text: L2VPN Working Group Himanshu Shah Intended Status: Proposed Standard Ciena Corp Internet Draft Eric Rosen Francois Le Faucheur Cisco Systems draft-ietf-l2vpn-ipls-08.txt Giles Heron Tellabs February 2008 Expires: August 2008 IP-Only LAN Service (IPLS) draft-ietf-l2vpn-ipls-08.txt Status of this Memo By submitting this Internet-Draft, each author represents that any applicable patent or other IPR claims of which he or she is aware have been or will be disclosed, and any of which he or she becomes aware will be disclosed, in accordance with Section 6 of BCP 79. Internet-Drafts are working documents of the Internet Engineering Task Force (IETF), its areas, and its working groups. Note that other groups may also distribute working documents as Internet- Drafts. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." The list of current Internet-Drafts can be accessed at http://www.ietf.org/ietf/1id-abstracts.txt The list of Internet-Draft Shadow Directories can be accessed at http://www.ietf.org/shadow.html This Internet-Draft will expire on August 2008. Abstract Shah, et al. Expires August 2008 1 Internet Draft draft-ietf-l2vpn-ipls-08.txt A Virtual Private LAN Service (VPLS) [VPLS] is used to interconnect systems across a wide-area or metropolitan-area network, making it appear that they are on a private LAN. The systems which are interconnected may themselves be LAN switches. If, however, they are IP hosts or IP routers, certain simplifications to the operation of the VPLS are possible. We call this simplified type of VPLS an "IP-only LAN Service" (IPLS). In an IPLS, as in a VPLS, LAN interfaces are run in promiscuous mode, and frames are forwarded based on their destination MAC addresses. However, the maintenance of the MAC forwarding tables is done via signaling, rather than via the MAC address learning procedures specified in [IEEE 802.1D]. This draft specifies the protocol extensions and procedures for support of the IPLS service. Conventions The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in RFC 2119 [RFC 2119]. Table of Contents Shah, et al. Expires August 2008 2 Internet Draft draft-ietf-l2vpn-ipls-08.txt Status of this Memo................................................1 Abstract...........................................................1 Table of Contents..................................................2 1.0 Contributing Authors.........................................3 2.0 Overview.......................................................4 2.1 Terminology....................................................6 3.0 Topology.......................................................7 4.0 Configuration..................................................8 5.0 Discovery......................................................9 5.1 CE discovery....................................................9 5.1.1 IPv4 based CE discovery......................................9 5.1.2 Ipv6 based CE discovery [RFC 2461]...........................9 6.0 Pseudowire Creation...........................................10 6.1 Receive Unicast Multipoint-to-point Pseudowire.................10 6.2 Receive Multicast Multipoint-to-point Pseudowire...............10 6.3 Send Multicast Replication tree................................11 7.0 Signaling.....................................................11 7.1 IPLS PW Signaling..............................................12 7.2 Signaling Advertisement Processing.............................14 7.3 IANA Considerations for LDP Status Code........................14 8.0 Forwarding....................................................15 8.1 Non-IP or non-ARP traffic......................................15 8.2 Unicast IP Traffic.............................................15 8.3 Broadcasts and Multicast IP Traffic............................15 8.4 ARP Traffic....................................................15 8.5 Encapsulation..................................................16 9.0 Attaching to IPLS via ATM or FR.............................16 10.0 VPLS vs IPLS.................................................17 11.0 IP Protocols.................................................18 12.0 Dual Homing with IPLS........................................18 13.0 Proxy ARP function...........................................18 13.1 ARP Proxy - Responder..........................................18 13.2 ARP Proxy - Generator..........................................19 14.0 Acknowledgements.............................................19 15.0 Security Considerations......................................19 15.1 Control plane security........................................19 15.2 Data plane security...........................................20 16.0 References...................................................20 16.1 Normative References..........................................20 16.2 Informative References........................................21 17.0 Author's Address.............................................22 Full Copyright Statement..........................................23 Intellectual Property.............................................23 1.0 Contributing Authors This document is the combined effort of the following individuals and many others who have carefully reviewed this document and provided the technical clarifications K. Arvind Enterasys Networks Vach Kompella Alcatel Vasille Radoaca Consultant Shah, et al. Expires August 2008 3 Internet Draft draft-ietf-l2vpn-ipls-08.txt 2.0 Overview As emphasized in [VPLS], Ethernet has become popular as an access technology in Metropolitan and Wide Area Networks. [VPLS] describes how geographically dispersed customer LANs can be interconnected over a service provider's network. The VPLS service is provided by Provider Edge (PE) devices that connect Customer Edge (CE) devices. The VPLS architecture provides this service by incorporating bridging functions such as MAC address learning in the PE devices. Provider Edge platforms are designed primarily to be IP routers, rather than to be LAN switches. To add VPLS capability to a PE router, one has to add MAC address learning capabilities, along with aging and other mechanisms native to ethernet switches. This may be fairly complex to add to the forwarding plane architecture of an IP router. As discussed in [L2VPN-FWK], in scenarios where the CE devices are NOT LAN switches, but rather are IP hosts or IP routers, it is possible to provide the VPLS service without requiring MAC address learning and aging on the PE. Instead, a PE router has to have the capability to match the destination MAC address in a packet received from a CE to an outbound pseudowire. The requirements for the IPLS service are described in [L2VPN-REQTS]. The purpose of this document is to specify a solution optimized for IPLS. IPLS provides a VPLS-like service using PE routers that are not designed to perform general LAN bridging functions. One must be willing to accept the restriction that an IPLS be used for IP traffic only, and not used to interconnect CE devices that are themselves LAN switches. This is an acceptable restriction in many environments, given that IP is the predominant type of traffic in today's networks. In IPLS, a PE device implements multi-point LAN connectivity for IP traffic using the following key functions: 1. CE Address Discovery: Each Provider Edge (PE) device discovers IP/MAC address associations for the locally attached Customer Edge (CE) devices, for each IPLS instance configured on the PE device. 2. Pseudowire (PW) for Unicast Traffic: For each locally attached CE device in a given IPLS instance, a PE device sets up a pseudo-wire (PW-LSP) to each of the other PEs that supports the same IPLS instance. For instance, if PEx and PEy both support IPLS I, and PEy is locally attached to CEa and CEb, PEy will initiate the setup of two pseudowires between itself and PEx. One of these will be used to carry unicast traffic from any of PEx's CE devices to CEa. The other will be used to carry unicast traffic from any of PEx's CE devices to CEb. Shah, et al. Expires August 2008 4 Internet Draft draft-ietf-l2vpn-ipls-08.txt Note that these pseudowires carry traffic only in one direction. Further, while the pseudowire implicitly identifies the destination CE of the traffic, it does not identify the source CE; packets from different source CEs bound to the same destination CE are sent on a single pseudowire. 3. Pseudowires for Multicast Traffic: In addition, every PE supporting a given IPLS instance will set up a special "broadcast pseudowire" to every other PE in that IPLS instance. If, in the above example, one of PEx's CE devices sends a multicast packet, PEx would forward the multicast packet to PEy on the special broadcast pseudowire. PEy would then send a copy of that packet to CEa and a copy to CEb. The broadcast pseudowire carries Ethernet frames of multicast/broadcast IP and ARP packets. Thus when a PE sends a multicast packet across the network, it sends one copy to each remote PE (supporting the given IPLS instance). If a particular remote PE has more than one CE device in that IPLS instance, the remote PE must replicate the packet and send one copy to each of its local CEs. As with the pseudowires that are used for unicast traffic, packets travel in only one direction on these pseudowires, and packets from different sources may be freely intermixed. 4. Signaling: The necessary pseudowires can be set up and maintained using the LDP-based signaling procedures described in [PWE3-CONTROL]. A PE may assign the same label to each of the unicast pseudowires that lead to a given CE device, in effect creating a multipoint-to-point pseudowire. Similarly, a PE may assign the same label to each of the broadcast pseudowires for a given IPLS instance, in effect creating a multipoint-to-point pseudowire. When setting up a pseudowire to be used for unicast traffic, the PE must also signal the IP address and the MAC address of the corresponding CE device. 5. ARP Packet Forwarding: ARP packets [ARP] are forwarded from attachment circuit to broadcast pseudowires in the Ethernet frame format as described by [PWE3-ETH]. Following rules are observed when processing ARP packets, a. Both broadcast (request) and unicast (response) ARP packets are sent over the broadcast pseudowire. b. When an ARP packet is received from an attachment circuit, the packet is copied to control plane for learning CE's IP and MAC address Shah, et al. Expires August 2008 5 Internet Draft draft-ietf-l2vpn-ipls-08.txt c. All Ethernet packets, including ARP packets, received from broadcast pseudowire are forwarded out to all the attachment circuits associated with the IPLS instance. These packets are not copied to control plane. 6. Multicast IP packet Forwarding: An IP Ethernet frame received from an attachment circuit is replicated to other attachment circuits and the broadcast pseudowires associated with the IPLS instance. An IP Ethernet frame received from a broadcast pseudowire is replicated to all the egress attachment circuits associated with the IPLS instance. 7. Unicast IP packet Forwarding: An IP packet received from the attachment circuit is forwarded based on the MAC DA lookup in the forwarding table. If a match is found, the packet is forwarded to the associated egress interface. If the egress interface is unicast pseudowire, the packet is sent without MAC header. If the egress interface is a local attachment circuit the Ethernet frame is forwarded as such. An IP packet received from the unicast pseudowire is forwarded to egress attachment circuit with MAC header prepended. The MAC DA is derived from the forwarding table while PE's own MAC address is used as MAC SA. Both VPLS [VPLS] and IPLS require the ingress PE to forward a frame based on its destination MAC address. However, two key differences between VPLS and IPLS can be noted from the above description: . In VPLS, MAC entries are placed in the FIB of the ingress PE as a result of MAC address learning (which occurs in the data plane) while in IPLS MAC entries are placed in the FIB as a result of pseudowire signaling operations (control plane). . In VPLS, the egress PE looks up a frame's destination MAC address to determine the egress Attachment Circuit; in IPLS, the egress Attachment Circuit is determined entirely by the ingress PW-label. The following sections describe the details of the IPLS scheme. 2.1 Terminology IPLS IP-only LAN service (a type of Virtual Private LAN Service that is restricted to IP traffic only). mp2p PW Multipoint-to-Point Pseudowire. A pseudowire that carries traffic from remote PE devices to a PE device that signals the pseudowire. The signaling PE device advertises the same PW- label to all remote PE devices that participate in the IPLS service instance. In IPLS, for a given IPLS instance, an mp2p PW used for IP Shah, et al. Expires August 2008 6 Internet Draft draft-ietf-l2vpn-ipls-08.txt unicast traffic is established by a PE for each CE device locally attached to that PE. It is a unidirectional tree whose leaves consist of the remote PE peers (which connect at least one Attachment Circuit associated with the same IPLS instance) and whose root is the signaling PE. Traffic flows from the leaves towards the root. Multicast PW Multicast/broadcast Pseudowire. A special kind of mp2p PW that carries IP multicast/broadcast traffic and all ARP frames. In the IPLS architecture, for each IPLS instance supported by a PE, that PE device establishes exactly one multicast/broadcast PW. Multicast PW uses Ethernet encapsulation. Unicast PW Unicast Pseudowire carries IP unicast packets. A PE creates unicast PW for each locally attached CE. The unicast PW uses IP Layer2 transport encapsulation. CE Customer Edge device. In this document, a CE is any IP node (host or router) connected to the IPLS LAN service. Replication Tree The collection of all multicast PWs and attachment circuits that are members of an IPLS service instance on a given PE. When a PE receives a multicast/broadcast packet from an attachment circuit, the PE device sends a copy of the packet to every broadcast pseudowire and attachment circuit of the replication tree, excluding the attachment circuit on which the packet was received. When a PE receives a packet from a multicast PW, the PE device sends a copy of the packet to all the attachment circuits of the replication tree and never to other PWs. 3.0 Topology The Customer Edge (CE) devices are IP nodes (hosts or routers) that are connected to PE devices either directly, or via an Ethernet network. We assume that the PE/CE connection may be regarded by the PE as an "interface" to which one or more CEs are attached. This interface may be a physical LAN interface or a VLAN. The Provider Edge (PE) routers are MPLS Label Edge Routers (LERs) that serve as pseudowire endpoints. Shah, et al. Expires August 2008 7 Internet Draft draft-ietf-l2vpn-ipls-08.txt +----+ +----+ + S1 +---+ ........................... +---| S2 | +----+ | | . . | +----+ IPa | | +----+ +----+ | IPe + +---| PE1|---MPLS and/or IP---| PE2|---+ / \ +----+ |Network +----+ | +----+ +---+ . | . | +----+ + S1 + | S1| . +----+ . +---| S2 | +----+ +---+ ..........| PE3|........... +----+ IPb IPc +----+ IPf | | +----+ | S3 | +----+ IPd In the above diagram, an IPLS instance is shown with three sites: site S1, site S2 and site S3. In site S3, the CE device is directly connected to its PE. In the other two sites, there are multiple CEs connected to a single PE. More precisely, the CEs at these sites are on an Ethernet (switched at site 1 and shared at site 2) network (or VLAN), and the PE is attached to that same Ethernet network or VLAN). We impose the following restriction: if one or more CEs attach to a PE by virtue of being on a common LAN or VLAN, there MUST NOT be more than one PE on that LAN or VLAN. PE1, PE2 and PE3 are shown as connected via an MPLS network; however, other tunneling technologies, such as GRE, L2TPv3, etc., could also be used to carry the pseudowires. An IPLS instance is a single broadcast domain, such that each IP end station (e.g., IPa) appears to be co-located with other IP end stations (e.g., IPb through IPf) on the same subnet. The IPLS service is transparent to the CE devices and requires no changes to them. 4.0 Configuration Each PE router is configured with one or more IPLS service instances, and each IPLS service instance is associated with a unique VPN-Id. For a given IPLS service instance, a set of Attachment Circuits is identified. Each Attachment Circuit can be associated with only one IPLS instance. An Attachment Circuit, in this document, is either a customer-facing Ethernet port, or a particular VLAN (identified by an IEEE 802.1Q VLAN ID) on a customer-facing Ethernet port. The PE router can optionally be configured with a local MAC address to be used as source MAC address when IP packets are forwarded from Shah, et al. Expires August 2008 8 Internet Draft draft-ietf-l2vpn-ipls-08.txt a pseudowire to an Attachment Circuit. By default, a PE uses the MAC address of the customer-facing Ethernet interface for this purpose. 5.0 Discovery The discovery process includes: . Remote PE discovery . VPN (i.e., IPLS) membership discovery . IP CE end station discovery This draft does not discuss the remote PE discovery or VPN membership discovery. This information can either be user configured or can be obtained using auto-discovery techniques described in [L2VPN-SIG] or other methods. However, the discovery of the CE is an important operational step in the IPLS model and is described below. 5.1 CE discovery Each PE actively detects the presence of local CEs by snooping IP and ARP frames received over the Attachment Circuits. During the discovery phase, the PE examines each multicast/broadcast Ethernet frame. For link-local IP frames (for example IGP discovery/multicast/broadcast packets typically 224.0.0.x addresses [RFC-1112]), the CE's (source) MAC address is extracted from the Ethernet header and the (source) IP address is obtained from the IP header. For each CE, the PE maintains the following tuple: <Attachment Circuit identification info, VPN-Id, IP address, MAC address>. 5.1.1 IPv4 based CE discovery As indicated earlier, a copy of ARP frames received over the attachment circuit is submitted to the control plane. The PE learns MAC address and IP address of the CE from the source address fields of the ARP PDU. Once a CE is discovered, its status is monitored continuously by examining the received ARP frames and by periodically generating ARP requests. The absence of an ARP response from a CE after a configurable number of ARP requests is interpreted as loss of connectivity with the CE. 5.1.2 Ipv6 based CE discovery [RFC 2461] A copy of Neighbor and Router Discovery frames received over the attachment circuit are submitted to the control plane in the PE. If the PE receives a Neighbor Solicitation message, and the source IP address of the message is not the unspecified address, the PE learns the MAC address and IP address of the CE Shah, et al. Expires August 2008 9 Internet Draft draft-ietf-l2vpn-ipls-08.txt If the PE receives an unsolicited Neighbor Advertisement message, the PE learns the source MAC address and the IP address of the CE. If the PE receives a Router Solicitation, and the source IP address of the message is not the unspecified address, the PE learns source MAC address and IP address of the CE. If the PE receives a Router Advertisement, it learns source MAC address and IP address of the CE. The PE will periodically generate Neighbor Solicitation messages for the IP address of the CE as a means of verifying the continued existence of the address and its MAC address binding. The absence of a response from the CE device for a given number of retries could be interpreted as a loss of connectivity with the CE. 6.0 Pseudowire Creation 6.1 Receive Unicast Multipoint-to-point Pseudowire As the PE discovers each locally attached CE, a unicast multipoint- to-point pseudowire (mp2p PW) associated exclusively with that CE is created by distributing the CE's IP address and MAC address along with a PW-Label to all the remote PE peers that participate in the same IPLS instance. Note that the same value of a PW-label SHOULD be distributed to all the remote PE peers for a given CE. The mp2p PW thus created is used by remote PEs to send unicast IP traffic to a specific CE. (The same functionality can be provided by a set of point-to-point PWs, and the PE is not required to send the same PW-label to all the other PEs. For convenience, however, we will use the term mp2p PWs, which may be implemented using a set of point-to-point PWs.) The PE forwards a frame received over this mp2p PW to the associated Attachment Circuit. The unicast pseudowire uses IP Layer2 Transport encapsulation as define in [PWE3-CONTROL]. 6.2 Receive Multicast Multipoint-to-point Pseudowire When a PE is configured to participate in an IPLS instance, it advertises a "multicast" PW-label to every other PE that is a member of the same IPLS. The advertised PW-label value is the same for each PE, which creates an mp2p pseudowire for IP multicast/broadcast traffic and ARP packets. There is only one multicast mp2p PW per PE for each IPLS instance and this pseudowire is used exclusively to carry IP multicast/broadcast and ARP traffic from the remote PEs to this PE for this IPLS instance. Shah, et al. Expires August 2008 10 Internet Draft draft-ietf-l2vpn-ipls-08.txt Note that no special functionality is expected from this pseudowire. We call it a "multicast pseudowire" because we use it to carry multicast and broadcast IP and ARP traffic. The pseudowire itself need not provide any different service than any of the unicast pseudowires. In particular, the Receive multicast mp2p PW does not perform any replication of frames itself. Rather, it is there to signify to the PE that the PE needs to replicate a copy of a frame received over this mp2p PW onto all the attachment circuits that are associated with the IPLS instance of the mp2p PW. The multicast mp2p pseudowire is considered the principle pseudowire in the bundle of mp2p pseudowires that consist of one multicast mp2p pseudowire and a variable number of unicast mp2p pseudowires for a given IPLS instance. In a principle role, multicast PW represents the IPLS instance. The life of all unicast PWs in the IPLS instance depends on the existence of the multicast PW. If, for some reasons, multicast PW cease to exist, all the associated unicast pseudowires in the bundle are removed. The multicast pseudowire uses Ethernet encapsulation as defined in [PWE3-ETH]. The use of pseudowires which are specially optimized for multicast is for further study. 6.3 Send Multicast Replication tree The PE creates a send replication tree for each IPLS instance, which consists of the collection of all attachment circuits and all the "multicast" pseudowires of the IPLS instance. Any ARP or multicast IP Ethernet frame received over an attachment circuit is replicated to the other attachment circuits and to the mp2p multicast pseudowire of the send replication tree. The send replication tree deals mostly with broadcast/multicast Ethernet MAC frames. One exception to this is unicast ARP frame, the processing of which is described in the following section. Any Ethernet frame received over the multicast PW is replicated to all the attachment circuits of the send replication tree of the IPLS instance associated with the incoming PW label. One exception is unicast ARP frame, the processing of which is described in the following section. 7.0 Signaling [PWE3-CONTROL] uses the Label Distribution Protocol (LDP) to exchange PW-FECs in the Label Mapping message in a downstream unsolicited mode. The PW-FEC comes in two forms; PWid and Generalized PWid FEC elements. These FEC elements define some fields that are common between them. The discussions below refer to these Shah, et al. Expires August 2008 11 Internet Draft draft-ietf-l2vpn-ipls-08.txt common fields for IPLS related extensions. Note that the use of multipoint to point and unidirectional characteristics of the PW makes BGP as the ideal candidate for PW-FEC signaling. The use of BGP for such purposes is for future study. 7.1 IPLS PW Signaling An IPLS carries IP packets as payload over its unicast pseudowires and Ethernet packet as payload over its multicast pseudowire. The PW-type to be used for unicast pseudowire is the IP PW, defined in [PWE3-CONTROL] as IP Layer2 Transport. The PW-type to be used for multicast pseudowire is the Ethernet PW as defined in [PWE3-ETH]. The PW-Type values for these encapsulations are defined in [PWE3- IANA]. When processing a received PW FEC, the PE matches the PW Id with the locally configured PW Id. If the PW type is Ethernet, the PW-FEC is for multicast PW. If the PW type is "IP Layer2 transport", the PW FEC is for unicast PW. For unicast PW, PE must check the presence of IP and MAC address TLVs in the optional parameter fields of the Label Mapping message. If these parameters are absent, a Label Release message must be issued with a Status Code meaning "IP and/or MAC Address of the CE is absent" [note: Status Code 0x0000002D is pending IANA allocation], to reject the establishment of the unicast PW with the remote PE. The IPLS uses the Address List TLV as defined in [RFC 3036] to signal the IP and MAC address of the local CE. There are two TLVs defined below; IP Address TLV and MAC Address TLV. Both TLVs must be included in the optional parameter field of the Label Mapping message when establishing the unicast IP PW. The Address Family Type value further augments the meaning of type of IP traffic (IPv4 or IPv6) that PW will carry. If there is a mismatch between the received Address Family value and the expectation of IPLS instance to which the PW belongs, the PE must issue a Label Release message with a Status Code meaning "IP Address type mismatch" [note: Status Code 0x0000002E is pending IANA allocation] to reject the PW establishment. Shah, et al. Expires August 2008 12 Internet Draft draft-ietf-l2vpn-ipls-08.txt Encoding of the IP Address TLV is: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |0|0| Address List (0x0101) | Length | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Address Family | CE's IP Address | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | CE's IP Address | | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Length When Address Family is IPV4, Length is equal to 6 bytes; 2 bytes for address family and 4 bytes of IP address. Address Family Two octet quantity containing a value from the ADDRESS FAMILY NUMBERS from ADDRESS FAMILY NUMBERS in [RFC 3232] that encodes the addresses contained in the Addresses field. CE's IP Address IP address of the CE attached to the advertising PE. The encoding of the individual address depends on the Address Family. The following address encodings are defined by this version of the protocol: Address Family Address Encoding IPv4 (1) 4 octet full IPv4 address IPv6 (2) 16 octet full IPv6 address Encoding of the MAC Address TLV is: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |0|0| Address List (0x0101) | Length | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Address Family | CE's MAC address | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + | | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Length The length field is set to value 8 (2 for address family, 6 for MAC address) Address Family Shah, et al. Expires August 2008 13 Internet Draft draft-ietf-l2vpn-ipls-08.txt Two octet quantity containing a value from ADDRESS FAMILY NUMBERS in [RFC 3232] that encodes the addresses contained in the Addresses field. CE's MAC Address MAC address of the CE attached to the advertising PE. The encoding of the individual address depends on the Address Family. The following address encodings are defined by this version of the protocol: Address Family Address Encoding MAC (6) 6 octet full Ethernet MAC address 7.2 Signaling Advertisement Processing A PE should process a received [PWE3-CONTROL] advertisement with PW- type of IP Layer2 transport for IPLS as follows, - Verify the IPLS VPN membership by matching the VPN-Id signaled in the AGI field or the PW-ID field with all the VPN-Ids configured in the PE. Discard and release the PW label if VPN-Id is not found. - Program the Forwarding Information Base (FIB) such that when a unicast IP packet is received from an attachment circuit with its destination MAC address matching the advertised MAC address, the packet is forwarded out over the tunnel to the advertising PE with the advertised PW-label as the inner label. A PE should process a received [PWE3-CONTROL] advertisement with the PW type of Ethernet for IPLS as follows, - Verify the IPLS VPN membership by matching the VPN-Id signaled in the AGI field or the PW-ID field with all the VPN-Ids configured in the PE. Discard and release the PW label if VPN-Id is not found. - Add the PW-label to the send broadcast replication tree for the VPN-Id. This enables sending a copy of a multicast/broadcast IP Ethernet frame or ARP Ethernet frame from the attachment circuit to this pseudowire. 7.3 IANA Considerations for LDP Status Code This document uses new LDP status code. IANA already maintains a registry of name "STATUS CODE NAME SPACE" defined by RFC3036. The following value is suggested for assignment: 0x0000002D "IP and/or MAC Address of CE is absent" 0x0000002E "IP Address type mismatch" Shah, et al. Expires August 2008 14 Internet Draft draft-ietf-l2vpn-ipls-08.txt 8.0 Forwarding 8.1 Non-IP or non-ARP traffic In an IPLS VPN, a PE forwards only IP and ARP traffic. All other frames are dropped silently. If the CEs must pass non-IP traffic to each other, they must do so through IP tunnels that terminate at the CEs themselves. 8.2 Unicast IP Traffic In IPLS, IP traffic is forwarded from the Attachment Circuit to the PW based on the destination MAC address of the layer 2 frame (and not based on the IP Header). The PE identifies the FIB associated with an IPLS instance based on the Attachment Circuit or the PW label. When a frame is received from an Attachment Circuit, the PE uses the destination MAC address as the lookup key. When a frame is received from a PW, the PE uses the PW-Label as the lookup key. The frame is dropped if the lookup fails. For IPv6 support, the unicast IP ICMP frame of Neighbor Discovery Protocol [RFC 2461] is bi-copied; one submitted to control plane and other to the PW based on the destination MAC address. 8.3 Broadcasts and Multicast IP Traffic When the destination MAC address is either a broadcast or multicast, a copy of the frame is sent to the control plane for CE discovery purposes (see section 5.1).It is important to note that the frames sent to the control plane is applied stricter rate limiting criteria to avoid overwhelming the control plane under adverse conditions such as Denial Of Service attack. The service provider should also provide a configurable limitation to prevent overflowing of the learned source addresses in a given IPLS instance. Also, a caution must be used such that only link local multicasts and broadcast IP packets are sent to control plane. When a multicast/broadcast IP packet is received from an Attachment Circuit, the PE replicates it onto the Send Multicast Replication Tree (See section 6.3). When a multicast/broadcast IP Ethernet frame is received from a pseudowire, the PE forwards a copy of the frame to all attachment circuits associated with the IPLS VPN instance involved. Note that multicast PW uses Ethernet encapsulation and hence does not require additional header manipulations. 8.4 ARP Traffic When a broadcast ARP frame is received over the attachment circuit, a copy of the frame is sent to the control plane for CE discovery purposes. The PE replicates the frame onto the Send Multicast Replication Tree (see section 6.3), which results into a copy to be Shah, et al. Expires August 2008 15 Internet Draft draft-ietf-l2vpn-ipls-08.txt delivered to all the remote PEs on the broadcast PW and other local CEs through the egress attachment circuits. When a broadcast ARP frame is received over the broadcast PW, a copy of the Ethernet ARP frame is sent to all the attachment circuits associated with the IPLS instance. When a unicast ARP Ethernet frame is received over the attachment circuit, a copy of the frame is sent to the control plane for the CE discovery purposes. The PE may optionally do MAC DA lookup in the forwarding table and send the ARP frame to a specific egress interface (attachment circuit or broadcast PW to a remote PE) or replicate the frame onto the Send Multicast Replication Tree (see section 6.3). When a unicast ARP Ethernet frame is received over the broadcast PW, PE may optionally do MAC DA lookup in the forwarding table and forward it to an attachment circuit where the CE is located. If the CE is not accessible through any local attachment circuit, the frame is dropped. Conversely, the PE may simply forward the frame to all the attachment circuits associated with that IPLS instance without any lookup in the forwarding table. 8.5 Encapsulation The Ethernet MAC header of a unicast IP packet received from an Attachment Circuit is stripped before forwarding the frame to the unicast pseudowire. However, the MAC header is retained for the following cases, . when a frame is unicast or broadcast IP packet that is directed to one or more local Attachment Circuit(s). . when a frame is a broadcast IP packet . when a frame is an ARP packet An IP frame received over a unicast pseudowire is prepended with a MAC header before transmitting it on the appropriate Attachment Circuit(s). The fields in the MAC header are filled in as follows: - The destination MAC address is the MAC address associated with the PW label in the FIB - The source MAC address is the PE's own local MAC address or a MAC address which has been specially configured on the PE for this use. - The Ethernet Type field is 0x0800 if IPv4 or 0x86DD if IPv6 [RFC 2464] - The frame may be IEEE802.1Q tagged based on the VLAN information associated with the Attachment Circuit. An FCS is appended to the frame. 9.0 Attaching to IPLS via ATM or FR In addition to (i) an Ethernet port and a (ii) combination of Ethernet port and a VLAN ID, an Attachment Circuit to IPLS may also Shah, et al. Expires August 2008 16 Internet Draft draft-ietf-l2vpn-ipls-08.txt be (iii) an ATM or FR VC carrying encapsulated bridged Ethernet frames or (iv) the combination of an ATM or FR VC and a VLAN ID. The ATM/FR VC is just used as a way to transport Ethernet frames between a customer site and the PE. The PE terminates the ATM/FR VC and operates on the encapsulated Ethernet frames exactly as if those were received on a local Ethernet interface. When a frame is propagated from pseudowire to a ATM or FR VC the PE prepends the Ethernet frame with the appropriate bridged encapsulation header as defined in [RFC 2684] and [RFC 2427] respectively. Operation of an IPLS over ATM/FR VC is exactly as described above, with the exception that the attachment circuit is then identified via the ATM VCI/VPI or Frame Relay DLCI (instead of via a local Ethernet port ID), or a combination of those with a VLAN ID. 10.0 VPLS vs IPLS The VPLS approach proposed in [VPLS] provides VPN services for IP as well as other protocols. The IPLS approach described in this draft is similar to VPLS in many respects: - It provides a Provider Provisioned Virtual LAN service with multipoint capability where a CE connected via a single attachment circuit can reach many remote CEs - It appears as a broadcast domain and a single subnet - forwarding is based on destination MAC addresses However, unlike VPLS, IPLS is restricted to IP traffic only. By restricting the scope of the service to the predominant type of traffic in today's environment, IPLS eliminates the need for service provider edge routers to implement some bridging functions such as MAC address learning in the data path (by, instead, distributing MAC information in the control plane). Thus this solution offers a number of benefits: - Facilitates Virtual LAN services in instances where PE devices cannot or cannot efficiently (or are specifically configured not to) perform MAC address learning. - Unknown Unicast frames are never flooded as would be the case in VPLS. - Encapsulation is more efficient (MAC header is stripped) for unicast IP packets while traversing the backbone network. - PE devices are not burdened with the processing overhead associated with traditional bridging (e.g., STP processing, etc.). Note however that some of these overheads (e.g., STP processing) could optionally be turned-off with a VPLS solution in the case where it is known that only IP devices are interconnected. - Loops (perhaps through backdoor links) are minimized since a PE could easily reject (via label release) a duplicate IP to MAC address advertisement. - Greater control over CE topology distribution. Shah, et al. Expires August 2008 17 Internet Draft draft-ietf-l2vpn-ipls-08.txt 11.0 IP Protocols The solution described in this document offers IPLS service for IPv4 and IPv6 traffic only. For this reason, the MAC Header is not carried over the unicast pseudowire. It is reconstructed by the PE when receiving a packet from a unicast pseudowire and the Ethertype 0x0800 or 0x86DD is used in the MAC Header since IPv4 or IPv6 respectively, is assumed. However, this solution may be extended to carry other types of important traffic such as ISIS , which does not use Ethernet-II, EtherType based header. In order to permit the propagation of such packets correctly, one may create a separate set of pseudowires, or pass protocol information in the "control word" of a "multiprotocol" pseudowire, or encapsulate the Ethernet MAC Header in the pseudowire. The selection of appropriate multiplexing/demultiplexing scheme is the subject of future study. The current document focuses on IPLS service for IPv4 and IPv6 traffic. 12.0 Dual Homing with IPLS As stated in previous sections, IPLS prohibits connection of a common LAN or VLAN to more than one PE. Alternatively the CE device itself can connect to more than one instance of IPLS through two separate LAN or VLAN connections to separate PEs. To the CE IP device, these separate connections appear as connections to two IP subnets. The failure of reachability through one subnet is then resolved via the other subnet using IP routing protocols. 13.0 Proxy ARP function The earlier version of this proposal used IP-PW to carry both the broadcast/multicast and unicast IP traffic. It also discussed how PE proxy functionality responds to the ARP requests of the local CE on behalf of remote CE. The current version of the draft eliminated these functions and instead uses Ethernet PW to carry broadcast, multicast and ARP frames to remote PEs. The motivation to use Ethernet PW and propagate ARP frames in the current version is to support configuration like back-to-back IPLS (similar to Inter AS option-A configurations in [RFC 4364]). The termination and controlled propagation of ARP frames is still a desirable option for security, DoS and other purposes. For these reasons, we re-introduce the ARP Proxy [PROXY-ARP] function in this revision as an optional feature. Following sections describe this option. 13.1 ARP Proxy - Responder As a local configuration, a PE can enable ARP Proxy responder function. In this mode,local PE responds to ARP requests received over the Attachment Circuit via learnt IP and MAC address Shah, et al. Expires August 2008 18 Internet Draft draft-ietf-l2vpn-ipls-08.txt associations, which are advertised by the remote PEs . In addition, the PE may utilize local policies to determine if ARP requests should be responded based on the source of the ARP request, rate at which the ARP requests are generated, etc. In nutshell, when this feature is enabled, ARP requests are not propagated to remote PE routers that are members of the same IPLS instance. 13.2 ARP Proxy - Generator As a local configuration, a PE can enable ARP Proxy generator function. In this mode, the PE generates ARP request for each IP and MAC address associations received from the remote PEs. The remote CE's IP and MAC address is used as the source information in the ARP request while the destination IP address in the request is obtained from the local configuration (that is, user needs to configure an IP address when this feature is enabled). The ARP request is sent on the Attachment Circuits that have ARP Proxy Generator enabled and is associated with the given IPLS instance. In addition, the PE may utilize local policies to determine which IP/MAC addresses are candidate for ARP request generation. The ARP Proxy Generator feature is required to support back-to-back IPLS configuration when any member of the IPLS instance is using ARP Proxy Responder function. An example of a back-to-back IPLS is a configuration where PE-1 (ASBR) in an IPLS cloud in one Autonomous System (say, AS-1) is connected via an Attachment Circuit to another PE-2 (ASBR) in an IPLS cloud in another Autonomous System (say, AS- 2) where each PE appears as CE to each other. Such configuration is described in [RFC 4364] as option-A for inter-AS connectivity. The Proxy ARP responder feature prevents propagation of ARP requests to PE-1 (ASBR) in AS-1. This necessitates that PE-1 (ASBR) in AS-1 generate ARP request on behalf of each CE connected to the IPLS instance in AS-1 as a mean to 'advertise' the reachability to IPLS cloud in AS-2 14.0 Acknowledgements Authors would like to thank Alp Dibirdi from Alcatel and other L2VPN working group members for their valuable comments. 15.0 Security Considerations A more comprehensive description of the security issues involved in L2VPNs are covered in [VPN-SEC]. Most of the security issues can be avoided through implementation of appropriate guards. The security aspect of this solution is addressed for two planes; control plane and data plane. 15.1 Control plane security Shah, et al. Expires August 2008 19 Internet Draft draft-ietf-l2vpn-ipls-08.txt The control plane security pertains to establishing the LDP connection, pseudo-wire establishment and CE's IP and MAC address distribution. The LDP connection between two trusted PEs can be achieved by each PE verifying the incoming connection against the configured peer's address and authenticating the LDP messages using MD5 authentication. The pseudo-wire establishments between two secure LDP peers do not pose security issue but mis-wiring could occur due to configuration error. Some checks, such as, proper pseudo-wire type and other pseudo-wire options may prevent mis- wiring due to configuration errors. The learning of the appropriate CE's IP and MAC address can be a security issue. It is expected that the local attachment circuit to CE be physically secured. If this is a concern, the PE must be configured with CE's IP and MAC address. During each ARP frame processing, PE must verify the received information against the configuration before accepting. This prevents theft of service, denial of service to a subscriber or DoS attacks to all subscribers by malicious use of network services. The IPLS also provides MAC anti spoofing by preventing the use of already known MAC address. For instance, if a PE has already learned a presence of a CE through local connection or from another PE, and subsequently an advertisement for the same MAC and/or IP address is received from a different PE, the receiving PE can terminate service to that CE (either through label release and/or removing the ARP entry from the FIB) and raise the alarm. The IPLS learns and distributes CE reachability through the control plane. This provides greater control over CE topology distribution through application of local policies. 15.2 Data plane security The data traffic between CE and PE is not encrypted and it is possible that in an insecure environment, a malicious user may tap into the CE to PE connection and generate traffic using the spoofed destination MAC address on the Ethernet Attachment Circuit. In order to avoid such hijacking, local PE may verify the source MAC address of the received frame against the MAC address of the admitted connection. The frame is forwarded to PW only when authenticity is verified. When spoofing is detected, PE must severe the connection with the local CE, tear down the PW and start over. Each IPLS instance uses its own FIB. This prevents leaking of one customer data into another. 16.0 References 16.1 Normative References Shah, et al. Expires August 2008 20 Internet Draft draft-ietf-l2vpn-ipls-08.txt [ARP] RFC 826, STD 37, D. Plummer, "An Ethernet Address Resolution Protocol: Or Converting Network Protocol Addresses to 48.bit Ethernet Addresses for Transmission on Ethernet Hardware". [PWE3-CONTROL] L. Martini et al., "Pseudowire Setup and Maintenance using LDP", RFC 4447. [PWE3-IANA] L. Martini et al,. "IANA Allocations for pseudo Wire Edge to Edge Emulation (PWE3)", RFC 4446. [PWE3-ETH] Martini et al., "Encapsulation Methods for Transport of Ethernet over MPLS Networks", RFC 4448. [VPLS] Lasserre et al, "Virtual Private LAN Service Using LDP", RFC 4762, January 2007. [RFC 3036] L. Anderson et al., "LDP Specification", January 2001. [RFC 2119] S. Bradner, "Key words for use in RFCs to indicate requirement levels". [IEEE 802.1D] ISO/IEC 10038, ANSI/IEEE Std 802.1D-1993, "MAC Bridges". [RFC 2461] Narten, T., Nordmark, E. and W.Simpson, "Neighbor Discovery for IP Version(IPv6)", RFC 2461, December, 1998. [RFC 2464] Crawford, M., "Transmission of IPv6 packets over Ethernet Networks", RFC 2464, December 1998. 16.2 Informative References [L2VPN-FWK] L. Andersson et al., "Framework for L2VPN", December 2004, work in progress. [PROXY-ARP] RFC 925, J. Postel, "Multi-LAN Address Resolution". [L2VPN-REQTS] Augustyn, W. et.al "Service Requirements for Layer 2 Provider Provisioned Virtual Private Networks", RFC 4665, September 2006. [L2VPN-SIG] Rosen et al., "Provisioning, Autodiscovery, and signaling in L2VPN", draft-ietf-l2vpn-signaling-08.txt, May 2006, (work in progress). [RFC-1112] Deering, S., "Host Extensions for IP Multicasting", RFC 1112, August, 1989. Shah, et al. Expires August 2008 21 Internet Draft draft-ietf-l2vpn-ipls-08.txt [RFC 2684] Grossman, et al., "Multiprotocol Encapsulation over ATM Adaptation Layer", September 1999. [RFC 2427] Brown, et al., "Multiprotocol Interconnect over Frame Relay", September 1998. [RFC 4364] Rosen et al., "BGP/MPLS IP Virtual Private Network (VPNs)", February 2006. [VPN-SEC] Fang, L., "Security framework for Provider Provisioned Virtual Private Networks", RFC 4111, July 2005. [RFC 3232] Reynolds and Postel, "Assigned Numbers". 17.0 Author's Address Himanshu Shah Ciena Corp 35 Nagog Park, Acton, MA 01720 Email: email@example.com K.Arvind Enterasys Networks 50 Minuteman Rd, Suite 100 Andover, MA 01810 Email: firstname.lastname@example.com Eric Rosen Cisco Systems 300 Apollo Drive, Chelmsford, MA 01824 Email: email@example.com Giles Heron Tellabs Abbey Place 24-28 Easton Street High Wycombe Bucks HP11 1NT UK Email: email@example.com Francois Le Faucheur Cisco Systems, Inc. Village d'Entreprise Green Side - Batiment T3 400, Avenue de Roumanille 06410 Biot-Sophia Antipolis, France Email: email@example.com Shah, et al. Expires August 2008 22 Internet Draft draft-ietf-l2vpn-ipls-08.txt Vasile Radoaca Email: firstname.lastname@example.com Full Copyright Statement Copyright (C) The IETF Trust (2007). This document is subject to the rights, licenses and restrictions contained in BCP 78, and except as set forth therein, the authors retain all their rights. This document and the information contained herein are provided on an "AS IS" basis and THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE INTERNET SOCIETY, THE IETF TRUST AND THE INTERNET ENGINEERING TASK FORCE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Intellectual Property The IETF takes no position regarding the validity or scope of any Intellectual Property Rights or other rights that might be claimed to pertain to the implementation or use of the technology described in this document or the extent to which any license under such rights might or might not be available; nor does it represent that it has made any independent effort to identify any such rights. Information on the procedures with respect to rights in RFC documents can be found in BCP 78 and BCP 79. Copies of IPR disclosures made to the IETF Secretariat and any assurances of licenses to be made available, or the result of an attempt made to obtain a general license or permission for the use of such proprietary rights by implementers or users of this specification can be obtained from the IETF on-line IPR repository at http://www.ietf.org/ipr. The IETF invites any interested party to bring to its attention any copyrights, patents or patent applications, or other proprietary rights that may cover technology that may be required to implement this standard. Please address the information to the IETF at ietf- email@example.com. Acknowledgment Funding for the RFC Editor function is currently provided by the Internet Society. Shah, et al. Expires August 2008 23


text:
Except for this one. These beautiful, Little Mermaid themed coasters are a wonderful item and a must-have for any Ariel fan.
4 aqua, white and gold ceramic coasters are included and each coaster features a unique design with a coloured, matte finish. They allow you to show off your Disney fandom while protecting your tables. Make these part of your world and put them on your kitchen or coffee table to protect them from scratches and watermarks. They also make a great conversation piece when you have friends over to your house.
The ceramic surfaces are easy to wipe clean and they are cork-based, meaning they won't slip or slide and will stay in place.
The product makes a perfect addition to any Little Mermaid merchandise collection.
Official Disney licensed merchandise by Seven20
If for any reason you are not 100% happy with your purchase, we can provide you with a full refund or exchange if you return it to us within 7 days after you receive the goods. Conditions apply, please see our terms and conditions.

subset: commoncrawl


text:
I'll admit it…I'm not a huge fan of Halloween EXCEPT for the fun goodies and treats and the cute little kids dressed up so adorably. I'll pass on the scary clowns and bloodied zombies, thank you very much.
That said, Pamela DuMond has written a zany Halloween treat with lots of tricks thrown in to entertain the reader in CUPCAKES, BATS, AND SCARE-DY CATS! This sixth book in the Annie Graceland Cozy Mystery series is lighthearted with laugh out moments and quirky ghosts that kept me entertained. Annie is a thoroughly likable protagonist with a good heart. As much as she gets annoyed with ghosts wanting her to help solve their murder or help them find "the light", she still finds sympathy to help, even though she may have truly disliked the person while they were alive. There is plenty of action happening to move the plot along and enough suspects to keep it interesting. The supporting characters in this book are a hoot, from her friends to her huge Himalayan mix cat, Theodore von Pumpernickle, and the dog she's watching. Pamela has an interesting twist in this book: not only is the point of view from Annie's, but she also includes the point of view from the animals. Don't worry, it's not confusing at all as each short chapter clearly delineates each character.
In addition to a fun read, Pamela provides several yummy recipes (including my recipe for Cherry Dream Pie!) with the book. Since it's Halloween season, she has graciously allowed me to share the recipe for Spooky Surprise (Cookie Dough) Cupcakes, developed by Laura Devries. A delicious chocolate cupcake encases a gooey chocolate chip cookie dough center. The vanilla buttercream is light and fluffy, the perfect medium for making ghosts or puffy clouds to hold flying bats! Wishing you a spooktacular Halloween!
Since the e-book for CUPCAKES, BATS, AND SCARE-DY CATS is currently on sale for $0.99, Pamela is generously offering a print copy for one lucky winner AND an e-book copy of her brand new release, TO LIVE AND LET LIE! Read below for the synopsis for both these books.
Cupcakes, Bats, and Scare-dy Cats
Annie Graceland has a pinch of psychic ability… it turns out her cat, Theodore, does too!
Annie's dog sitting for her new neighbor, but her creepy apartment manager, Anthony Spiggottini, accuses her of violating the "No Dogs Allowed" lease, and threatens to evict her. She's at a Halloween party when Anthony busts into her place, and literally lets the dog and cat out! She'd gladly have killed him, but someone beats her to it. Now Annie's desperately searching for her lost cat while dealing with Anthony's ghost who refuses to accept he's dead.
It's a good thing she doesn't know that Theodore her cat, Mozart the dog, and Bloody Mary, (the spirit cat they conjured), are running loose on Venice streets, sniffing out Anthony's murder suspects!
To Live and Let Lie: A Theodore von Pumpernickel Secret Agent Cat Mystery
Theodore von Pumpernickle looks like a mild mannered, domesticated, long-haired cat living a quiet life in the seaside village of Venice Beach, California.
Looks can be deceiving, can't they?
In reality, Theodore is a Secret Agent Cat Double O Nine, working undercover for the Pet Intelligence Agency (P.I.A.) spying on evil masterminds and diabolical geniuses that seek chaos and world domination.
When Theodore's bejeweled cat food bowl (worth ONE MILLION DOLLARS) is stolen, he takes on an international cartel of criminals trafficking in priceless stolen jewels.
With the help of other P.I.A. agents: Flyby the carrier pigeon, Mozart the German shepherd dog, and Susan — the eighty-five year old Super Spy, Theodore dives into dangerous espionage waters where he is forced to use all his Double O Nine brains, brawn, and special gadgets.
Will the evil masterminds and their minions win at last — or will Theodore von Pumpernickel, Secret Agent Cat save the day?
A huge thank you to Pamela DuMond for providing a print copy of CUPCAKES, BATS, AND SCARE-DY CATS to one winner AND an e-book copy of TO LIVE AND LET LIE to one winner! Please use the Rafflecopter box located below the recipe for a chance to win. Contest ends Monday, October 10, 2016 at 11:59 pm PST. Winner will be announced on this page and on Cinnamon & Sugar's Facebook page, as well as notified by email (so check your spam folder!) Print copy open to U.S. residents only.
- 2-1/2 cups all-purpose flour
- 1 teaspoon baking soda
- 1 teaspoon salt
- 1 cup (2 sticks) butter, softened
- 3/4 cup granulated sugar
- 3/4 cup brown sugar
- 1 teaspoon vanilla extract
- 2 large pasteurized eggs OR equal amount liquid egg substitute (3-1/2 ounces)*
- 2 cups chocolate chips (mini or regular)
- 1/2 cup (1 stick) butter, softened
- 1-3/4 cups granulated sugar
- 4 eggs
- 1 teaspoon vanilla
- 1/3 cup vegetable oil
- 2-3/4 cups cake flour
- 1-1/4 teaspoons baking powder
- 3/4 teaspoon baking soda
- 1/2 teaspoon salt
- 1/4 cup instant vanilla pudding mix
- 1/2 cup dark cocoa powder, sifted
- 1-1/2 cups whole milk
- 1 cup (2 sticks) butter, softened
- 3 - 4 cups confectioners' sugar, sifted
- A pinch of salt
- 2 - 3 tablespoons whole milk
- 2 teaspoons vanilla extract
- Combine flour, baking soda, and salt in a small bowl.
- Beat butter, granulated sugar, brown sugar, and vanilla extract in a large mixer bowl until creamy.
- Add eggs (or egg substitute) one at a time, beating well after each addition.
- Gradually beat in flour mixture.
- Stir in chocolate chips.
- Using a tablespoon as a guide, scoop balls of cookie dough onto waxed paper or parchment and place in a container that will fit in your freezer.
- Once all of the cookie dough is scooped, place in the freezer for at least 1 hour or until completely frozen.
- *Using pasteurized eggs or liquid egg substitute will reduce any potential hazard that might result from using raw eggs. However, egg-free cookie dough can be used. Any uncooked or undercooked meat or egg product carries potential risk. Take appropriate precautions and safety measures as necessary.
- Preheat oven to 350 degrees (F).
- In a large bowl or bowl of a standing mixer, cream butter and sugar together until light and fluffy.
- Add vanilla and eggs. Mix on low speed until fully incorporated.
- Add oil and mix thoroughly.
- In a separate bowl combine dry ingredients: flour, baking powder, baking soda, salt, pudding mix, and cocoa powder.
- Add half the flour mixture to the mixing bowl and mix until smooth.
- Add half the milk to the mixing bowl and beat until smooth.
- Repeat with remaining flour and milk.
- Fill baking cups 2/3 full and and add a ball of frozen cookie dough to each cupcake just before placing into the oven.
- Bake for 18 - 22 minutes (in a standard oven, less for convection ovens) until a toothpick inserted at the edge comes out clean. (Inserting in the center will not give an accurate reading as cookie dough will be gooey.)
- Cool completely on a wire rack before frosting and decorating.
- Place softened butter into the bowl of a stand mixer that has been fitted with the paddle attachment. Turn the mixer on medium setting and cream the butter until it is smooth and has lightened in color, about 3 minutes.
- Add confectioners' sugar, 1/2 cup at a time.
- Add vanilla extract and a pinch of salt.
- After each cup of confectioners' sugar has been incorporated, turn the mixer onto the highest speed setting for about 10 seconds to lighten the frosting.
- Add milk until the frosting has reached the preferred consistency.
- For a firmer frosting, add more confectioners' sugar, a 1/4 cup at a time. For softer frosting, add more milk, a tablespoon at a time.
- Apply to cupcakes after they have cooled.
- Serve fresh, or cover and refrigerate.
- While this recipe is lengthy, you can prepare it in stages by making the cookie dough up to a month ahead of time. Make the dough and freeze the cookie dough balls. Once frozen solid, place the dough balls into a freezer-safe Ziplock bag. You can also prepare the buttercream frosting a few days ahead of time but be sure to rewhip it right before using.
- To make the bat decorations, separate Oreo cookies and remove the frosting from the middle. Cut each circle in half for the wings. Attach a candy eye to one tip of each piece. Position 2 cookie halves on each cupcake.
- Bake any extra cookie dough at 350 degrees (F) for 8 - 11 minutes, until slightly golden.
Pin to Pinterest:
If you receive my blog post via email you will need to visit my website to view the video.


text:
Wing Chun Sifus Database
filter sifus:
Filters are cumulative. If you have trouble searching:
you can also:
Add a Sifu now to contribute.
|Common Name
|Bio (continued on main profile page)
|Last Updated
|Duncan Leung (Leung Shiu Hung)
|Duncan trained privately with Yip Man from '55-59 and fully mastered the system and it's applications. He didn't train in the regular school with... Read more
|(Ip Man) Duncan Leung
|Oct 6, 2020
|Felix Leong (Cheok Son)
|Hong Kong: Grandmaster Yip Chun (disciple) Foshan: Grandmaster Pan Nam Guongzhou: Grandmaster Sum Nung and Lei Chi Wah Now teaches in Adelaide, South... Read more
|(Yuen Kay San) Sum Nung
|Aug 28, 2020
|Leung Bik
|Leung Bik (Liang Bi) in some accounts was said to have been the eldest son of Leung Jan and the one who achieved the highest skills in Wing Chun Kuen... Read more
|Leung Bik (Other than Ip Man)
|May 9, 2020
|Glenda Leung
|Hello. I'm Glenda Leung and I am from Hong Kong but now living on Guam. I studied under Master Wan Kam Leung for 13 years before I moved to Guam.... Read more
|(Ip Man) Wong Shun Leung
|Apr 28, 2020
|Leung Ty
|Originally student of GM Rick Cantrell now with my wife and teacher Yoki Leung.
|(Ip Man) William Cheung
|Apr 25, 2020
|Ray Pi Lu
|Born and raised in Hong Kong. Have lived in Hong Kong, Florida and Illinois in USA, Colon, Panama, Singapore and Philippines. Studied under Master... Read more
|(Ip Man) Leung Sheung
|Apr 16, 2020
|Mark Lee Pringle
|Mark Lee Pringle's Traditional Kung-Fu Studio is located at 527 Powers ave. in Girard,Ohio 44420. ph.# 330-545-2720 (24hr. ans. service) Coach Li Ma-... Read more
|(Ip Man) Ho Kam Ming
|May 25, 2019
|Chris Burke
|Chris Burke began his formal martial arts training in Korean Tae Kwon Do at the age of twelve. Shortly after earning his black belt, he left, seeking... Read more
|Other - Not Listed (Email Admin to add)
|Apr 25, 2019
|Student of Sifu Rick Cantrell
|(Ip Man) So Duk Sun
|Feb 16, 2019
|William Lai
|"I trained Wing Chun full time for eight years under Grand Master Chu Shong Tin in Hong Kong. I am Grand Master Chu's only recognized disciple... Read more
|(Ip Man) Chu Shong Tin
|Dec 1, 2018


text:
Official course description: Review of formal specification and description techniques for distributed and open systems. Verification techniques. Correctness proofs. Verification of general properties of distributed systems. Analysis and relief stragegies. Testing techniques. Test generation strategies. Test architectures.
Professor: Gregor v. Bochmann , phone: 562-5800 ext.: 6205, e-mail: email@example.com , office: SITE building (room 5082), office hours: by appointment, please send me an e-mail stating when you would like to meet
Lectures: Wednesdays at 17:30-20:30 in room LMX 390. - - Preliminary schedule


text:
Christopher Knittel, 11 October 2018
Jeffrey Frankel, 04 September 2018
Lee Branstetter, Britta Glennon, J. Bradford Jensen, 21 August 2018
US firms have begun shifting R&D investment towards non-traditional destinations such as China, India, and Israel. The column argues that this is a response to a shortage in software and IT-related human capital within the US. When US multinationals are able to import talent or export R&D work, this reinforces US technological leadership. Conversely, politically engineered constraints on this response will undermine the competitiveness of US-based firms.
Benjamin Born, Gernot Müller, Moritz Schularick, Petr Sedláček, 18 July 2018
Growth and employment in the US have been robust over the past 18 months, and President Trump frequently takes personal credit for these trends. This column explores how the US economy would have evolved without Trump. An analysis shows no difference between the post-election performance of the US economy under Trump and a synthetic 'doppelganger' US economy without Trump, suggesting that there has been no 'Trump effect'.
Ufuk Akcigit, John Grigsby, Tom Nicholas, 27 March 2017
The impact of immigration on US economic development has become a controversial issue in recent policy debates. This column, arising from a study linking Federal Census data with patent records, examines the historical role of immigrant inventors in the process of US technological innovation. Immigrant inventors appear to have been of central importance to American innovation during the 19th and 20th centuries, both through their own inventive activity and through their influence on domestic inventors.
Ethan Ilzetzki, Jonathan Pinder, 20 October 2012
The US economy is struggling out of its deepest recession since the 1930s. In this climate, economic policy promises made by the presidential candidates are critical. This column reviews the facts on the state of the US economy, and how it got there, before reviewing the candidates' promises. Given the monumental challenges, the lack of policy detail from the candidates is worrying.
Robert J. Gordon, 22 August 2011
The US is missing millions of jobs. This column argues that the total is 10.4 million. It claims that 3 million of these can be traced to the weakened bargaining position of labour and the growing assertiveness of management in slashing costs to maintain share prices. Moreover, this employment gap is not shrinking because of the 'double hangover' effect—an excess housing supply and besieged consumers unwilling to spend.
Michelle Alexopoulos, Jon Cohen, 23 December 2008
This column claims that uncertainty shocks affect on economic activity with remarkable swiftness, strength, and durability. Capturing expectations of average citizens in Main Street through the use of keywords in main newspapers, it indicates a modest decline of uncertainty since October 2008, suggesting that the worst may be behind us.
Peter Auer, Raphael Auer, Simon Wehrmüller, 21 November 2008
What is causing the mass US layoffs, decreased demand or more expensive financing? This column presents new research showing that two-thirds of the variation in employment across companies is due to their varying dependence on credit. In short, cheap capital is important for employment.
Edward Lazear, 12 September 2008
At the Global Economic Symposium in Schleswig-Holstein in September 2008, Edward Lazear – economics professor at Stanford University and currently chairman of the US Council of Economic Advisers – delivered a speech on the performance of the US economy over the past ten years. Afterwards, he recorded an interview with Romesh Vaitilingam.
Gary Hufbauer, Matthew Adler, 24 July 2008
A popular headline figure quantifying the US payoff from globalisation at $1 trillion per year has been criticised by Dani Rodrik and other sceptics. Here is an explanation and defence of the Peterson Institute's big number.


text:
The Role:Role: CSE - SAP (UAE) Location: Dubai Industry: Any Grade: Director Travel requirement: Within the region Roles & Responsibilities * Achieve annual revenue and profitability targets * Run and manage RFP processes, bid preparation, contract creation and commercial negotiations with client * Account management including account forecasting and budgeting, account operations and overall account P&L management * Create sales strategies and plan for the leadership review and for its incorporation into the broader customer strategy and plan * Understand customer's business model and generate new pipeline by proactively identifying/creating, qualifying and closing new business opportunities to drive value * Responds to and deliver on customers request, maintaining high customer satisfaction ratings that meet or exceed company standards * Establish and maintain customer relationships at both the operating and senior levels of the customer organization * Forecast and manage talent retention and growth optimally * Build and leverage an ecosystem of partners, alliances, start-ups and academia to design customer specific digital strategy and solutions * Long term, strong relationship with local SAP team and regional SAP Leadership * Ability to bring together knowledge of SAP capabilities and business problems, to wear a consultative selling hat and propose solutions in both business and technology * Ability to influence decisions, approached through strong subject matter expertise, and appropriate positioning of relevant experience * Establish thought leadership position with key stakeholders in the CXO organization and long-term relationships with key customers, resulting in trusted partner status and repeatable revenue streamsEssential Skills / Qualifications:Qualifications Skills Required * Bachelor's degree / MBA preferred * 10 to 15 years of proven track record of large scale engagements * Business development track record * Proven leadership qualities such as conflict resolution, and influential skills * People management skills * Knowhow of global delivery model is preferred * Good track record in establishing relationships and connects in the CXO organization * Excellent written and verbal communication skills * Experience in ERP (specifically SAP), SAP cloud solutions and/or SAP business development * Previous experience with account management, business development, sales of SAP solutions in UAE is strongly preferredAbout Fircroft:Fircroft has been placing people in specialist technical industries for approaching half a century, focusing on mid to senior level engineers for contract and permanent roles worldwide. By applying for this job you give consent for Fircroft to contact you, via email & telephone, to discuss your application along with future positions and Fircroft's services.
Fircroft is registered as a Data Controller with the Information Commissioner as required under the General Data Protection Regulation 2016/679. Fircroft will only process your personal data for the specific purposes of managing your application.
Share this job
Back to Top


text:
Stunning holographic hexagon chunky nail glitter available in 25 colours.
Each bag contains 3 grams of beautiful 1mm wide holographic hexagon nail art glitter.
This stunning nail art decoration is a perfect addition to many nail design.
The glitter can be used on natural or false nails and is suitable to be encapsulated in gel or acrylic.
Our Glitter is P.E.T Glitter Cosmetic Grade.
Hexagon glitter
Stunning glitters! Need them in every color!
Amazing Sparkle!
I own multiple colours of this glitter and they are stunningly sparkly! I especially recommend the colour White for its versatility - you can apply this over any shade of nail polish to instantly give it a sugar sparkle effect.


text:
Although the RF300-series radios are retired, the 12156 SMA to BNC Antenna Cable is available for existing RF300 customers as a replacement item.
One of these cables was shipped with each RF300-series transceiver. The cable runs from the transceiver to a notch on the mounting bracket; a BNC connector is provided on the "antenna" end.
|49.9 g (0.11 lb)


text: Sgt. Cassie McDole sits in an AAV. Arezou Rezvani/NPR hide caption toggle caption Arezou Rezvani/NPR Back At Base On The California Shore, Sizing Up Female Marines' Combat Readiness May 29, 2015 The Marines are conducting a yearlong experiment aimed at settling whether women can handle the punishing world of ground combat. The goal is to create gender-neutral physical standards. On The California Shore, Sizing Up Female Marines' Combat Readiness Listen · 7:18 7:18 Toggle more options Download Embed Embed <iframe src="https://www.npr.org/player/embed/410081051/410470166" width="100%" height="290" frameborder="0" scrolling="no" title="NPR embedded audio player"> Transcript


text:
Jada Pinkett Smith at the 2010 AMAs
2010 American Music Awards: Jada Pinkett Smith
Jada Pinkett Smith hit the American Music Awards with her kids Willow and Jaden, and she looked glamorous doing it. Gold and shimmery gray shadow made for an unexpected eye makeup pairing, while lip gloss added a playful look. One updo later, she's looking like a very hot mama. Do you agree?
Vote on all of my American Music Awards polls here!


text:
Status: Closed
Know more about this business than we do? Cool! Please submit any corrections or missing details you may have.Help us make it right
Be the first SILive.com user to add photos or videos of United Building Maintenance
Security guard & patrol service; janitorial & custodial services Security guard services, Armored car services, Burglary protection services, Guard dog rental, Cleaning equipment accessories, Janitorial equipment, Janitor carts and accessories


text:
A pet can definitely bring happiness to every household. Whether it is a cat or a dog, among others, it will be something that you will look forward to seeing after a tiring day. They are fun and playful. However, they can also be annoying, especially because they can cause a mess. Among others, one of the problems that you have to deal with would be pet hair.
If you want to get rid of pet hair in areas where they should not be present, you need to invest in a top-notch vacuum cleaner. Clueless on which one to buy? Keep on reading the rest of this guide and we'll let you know some of the top choices for the best cordless vacuums for pet hair, as well as the notable features that make them amongst the best.
1. what is the best vacuum for pet hair?
If you have a pet at home, one of the things to keep in mind is that not just any type of vacuum would suffice. Rather, you need to find one that is designed exclusively to handle pet hair.
In the case of a traditional vacuum, they are incorporated with a two-part brush and hose. Sadly, this is not going to work for pet hair. The brush will only stir up the pet hair and hence, it won't be lifted out of the surface. It can only get tangled in the brush.
On the other hand, in the case of a pet hair vacuum cleaner, they have special-designed brushes. They have a modified design that will suck dirt out of the surface and will prevent it from tangling. The suction tends to be more powerful, so as the filtration system.
2. Essential Factors to Consider when Choosing the Best Pet Hair Vacuum
In your search for top cordless vacuum cleaners for pet hair, these are some of the most important things to consider, which will make it easier to narrow down the possibilities:
· Weight: One of the most important for a cordless vacuum is to be lightweight, which will allow you to carry it with ease. This means that even when cleaning for an extended period of time, you do not have to complain of fatigue.
· Battery: Cordless vacuum cleaners designed for pet hair have a battery. This is their source of power. To differentiate the possibilities, think about the time that will be needed for the battery to be recharged and the duration before it is drained.
· Power: The vacuum cleaner must deliver fade-free suction. Compared to other types of dirt and debris, pet hair is thinner and almost invisible to the naked eye. This makes it important that the vacuum can tackle even the tiniest dirt to the surface.
· Versatility: Even if it is called a pet hair vacuum cleaner, it does not mean that it is designed solely for such purpose. There are many models with several attachments, which means that you can use it in more ways than one.
· Surface Type: Do you have carpeted or hardwood floors? Is it going to be used for cleaning the couch? Take note that some pet hair vacuum cleaners are not meant to work in all surface types. For the best choice, pick one with multi-surface cleaning capability.
· Warranty: Most of the pet hair vacuum cleaners have a warranty that lasts from one to five years. Obviously, it is better to choose a product with a longer warranty coverage, which means that you can enjoy reliable support from the manufacturer when a product experiences a defect.
3. Tips to Get Rid of Pet Hair
While it will help to have the right vacuum cleaner, here are some of the best tips to prevent and eliminate pet hair at home:
· Keep your pets away from the carpeted area at home or the couch. They should have a space that is dedicated for playtime. They should also be trained to sleep in their designated area.
· In order to prevent pet hair from clinging on the surface, there are anti-static sprays that are commercially available.
· When cleaning seat covers, carpets, and anything else where carpet hair can be frequently found, it is good to use vinegar as a natural cleaner. White distilled vinegar will help the fabric to relax and loosen.
· Aside from using a vacuum cleaner that is designed specifically for pet hair, there are other materials that can prove to be equally effective. For instance, you can use rubber gloves or even a balloon.
Top 5 Cordless Vacuum Cleaners for Pet Hair
In this section, we will provide you with a quick look at some of the top brands and models available on the market, as well as the reasons why they can be considered as exceptional picks.
* Black+Decker BDH2020FLFH Max Lithium Flex Vacuum *
Made by a reputable global brand, one of the exceptional features of this product is the lithium technology, which allows it to deliver fade-free suction, regardless of the dirt and debris that is retrieved. It is powerful enough to suck even the tiniest traces of pet hair.
It is excellent in terms of flexibility. Aside from the rubberized brush that was especially designed for getting rid of pet hair, there is also a stick vacuum attachment, as well as a crevice tool. A charging base is also included to keep the battery fully-charged.
The three-stage filtration is one more thing that gives this a good reputation in a marketplace that is saturated in terms of alternatives. This means that no dirt will be able to escape the vacuum once it has been trapped.
· Compact and lightweight body
· Excellent filtration
· Long battery life
· Hose can curl easily
· Can take quite a while to recharge the battery
*Hoover Linx Cordless Stick Vacuum Cleaner*
To easily get rid of pet hair, this is one product that you might want to take into consideration. With its lightweight body, one thing that you will love is how easy it is to move around, and hence, you will not easily complain of fatigue.
There is a motorized power brush, which is basically the reason why it makes sure that dirt won't be able to escape once it gets in contact with the head of the vacuum. There is a switch that is strategically-positioned, making it easy to turn off the brush when it is not needed.
It also comes with an 11-inch nozzle. The attachment will come handy if you are cleaning furniture or under the stairs.
Lastly, it has Wind Tunnel Technology, an innovation that has been exclusively developed by the manufacturer to provide cyclonic action when you are vacuuming.
· Has a clear canister
· Can work on different surfaces
· Lightweight
· Battery quality could be better
· Can be prone to clogging
*Hoover Air BH52160PC Hand Vacuum Cleaner*
For an affordable vacuum that will make it effortless to remove pet hair, this is another option that should be taken into consideration. Its weight is less than four pounds, which means that handling it will be almost effortless on your end.
It comes with 20-volt Lithium Life Battery. While there is no doubt that it is powerful, you might not like the fact that a fully-charged battery will last only a few minutes. Fortunately, it comes with a battery fuel gauge, which will make it easy to determine how much battery is left.
Another feature that you will love is the reusable filter, which is budget-friendly. Instead of buying a replacement, all that you need to do is wash it in running water and it can be reused.
Lastly, the product comes with a two-year warranty from the manufacturer, which can provide you with peace of mind.
· Affordable
· Easy to handle
· Comes with a battery gauge
· No detachable hose
· Short battery life
*Dyson V6 Animal Cord-free Vacuum*
This is one of the most expensive options from the products mentioned in this post, but it is sure to be worth your money given the advanced features that it has.
Among others, one feature that you will like is the fade-free suction that it can deliver. It can retrieve pet hair without any problem. To add, the battery can last for up to 20 minutes without any problem.
Meanwhile, it also has direct-drive cleaner head. It has bristles that can clean carpets deeply without causing damages to the delicate fibers on the surface.
It is also versatile. When used in hand-held mode, the wand can be detached and it can be used when cleaning the interior of your car. When the wand is attached, on the other hand, it can easily clean areas that are hard to reach.
· Comes with an extensive warranty coverage
· Powerful motor
· Versatile cleaning applications
· Expensive
· Bin capacity is quite small
*Dyson V6 Top Dog Cordless Handheld Vacuum*
The Dyson digital motor that powers this unit is one of its most exceptional features. It is small and lightweight, but this does not mean that power is compromised in any way. This is the reason why it is rated as one of the most powerful handheld vacuums on the market.
Another thing that makes it great is the presence of multiple attachments for different cleaning functions. It has a mini-motorized tool, combination tool, stubborn dirt brush, and crevice tool.
It also has two-tier radial cyclones, which can be asserted as another reason why it has a performance that is hard to match. There are 15 cyclones that are arranged in two tiers, which will lead to improved air flow. Even tiny pet hairs will not be able to escape.
· Comes with multiple accessories
· Lightweight design
· Versatile cleaning functions
· Minimal reviews are available online
· Battery does not last long
From the discussions above about the best cordless vacuums for pet hair, we hope that it is now easier for you to decide which one will be the best choice. If you will ask for my personal opinion, I would say that Hoover Linx cordless stick vacuum cleaner is the top pick. It is made by a top-rated brand and it has innovative features that provide it with an edge over others.
Have you purchased a pet vacuum cleaner? Are there other models that you would like to recommend? Do not hesitate to leave a comment below.
Read More:


text:
Next in Shelton: Setting road paving priorities
Now that Shelton voters have approved bonding $5 million for road paving and related improvements, Mayor Mark Lauretti said priorities will be set on what streets should be enhanced first.
Lauretti said he and Public Works Director Paul DiMauro determine what roads need the most immediate attention, with input from evaluations completed by City Engineer Robert F. Kulacz.
The mayor said setting priorities can be difficult because road conditions always are evolving and people have differing opinions.
Priorities could be set and then there might be a collapsed drainage situation or severe weather damage, he said. "All of a sudden another road is a target," he said.
Plus, Lauretti said, "there are always roads that people think are worse."
'In the road business'
The city does some of the paving and related preparation road work in-house and uses outside contractors for other work.
Lauretti said the city is buying certain equipment so it can do more of the work itself. He thinks this is a wise use of municipal funds.
"We've been spending money on [equipment] so we're making progress," he said. "We need to make that investment because we'll always be in the road business."
Won with 82% of the vote
On Election Day, Shelton voters overwhelmingly approved the referendum question to have the city borrow $5 million to pay for road paving and related improvements.
The local ballot question was approved by 82% of voters. It's the fourth time a referendum to borrow money for paving has been approved by Shelton voters in recent years.
Lauretti said the city needs to focus on the roads after concentrating more on open space, schools and other infrastructure during the past few decades. "Now the roads need our attention," Lauretti said.
Borrowing to pave is 'prudent'
Lauretti defended going to the bond market to pay for most municipal road work rather than using money from the operating budget or the city's fund balance (rainy-day fund).
Bonding is "the prudent thing to do," he said, because relying too much on the operating budget could negatively affect the mill rate. He also noted the historically low interest rates now available.
Lauretti said the impact on the city's financial well-being is minimal if the city is retiring debt as it pursues new borrowing. He also stressed that the city of Shelton uses 10-year and five-year bonds, not the 20-year bonds favored by many cities and towns.
"We're one of the few [municipalities] that does it that way," he said, noting that shorter-term bonds lowers the cost of borrowing for the city.


text:
The LaCie® Rugged RAID, one of the toughest all-terrain mobile storage devices on the market, is now available from the LaCie Online Store.
Packing twice the speed and capacity of a standard mobile hard drive in its compact design, the LaCie Rugged features:
• 4 TB of storage (the equivalent of thirty 128 GB memory cards)
• Thunderbolt™ and USB 3.0 for speeds of up to 240 MB/s
• Bus powered via Thunderbolt for mobile workflows
• Hardware RAID 0/1 flexibility for speed or security
• Shock, dust, and water resistance for all–terrain use
Tough in the Field
The LaCie Rugged has been tested to withstand drops of up to 1.5 meters (5 feet), so whether your LaCie Rugged falls out of your backpack or is being crushed by stacks of suitcases in the airplane cargo hold, your data will stay safe and secure.
Check out how pro surf photographer Zak Noyle's LaCie Rugged withstands salt, sand, and water splashes – and gives Zak the storage space, speed, and efficiency that he needs to hit tight deadlines.
Bigger on the Inside
On the outside, the LaCie Rugged RAID is only 40% bigger than a standard Rugged drive – but has double the capacity on the inside with 4 TB of storage space. With this capacity, the LaCie Rugged can store the equivalent of thirty 128 GB memory cards, and lets you carry fewer drives while capturing more photos, footage, and other types of content in the field.
Fast and Secure
As the ultimate solution for on-the-go professionals, the LaCie Rugged adapts to your needs for performance or completely data security. The LaCie Rugged has a fast Thunderbolt interface and two internal hard drives that are preconfigured in hardware RAID 0 for sustained performance of up to 240 MB/s. With this speed, you can transfer 64 GB of content in less than five minutes.
Leave the LaCie Rugged in RAID 0 (striped mode) to maximize speed and capacity, or choose RAID 1 (mirrored mode) to have your data duplicated across the two drives. So even if one drive fails in the field, your files remain safe and accessible on the other drive.
Originally announced in January 2015, the LaCie Rugged is available for $419.99 MSRP. The LaCie Rugged is the ideal storage solution for professionals who need to carry or transfer massive amounts of data in the field.


text:
December 17, 2018
Check out these community science opportunities hosted by MI Birds partners across the state:
Audubon's Christmas Bird Count (multiple dates throughout December): Audubon's Christmas Bird Count (CBC) is entering its 119th year of existence! Originally created in 1900 by ornithologist Frank Chapman, the CBC replaced an old holiday tradition known as the Christmas 'Side Hunt' which was how scientists and hunters would originally census an area, shooting everything in their path! Chapman and others established the CBC in an effort to curb bird population declines. Conservation efforts have grown tremendously since 1900, as has the reach of the CBC! The CBC is primarily conducted by community scientists, like yourself, and data collected has been used by Audubon, the Environmental Protection Agency, American Bird Conservation Initiative, U.S. Fish and Wildlife Service, and others to help identify long-term population trends and movements for hundreds of species across North America.
Visit Audubon's interactive map to find contact information for the coordinator of a CBC near you!
To participate in a Detroit-area CBC, contact Detroit Audubon's Research Coordinator, Ava Landgraf: email@example.com
Detroit River Important Bird Area Winter Waterfowl Count (January 26th, February 9th and 23rd): The Detroit River is a globally recognized Important Bird Area, which is known for its outstanding migrant and wintering waterfowl and waterbird concentrations. Early winter surveys have recorded high counts of Canvasbacks (79,300), over 1,900 Tundra Swans, 1,000 American Black Ducks, 10,000 Mallards, 3,500 Common Mergansers, 40 Foresters Terns, and 275 Common Tern nests. Bird Studies Canada began conducting winter waterfowl counts for this Important Bird Area and Detroit Audubon began covering the U.S. side of the River in 2018! Contact Detroit Audubon's Research Coordinator, Ava Landgraf, for more information on how you can help: firstname.lastname@example.com
Climate Watch (Jan 15 – Feb 15): This Audubon bird count occurs in the winter and the summer (May 15 - June 15). This bird count provides scientists with data on the current distribution of target species, such as the Eastern Bluebird, White-breasted Nuthatch, and Red-breasted Nuthatch. The data can then be used to validate and refine Audubon's Climate Watch models that help to predict species range shifts under the effects of climate change. Increasing the model's accuracy will allow scientists to identify areas of high climatic suitability for target species and to inform on-the-ground land management decisions. Contact one of the following Climate Watch Coordinators in MI to learn how and where you can participate: Becky Kuhn (Grand Rapids Audubon Club): email@example.com, or Brian Merlos (Audubon Great Lakes): email@example.com
MI Birds is a public outreach and education program created by Audubon Great Lakes and Michigan Department of Natural Resources. Birders and hunters share similar conservation values, but rarely cross paths. MI Birds aims to bridge the divide, and deepen all Michiganders engagement in the understanding, care, and stewardship of public lands that are important for birds and local communities.
To learn more about MI Birds or how you can get involved in our partners upcoming community science projects, email us at email@example.com.