SwiNOG #37

Pim van Pelt is known for SixXS, a global IPv6 tunnelbroker which ran from 2001-2017. In this journey, he found that kernel routing at scale (many interfaces, many prefixes or many packets/sec) were better handled in userspace than server kernels (either FreeBSD or Linux). Today, Pim operates IPng Networks, a small network using software-based routers which will give silicon-based routers a run for their money.

In this talk, we will explore Intel’s DataPlane Development Kit (https://dpdk.org), open source dataplane solutions such as VPP (https://fd.io), DANOS (https://danosproject.org), DPDK based loadtesting (https://trex-tgn.cisco.com) and discuss performance benchmarking results from the field.

DNS reflection attacks are a favorite protocol for botmasters to pummel a victim’s network. The attackers usually benefit from poorly configured DNS servers: A small request of 60-80 byte can elicit a response of 4000 byte or more.

This talk introduces the tool DNS hammer, which can analyze a DNS servers value to an attacker. The presentation also covers methods to limit the DNS servers value without impact on the production network.

As traffic engineering and discovering beneficial peering partners is of growing importance for today’s network operations, insights in traffic statistics become an increasingly valuable resource for right decision making. Also, coping with DDoS attacks might require better understanding of the traffic that crosses the infrastructure. The IPFIX Export at IXPs helps to deliver these pieces of information.

This talk presents the implementation of a non-disruptive multi-tenancy software for exporting customer’s IXP flow data. Also, the Internet Protocol Flow Information Export (IPFIX) protocol is being introduced. Open-Source tools for customers to use this service are also presented.
This service is productive at some DE-CIX IXPs and available free-to-use for all its customers. We hope to motivate other IXPs to also provide a similar service.

Over the last year AS210036 has been developing a BGP speaker implementation for research and development of BGP technologies. The aims of this project include greater programmability of the control plane, decoupling BGP from routing devices, and providing an API to enable development of new BGP features easily. In this talk we will present the software design, go into some of the architectural decisions, and explore some potential future research directions that this work can enable.

Traditional SwissIX Update

How we did it, what were and still are the challenges, why did we do it.

BMP (BGP Monitoring Protocol) is actively being developed at IETF. Thomas will give you an update on the latest developments, how BMP can be used to correlate with IPFIX collected forwarding-plane metrics and used for routing and peering visualization. Further dig into how Network Telemetry data collection at Swisscom is scaled and integrated into Big Data by leveraging eBPF and anycast load balancing.

Why it is worth hacking your own IT security infrastructure on a regular basis? This presentation will show how hackers proceed during an IT attack (CyberKillChain), which validation options exist for the IT security infrastructure and how to proactively monitor the efficiency of this cyber security infrastructure.

The talk contains an overview of the Segment Routing technology. It gives an introduction to Segment Routing with the MPLS (SR-MPLS) as well as IPv6 (SRv6) data plane. Besides, it shows the advantages, applications, and a further outlook on the technology.

Quad9 is a non-profit Zurich-based organization that offers recursive DNS services which include malware filtering and high privacy guarantees. This talk will cover some of the mission and features of Quad9, and also will touch on some of the technical delivery components of how the service is deployed

Lightning talk update on CommunityRack and Community-IX

415 Unsupported Media Type