How Infoblox Reinvents Network Services for the Multi-Cloud Era

April 21, 2025

Presented at Cloud Field Day in Santa Clara


Earlier this year, I had the opportunity to participate as a delegate at Cloud Field Day in Santa Clara. As delegates, we engaged directly with the presenting companies, offering feedback on what resonated, what needed clarification, and how their strategies could evolve.

The first presenter was Infoblox, a company that merges networking and security into a unified solution, more specifically they are focused on DDI — that’s DNS, DHCP, and IPAM. Other than an acronym of acronyms, what exactly is DDI?  I soon found out as Chief Product Officer Mukesh Gupta explained how this combination of “boring” network services is critical in today’s messy, manual, and fragmented hybrid multi-cloud environments.


What Really Is DDI and Why Does It Matter?

DDI is about managing the “naming,” “numbering,” and “locating” of everything connected to a network — whether it’s a laptop, server, phone, or cloud service. Specifically it is made up of three foundational network services:

  • DNS (Domain Name System): Translates human-readable domain names (like google.com) into IP addresses.
  • DHCP (Dynamic Host Configuration Protocol): Automatically assigns IP addresses to devices on a network.
  • IPAM (IP Address Management): Manages the allocation, tracking, and planning of IP addresses across an organization.

These services form the invisible infrastructure behind every enterprise network. Mukesh described DDI as the “electricity” of networking — when it goes down, everything stops.


Multi-Cloud Challenges and DDI

Mukesh outlined three key trends currently reshaping enterprise infrastructure:

  1. Hybrid multi-cloud adoption
    Most organizations now operate across a mix of public cloud providers and on-premises infrastructure.
  2. SaaS-first, cloud-first strategies
    Enterprises are rapidly moving off legacy systems (especially post-VMware acquisition) in favor of cloud-native approaches.
  3. Increasing cybersecurity threats
    Attackers are more frequent, more sophisticated, and more damaging than ever before.

These trends introduce real complexity for DDI. Key challenges include:

  • Fragmented DNS systems across multiple clouds
  • Inconsistent APIs that make automation difficult and expensive
  • IP address conflicts due to disconnected systems
  • Stale DNS records that introduce security vulnerabilities

Real-world example:
A major New York bank allowed cloud teams to use native DNS tools. One day, a simple typo in a DNS entry brought down the entire bank for four hours, costing them millions.


Infoblox’s Answer: An Integrated Platform

To address these pain points, Infoblox introduced the Infoblox Universal DDI™ Product Suite. This integrated platforms provides a centralized, automated, and cloud-managed way to run critical network services (DNS, DHCP, IPAM) across complex hybrid and multi-cloud environments.

Key Features:

  • Unified management layer
    Manage DNS across on-prem, branch, and cloud from a single interface.
  • Universal IPAM & asset visibility
    Real-time insights into IP usage and resource status.
  • Conflict detection & stale record resolution
    Automatically identify and resolve subnet overlaps and outdated DNS entries.
  • Built-in security
    Use DNS as a security control point to detect and block threats.

The platform supports physical, virtual, and cloud-based DNS servers, and integrates with automation tools like Terraform and Ansible. It also maintains backward compatibility via API replication, ensuring existing workflows stay intact.


Security Through DNS

One of the most compelling elements of Infoblox’s platform is how it uses DNS as a security layer.

Since nearly every internet communication starts with a DNS query, Infoblox can analyze DNS traffic patterns to:

  • Detect ransomware activity
  • Prevent data exfiltration
  • Block malicious domains in real time

By combining DNS logs with threat intelligence feeds, Infoblox transforms a foundational service into a proactive security shield.


The Future is Unified DDI

As enterprises deepen their multi-cloud investments, unified management and visibility across distributed infrastructure becomes invaluable. Infoblox’s Universal DDI™ Product Suite delivers this allowing organizations to manage DNS, DHCP, and IP address assignments consistently across data centers, cloud providers, and edge environments — all from a single interface.

While DNS, DHCP, and IPAM may seem behind-the-scenes, they are essential to:

  • Prevent outages
  • Accelerate cloud operations
  • Strengthen enterprise security

In a world where spreadsheets and siloed tools can bring down billion-dollar operations, Infoblox’s Universal DDI is something definitely worth checking out.

Pau for now…


Gazzang – One of the 10 Austin startups to check out at SXSW

March 10, 2012

Last night we  held our first SXSW meet up at Opal Divines.  Opals is very close to the worldwide headquarters of Gazzang, which last week was named by GigaOm one of The 10 Austin startups you need to meet at SXSW 2012.  Gazzang focuses on securing your data in the cloud via transparent data encryption.

Given the  proximity and the promise of free beer, I was able to twist the arms of four members of their development team and get them to join us.  Here is a quick video featuring Dustin Kirkland, Sergio Pena, Hector Acosta, and Eddie Garcia.

Pau for now…


OSCON: ex-NASA cloud lead on his OpenStack startup, Piston

July 31, 2011

Last week  at OSCON in Portland, I dragged Josh McKenty away from the OpenStack one-year anniversary (that’s what Josh is referring to at the very end of the interview) to do a quick video.  Josh, who headed up NASA’s Nebula tech team and has been very involved with OpenStack from the very beginning has recently announced Piston, a startup that will productize OpenStack for enterprises.

Here is what the always entertaining Josh had to say:

Some of the ground Josh covers:

  • What, in a nutshell, will Piston be offering?
  • Josh’s work at NASA and how got involved in OpenStack
  • Timing around Piston’s general release and GA
  • The roles he plays on the OpenStack boards
  • What their offering will have right out of the shoot and their focus on big data going forward

Extra-credit reading

Pau for now…


Dell Joins Cloud Security Alliance

April 4, 2010

I recorded this interview with David Lang earlier this year and have been meaning to post it for the longest time.   David is Dell’s program manager for federal security which means he is charge of the team that supports the security requirements for all Dell’s businesses that faces the federal government.  He’s based in DC but I was able to grab a bit of his time when he was out visiting Austin.

Some of the topics David tackles:

  • Dell’s joining of the Cloud Security Alliance at the end of last year.
  • What the CSA is and does.
  • David’s interesting background:  he spent many years as a special agent in the air force doing computer and espionage investigations and how this lead him to the cloud.
  • How David addresses questions around cloud security and what type of environments you find in federal space.
  • The balancing act between availability, security and cost and where Homeland Security would want to use the public cloud.

Extra-credit reading

Pau for now…