News & Infos

  • 24.10.2011

    Vielen Dank an alle Teilnehmer von DENOG3, die Vortragsfolien sind jetzt online.

    weiter

  • 19.10.2011

    Die Anmeldung für DENOG3 ist abgeschlossen. Wir sehen uns am Donnerstag in Frankfurt.

    weiter

DENOG3 - Agenda

Die Folien aller Vorträge werden in englischer Sprache vorliegen. Als Vortragssprache kann der Vortragende zwischen Deutsch oder Englisch wählen, ein Großteil der Vorträge wird auf Deutsch gehalten werden.

StartEndeTitelAutorFolien
9:3010:00Anmeldung & Kaffee
10:0010:20Begrüßung
10:2010:50 Building MPLS-based multicast VPN solutions Carsten Michel PDF
10:5011:30 How to maximize the available capacity Emanuel Kleindienst PDF
11:3012:00 ISC BIND Update Shane Kerr PDF
12:0012:30 OpenFlow: From the Future Internet Research into your Network Hans-Jörg Kolbe PDF
12:3013:30Mittagessen
13:3014:00 DE-CIX Technical Update Arnold Nipper PDF
14:0014:30 Transmission 3 - five thesis for a longer, faster, easier, more reliable & scalable Network Thomas Weible PDF
14:3014:45 Lightning Talks
How you can support internet security research Sebastian Abt PDF
RIPE Labs - Operators Tools and Data Mirjam Kühne PDF
BGP-Peer Analysis based on Netflow Andre Kosak PDF
DNSSEC Stefan Neufeind PDF
Content-aware Traffic Engineering (CaTE) Benjamin Frank PDF
Cold Boot Attacks on Dynamic RAM Adnan Vatandas PDF
14:4515:15 Introduction to Torrus and Gerty Stanislav Sinyagin PDF
15:4516:15Pause
15:1515:45 The State of the internet Christian Kaufmann PDF
16:1517:00 RPKI - Authentication for the Border Gateway Protocol Sebastian Spies PDF
17:0017:30 Ethernet Fabric enabling the Cloud optimized Data Center Jörg Ammon PDF
17:3017:45 Closing DENOG Orga PDF
17:4520:00Social Event

"OpenFlow: from Future Internet Research into your Network" - Hans-Joerg Kolbe, NEC Labs Heidelberg

OpenFlow, a child of Stanford's future internet research programme is on the way into productive networks. Separating control and user plane, OpenFlow allows to program network behaviour directly by the network operator, reducing time-to-market for specific solutions and avoiding having to wait for all vendors to implement the desired functionality. With OpenFlow, a centralized controller instance communicates with the network nodes using the standardized OpenFlow protocol. Network applications reside on top of the controller. In the talk, we will present the main concept and functionality. Furthermore, we will present the applicability to data center and carrier networks and the newly available pan-European testbed provided by the EU OFELIA project.

"Introduction to Torrus and Gerty" - Stanislav Sinyagin

Torrus is a set of new tools which allows to build a service-centric presentation of traffic statistics, and show it in a customer self-service portal.
A bit more detailed explanation is given in
Service-centric display: SIAM+Extopus

Gerty is designed to automate all kinds of network administration tasks. The simplest one is to grab all configurations from all network devices and store them on a disk. But there's much more, and there are also NETCONF and SNMP interfaces, as well as SQL interface for data storage.

"RPKI – Authentication for the Border Gateway Protocol" Sebastian Spies, US National Institute of Standards and Technology

The RPKI (Resource Public Key Infrastructure) is meant to provide authentication for the Border Gateway Protocol. The IETF SIDR (Secure Inter-Domain Routing WG) is working on the specification of a set of protocols that enable routers to validate the origin ASN (ROA, Route Origin Authorization) of BGP updates as well as the full AS path (BGPSEC). The US National Institute of Technology (NIST) supports these IETF efforts, i.e. in providing testing and feasibility studies.

First, this presentation gives a technical overview of the RPKI/BGPSEC protocols and how they achieve authentication within the BGP system. Second, it highlights NISTs participation in this field and introduces two projects that are both novel in implementing and testing these protocols.

SRx (Secure Router eXtensions) is a software that validates BGP prefix/origin pairs of BGP updates from a validation cache and marks BGP updates according their validation state. A router (in this case Quagga) can use this information to base its best path selection and filters on it.

BRITE (BGPSEC / RPKI Interoperability Test & Evaluation System) supports the development and deployment of RPKI/BGPSEC security mechanisms. It addresses the testing of new implementations of BGP security protocols and is capable of testing several distinct components/protocols both in isolation and as an integrated system.