Chaos Computer Club - archive feed

One of the secret ingredients in many successful, big code bases is that they found a good level of abstraction. One helpful technique is to write declarative code: You describe "what" you want to do, but don't mix it with the "how". While this is not specific to Rust, the language and its ecosystem help us write declarative code. This talk will go over some examples, covering famous crates and AP...

about this event: https://c3voc.de

about this event: https://c3voc.de

Software Defined Networking (SDN) is offering greater operational efficiency and automation by turning the transport network into a programmable resource. Several competing data models for disaggregated and partially disaggregated optical networks currently being developed and proposed by research and standardization are presented and their strengths and challenges discussed. A key use case of SDN...

In a typical Openstack or KVM deployment scenarios an overlay network is built between hypervisors to provide an L2 domain over an IP-fabric. An overlay network allows (live) migration of VMs and multi-tenancy in infrastructure. Unfortunately, with typical setups, the physical underlay network infrastructure is ignored. This talk will discuss a solution for these issues by using EVPN on a host. In...

TBD TBD about this event: https://cfp.denog.de/denog10/talk/UARWZC

One of the most important but also least trained aspect of BGP is "BGP communities" - why do I want them, what typical problems can I avoid using BGP communities, and how do I configure them nicely on typical platforms. Mini-Tutorial with a number of typical use cases and a few config examples Slides will be ready in time. about this event: https://cfp.denog.de/denog10/talk/GJHDUT

Building on top of the Segment Routing Talk from DENOG8 we showcase what multi vendor Traffic Enginneering options are available using Open Source Tools The DENOG 8 Talk "Next-Generation Traffic Engineering with SPRING" introduced the building blocks of Segment Routing as a new MPLS signaling protocol. Traffic engineering capabilities were allready built into the protocol, but next to no implement...

Renumbering of IPv6 clients using DHCPv6 servers without a flag day is highly desired. RFC3315bis describes Reconfiguration mechanism to dynamically renumber IPv6 addresses. Commercially available DHCPv6 servers and clients do not support Reconfiguration feature as specified in RFC3315bis. This talk discusses reconfiguration feature and its implementation on Internet System Consortium (ISC) - KEA...

The next movement in network programmability is the data plane itself. Beyond APIs to the control plane, a domain specific language for data plane programming is emerging as a powerful tool in reasoning about packet networks. Programming network devices has stopped being a responsibility exclusive to the vendors selling them. Today, with control plane standards deployed and evolving, the next evol...

Customers get dynamic prefixes for outgoing connections and a static one for self hosting. This talk is about how it works and what the practical experiences are. The old project[1] is not dead. Let's talk about the new developments. 1 https://lutz.donnerhacke.de/Blog/Datenschutzfreundliches-IPv6-ueber-PPP-mit-der-FritzBox about this event: https://cfp.denog.de/denog10/talk/QBFXQG

I'll show you how to use state of the art network monitoring with Prometheus using https://github.com/exaring/openconfig-streaming-telemetry-exporter I'll show you how to use state of the art network monitoring with Prometheus using https://github.com/exaring/openconfig-streaming-telemetry-exporter about this event: https://cfp.denog.de/denog10/talk/JLKP9F

Resource Public Key Infrastructure (RPKI) is a specialised public key infrastructure (PKI) framework designed to secure the Internet's Border Gateway Protocol (BGP) routing infrastructure. In recent months there has been a lot of traction around this technology, with several organisations ranging from small Dutch hosting providers to one of the largest Content Delivery Networks in the world deploy...

Everybody uses it, the most of them love it. But who really understands SSH security measures? Therefore i will revive these. Starting at publickey security to protocol security. Nowadays, there is often a lack of real understanding of protocols and tools. That is just natural due to the complexitiy of modern systems and the huge amount of parts needed to interact. Since SSH is one of the two most...

BIO routing is a project to create a versatile, fast and reliable routing daemon in Golang (BIO = BGP + IS-IS + OSPF). Why did we start the project, what is it and what did we achieve yet? We would like to present the current state of the BIO routing project. The talk should cover the following key points: * who are we? * why another routing daemon? (what's the problem with bird, FRR, OpenBGPd, et...

An overview of enabling IPv6 inside a large, global enterprise network. Includes planning aspects, aspects of technical testing, roll-out tracking and lessons learnt so far. How do you embrace IPv6 in a global enterprise, with tens of thousands of network devices, delivery teams all around the globe and no real shortage on IPv4 space? This presentation will talk about the introduction of IPv6 insi...

This talk provides a condensed overview on VXLAN on a protocol level to give an understanding what VXLAN is, where it can be used and how it works. Virtual Extensible LAN (VXLAN) is an encapsulation protocol for running an overlay network on existing Layer 3 infrastructure. But what does that actually mean and how does it work? What does VXLAN mean for the service-provider? A lot of questions, whi...

Observability is the current buzzword in tech, but, as always, there's a kernel of truth. What is observability, how does apply to modern engineering, and why is this relevant to the networking sector? Key takeaways & learnings: * What is observability * Why are metrics, traces(not network traces), and logs the three golden types of data to monitor? * How should you define what you monitor? I.e. w...

I operate a VXLAN based network spread across multiple data centers which provides IP- and Ethernet-services for our customers. I will explain our design, how we integrate it into our VPLS based ISP network and what we (don't) like. What I will be talking about: * Planning a DC environment * Different methods to connect a customer * Setting up automation and your network * Documenting what you and...

TBD TBD about this event: https://cfp.denog.de/denog10/talk/RFT8PZ

Blackbox network testing with GRE and MPLS. Modern switches and routers allow to decapsulate GRE and switch MPLS packets in hardware. I will show how EXARING AG successfully blackbox tests their network including all switches and any link, including peering and transit links, using stacked IP/GRE/MPLS packets. about this event: https://cfp.denog.de/denog10/talk/VBFUZS

OPNsense is an open source and easy-to-use FreeBSD based firewall and routing platform. In this talk Werner will give an insight into the features and architecture of this firewall, which is being developed with a strong focus on security and code quality. OPNsense has started in January 2015 as a fork of pfSense® and m0n0wall. Now - almost four years later - OPNsense brings the rich feature set o...

A server farm in a single broadcast domain should use a shortest way to the next router minimizing inter-switch traffic. Faking Neighbor Discovery messages direct each server to the right router. Application servers often need to communicate to each other in a common layer2 area. If such an area spans multiple networking devices, the data flow is likely to be inefficient. Various methods exist to...

Status update about current work done on OpenBGPD and how this can be used as a route-server alternative at internet exchange points. OpenBGPD was started in 2003 and became quickly popular in many smaller networks and also as route-server at many IXPs. Over the years the requirements for running BGP -- especially route servers at exchange points -- has changed but OpenBGPD did not keep up with so...

PeeringDB has been around since 14 years. And an entry in PeeringDB is a must have if you want to interconnect with other networks. There is no other DB where you have all the information about networks, Internet Exchange Points and Facilities/Colocation at one place and nicely interlinked. As PeeringDB is so important an Seattle (US) based association was set up in late 2015. In March 2016 a whol...