driving](<https://devfeed.tech/tags/driving.md>), [netlab](<https://devfeed.tech/tags/netlab.md>), [qos](<https://devfeed.tech/tags/qos.md>), [youtube](<https://devfeed.tech/tags/youtube.md>)

### AI overview

The article introduces a NetworkAutoMagic episode discussing ACL complexity, QoS, and the pitfalls of AI-generated network device configurations, with related notes and video options mentioned.

### Source excerpt

Last Friday, I had a lovely chat with Steinn Bjarnarson and Urs Baumann, resulting in the NetworkAutoMagic episode 11. We couldn't avoid mentioning netlab, the seven layers of ACL hell (which is still balmy compared to the QoS hell), and the gotchas of AI-generated device configurations. Fortunately, I don't have to go into more details; Steinn published extensive notes, and if you don't feel like listening to us while driving, you can waste time watching us on YouTube.

## netlab 26.08: ArcOS, VPP (FD.io), ACLs, and DNS

DevFeed: [netlab 26.08: ArcOS, VPP (FD.io), ACLs, and DNS](<https://devfeed.tech/articles/netlab-26-08-arcos-vpp-fd-io-acls-and-dns-11425.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2026/08/netlab-26-08/>)

Published: 2026-08-10T09:58:00Z

Content type: release

Language: en

Sources: [ipSpace.net blog](<https://devfeed.tech/sources/ipspace-net-blog.md>)

Topics: [Release notes](<https://devfeed.tech/topics/release-notes.md>), [networking](<https://devfeed.tech/topics/networking.md>), [Containers](<https://devfeed.tech/topics/containers.md>), [configuration](<https://devfeed.tech/topics/configuration.md>), [Routing (disambiguation)](<https://devfeed.tech/topics/routing.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>)

Tags: [access-control](<https://devfeed.tech/tags/access-control.md>), [configuration](<https://devfeed.tech/tags/configuration.md>), [dns](<https://devfeed.tech/tags/dns.md>), [getting-started](<https://devfeed.tech/tags/getting-started.md>), [github](<https://devfeed.tech/tags/github.md>), [gre](<https://devfeed.tech/tags/gre.md>), [installation](<https://devfeed.tech/tags/installation.md>), [ipv4](<https://devfeed.tech/tags/ipv4.md>), [ipv6](<https://devfeed.tech/tags/ipv6.md>), [netlab](<https://devfeed.tech/tags/netlab.md>), [podman](<https://devfeed.tech/tags/podman.md>), [release](<https://devfeed.tech/tags/release.md>), [release-notes](<https://devfeed.tech/tags/release-notes.md>), [routing](<https://devfeed.tech/tags/routing.md>)

### AI overview

netlab 26.08 adds ArcOS support, VPP with FRR or BIRD control planes, SONiC containers, IPv4/IPv6 access control lists, DNS client and server configuration, GRE and WireGuard tunnel support, and Podman support for the clab provider. The article also notes bug fixes, configuration-template changes, upgrade guidance, and documentation for new users.

### Source excerpt

netlab release 26.08 brings a few humongous additions: ArcOS support by @roc-ops VPP (FD.io) with FRR or BIRD control plane by @jbemmel SONiC containers (also by @roc-ops) IPv4/IPv6 access control lists in the routing module by @DanPartelly But wait, there's more: Read more ...

## On the Futility of Opening Ansible Issues

DevFeed: [On the Futility of Opening Ansible Issues](<https://devfeed.tech/articles/on-the-futility-of-opening-ansible-issues-11414.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2026/07/futility-opening-ansible-issues/>)

Published: 2026-07-22T06:03:00Z

Content type: opinion

Language: en

Sources: [ipSpace.net blog](<https://devfeed.tech/sources/ipspace-net-blog.md>)

Topics: [Ansible](<https://devfeed.tech/topics/ansible.md>), [bug](<https://devfeed.tech/topics/bug.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>), [configuration](<https://devfeed.tech/topics/configuration.md>), [networking](<https://devfeed.tech/topics/networking.md>)

Tags: [ansible](<https://devfeed.tech/tags/ansible.md>), [bug](<https://devfeed.tech/tags/bug.md>), [cli](<https://devfeed.tech/tags/cli.md>), [github](<https://devfeed.tech/tags/github.md>), [network](<https://devfeed.tech/tags/network.md>), [open-source](<https://devfeed.tech/tags/open-source.md>)

### AI overview

The author describes opening an Ansible issue after discovering that the cisco.ios.ios_config module did not report rejected Cisco IOS configuration commands. The issue was initially closed without the proposed error-message fix, but an update says it was later reopened and fixed shortly after publication.

### Source excerpt

Remember the anonymous troll who chided me for writing a rant instead of opening a GitHub issue in the relevant Ansible repository? Well, I decided to be an open-source poster boy when I stumbled upon the next Ansible bug, and ended up feeling like a sweet summer child :( Read more ...

## Content: New Parameter in Multiple something\_config Ansible Modules

DevFeed: [Content: New Parameter in Multiple something\_config Ansible Modules](<https://devfeed.tech/articles/content-new-parameter-in-multiple-something-config-ansible-modules-11413.md>)

Original publisher: [Read original article](<https://blog.ipspace.net/2026/07/ansible-config-content/>)

Published: 2026-07-15T05:22:00Z

Content type: opinion

Language: en

Sources: [ipSpace.net blog](<https://devfeed.tech/sources/ipspace-net-blog.md>)

Topics: [Ansible](<https://devfeed.tech/topics/ansible.md>), [configuration](<https://devfeed.tech/topics/configuration.md>), [Network](<https://devfeed.tech/topics/network.md>), [issue tracker](<https://devfeed.tech/topics/issue-tracker.md>)

Tags: [ansible](<https://devfeed.tech/tags/ansible.md>), [network](<https://devfeed.tech/tags/network.md>)

### AI overview

The article discusses new parameters added to several Ansible network device configuration modules after concerns about templating behavior and a change introduced in Ansible 12. It describes the author's issue report and notes that the issue's closure was due to poor issue management rather than rejection of the proposed solution.

### Source excerpt

Last December, I wrote a pretty ranty post explaining how Ansible release 12 broke (some?) network device configuration playbooks. The inevitable anonymous troll (why are they always anonymous?) couldn't resist asking whether I opened an issue on GitHub. I didn't (more about that later), but when the solution to that rant was "we're deprecating using templates in src" parameter, I opened an issue arguing why that's not a good idea. Read more ...

[Next page](<https://devfeed.tech/sources/ipspace-net-blog.md?cursor=WyIyMDI2LTA3LTE1VDA1OjIyOjAwKzAwOjAwIiwgIjA4NjA5NWEyLTUxMGYtNGI1YS1iZjlmLTgyZTJiNGIwZjJmYiJd>)