Chaos Computer Club - archive feed

Building on top of the Segment Routing Talk from DENOG8 we showcase what multi vendor Traffic Enginneering options are available using Open Source Tools The DENOG 8 Talk "Next-Generation Traffic Engineering with SPRING" introduced the building blocks of Segment Routing as a new MPLS signaling protocol. Traffic engineering capabilities were allready built into the protocol, but next to no implement...

Renumbering of IPv6 clients using DHCPv6 servers without a flag day is highly desired. RFC3315bis describes Reconfiguration mechanism to dynamically renumber IPv6 addresses. Commercially available DHCPv6 servers and clients do not support Reconfiguration feature as specified in RFC3315bis. This talk discusses reconfiguration feature and its implementation on Internet System Consortium (ISC) - KEA...

The next movement in network programmability is the data plane itself. Beyond APIs to the control plane, a domain specific language for data plane programming is emerging as a powerful tool in reasoning about packet networks. Programming network devices has stopped being a responsibility exclusive to the vendors selling them. Today, with control plane standards deployed and evolving, the next evol...

Customers get dynamic prefixes for outgoing connections and a static one for self hosting. This talk is about how it works and what the practical experiences are. The old project[1] is not dead. Let's talk about the new developments. 1 https://lutz.donnerhacke.de/Blog/Datenschutzfreundliches-IPv6-ueber-PPP-mit-der-FritzBox about this event: https://cfp.denog.de/denog10/talk/QBFXQG

I'll show you how to use state of the art network monitoring with Prometheus using https://github.com/exaring/openconfig-streaming-telemetry-exporter I'll show you how to use state of the art network monitoring with Prometheus using https://github.com/exaring/openconfig-streaming-telemetry-exporter about this event: https://cfp.denog.de/denog10/talk/JLKP9F

Resource Public Key Infrastructure (RPKI) is a specialised public key infrastructure (PKI) framework designed to secure the Internet's Border Gateway Protocol (BGP) routing infrastructure. In recent months there has been a lot of traction around this technology, with several organisations ranging from small Dutch hosting providers to one of the largest Content Delivery Networks in the world deploy...

Everybody uses it, the most of them love it. But who really understands SSH security measures? Therefore i will revive these. Starting at publickey security to protocol security. Nowadays, there is often a lack of real understanding of protocols and tools. That is just natural due to the complexitiy of modern systems and the huge amount of parts needed to interact. Since SSH is one of the two most...

BIO routing is a project to create a versatile, fast and reliable routing daemon in Golang (BIO = BGP + IS-IS + OSPF). Why did we start the project, what is it and what did we achieve yet? We would like to present the current state of the BIO routing project. The talk should cover the following key points: * who are we? * why another routing daemon? (what's the problem with bird, FRR, OpenBGPd, et...

An overview of enabling IPv6 inside a large, global enterprise network. Includes planning aspects, aspects of technical testing, roll-out tracking and lessons learnt so far. How do you embrace IPv6 in a global enterprise, with tens of thousands of network devices, delivery teams all around the globe and no real shortage on IPv4 space? This presentation will talk about the introduction of IPv6 insi...

This talk provides a condensed overview on VXLAN on a protocol level to give an understanding what VXLAN is, where it can be used and how it works. Virtual Extensible LAN (VXLAN) is an encapsulation protocol for running an overlay network on existing Layer 3 infrastructure. But what does that actually mean and how does it work? What does VXLAN mean for the service-provider? A lot of questions, whi...

Observability is the current buzzword in tech, but, as always, there's a kernel of truth. What is observability, how does apply to modern engineering, and why is this relevant to the networking sector? Key takeaways & learnings: * What is observability * Why are metrics, traces(not network traces), and logs the three golden types of data to monitor? * How should you define what you monitor? I.e. w...

I operate a VXLAN based network spread across multiple data centers which provides IP- and Ethernet-services for our customers. I will explain our design, how we integrate it into our VPLS based ISP network and what we (don't) like. What I will be talking about: * Planning a DC environment * Different methods to connect a customer * Setting up automation and your network * Documenting what you and...

TBD TBD about this event: https://cfp.denog.de/denog10/talk/RFT8PZ

Blackbox network testing with GRE and MPLS. Modern switches and routers allow to decapsulate GRE and switch MPLS packets in hardware. I will show how EXARING AG successfully blackbox tests their network including all switches and any link, including peering and transit links, using stacked IP/GRE/MPLS packets. about this event: https://cfp.denog.de/denog10/talk/VBFUZS

OPNsense is an open source and easy-to-use FreeBSD based firewall and routing platform. In this talk Werner will give an insight into the features and architecture of this firewall, which is being developed with a strong focus on security and code quality. OPNsense has started in January 2015 as a fork of pfSense® and m0n0wall. Now - almost four years later - OPNsense brings the rich feature set o...

A server farm in a single broadcast domain should use a shortest way to the next router minimizing inter-switch traffic. Faking Neighbor Discovery messages direct each server to the right router. Application servers often need to communicate to each other in a common layer2 area. If such an area spans multiple networking devices, the data flow is likely to be inefficient. Various methods exist to...

Status update about current work done on OpenBGPD and how this can be used as a route-server alternative at internet exchange points. OpenBGPD was started in 2003 and became quickly popular in many smaller networks and also as route-server at many IXPs. Over the years the requirements for running BGP -- especially route servers at exchange points -- has changed but OpenBGPD did not keep up with so...

PeeringDB has been around since 14 years. And an entry in PeeringDB is a must have if you want to interconnect with other networks. There is no other DB where you have all the information about networks, Internet Exchange Points and Facilities/Colocation at one place and nicely interlinked. As PeeringDB is so important an Seattle (US) based association was set up in late 2015. In March 2016 a whol...

Modulation PAM4 and newly introduced formfactors are the key player here. Transmission speed of 400G is becoming a reality, with new challenges for optical and electrical components in high speed systems emerging as well. PAM4 modulation is one key component for 400G transmission with transceivers following Ethernet IEEE 802.3bs, this talk will be a show and tell into PAM4. With this knowledge, th...

Im Zuge der Digitalisierung fallen Arbeitsplätze durch Rationalisierung weg, gleichzeitig entstehen an anderer Stelle neue und in vielerlei Hinsicht anders gestaltete Arbeitsplätze. Dieser strukturelle Wandel geht mit einer höheren Arbeitsproduktivität einher. Das bedeutet: Um eine hohe Beschäftigung zu gewährleisten muss die Wirtschaft weiter wachsen - inklusive der damit einhergehenden Umweltbel...

Es hat sich mittlerweile rumgesprochen, dass Technik nicht neutral ist, sondern soziale Normen und Werte darin eingeschrieben werden. Aber woher kommen diese Werte eigentlich? Open Source steht für Transparenz und Partizipation. Aber wer mitbestimmt, hängt zu einem guten Teil von der Governance der Community ab. Thesen: Werte sollten bewusst in Technik eingebaut werden, nur so können wir die Wirku...

In our podium, we want to explore how we can develop a constructive civil society critique of data-driven / data-enhanced technologies that allows us to embrace their positive offerings to solve environmental and socio-ecological problems while ensuring that these technologies are properly understood, assessed, regulated and controlled by society and will only be deployed / used if they contribute...

Rising CO2 emissions, toxic pollutants contaminating soils, plastic garbage pouring into the oceans – modern production and consumption patterns have devastating effects on our environment. Digital technologies do not only offer ways to collect environmental data along global value chains and individual behaviour, they enable, through Artificial intelligence and machine learning, innovative...

Es gibt sie, die sozial-ökologischen Nischen im E-Commerce, – aber allein Amazon verfügt derzeit in Deutschland über einen Marktanteil von über 50%. Hinzu kommen die anderen konventionellen Anbieter von Media Markt bis Zalando. Daran, dass diese Anbieter den Onlinehandel dominieren, wird sich in absehbarer Zeit nichts ändern. Deshalb ist neben der Förderung grüner Nischenangebote absolut notwendig...

Mangroves are unique forest ecosystems that thrive in the coastal zone, and project and stabilize coastlines across the tropics. WWF is using new digital tools to automatically map and monitor mangrove extent worldwide. Powerful cloud technology, combined with satellite imagery, drone imagery, data collection via smartphone, and machine learning is providing real progress in the fight to save our...