LevelUp your I.T skills for the ever evolving job market

Gain practical real-world and in-demand experience with LevelUp I.T.'s articles, examples, labs, public and private repos!

Featured posts

Hand-drawn spine-leaf fabric with a firewall, a BIG-IP and an app: part 2, plugging in the BIG-IPs

Learning F5 BIG-IP on a real data-centre fabric running on SONiC switches (part 2): licensing and plugging the BIG-IPs into the fabric

Part 2. Licensing two BIG-IPs from the web UI and the CLI, then VLANs, self IPs, floating self IPs and port lockdown, and how the EVPN fabric learns where the BIG-IPs live.

10 min read

Hand-drawn GPU: compute on top, high-bandwidth memory below, the bandwidth arrow between them

LLM inference infrastructure, explained: GPUs, the KV cache, batching, the network and load balancing

Hand-drawn spine-leaf fabric with a firewall, a BIG-IP and an app: learning f5 on a real fabric

Learning F5 BIG-IP on a real data-centre fabric running on SONiC switches (part 1): the lab, layer by layer

Two-site failover for an inference API with F5 BIG-IP DNS (part 3 of 3)

An F5 BIG-IP edge for a Kubernetes inference API: BGP, Advanced WAF and CIS (part 2 of 3)

Join now

Courses

Fabric lab: build a small cloud, end to end

Build a Cloud-Style Fabric Lab

An 11-part, copy-paste-reproducible build of a small cloud: leaf-spine VXLAN/EVPN fabric, Kubernetes with Cilium BGP, and Active/Active firewalls, all virtual, all on one box.

Members only

Mastering BGP

Mastering BGP delves into its architectural strengths: reliability (TCP foundation, keepalives), stability (MAI, dampening, route refresh), scalability (reflection, confederations, selective propagation), and flexibility (policy-driven, path attributes, communities).

Mastering IS-IS

IS-IS, a robust link-state routing protocol, is key for scalable networks. This series demystifies IS-IS from its Layer 2 operations, NSAP addressing, and hierarchical design to advanced traffic engineering with practical Juniper configurations. Master IS-IS for high-performance network designs.

Network Automation with GO

Hello and welcome to "Network Automation with Go," a blog series designed for network engineers and developers. We'll explore how Go's speed, concurrency, and simplicity can help you build powerful, efficient, and scalable network automation solutions. Get ready to level up your skills!

View all

Join now

Learning F5 BIG-IP on a real data-centre fabric running on SONiC switches (part 2): licensing and plugging the BIG-IPs into the fabric

Part 2. Licensing two BIG-IPs from the web UI and the CLI, then VLANs, self IPs, floating self IPs and port lockdown, and how the EVPN fabric learns where the BIG-IPs live.

10 min read

LLM inference infrastructure, explained: GPUs, the KV cache, batching, the network and load balancing

The whole stack behind a language model's answer, from one model file to a fleet: why decode is memory-bound, how the KV cache sets capacity, what batching really buys, how models are split across GPUs, the RDMA fabric behind them, and why round-robin load balancing fails for inference.

13 min read

Learning F5 BIG-IP on a real data-centre fabric running on SONiC switches (part 1): the lab, layer by layer

Part 1. The data centre the BIG-IPs live in: a SONiC spine-leaf fabric with BGP EVPN and VXLAN, VRFs for users and applications, a Palo Alto firewall between them, and two BIG-IPs on service leaves.

8 min read

Two-site failover for an inference API with F5 BIG-IP DNS (part 3 of 3)

Part 3 of 3. Two-site failover for an inference API with F5 BIG-IP DNS: the switch timed sample by sample, the resolver's TTL tail, and the pool fallback default that kept handing out the failed site's address.

6 min read

An F5 BIG-IP edge for a Kubernetes inference API: BGP, Advanced WAF and CIS (part 2 of 3)

Part 2 of 3. An F5 BIG-IP in front of a Kubernetes inference API: BGP route health timed under failure, an Advanced WAF built from the OpenAPI contract with a narrow fix for a prompt that quotes SQL, and three settings that looked correct and weren't.

10 min read

A second pod network with Multus on an EVPN VXLAN fabric (part 1 of 3)

Part 1 of 3. A second pod network with Multus on an EVPN VXLAN fabric, measured: what Services, NetworkPolicy and probes miss, where Cilium drops an asymmetric reply, how rp_filter combines, and how host-local gives two pods one address.

8 min read

Anatomy of an AI serving fabric

A GPU cluster that serves models has three kinds of user and one hard question: which layer owns which decision? Two complete builds walked layer by layer, down to the configuration, with the one choice that changes everything: rails as plain VLANs, or a routed rail Clos.

12 min read

Hand-drawn banner: brownfield vxlan evpn to cisco ndfc, nexus dashboard migration, what recalculate rejects

Migrating a brownfield VXLAN EVPN fabric to Cisco NDFC: what Recalculate rejects

You have a VXLAN EVPN fabric that already works, and now it needs to be managed by Cisco NDFC. This post walks through bringing ten Nexus 9300v switches under Nexus Dashboard as a brownfield migration, without rebuilding anything.

12 min read

FabricSRE part 2: triage, change assurance and the timeline

A DCI link goes down at 18:00. Nexus Dashboard's syslog export lands seven seconds later, the triage turns it into one incident, the investigation names the link, and the fix goes through NDFC with an approval bound to the exact lines a human read. Part 2 of FabricSRE.

10 min read

Nexus 9000 vPC, vPC Fabric Peering and EVPN ESI multihoming: what actually breaks

Three ways to make two Nexus 9000 leaves one LACP partner: vPC, vPC Fabric Peering, EVPN ESI multihoming. All forward on both cables. Which one holds up when a leaf loses the fabric, the host leg dies, or the peer-link goes? Four pairs, one fabric, thirteen drills, three passes.

14 min read

FabricSRE part 1: an SRE agent for Cisco Nexus Dashboard, the twin and the ten-hypothesis investigation

Subscribe to LevelUp I.T. newsletter and stay updated.

Don't miss anything. Get all the latest posts delivered straight to your inbox. It's free!

LevelUp your I.T skills for the ever evolving job market

Featured posts

Learning F5 BIG-IP on a real data-centre fabric running on SONiC switches (part 2): licensing and plugging the BIG-IPs into the fabric

LLM inference infrastructure, explained: GPUs, the KV cache, batching, the network and load balancing

Learning F5 BIG-IP on a real data-centre fabric running on SONiC switches (part 1): the lab, layer by layer

Two-site failover for an inference API with F5 BIG-IP DNS (part 3 of 3)

An F5 BIG-IP edge for a Kubernetes inference API: BGP, Advanced WAF and CIS (part 2 of 3)

Courses

Build a Cloud-Style Fabric Lab

Mastering BGP

Mastering IS-IS

Network Automation with GO

Learning F5 BIG-IP on a real data-centre fabric running on SONiC switches (part 2): licensing and plugging the BIG-IPs into the fabric

LLM inference infrastructure, explained: GPUs, the KV cache, batching, the network and load balancing

Learning F5 BIG-IP on a real data-centre fabric running on SONiC switches (part 1): the lab, layer by layer

Two-site failover for an inference API with F5 BIG-IP DNS (part 3 of 3)

An F5 BIG-IP edge for a Kubernetes inference API: BGP, Advanced WAF and CIS (part 2 of 3)

A second pod network with Multus on an EVPN VXLAN fabric (part 1 of 3)

Anatomy of an AI serving fabric

Migrating a brownfield VXLAN EVPN fabric to Cisco NDFC: what Recalculate rejects

FabricSRE part 2: triage, change assurance and the timeline

Nexus 9000 vPC, vPC Fabric Peering and EVPN ESI multihoming: what actually breaks

FabricSRE part 1: an SRE agent for Cisco Nexus Dashboard

Cisco NDFC EVPN Multi-Site with an eBGP underlay, step by step

Cisco NDFC VXLAN EVPN fabric, automated with Ansible (part 3 of 3)

Cisco NDFC VXLAN EVPN fabric, step by step (part 2 of 3)

Cisco Nexus Dashboard 4.3 in EVE-NG, step by step (part 1 of 3)

Subscribe to LevelUp I.T. newsletter and stay updated.