<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Sachin Kumar Sharma | Engineering Blog &amp; War Stories</title>
    <description>Architectural patterns, war stories, and engineering philosophy across 20+ years of production operations.</description>
    <link>https://virtualsach.in/blog</link>
    <atom:link href="https://virtualsach.in/rss.xml" rel="self" type="application/rss+xml"/>
    <language>en-us</language>
    <copyright>Copyright 2026 Sachin Kumar Sharma</copyright>
    
    <item>
      <title><![CDATA[The 7 Failure Modes of Agentic AI (And the Network Engineering Fixes)]]></title>
      <description><![CDATA[How 20 years of infrastructure routing, load balancing, and security firewall design directly maps to fixing autonomous AI failures.]]></description>
      <link>https://virtualsach.in/blog/2026-08-seven-failure-modes-agentic-systems</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/2026-08-seven-failure-modes-agentic-systems</guid>
      <pubDate>Sat, 01 Aug 2026 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[I Shipped 4 Production Products Solo in a Month Using Agentic AI]]></title>
      <description><![CDATA[How I built and deployed an interactive portfolio, a digital twin, a brand manager, and a multi-agent orchestration platform using AI co-pilots.]]></description>
      <link>https://virtualsach.in/blog/2026-07-shipped-four-products-solo-ai-team</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/2026-07-shipped-four-products-solo-ai-team</guid>
      <pubDate>Wed, 15 Jul 2026 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[MCP: The Universal API Gateway for Autonomous Agents]]></title>
      <description><![CDATA[How the Model Context Protocol (MCP) standardizes AI tool integration, acting as the modern software gateway for agentic runtimes.]]></description>
      <link>https://virtualsach.in/blog/2026-06-mcp-the-universal-api-gateway-for-agents</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/2026-06-mcp-the-universal-api-gateway-for-agents</guid>
      <pubDate>Mon, 15 Jun 2026 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Capability Attenuation: Scoped Tokens & Firewalls for AI Subagents]]></title>
      <description><![CDATA[Applying NSX-T DFW microsegmentation principles to AI subagents. Scoping API tokens and tool access to prevent privilege escalation.]]></description>
      <link>https://virtualsach.in/blog/2026-05-capability-attenuation-subagent-guardrails</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/2026-05-capability-attenuation-subagent-guardrails</guid>
      <pubDate>Sun, 10 May 2026 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Token Economics: What BGP Traffic Steering Taught Me About LLM Routing]]></title>
      <description><![CDATA[How network BGP routing concepts (Local Pref, MED) inspired our multi-model LLM router, cutting API costs by 65%.]]></description>
      <link>https://virtualsach.in/blog/2026-03-token-economics-bgp-routing</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/2026-03-token-economics-bgp-routing</guid>
      <pubDate>Fri, 20 Mar 2026 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Your AI Agent Has a Thermal Problem: Circuit Breakers for LLM Runtimes]]></title>
      <description><![CDATA[Why agentic execution loops need defensive stateful Circuit Breakers to prevent runaway API costs, rate-limit cascades, and infinite loops.]]></description>
      <link>https://virtualsach.in/blog/2026-01-circuit-breakers-for-agentic-systems</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/2026-01-circuit-breakers-for-agentic-systems</guid>
      <pubDate>Thu, 15 Jan 2026 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Observability on a Budget: Optimizing Cloud Log Ingestion Costs]]></title>
      <description><![CDATA[How we reduced Azure Log Analytics and SIEM ingestion bills by 40% using sampling, filtering, and basic telemetry tiering.]]></description>
      <link>https://virtualsach.in/blog/observability-on-budget</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/observability-on-budget</guid>
      <pubDate>Thu, 10 Apr 2025 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[The Factory: Building Azure DevSecFinOps at Scale]]></title>
      <description><![CDATA[]]></description>
      <link>https://virtualsach.in/blog/azure-devsecfinops-factory</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/azure-devsecfinops-factory</guid>
      <pubDate>Fri, 14 Feb 2025 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Uncovering Hidden Tech Debt: Cloud Landing Zone Security Audits]]></title>
      <description><![CDATA[How we conducted comprehensive security audits across multi-tenant Azure landing zones to eliminate legacy tech debt.]]></description>
      <link>https://virtualsach.in/blog/security-audit-tech-debt</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/security-audit-tech-debt</guid>
      <pubDate>Wed, 15 Jan 2025 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[The Pivot: Transitioning from Hands-On Engineer to Cloud Architect]]></title>
      <description><![CDATA[Moving from tactical CLI troubleshooting to strategic enterprise architecture, business alignment, and team leadership.]]></description>
      <link>https://virtualsach.in/blog/engineer-to-architect</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/engineer-to-architect</guid>
      <pubDate>Tue, 05 Nov 2024 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[FinOps PR Guardrails: Preventing $50,000 Cloud Cost Spikes Before terraform apply]]></title>
      <description><![CDATA[How embedding Infracost cost estimation into GitHub Actions pull requests gave developers instant visibility into cloud invoice deltas.]]></description>
      <link>https://virtualsach.in/blog/infracost-finops-pr-guardrails</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/infracost-finops-pr-guardrails</guid>
      <pubDate>Wed, 18 Sep 2024 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Blameless Post-Mortems: Fixing Systems, Not People]]></title>
      <description><![CDATA[Why punitive engineering cultures encourage technicians to hide mistakes. How we established a blameless post-mortem framework.]]></description>
      <link>https://virtualsach.in/blog/blameless-culture-post-mortem</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/blameless-culture-post-mortem</guid>
      <pubDate>Thu, 12 Sep 2024 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Policy as Code: Blocking Non-Compliant Terraform PRs at the CI/CD Pipeline Gate]]></title>
      <description><![CDATA[How embedding Checkov static security analysis in GitHub Actions PR pipelines prevented non-compliant cloud infrastructure from reaching production.]]></description>
      <link>https://virtualsach.in/blog/checkov-iac-security-pipeline-gate</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/checkov-iac-security-pipeline-gate</guid>
      <pubDate>Mon, 22 Jul 2024 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[BGP as a FinOps Tool: Optimizing Cloud Data Egress Costs]]></title>
      <description><![CDATA[Using BGP Local Preference and MED attributes to steer outgoing cloud data traffic across lower-cost interconnect paths.]]></description>
      <link>https://virtualsach.in/blog/bgp-attributes-cost-saving</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/bgp-attributes-cost-saving</guid>
      <pubDate>Tue, 02 Jul 2024 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Azure ExpressRoute & BGP: Multi-Region Hybrid Routing Architecture]]></title>
      <description><![CDATA[Architecting multi-region Azure ExpressRoute circuits with active/active BGP routing and VPN failover for enterprise resilience.]]></description>
      <link>https://virtualsach.in/blog/2024-05-hybrid-cloud-bridge</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/2024-05-hybrid-cloud-bridge</guid>
      <pubDate>Fri, 10 May 2024 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Azure ExpressRoute Routing: Steering Hybrid Traffic Away from Expensive ISP Peering]]></title>
      <description><![CDATA[How configuring BGP Local Preference and AS-Path prepending over Azure ExpressRoute circuits eliminated asymmetric routing across hybrid cloud backbones.]]></description>
      <link>https://virtualsach.in/blog/azure-expressroute-bgp-local-pref</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/azure-expressroute-bgp-local-pref</guid>
      <pubDate>Fri, 15 Mar 2024 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Azure DevSecFinOps: Automating Governance at Scale]]></title>
      <description><![CDATA[How we embedded Policy-as-Code and Infracost financial guardrails into GitHub Actions CI/CD pipelines for Azure landing zones.]]></description>
      <link>https://virtualsach.in/blog/2024-02-azure-devsecfinops-factory</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/2024-02-azure-devsecfinops-factory</guid>
      <pubDate>Sun, 18 Feb 2024 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Automating Cloud Hygiene: Reclaiming Unattached Managed Disks & Public IPs at Scale]]></title>
      <description><![CDATA[How automated Azure CLI and Azure Automation Runbooks deleted orphaned Premium SSD disks and unattached Public IPs, saving $15,000 monthly.]]></description>
      <link>https://virtualsach.in/blog/azure-unattached-disk-cleanup-automation</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/azure-unattached-disk-cleanup-automation</guid>
      <pubDate>Tue, 10 Oct 2023 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Day-0 Firewall Rules: Automating Security Baseline Insertion]]></title>
      <description><![CDATA[How we automated the injection of Day-0 compliance firewall rules into newly provisioned NSX-T logical segments.]]></description>
      <link>https://virtualsach.in/blog/day-0-firewall-rules</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/day-0-firewall-rules</guid>
      <pubDate>Mon, 05 Dec 2022 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[The Zero Trust Lie: Why Default-Deny DFW Microsegmentation Requires Planning]]></title>
      <description><![CDATA[Why turning on 'Default Deny' firewall rules without flow mapping will break production. Lessons in microsegmentation staging.]]></description>
      <link>https://virtualsach.in/blog/zero-trust-lie-dfw</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/zero-trust-lie-dfw</guid>
      <pubDate>Wed, 12 Oct 2022 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Automating Security: Syncing Policy Matrices with PowerNSX]]></title>
      <description><![CDATA[Using PowerNSX PowerShell modules to programmatically audit and sync firewall rules across legacy vCenter environments.]]></description>
      <link>https://virtualsach.in/blog/automating-security-powernsx</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/automating-security-powernsx</guid>
      <pubDate>Thu, 18 Aug 2022 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Terraform State Disasters: Recovering Corrupted Remote State Locks]]></title>
      <description><![CDATA[A interrupted CI build corrupted a production Terraform state file. How we recovered state locking and restored infrastructure management.]]></description>
      <link>https://virtualsach.in/blog/terraform-state-disaster</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/terraform-state-disaster</guid>
      <pubDate>Tue, 10 May 2022 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Translating Kubernetes NetworkPolicies to NSX-T Distributed Firewall Rules]]></title>
      <description><![CDATA[How deploying NSX-T Container Plugin (NCP CNI) automatically translated Kubernetes YAML NetworkPolicies into hypervisor-level Distributed Firewall rules.]]></description>
      <link>https://virtualsach.in/blog/kubernetes-ncp-cni-networkpolicy-translation</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/kubernetes-ncp-cni-networkpolicy-translation</guid>
      <pubDate>Tue, 12 Apr 2022 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[When Kubernetes Met NSX-T: Container Networking with NCP CNI]]></title>
      <description><![CDATA[Integrating Kubernetes container networking with enterprise virtual underlays using the NSX Container Plugin (NCP).]]></description>
      <link>https://virtualsach.in/blog/kubernetes-met-nsxt</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/kubernetes-met-nsxt</guid>
      <pubDate>Mon, 14 Feb 2022 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Declarative Networking: Automating NSX-T Fabric with Ansible]]></title>
      <description><![CDATA[Provisioning Tier-0 gateways, Tier-1 routers, and overlay segments using Ansible collections for NSX-T Policy API.]]></description>
      <link>https://virtualsach.in/blog/defining-network-ansible-nsxt</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/defining-network-ansible-nsxt</guid>
      <pubDate>Sat, 20 Nov 2021 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Zero-Touch Pod Teardown: Why Automated Teardown Is as Critical as Provisioning]]></title>
      <description><![CDATA[How engineering an automated un-deploy workflow (undeploy.yml) prevented orphaned VMDKs, stale DNS records, and datastore exhaustion.]]></description>
      <link>https://virtualsach.in/blog/zero-touch-pod-teardown-undeploy</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/zero-touch-pod-teardown-undeploy</guid>
      <pubDate>Mon, 08 Nov 2021 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[DNS & Reverse PTR Integrity: Why Missing PTR Records Break NSX-T Manager Federation]]></title>
      <description><![CDATA[How missing reverse DNS PTR records caused certificate validation failures and broken sync loops across multi-site NSX-T Global Managers.]]></description>
      <link>https://virtualsach.in/blog/dns-ptr-integrity-nsxt-federation</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/dns-ptr-integrity-nsxt-federation</guid>
      <pubDate>Tue, 14 Sep 2021 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[From CLI to Code: Standardizing Network Infrastructure Pipelines]]></title>
      <description><![CDATA[How we shifted our entire network operations team from manual SSH sessions to GitOps pipelines using Ansible and GitLab CI.]]></description>
      <link>https://virtualsach.in/blog/2023-12-from-cli-to-code</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/2023-12-from-cli-to-code</guid>
      <pubDate>Sun, 15 Aug 2021 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[1-Click Nested SDDC: How I Built an Automated VMware Lab Engine with Ansible & BGP]]></title>
      <description><![CDATA[How I engineered a 1-click Ansible automation pipeline to deploy complete nested VMware SDDC environments (vCenter, ESXi, NSX-T, BGP).]]></description>
      <link>https://virtualsach.in/blog/2021-06-one-click-nested-sddc-ansible</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/2021-06-one-click-nested-sddc-ansible</guid>
      <pubDate>Tue, 15 Jun 2021 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Ansible Galaxy Role Optimization: Structuring Modular Playbooks for SDDC Code]]></title>
      <description><![CDATA[Refactoring a 3,000-line monolithic Ansible playbook into modular Ansible Galaxy collections (community.vmware, community.general).]]></description>
      <link>https://virtualsach.in/blog/ansible-galaxy-modular-sddc-playbooks</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/ansible-galaxy-modular-sddc-playbooks</guid>
      <pubDate>Mon, 05 Apr 2021 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Transit VLAN Isolation: Why Dual-Homed Transit Segments Prevent Route Leaks]]></title>
      <description><![CDATA[Designing isolated dual-homed transit VLANs (Lab-Routers) to prevent test SDDC pod subnets from leaking into production enterprise core networks.]]></description>
      <link>https://virtualsach.in/blog/transit-vlan-isolation-bgp-leaks</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/transit-vlan-isolation-bgp-leaks</guid>
      <pubDate>Thu, 18 Feb 2021 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[The Great Migration: Moving Production from NSX-V to NSX-T]]></title>
      <description><![CDATA[Upgrading infrastructure is like changing the engines on a plane while flying. Here is how we moved a financial client from legacy NSX-V to NSX-T without dropping the banking app.]]></description>
      <link>https://virtualsach.in/blog/nsx-v-to-t-migration</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/nsx-v-to-t-migration</guid>
      <pubDate>Wed, 20 Jan 2021 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[vRA 8.2 Blueprint Engineering: Automating Multi-Node Tenant Pod Provisioning]]></title>
      <description><![CDATA[How building declarative YAML Cloud Templates in vRealize Automation (vRA 8.2) automated multi-tenant VM, NSX-T network, and storage provisioning.]]></description>
      <link>https://virtualsach.in/blog/vra-8-blueprint-automation-engineering</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/vra-8-blueprint-automation-engineering</guid>
      <pubDate>Fri, 15 Jan 2021 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Resource Contention: Balancing 320GB RAM & 20 Cores Across Concurrent Nested Pods]]></title>
      <description><![CDATA[How capacity planning, NUMA node alignment, and thin provisioning prevented ESXi host ballooning when running 5 concurrent SDDC pods.]]></description>
      <link>https://virtualsach.in/blog/resource-contention-sddc-pod-balancing</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/resource-contention-sddc-pod-balancing</guid>
      <pubDate>Mon, 30 Nov 2020 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[The ovftool Silent Failure: Automating OVF Deployments at Scale Without Headless Timeout Crashes]]></title>
      <description><![CDATA[How parsing answerfile.yml parameters and handling VMware ovftool memory buffer limits prevented headless deployment crashes in automated SDDC pipelines.]]></description>
      <link>https://virtualsach.in/blog/ovftool-silent-failure-answerfile</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/ovftool-silent-failure-answerfile</guid>
      <pubDate>Mon, 10 Aug 2020 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Bridging Physical and Virtual: Arista Hardware VTEP Integration]]></title>
      <description><![CDATA[How we configured Arista switches as Hardware VXLAN Tunnel Endpoints (HW-VTEP) bound to VMware NSX Controller clusters.]]></description>
      <link>https://virtualsach.in/blog/bridging-physical-virtual-arista-hw-vtep</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/bridging-physical-virtual-arista-hw-vtep</guid>
      <pubDate>Mon, 18 May 2020 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[The Transitive Routing Trap: Avoiding Loop Disasters in Overlay Networks]]></title>
      <description><![CDATA[When dynamic routing protocols (BGP/OSPF) redistribute across overlay and underlay boundaries, transitive loops can bring down entire clouds.]]></description>
      <link>https://virtualsach.in/blog/the-transitive-routing-trap</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/the-transitive-routing-trap</guid>
      <pubDate>Thu, 05 Mar 2020 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[NSX-V to NSX-T Surgery: In-Place Migration Blueprints]]></title>
      <description><![CDATA[Detailed step-by-step engineering blueprint for migrating Distributed Firewall (DFW) policies and logical switches from NSX-V to NSX-T.]]></description>
      <link>https://virtualsach.in/blog/2023-08-nsx-v-to-t-surgery</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/2023-08-nsx-v-to-t-surgery</guid>
      <pubDate>Sat, 15 Feb 2020 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Stretching VLANs Safely: L2VPN Architecture with NSX Edge]]></title>
      <description><![CDATA[How we configured standalone NSX L2VPN client appliances to extend Layer 2 broadcast domains across high-latency WAN links.]]></description>
      <link>https://virtualsach.in/blog/stretching-vlans-l2vpn</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/stretching-vlans-l2vpn</guid>
      <pubDate>Fri, 10 Jan 2020 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Data Center Log Forensics: Centralized Syslog with vRealize Log Insight]]></title>
      <description><![CDATA[Ingesting millions of log events per day across ESXi hosts, NSX Edge gateways, and physical firewalls using vRealize Log Insight.]]></description>
      <link>https://virtualsach.in/blog/csi-data-center-log-insight</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/csi-data-center-log-insight</guid>
      <pubDate>Thu, 05 Dec 2019 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Changing Engines in Mid-Flight: Live Upgrade from NSX-V to NSX-T]]></title>
      <description><![CDATA[Upgrading core overlay SDN infrastructure while processing live production transactions. How we migrated from NSX-V to NSX-T with zero downtime.]]></description>
      <link>https://virtualsach.in/blog/2021-03-changing-engines-nsxt</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/2021-03-changing-engines-nsxt</guid>
      <pubDate>Sun, 10 Nov 2019 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[BGP vs OSPF: Choosing Dynamic Routing Protocols for Multi-Tenant Overlay Gateways]]></title>
      <description><![CDATA[Comparing BGP Autonomous System path manipulation vs OSPF Link-State Link Advertisements when peering NSX Tier-0 edges with physical core switches.]]></description>
      <link>https://virtualsach.in/blog/bgp-vs-ospf-nested-overlay-gateways</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/bgp-vs-ospf-nested-overlay-gateways</guid>
      <pubDate>Tue, 05 Nov 2019 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Debugging Flow Telemetry: Using vRealize Network Insight (vRNI)]]></title>
      <description><![CDATA[How we used vRealize Network Insight (vRNI) for 360-degree flow visibility, day-2 operations, and microsegmentation planning.]]></description>
      <link>https://virtualsach.in/blog/debugging-flows-vrni</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/debugging-flows-vrni</guid>
      <pubDate>Sun, 25 Aug 2019 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Sub-Second BFD Failover: Configuring 50ms BFD Keepalives Between Physical Switches and Virtual Edges]]></title>
      <description><![CDATA[How tuning Bidirectional Forwarding Detection (BFD) timers to 50ms intervals enabled sub-second gateway failover between NSX Edge nodes and Arista ToR switches.]]></description>
      <link>https://virtualsach.in/blog/sub-second-bfd-failover-edge-nodes</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/sub-second-bfd-failover-edge-nodes</guid>
      <pubDate>Tue, 20 Aug 2019 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Direct Link Hybrid Bridging: Connecting Bare-Metal Oracle RAC to SoftLayer SDDCs]]></title>
      <description><![CDATA[How connecting IBM SoftLayer Direct Link 10Gbps circuits with Arista HW-VTEP bridges integrated legacy bare-metal Oracle RAC clusters into VMware overlays.]]></description>
      <link>https://virtualsach.in/blog/ibm-softlayer-direct-link-baremetal</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/ibm-softlayer-direct-link-baremetal</guid>
      <pubDate>Tue, 18 Jun 2019 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[The MTU 9000 Trap: Why Silent MTU Mismatches Drop BGP Peering Sessions in Overlay Fabrics]]></title>
      <description><![CDATA[How a 50-byte Geneve encapsulation overhead caused silent TCP path MTU blackholing and dropped BGP peering sessions across physical vDS switches.]]></description>
      <link>https://virtualsach.in/blog/mtu-9000-trap-geneve-drops</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/mtu-9000-trap-geneve-drops</guid>
      <pubDate>Fri, 12 Apr 2019 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Protocol Wars: Why GENEVE Defeated VXLAN for Overlay Networks]]></title>
      <description><![CDATA[Comparing VXLAN and GENEVE encapsulation protocols. Why NSX-T adopted GENEVE for extensibility and dynamic metadata TLVs.]]></description>
      <link>https://virtualsach.in/blog/protocol-wars-vxlan-vs-geneve</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/protocol-wars-vxlan-vs-geneve</guid>
      <pubDate>Fri, 12 Apr 2019 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[The Death of Spanning Tree: Moving to BGP Leaf-Spine]]></title>
      <description><![CDATA[Spanning Tree is an insurance policy that costs you half your bandwidth. BGP is the better way.]]></description>
      <link>https://virtualsach.in/blog/death-of-spanning-tree</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/death-of-spanning-tree</guid>
      <pubDate>Sun, 10 Mar 2019 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Debugging Phantom Flows: Using vRNI Latency Telemetry for SDN Microsegmentation]]></title>
      <description><![CDATA[How deploying vRealize Network Insight (vRNI) IPFIX flow collectors mapped undocumented legacy application dependencies prior to Zero Trust migration.]]></description>
      <link>https://virtualsach.in/blog/vrni-flow-telemetry-microsegmentation</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/vrni-flow-telemetry-microsegmentation</guid>
      <pubDate>Tue, 20 Nov 2018 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[The Magic of HCX: Bulk Live vMotion Across Hybrid Clouds]]></title>
      <description><![CDATA[How VMware HCX enabled zero-downtime bulk migrations of hundreds of virtual machines across multi-cloud infrastructure.]]></description>
      <link>https://virtualsach.in/blog/magic-of-hcx-migration</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/magic-of-hcx-migration</guid>
      <pubDate>Tue, 20 Nov 2018 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Nested ESXi Virtualization: Exposing Hardware-Assisted VT-x/EPT to Hypervisors]]></title>
      <description><![CDATA[Configuring hardware-assisted virtualization (VT-x/AMD-V) and promiscuous vDS portgroups to run nested ESXi hypervisors.]]></description>
      <link>https://virtualsach.in/blog/nested-esxi-hardware-assisted-vt-x</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/nested-esxi-hardware-assisted-vt-x</guid>
      <pubDate>Fri, 22 Jun 2018 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[CSI Data Center: Using vRealize Log Insight for Root-Cause Packet Trace Parsing]]></title>
      <description><![CDATA[How deploying vRealize Log Insight syslog ingestion agents across vCenter, ESXi hosts, and NSX-V Controllers pinpointed microsecond packet drops.]]></description>
      <link>https://virtualsach.in/blog/vrealize-log-insight-sddc-troubleshooting</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/vrealize-log-insight-sddc-troubleshooting</guid>
      <pubDate>Sat, 14 Oct 2017 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[VPN Scaling Under Load: Tuning Cisco AnyConnect Remote Access]]></title>
      <description><![CDATA[Scaling Remote Access VPN connections for 3,000+ remote workers. Resolving DTLS fallback issues and split-tunneling bottlenecks.]]></description>
      <link>https://virtualsach.in/blog/vpn-nightmare-anyconnect</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/vpn-nightmare-anyconnect</guid>
      <pubDate>Sat, 12 Aug 2017 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Tuning Cisco Firepower: Fixing Snort Engine Packet Drops]]></title>
      <description><![CDATA[Deploying Next-Gen Firepower Threat Defense (FTD) caused sudden throughput drops. How we tuned Snort preprocessors and rule sets for line-rate inspection.]]></description>
      <link>https://virtualsach.in/blog/tuning-cisco-firepower</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/tuning-cisco-firepower</guid>
      <pubDate>Mon, 10 Apr 2017 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[SD-WAN Evolution: Migrating Legacy MPLS Sites to Cisco Viptela & Velacloud Overlay]]></title>
      <description><![CDATA[How replacing legacy MPLS WAN links with Cisco Viptela vEdge and Velacloud SD-WAN overlays cut branch circuit costs by 70% while improving SLA resilience.]]></description>
      <link>https://virtualsach.in/blog/cisco-viptela-sdwan-migration</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/cisco-viptela-sdwan-migration</guid>
      <pubDate>Fri, 20 Jan 2017 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[The Pivot: Transitioning from Manual CLI Engineer to Python Automation]]></title>
      <description><![CDATA[The moment I realized typing 'show ip route' on 50 routers manually was obsolete. How I learned Python to automate network operations at scale.]]></description>
      <link>https://virtualsach.in/blog/the-pivot-cli-to-python</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/the-pivot-cli-to-python</guid>
      <pubDate>Fri, 20 Jan 2017 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[The SSL Blind Spot: Implementing Outbound Inspection without Breaking Privacy]]></title>
      <description><![CDATA[Over 70% of enterprise web traffic was encrypted, rendering legacy IPS firewalls blind. Here is how we deployed Palo Alto SSL Forward Proxy safely.]]></description>
      <link>https://virtualsach.in/blog/ssl-decryption-blind-spot</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/ssl-decryption-blind-spot</guid>
      <pubDate>Sat, 15 Oct 2016 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[AnyConnect Acceleration: Why DTLS Over UDP Prevents TCP Meltdown on VPN Gateways]]></title>
      <description><![CDATA[How enabling Datagram Transport Layer Security (DTLS UDP 443) on Cisco ASA gateways eliminated TCP-in-TCP retransmission meltdowns for remote employees.]]></description>
      <link>https://virtualsach.in/blog/cisco-anyconnect-dtls-udp-acceleration</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/cisco-anyconnect-dtls-udp-acceleration</guid>
      <pubDate>Mon, 12 Sep 2016 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[SSL Certificate Hell: Preventing Unplanned Outages at Scale]]></title>
      <description><![CDATA[A single expired wildcard SSL certificate took down 40 production web applications. Here is how we automated certificate lifecycle monitoring.]]></description>
      <link>https://virtualsach.in/blog/ssl-certificate-hell</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/ssl-certificate-hell</guid>
      <pubDate>Mon, 20 Jun 2016 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[A10 ADC NAT-PT: Enabling Dual-Stack IPv6 Without Disturbing Legacy IPv4 Backends]]></title>
      <description><![CDATA[How deploying A10 Thunder 3030S ADC NAT-PT enabled external IPv6 client access while preserving zero-change legacy IPv4 backend application servers.]]></description>
      <link>https://virtualsach.in/blog/a10-adc-nat-pt-ipv6-coexistence</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/a10-adc-nat-pt-ipv6-coexistence</guid>
      <pubDate>Mon, 18 Apr 2016 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Tuning Next-Gen IPS: Balancing Snort VRT Rules and Zero-False-Positive SLAs]]></title>
      <description><![CDATA[How tuning Cisco Firepower NGIPS and Snort VRT signature rules eliminated false-positive drops on production database streams.]]></description>
      <link>https://virtualsach.in/blog/cisco-ngips-snort-signature-tuning</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/cisco-ngips-snort-signature-tuning</guid>
      <pubDate>Sun, 14 Feb 2016 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[The Firewall Polyglot: Translating Semantics Across Vendor Estates]]></title>
      <description><![CDATA[Managing security across Checkpoint, Palo Alto, and Cisco ASA requires understanding the subtle semantic differences in how vendors process rules.]]></description>
      <link>https://virtualsach.in/blog/firewall-polyglot</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/firewall-polyglot</guid>
      <pubDate>Sun, 14 Feb 2016 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Checkpoint SmartConsole R77: Cleaning 2,000 Legacy Rules Without Causing Outages]]></title>
      <description><![CDATA[How using Checkpoint SmartLog audit logs and policy hit-count analysis eliminated 2,000 stale firewall rules without dropping live application connections.]]></description>
      <link>https://virtualsach.in/blog/checkpoint-smartconsole-r77-policy-cleanup</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/checkpoint-smartconsole-r77-policy-cleanup</guid>
      <pubDate>Sun, 08 Nov 2015 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Firewall Hell: Auditing & Cleaning 10,000+ Legacy Rule Sets]]></title>
      <description><![CDATA[How we audited, consolidated, and eliminated thousands of shadow firewall rules across Checkpoint, Palo Alto, and Cisco ASA firewalls.]]></description>
      <link>https://virtualsach.in/blog/firewall-hell-managing-policies</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/firewall-hell-managing-policies</guid>
      <pubDate>Sat, 05 Sep 2015 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Identity & Proxy Overhaul: Migrating 10,000 Users from Cisco ACS to ISE & McAfee Gateway]]></title>
      <description><![CDATA[How migrating legacy Cisco ACS to Cisco ISE dot1x and deploying McAfee Web Gateway proxies modernized network identity and web threat protection.]]></description>
      <link>https://virtualsach.in/blog/cisco-acs-to-ise-mcafee-proxy-migration</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/cisco-acs-to-ise-mcafee-proxy-migration</guid>
      <pubDate>Fri, 14 Aug 2015 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Debugging Intermittent IPSec Phase 2 Re-Keying Drops Across Security Gateways]]></title>
      <description><![CDATA[How resolving IKE Phase 2 renegotiation SPI mismatches on Checkpoint SmartDashboard eliminated 1-hour periodic VPN tunnel drops.]]></description>
      <link>https://virtualsach.in/blog/checkpoint-ipsec-phase2-rekeying</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/checkpoint-ipsec-phase2-rekeying</guid>
      <pubDate>Thu, 14 May 2015 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Hardware vs Software: F5 LTM to Software-Defined Load Balancing]]></title>
      <description><![CDATA[Comparing physical F5 BIG-IP appliances against early software-defined load balancers during enterprise cloud migrations.]]></description>
      <link>https://virtualsach.in/blog/f5-vs-nsx-edge-migration</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/f5-vs-nsx-edge-migration</guid>
      <pubDate>Sat, 18 Apr 2015 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[The Death of Cisco ACE: Migrating Legacy Load Balancers to F5 BIG-IP]]></title>
      <description><![CDATA[Cisco End-of-Lifed the ACE load balancer module. Here is how we migrated 300+ Virtual Servers to F5 LTM without dropping active TLS connections.]]></description>
      <link>https://virtualsach.in/blog/death-of-cisco-ace</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/death-of-cisco-ace</guid>
      <pubDate>Sun, 12 Oct 2014 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Data Center IPAM: Eliminating IP Conflicts with RackTables & iTop IT Operational Portal]]></title>
      <description><![CDATA[How integrating RackTables rack mapping with iTop IT Operational Portal eliminated duplicate IP address allocations across 2,000 datacenter servers.]]></description>
      <link>https://virtualsach.in/blog/racktables-itop-ipam-asset-tracking</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/racktables-itop-ipam-asset-tracking</guid>
      <pubDate>Wed, 20 Nov 2013 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Bridging Two Eras: Implementing NAT64 & DNS64 for Legacy Infrastructure]]></title>
      <description><![CDATA[When IPv6-only mobile networks exploded, legacy IPv4 applications faced sudden isolation. Here is how we implemented NAT64/DNS64 protocol translation.]]></description>
      <link>https://virtualsach.in/blog/nat64-legacy-ipv6</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/nat64-legacy-ipv6</guid>
      <pubDate>Mon, 14 Oct 2013 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Observability on a Zero-Dollar Budget: Combining rsyslog, RANCID, CACTI, Observium, and iTop]]></title>
      <description><![CDATA[How building an integrated open-source NOC stack provided enterprise-grade telemetry, configuration backup, and IPAM without commercial software licensing.]]></description>
      <link>https://virtualsach.in/blog/rsyslog-observium-itop-open-source-ops</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/rsyslog-observium-itop-open-source-ops</guid>
      <pubDate>Thu, 12 Sep 2013 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[P2V Nightmares: Migrating Physical Linux Boxes to VMware ESXi]]></title>
      <description><![CDATA[]]></description>
      <link>https://virtualsach.in/blog/p2v-migration-linux-vmware</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/p2v-migration-linux-vmware</guid>
      <pubDate>Thu, 20 Jun 2013 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[SIP ALG Nightmares: Fixing One-Way Audio Drops on Enterprise DMZ Firewalls]]></title>
      <description><![CDATA[How disabling hardware SIP Application Layer Gateways (SIP ALG) and configuring explicit RTP UDP pinholes resolved one-way audio drops on DMZ firewalls.]]></description>
      <link>https://virtualsach.in/blog/sip-alg-voip-firewall-pinholes</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/sip-alg-voip-firewall-pinholes</guid>
      <pubDate>Sat, 18 May 2013 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Observability Before Prometheus: Scaling SNMP & Cacti for 1,000+ Interfaces]]></title>
      <description><![CDATA[Long before Datadog or Prometheus, Cacti and RRDtool were the eyes of the NOC. Here is how we scaled SNMP polling without crashing our poller.]]></description>
      <link>https://virtualsach.in/blog/capacity-planning-cacti</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/capacity-planning-cacti</guid>
      <pubDate>Mon, 18 Feb 2013 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Multi-Tenant Firewalls: Partitioning Cisco FWSM Security Contexts & Advanced MPF]]></title>
      <description><![CDATA[How partitioning a Cisco FWSM blade inside a Catalyst 6500 into virtual Security Contexts provided dedicated multi-tenant firewall isolation.]]></description>
      <link>https://virtualsach.in/blog/cisco-fwsm-nexus-7000-security-contexts</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/cisco-fwsm-nexus-7000-security-contexts</guid>
      <pubDate>Mon, 05 Nov 2012 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[IPv4 Exhaustion: Deploying Dual-Stack BGP at ISP Scale]]></title>
      <description><![CDATA[When APNIC allocated our last IPv4 /22 block, we had to pivot. Here is how we deployed Dual-Stack IPv6 across thousands of customer subnets.]]></description>
      <link>https://virtualsach.in/blog/ipv6-exhaustion-dual-stack</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/ipv6-exhaustion-dual-stack</guid>
      <pubDate>Sun, 04 Nov 2012 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[The Day RANCID Saved the Network: Early Version Control for CLI]]></title>
      <description><![CDATA[A junior engineer wiped the BGP config on our Core Router. The backup was missing. Panic ensued. Here is how RANCID saved the day.]]></description>
      <link>https://virtualsach.in/blog/rancid-saved-the-network</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/rancid-saved-the-network</guid>
      <pubDate>Sat, 15 Sep 2012 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Nexus 7010 vPC Architecture: Eliminating Spanning-Tree Topology Flaps]]></title>
      <description><![CDATA[How configuring Virtual PortChannels (vPC) and MSTP root bridge priority tuning on Cisco Nexus 7010 switches eliminated Spanning-Tree re-calculations.]]></description>
      <link>https://virtualsach.in/blog/nexus-7010-vpc-spanning-tree-tuning</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/nexus-7010-vpc-spanning-tree-tuning</guid>
      <pubDate>Fri, 14 Sep 2012 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Deep Application Probing: Tuning HTTP URI Health Checks on Cisco CSS & ACE]]></title>
      <description><![CDATA[How upgrading simple ICMP ping health monitors to URI-based HTTP GET probes on Cisco ACE & CSS load balancers prevented silent application hangs.]]></description>
      <link>https://virtualsach.in/blog/uri-http-probe-tuning-cisco-css-ace</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/uri-http-probe-tuning-cisco-css-ace</guid>
      <pubDate>Sun, 05 Aug 2012 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Early GSLB: Traffic Steering Across Datacenters with Cisco CSS & GSS]]></title>
      <description><![CDATA[How deploying Cisco Content Services Switches (CSS 11500) and Global Site Selectors (GSS 4400) achieved early multi-datacenter GSLB load balancing.]]></description>
      <link>https://virtualsach.in/blog/cisco-css-gss-early-gslb-load-balancing</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/cisco-css-gss-early-gslb-load-balancing</guid>
      <pubDate>Tue, 10 Apr 2012 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[The Cloud Has Weight: Building a Tier-3 Data Center from Dust]]></title>
      <description><![CDATA[Before Terraform and AWS, we built the cloud with bare hands. Lessons from the 'Iron Age' of infrastructure: PAC units, raised floors, and the smell of ozone.]]></description>
      <link>https://virtualsach.in/blog/building-data-center-from-scratch</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/building-data-center-from-scratch</guid>
      <pubDate>Mon, 12 Mar 2012 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Scaling BGP Core: Deploying Route Reflectors & AS-Path Prepending Across ISP Transit]]></title>
      <description><![CDATA[How deploying BGP Route Reflectors and AS-Path prepending eliminated full-mesh iBGP scaling limits across core datacenter routers.]]></description>
      <link>https://virtualsach.in/blog/bgp-route-reflectors-as-path-prepending</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/bgp-route-reflectors-as-path-prepending</guid>
      <pubDate>Wed, 15 Feb 2012 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[The Route Redistribution Loop that Took Down the Core]]></title>
      <description><![CDATA[]]></description>
      <link>https://virtualsach.in/blog/route-redistribution-loop-outage</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/route-redistribution-loop-outage</guid>
      <pubDate>Thu, 15 Dec 2011 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Debugging the Air: Troubleshooting Packet Loss on WiMAX & RF Links]]></title>
      <description><![CDATA[]]></description>
      <link>https://virtualsach.in/blog/debugging-packet-loss-wimax</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/debugging-packet-loss-wimax</guid>
      <pubDate>Thu, 15 Sep 2011 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[High Availability Core: Tuning Cisco 7606 & 7206 HSRP Virtual Gateway Failover]]></title>
      <description><![CDATA[Configuring HSRP v2 preempt timers and interface tracking across Cisco 7606 and 7206 core routers to eliminate asymmetric gateway blackholing.]]></description>
      <link>https://virtualsach.in/blog/cisco-7606-7206-hsrp-gateway-failover</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/cisco-7606-7206-hsrp-gateway-failover</guid>
      <pubDate>Sat, 20 Aug 2011 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[The Night the Fiber Cut: Lessons in WAN Redundancy]]></title>
      <description><![CDATA[]]></description>
      <link>https://virtualsach.in/blog/fiber-cut-redundancy-lesson</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/fiber-cut-redundancy-lesson</guid>
      <pubDate>Sun, 10 Jul 2011 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[The Phantom Packet Loss: Why I Always Check Duplex Settings]]></title>
      <description><![CDATA[A premium customer had slow speeds and 2% packet loss. We swapped routers, fibers, and prayers. Nothing worked. The culprit? A hidden duplex mismatch.]]></description>
      <link>https://virtualsach.in/blog/phantom-packet-loss-duplex-mismatch</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/phantom-packet-loss-duplex-mismatch</guid>
      <pubDate>Tue, 10 May 2011 00:00:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Deep Packet Analysis: Identifying Phantom TCP Reset Attacks on Core ISP Backbones]]></title>
      <description><![CDATA[How analyzing Wireshark packet captures identified forged TCP RST packets with mismatched TTL values causing intermittent BGP session tears.]]></description>
      <link>https://virtualsach.in/blog/wireshark-tcp-reset-attack-analysis</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/wireshark-tcp-reset-attack-analysis</guid>
      <pubDate>Wed, 08 Sep 2010 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[UTM Polyglot: Multi-Vendor Firewall Troubleshooting across Cisco PIX, Juniper SRX, Fortinet & SonicWALL]]></title>
      <description><![CDATA[Real-world field engineering lessons in multi-vendor firewall CLI syntax, NAT rule evaluation orders, and IPSec VPN interoperability.]]></description>
      <link>https://virtualsach.in/blog/juniper-srx-fortinet-sonicwall-utm-polyglot</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/juniper-srx-fortinet-sonicwall-utm-polyglot</guid>
      <pubDate>Sat, 22 May 2010 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Healthcare Telephony: Integrating Coral EPABX Voice Systems with Mission-Critical LANs]]></title>
      <description><![CDATA[Managing Coral EPABX voice switch integration, analog trunking, and QoS voice VLAN prioritization across hospital operating rooms.]]></description>
      <link>https://virtualsach.in/blog/coral-epabx-hospital-telephony</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/coral-epabx-hospital-telephony</guid>
      <pubDate>Mon, 10 Nov 2008 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Securing Hospital Airwaves: Deploying Cisco ACS 4.0 TACACS+ and Aironet Wireless at Artemis]]></title>
      <description><![CDATA[How deploying Cisco Secure ACS 4.0 TACACS+ AAA and WPA2-Enterprise Aironet Access Points secured critical hospital networks.]]></description>
      <link>https://virtualsach.in/blog/cisco-acs-4-tacacs-wireless-artemis</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/cisco-acs-4-tacacs-wireless-artemis</guid>
      <pubDate>Thu, 18 Sep 2008 03:30:00 GMT</pubDate>
    </item>
  
    <item>
      <title><![CDATA[Telecom Roots: Quality Inspection of Radio Base Stations (RBS) and Mobile Switches at Ericsson]]></title>
      <description><![CDATA[Early career lessons in hardware quality inspection across Ericsson Radio Base Stations (RBS 2000/3000), Base Station Controllers, and Mobile Switching Centers.]]></description>
      <link>https://virtualsach.in/blog/ericsson-telecom-rbs-bsc-quality</link>
      <guid isPermaLink="true">https://virtualsach.in/blog/ericsson-telecom-rbs-bsc-quality</guid>
      <pubDate>Fri, 15 Jun 2007 03:30:00 GMT</pubDate>
    </item>
  
  </channel>
</rss>