SwiNOG #38, 21. june 2023, Berne

In today’s telecom market, global carriers are innovating at the speed of light and operating ever-growing and complex networks to satisfy the insatiable demand for bandwidth. Automation and SDN seem to be the answer to most of these challenges. In this presentation we will discuss the benefits of automation and software on global networks, and review best practices and lessons learned at the Tier 1 Global IP Network of NTT, one of the largest IP backbones in the world.

In this presentation, I explain how Jalapeno and the Jalapeno API Gateway simplify the development of network services. I dive into the methods which Jalapeno uses to gather and process network data, such as link state information or interface counters. Next, I demonstrate how network applications can request data and subscribe to updates using the Jalapeno API gateway.
Jalapeno is an open-source cloud-native infrastructure platform primarily developed by Cisco. The Jalapeno API gateway is also open-source and is developed and maintained by the Institute for Networks and Security at OST – Eastern Switzerland University of Applied Sciences.

Organizations once inclined to simply throw their applications at the cloud, but what does that mean for Infrastructure and networks. A10 summarizes this challenge by looking at the obstacles: shortness of IPv4, IPv6 not ready, DDoS and Application attacks.

As a global network of networks, the Internet is, in many ways, borderless — and still, there are unique national characteristics:
geographical and economic challenges, national Internet Governance policies, peering arrangements between various providers, and many other factors that all play a role in shaping any one country’s Internet landscape. Understanding these can provide a more comprehensive picture of a country’s unique place in the broader Internet ecosystem and can help identify challenges and new opportunities.

I will discuss Internet number resource holdings and IPv6 readiness, traffic paths and routing security.

In my presentation, I want to highlight findings about the country, answer questions, present relevant services & projects by the RIPE NCC, and gather feedback.

PeeringDB is a freely available, user-maintained, database of networks and carriers, and the go-to location for interconnection data. The database facilitates the global interconnection of networks at Internet Exchange Points (IXPs), data centers, and other interconnection facilities, and is the first stop in making interconnection decisions.

We haven’t been personally at SwiNOG for a while. Much has happened at PeeringDB since. After a short introduction on PeeringDB to get the newbies up to speed as well, we will cover the most important changes at PeeringDB since 2019.

The SwissIX website’s “About” ends its history in 2018 with: And the story goes on … to be continued. And indeed, the story went on. In 2019, planning started on how a new, technical SwissIX could look. Having decided to stay with outsourcing, the board asked for experienced IXP operators to run the infrastructure.

This presentation briefly outlines the story and shows what has been implemented and what will be done on the non-technical aspects.

Oleksandr collects IT material for reconstruction in Ukraine. He is looking for monitors, laptops, data center equipment and much more to support this reconstruction.

Certificate Transparency is an important component of the Web PKI securing all TLS connections across the Internet. In this talk we’ll explore what it is, how it works, and what you can do to ensure this critical Internet infrastructure is robust and continues to serve everyone.

TCP-AO was specified in RFC 5925 in June 2010 with the goal to replace TCP MD5. In comparison to TCP MD5 it not only supports better cryptography but also additional functionality. Many networking vendors support it today and there is work in progress to bring the functionality to open source projects.

We all remember the marvel of Nfsen, that served it’s purpose for ages, and probably still does for some of us. But things moved, and our friend Vincent Bernat and Free’s team made a tool that helps us know where our traffic is going. I’ll try to tell you how to setup Akvorado in the same amount of time required for my presentation.

This presentation explores a notable incident where a SaaS network caused a 500% traffic increase on our IXP port. We will examine the origins and reasons for this event, and dissect the evolution of our AS-SET, pinpointing the exact errors involved. The focus will be on how we identified the mistakes, the lessons learned, and the proactive measures to prevent such incidents in the future. By sharing our experience, we aim to enhance understanding and promote resilience in network management.

This presentation will outline our recent network advancements, including the establishment of a new PoP in Bregenz and near-completion of the network ring around Lake Constance. We’ll also introduce our newly adopted switching platform and delve into our automated port provisioning process using IXPManager and Ansible, showcasing our commitment to network expansion and automation.

This presentation will delve into the innovative approach taken by Internet provider Init7 in implementing Carrier-Grade Network Address Translation (CGNAT) using solely open-source tools, underlining the development, challenges, and ultimate success of their project, Easy7. We will explore the transformative potential of such solutions for the broader network industry, demonstrating the power of open-source in addressing complex networking challenges.

BGP hijacks, route leaks and routing changes can critically affect the security, reliability and performance of our networks. In this presentation, we show how we can combine modern APIs and query languages like GraphQL with real-time streaming control-plane data ingestion, processing and storage in order to detect routing events in seconds. This is enabled by tracking the current state of the network’s BGP resources, such as prefixes and routes, and using live queries and subscriptions to get non-policy compliant, and thus alertable/actionable, data. We present the basic concepts of GraphQL in the context of BGP, forming a custom and expressive BGPQL query language. We explain the key mechanisms of a well-known open source GraphQL middleware named Hasura GrapgQL engine, which eases the process of DB schema to GraphQL mapping. Finally, we analyze some relevant use cases implemented in the context of a commercial BGP security and monitoring platform, focusing on UIs, API access, metric collection and alert generation.

Modern networking infrastructure can deliver nanosecond scale timing to enable applications to improve their overall performance. This presentation will discuss infrastructure requirements to enable applications to consume such information and for which purpose.

A look into the past and the fascination of old computers of past decades!

How it got out of hands…