Welcome to the December, 2021 issue of The Resolver, a quarterly newsletter highlighting news, tools, and tips for better managing your IPv4 and IPv6 address space, DHCP and DNS including DNS security and API and cloud automation from Diamond IP.

IPAM-As-Code

IPAM is often considered a necessary evil by most IT and Operations Engineers. Every time a new virtual instance in the cloud or on prem is instantiated, or an old fashioned server is deployed, both an IP address and DNS name need to be assigned...every time. Of course, the assigned IP address must be unique at least within a given routing domain, and the DNS name must be uniquely resolvable to enable users and other machines to connect with it. Beyond their respective uniqueness requirements, these core configuration elements must also be relevant to their respective deployment realms, such as subnet and DNS domain, so just any old assignment won't do. In addition, with the speed of today's business demanding a highly dynamic rate of change in creating, realigning or destroying virtual instances across a multi-cloud network, the assignment process must be always available and instantly responsive to not impede your business velocity. Read our post to learn more about IPAM-As-Code and why it is a necessary component of your Infrastructure-As-Code initiatives.

Disciplined IPAM Improves Secure Access Service Edge (SASE)

Cloud application deployments are transforming enterprise networks. User proximity requirements for optimal cloud application performance have moved the network edge from the DMZ to most every enterprise and remote site. Software Defined WANs (SD-WANs) support these requirements with Internet breakout features to facilitate localized cloud connectivity. This enables a user to access a localized cloud point of presence without backhauling to the cloud via the DMZ which may be on a different continent. While supporting myriad Internet connection points improves performance, it opens each site to potential Internet-based attacks. The Secure Access Service Edge (SASE) concept seeks to leverage this cloud-networking evolution while reducing security risks through numerous defense mechanisms including zero trust, web gateways and network firewalls. SASE promotes secure access from each site to reduce attack risks while providing local cloud access. As with any network initiative, IPAM is a critical consideration. For instance, DNS plays a key role in routing applications to the cloud or on the network. Watch our video to learn more about SASE and IPAM's critical supporting role.

Build on a Solid Foundation

IPAM is the foundation of your network. To merely access your network, a device requires a unique IP address. To reach network resources, your users and devices require DNS. An unstable IPAM foundation for your network could jeopardize your digital transformation efforts. For example, if your IPAM fails to properly map space for your IoT deployments, to automate address assignments across multi-clouds, to add a layer of detection against malware, or to effectively support your many other network initiatives, progress will prove challenging. So whatever network services you're developing and managing for your business, make sure your foundation is stable, reliable and scalable to meet your current and future needs. Establishing a strong IPAM foundation now will eliminate the need for future expensive foundational repairs. Read our post to learn more about the worry-free benefits of a solid IPAM foundation.

New Product Release from Diamond IP

Diamond IP continues its vigorous focus on IP address management fundamentals, DNS security, cloud automation and related technologies. We are pleased to announce the release of a new version of our hardware and virtualized authoritative DNSSEC appliances. This new version supports automated parent zone notification of key signing key (KSK) rollover via publication of child delegation signer (CDS) resource records. The key generation, zone signing and key rollover process is now fully automated. Additional features include support of additional signature algorithms, improved multi-master redundancy, and enhanced services monitoring and control.Contact your BT representative for a complete feature list.