SwiNOG #36

Did you ever experience the challenge to identify the adequate SIEM use cases to fulfil not only the compliance driven requirements but also the ability to have a high security detection coverage from day one? How can you ensure you will detect all attacks respectively you collect, and analysis all required events to identify anomalies?

We will introduce a comprehensive approach to directly address the challenge of SIEM use case identification and selection. In addition, we explain the answer of the problem of having a high detection maturity from day one with still a price efficient strategy and the capability to scale easily. Moreover, we present a recommended solution method to respond to attacks immediately, focused to the origin of the attack and to be able to collect all relevant data for additional investigations.

AI is gaining momentum to solve problems that are difficult for humans as it requires analytics of huge amounts of data. This talk discusses attempts to apply similar methodology to problems in networking.

The Future of Passive Multiplexing and Multiplexing Beyond 10G. In the past, it was easy to change your optical network from 1G to 10G by simply changing the transceiver, but what if you want to do more than 10G? What if you want to go beyond 80km? What are your options and why is there no QSFP28-DWDM-ZR? These are the central questions in this presentation. We will cover the 3 “ingredients” of Multiplexing: The Fiber, the Passive Mux, and the Transceiver, and talk about the limitations and possibilities of multiple times 100G over one fiber pair. We will also cover the following topics: The challenges that arise due to attenuation and chromatic dispersion; Different types of Multiplexers – Cascaded TFF and AWG (including Gaussian Fit and Flat Top); ITU Grids such as DWDM and the new LWDM band (often used for 5G deployment); Modulation & Coherent 100G/200G/400G; How to use QSFP28 DWDM PAM4; and what is coming in 2020 – 400G DWDM QSFP-DD. At the end of this talk, you will understand the future of 100G multiplexing and how it can fit into your network.

The presentation gives a quick introduction to the RT-BGP tool (https://rt-bgp.he.net) and then we spend most of the time looking at issues seen with it. An example of few weird and broken BGP announcements as currently seen on the Internet by it are then discussed.

As a service provider for SME, we use on default ISP products for internet connectivity. The presentation will provide an overview of our experience with IPV6 on those products and where we believe improvements are (over)due.

The director of NBIP would share the experience in seting up a multi-organization not for profit fundation to provide a DDoS mitigation and protection platform for national ISPs

About the NBIP

The Dutch National Internet Providers Management Organization (Nationale Beheersorganisatie Internet Providers, or NBIP for short) is a unique initiative of Internet providers that goes under the motto “Smarter and stronger together”. The NBIP is an independent non-profit organization that contributes to a safer Internet by jointly purchasing expensive facilities that are only occasionally needed.

Thomas will describe in detail the structures inside optical transceivers. A Transmitter / Receiver Optical Sub Assembly (TOSA / ROSA) is no longer just a diode in a housing handling the light path to and fro to the fiber.
The performance increases from 10G to 100G onwards to 400G – are not only giant steps in bandwidth there are matching leaps in manufacturing.

How did the optical industry players around the globe make it possible to squeeze everything into the tiny form factors we see today? It is all about precision – a microscope with a calm and competent hand is no longer sufficient, now it is about; nano tolerances, testing, complex transceiver firmware and a shed load of money.

This is the high precision optical mechanical engineering revolution which fuels the hyper growth of data centers and optical networking worldwide…

If you face design issues with your current optical network design Thomas will give insights into the latest 40G to 400G transceiver developments (e.g. long distance 80km) which you can expect to see in the upcoming months. Hopefully this might save you some headaches.

As a small „one more thing”” Thomas will dive into the basics of how FEC compensates for errors caused by PAM4 modulation.

IPv6 was introduced in the mid 90s. Until now there is only a slow adaption of this protocol. Also latest technologies like 5G Mobile uses still a dual stack infrastructure. Even latest network devices and CPEs doesn’t support IPv6. A10 will present some strategies how to overcome this obstacle.

Current cybersecurity standards are neither sufficient, nor easily understandable and applicable, nor easily scalable to concrete boundary conditions, and even not mandatory. A wild growth of recommendations from different organizations is flourishing. Nevertheless, they do not reach the masses. Moreover, they are only aimed at users. Manufacturers and suppliers as the root causers of hazards are not addressed. A lot of energy is being invested in combating symptoms, while the digital Wild West continues to grow. It is time to clean up the digital world and make it safe. Switzerland and the rest of the world need a mandatory cybersecurity standard for this, as is already a matter of course in more mature industries. The Wild West has been cleaned up with “laws and marshalls”. In the digital world, we are still at the very beginning.

RPKI is something we hear about everywhere nowadays. Is it hard to deploy ?

Short introduction of the small Internet Exchange in the Rheintal region spread over FL, AT and CH.

beyond and above all expectations