Chaos Computer Club - archive feed

Conference wrap up Conference wrap up about this event: https://pretalx.denog.de/denog11/talk/39NC9W/

We will look into the topic of encrypted DNS, the mesh of interests, concentration on the Internet, dramatic power shifts and long term architectural and policy consequences. DoH (DNS over https) had been a joke amongst engineers - cynically admitting that "everything" is going to be "tunneled thru" http anyway - long before standardization efforts were launched in the Internet Engineering Task Fo...

When analyzing peering traffic and identifying DDoS attacks, BGP provides valuable additional insight to supplement Flow information. In this talk we'll go over the different challenges, actions and learnings from the past four years to enable the support of thousands of peerings in a multi-tenant SaaS platform. Kentik utilizes multiple auxiliary sources, such as SNMP, DNS, RADIUS or Streaming Tel...

PeeringDB Update: A look into PeeringDB's data for AT/CH/DE/LU and the latest changes Why should my network/facility/ixp be listed at PeeringDB? * What is PeeringDB * Why should my facility, IXP or network be listed in PeeringDB? * A look into PeeringDBs data: * Stats for Austria, Germany and Switzerland * Peering in Hamburg: Networks, Co-Locations, Internet-Exchanges - where to go in Hamburg? * W...

At KIT we bought multilayer switches which use NDP and ARP cache information for strict uRPF. This talk shows you how this implementation breaks things. I will start with a short summary how strict uRPF according to RFC3704 works and how it can be used to prevent customers from spoofing source addresses. Afterwards I'll show a implementation of strict uRPF, which only forwards packets of hosts if...

400G brings several improvements also towards existing 100G. This lightning talk shall give a slight insight over the the ratified 100G optical standards coming with 400G. 400G brings several improvements also towards existing 100G. This lightning talk shall give a slight insight over the the ratified 100G optical standards coming with 400G. about this event: https://pretalx.denog.de/denog11/talk/...

Quick recap on what SPRING is and what problem it tries to address. Afterwards inform about the latest developments in this field. This talk builds upon the SPRING talks from DENOG8 and DENOG10. After a quick recap what the standard is about and what advantages people are seeing in it compared to classical label distribution protocols like LDP and RSvP, we will dive into the new developments in th...

This session will focus on the fundamental building blocks of Segment Routing technology, and an overview of technical and business benefits of Segment Routing deployment. This session provides an overview of the Segment Routing technology and its use cases. This new routing paradigm provides high operational simplicity and maximum network scalability and flexibility. You will get an understanding...

Thomas will describe in detail the structures inside optical transceivers. Insights into the latest 40G up to 400G transceiver developments to optimize your network design. Basics of how FEC compensates for errors caused by PAM4 modulation. Thomas will describe in detail the structures inside optical transceivers. A Transmitter / Receiver Optical Sub Assembly (TOSA / ROSA) is no longer just a diod...

Ansible configuration management is very extensible and it is easy to write own modules for custom tasks with a few lines of Python. Ansible is an established tool for server and network configuration. One reason for it's success is the simple architecture that encourages own customization and extension. Here I want to present how own modules, i.e. single configuration actions on the target host,...

This talk will show-case how to build an environment to set up your services (e.g. apache webservers, KDCs, ...), load balancing, routing and monitoring from a simple service configuration. Some lines of YAML and the power of Python are the source for generating configuration for HAproxy, bird (route reflection and anycast nodes), apache2 and Icinga2. Keeping your service configuration aligned ove...

A open source solution for automating isp network using GitLab and NetBox Automation shouldn't be hard, and implementing it shouldn't require expensive proprietary tools. Many of us still rely on these tools or on hacky homegrown systems, because in reality writing a bunch of scripts is still the closest some of us ever get to automating their network. In our talk, we'll present an extensible, dec...

aut-num objects should contain the peering policy of an ASN. Despite a formal language (RPSL) exists, it become more and more common to describe the policy in vague textual form. This talk encourages the admins to prefer more machine readable format. RPSL was designed to generate router configuration out of the aut-num object. The language is too specific, it's strongly coupled to the router capab...

Protection against CPU attacks such as Spectre v2 or ZombieLoad require CPU microcode updates. Performing these updates via BIOS updates is often a painful task - so let's delegate this task to the operating system. Protection against side channel attacks such as Spectre v2, v3a/v4, L1TF or MDS/ZombieLoad requires not only operating system patches but also an update of the CPU microcode. Updating...

ADDIX is running one of the biggest public wifi networks in northern germany with allows users a connect once, use anywhere approch with seamless roaming between all kind of accesspoints. this incorperated a hughe pile of technical difficulties running a public wifi network that incorperates own infrastructure at fixed locations, in public transportation and also integrating customer owned wifi eq...

How EXARING optimized peering capacity utilization and got rid of Queue Drops using Source Routing. EXARING operates the CDN of waipu.tv, a TV streaming platform. As this causes a lot of traffic it also causes quite some costs. Thus we want to run our network interconnects as hot as possible. We've implemented a system that automates traffic engineering and ensures all our capacity is utilized as...

Extracting BGP Telemetry Information from Network devices using vendor-neutral Openconfig data model and gRPC. Importing BGP metrics like received and advertised routes, total prefixes, session flap and more into TICK Stack and using mathematical models to analyse the data to identify anomalies. This talk will discuss the benefits of streaming telemetry in conjunction with vendor independent data...

Roughly one year ago we started to drop RPKI invalid routes from our peers. What happened afterwards? In October 2018 we armed our RPKI filters to drop RPKI invalid prefixes. Now a year has passed and it is time to take a look back and see what happened (or didn't happen) after we flipped the switch. Questions that will be answered include: * How much lamentation and hand-wringing was there? * Wha...

Welcome to DENOG11! Welcome to DENOG11! about this event: https://pretalx.denog.de/denog11/talk/AXL8PH/

Wie weh tut ein Bit? Mit dieser Frage beschäftigen wir uns im Verein FairLötet seit unserer Gründung. Immerhin sind Menschenrechtsverletzungen in Lieferketten inzwischen auch ein Thema, welches in der Wirtschaft und Politik diskutiert wird. Das Problem: Aufgrund komplexer Lieferketten und dürftiger Datenbestände ist es für Hersteller\*innen von Elektronikgeräten schwierig, menschliche Schäden währ...

SVG ist der offizielle Webstandard zur Beschreibung zweidimensionaler Vektorgrafiken. Im Gegensatz zu Pixelgrafiken können Vektorgrafiken verlustfrei beliebig skaliert und verzerrt werden. Für Zeichnungen und schematische Grafiken, die aus geometrischen Formen zusammengesetzt sind, sind Vektorgrafiken eine sehr platzsparendes Dateiformat. Darüber hinaus können SVGs in Websites eingebettet und über...

E-Sport verzeichnet nicht nur wachsendes wirtschaftliches Wachstum, sondern auch ein Bedeutungsgewinn im Gesellschaftlichen Kontext. Auch in der Sportpsychologie wird E-Sport mehr und mehr Arbeitsfeld: Teams wie Astralis, Rogue und Origen nutzen die sportpsychologische Expertise um ihre Leistung zu maximieren. Wie gestaltet sich jedoch sportpsychologisches Training für E-Sportler? Gibt es Untersch...

In Zeiten der Leistungsgesellschaft und im Zuge zunehmender politischer und gesellschaftlicher Spannungen wird es immer schwieriger emotional distanziert zu bleiben. Burnouts, Angststörungen und Depression sind nicht selten das Resultat besagter Umstände. Viele Menschen würden diese unliebsamen Geisteszustände lieber nicht erleben, allerdings sind oft keine Werkzeuge zur Prävention oder Behandlung...

Unser Gehirn tendiert dazu umfangreiche Informationseinheiten in Geschichten zu verpacken. Bestimmte Strukturen helfen uns dabei den Rhythmus unseres Lebens in einen Rahmen zu halten. Dabei werden Erfahrungen und Standpunkte greifbarer, die wiederum hilfreich an verschiedenen Stellen im nutzerzentrierten Entwicklungsprozess sind. Dieser Talk wird zeigen wie es genau funktioniert! about this event:...

MIRANA – der mobile intelligente Roboteragent für Navigation und Assistenz Roboter und autonome intelligente Systeme haben einen immer größer werdenden Einfluss auf verschiedenste Lebensbereiche. Zum Beispiel finden sie Einsatz in der Industrie, in der Logistik, der Medizin, oder auch zunehmend im privaten Bereich. In diesem Vortrag stellen wir MIRANA (Mobile Intelligent Robotic Agent for Navigati...