SwiNOG #39

SCION is a secure path-aware Internet architecture developed in Switzerland that is designed to achieve high resilience to routing attacks and offer path selection for Internet users and operators with safety critical traffic such as in the financial and healthcare sectors. RPKI/ROV is useful for origin validation but does not validate paths, ASPA is still…

In this presentation, we will begin with a brief introduction to our company, followed by an exploration of the limitations we’ve encountered using Juniper SRX firewalls in cluster mode. We will discuss the specific challenges we face and how these impact our operations. Finally, we will share how we aim to address these issues through…

More and more service providers no longer have IPv4 addresses. CGN offers the possibility to counteract this shortage technically. However, there are some challenges here that are presented in the lecture.

Network attacks, including Distributed Denial-of-Service (DDoS), continuously increase in terms of bandwidth along with damage and have a devastating impact on the targeted companies/governments. Over the years, mitigation techniques, ranging from blackholing to policy-based filtering at routers, and on to traffic scrubbing, have been added to the network operator’s toolbox. The presentation will outline what…

An Internet provider must be able to intercept Internet traffic, like IP, VoIP and e-mail, if a legal warrant is submitted. There are commercial solutions as software, hardware and services to handle this. With OpenLI there is open source software for implementing LI. This talk will show the software, how to implement it and real…

Swisscom’s plan to monopolise the future fibre optic network by building a point-to-multipoint (P2MP) topology instead of the traditional point-to-point (P2P) network topology was prohibited by the Swiss Competition Commission. The effects of this decision, the future rollout of the fibre optic network and the possible development of the Swiss telecoms market will be presented…

Using 5G fixed wireless access as a transitionary technology before deploying full-fibre to the home/business/farm/barn. This talk is about projects carried out on the Orkney Islands, in the far north of Scotland, UK. Lots of photographs and discussions about building access networks serving remote rural locations with their own environmental challenges. Parts of this talk…

With the speed of 400G coherent technology was introduced to pluggable optical transceivers (OIF 400ZR and OpenZR+). This technology is complex and powerful for your network, it even has influence on your network device operating system. This talk will provide first insight in Nokia’s implementation as well as known or potential interoperability issues addressed by…

GitOps is a widely used term, and the CNCF GitOps Working Group has defined 4 principles: “Declarative,” “Versioned and Immutable,” “Pulled Automatically,” and “Continuously Reconciled.” This presentation explores what it means for network automation or network operations to adhere to these principles. Tools like Kubnet (learn.kubenet.dev) or the newly released Infrahub from OpsMill make it…

The INPG Stack (Infrahub, NUTS, Prometheus and Grafana) provides an automated approach to network testing, offering visualised results for enhanced visibility. The INPG Stack automates the generation and execution of tests for all network devices, thereby addressing a significant challenge in modern network management where manual testing remains prevalent. By reducing the time required for…