27 April 2018
Manchester Central Convention Complex
Europe/London timezone

How We Found a Firewall Vendor Bug Using Teleport as a Bastion Jump Host

27 Apr 2018, 15:00
30m
Charter 1, 2 & 3 (Manchester Central Convention Complex)

Charter 1, 2 & 3

Manchester Central Convention Complex

Petersfield Manchester M2 3GX
Main Session

Speakers

David Farrar (Exa Networks)Mr Marek Isalski (Faelix Limited)

Description

First part of the talk: what is Teleport, how do you use it, what might the use-cases be in a NOC environment. Second part of the talk: how Exa Networks used Teleport and a bunch of Raspberry Pis to find a serious performance problem in the default config of one particular vendor's firewalls.

Summary

Marek already has the first half written (attached) but it will be revamped for UKNOF's audience, and trimmed down to focus on how Teleport might be used in a NOC environment (ISO27001 and PCI-DSS compliance, etc).

David will then explain the tooling he built and deployed on a bunch of remotely-controlled (via Teleport) Raspberry Pi devices which were embedded into customers' networks to run diagnostics - bits involving InfluxDB and some custom-written scripts. The resulting data he gathered pointed the finger firmly at the TCP timeouts of a particular vendor's firewalls.

Possibly wrap-up at the end from Marek with a live demo.

Talk Duration 30 minutes
May we webcast and record the talk? Yes
May we publish the slides on our website? Yes

Primary author

Mr Marek Isalski (Faelix Limited)

Co-author

David Farrar (Exa Networks)

Presentation materials