UKNOF43 (Manchester)

Tuesday 9 Apr 2019, 00:25 → 20:30 Europe/London

Charter 1, 2 & 3 (Manchester Central Convention Complex)

Chris Russell (UKNOF), Keith Mitchell (UKNOF), Marek Isalski (Faelix Limited)

The UK Network Operators' Forum is returning to Manchester for UKNOF43 on Tuesday 9th April!

UKNOF events offer an OPEN environment for anyone within or interested in the Internet Industry. Network with industry colleagues, participate in knowledge sharing and freshen up on best practice around network operations and security.

For more information about UKNOF itself, please visit our primary site.

Social Media hashtag: #UKNOF43

We are currently looking for corporate patrons and sponsors to support UKNOF.

 

---

PREMIUM SPONSORS

---

ASSOCIATE SPONSORS

---

PINTS N' PACKETS Networking Event

---

PARTNERS

---

 

Registration: Open

Call for Presentations: Now closed

Webcast: http://uknof.bogons.net/uknof43.html

IRC Chatroom: #uknof@irc.terahertz.net

Twitter hashtag: #UKNOF43

Volunteers: We always appreciate volunteer help in setting up and running UKNOF events. If you're interested in helping at UKNOF43, please indicate this on the registration form. Our helpers always make a big difference.

Funding UKNOF: We have the following funding opportunities for UKNOF in 2019 (covering UKNOF43 and UKNOF44)

• Meeting & Pints n' Packets Sponsorships
• Annual Corporate Patronage for 2019
• Monthly Friends of UKNOF Patronage for individuals and companies

If you are interested in supporting UKNOF, please contact us on admin@uknof.org.uk

Timetable.xlsx

09:00 → 10:00 Registration

10:00 → 10:05 Introduction and Welcome

Speaker: Mr Keith Mitchell (UKNOF)

Information.odp

Information.pdf

10:05 → 10:35 I have pre-emptively replaced you with a small shell script

Mythic Beasts maintains a large number of managed services for a large number of customers with a small team. This talk covers the multiple layers of automation,, we write code to create config that feeds code that automates customer deployments and automates our auditing. This includes automating the auditing of acquisitions and how we (have merged|are merging) them into Mythic, and how to choose when to automate versus when to throw staff time.

Speaker: Peter Stevens (Mythic Beasts)

Presentation Video

uknof-automation-2.pdf

10:35 → 11:05 Peering Economics 101

Peering is fundamental to the Internet, but without planning, it can be expensive and ineffective. This talk looks at the basic economics of peering and explains techniques and strategies for getting the most from your investment.

Speaker: Susan Forney (Hurricane Electric)

Peering Economics 101 UKNOF43-4by3.pdf

Peering Economics 101 UKNOF43-4by3.pptx

Presentation Video

11:05 → 11:35 Morning Coffee Break

11:35 → 11:55 Control the Kraken - Being a more efficient NOC

Speaker: Mike Powell (Corero Network Security)

ControlTheKraken.pdf

ControlTheKraken.pptx

Presentation Video

11:55 → 12:10 Ultrafast and 5G update

Lightning talk on G.FAST and deployment feedback, also update on 5G mmwave trials and how useful this technology might be to connect customers in a fixed wireless access scenario.

Speaker: Neil McRae (BT)

Neil McRae.key

Presentation Video

12:10 → 12:25 Office 365 Deployment - How NOT to do it

Recently called into a client who where in the process of adopting Office 365 and experiencing large performance issues.
It appears no one read the Microsoft networking best practice.

Internal politics and old fashioned view on security made the implementation more complex than it needed to be.

The presentation covers the key issues and some of the most creative work arounds i have ever had to implement.

Speaker: Andrew Ingram (High Tide Group)

Ingram-Office365-UKNOF43.pdf

Presentation Video

UKNOF43.pptx

12:25 → 13:50 Lunch Break

13:00 → 13:30 PGP Signing Session

Speaker: Mr Ondrej Sury (Internet Systems Consortium)

13:50 → 14:20 Potential ISP challenges with DNS over HTTPS

The future introduction of DNS over HTTPS (DoH), defined in RFC8484, presents a number of challenges to network operators. BT, Comcast, Deutsche Telecom, OpenXchange and others have prepared an Internet Draft to present at the March IETF in Prague. The objective was to document the problem space and make suggestions that could help inform network operators on how to take account of DoH deployment. The document also identified topics that may require further analysis.

This presentation will provide an overview of these challenges, report on the outcome of the IETF meeting and provide an opportunity for the wider UK operator community to engage with the proposal.

Speaker: Mr Andy Fidler (BT)

Presentation Video

UKNOF43 Potential ISP challenges with DNS over HTTPS Issue 1A 050419.pdf

14:20 → 14:35 How we made DNSSEC Simple(r)

DNSSEC Can be complex to deploy and operate. Nominet changed their DNSSSEC Infrastructure to make it simpler and less stressful. This presentation is about what we did and how we did it.

Speaker: Mr Brett Carr (Nominet)

Nominet-DNSSEC-20194-3.pdf

Nominet-DNSSEC-20194-3.pptx

Nominet-DNSSEC-2019.pptx

Presentation Video

14:35 → 15:05 BIND - making a modern DNS server

What we did in the past year and what we are planning to do with BIND this year to make it up-to-par with modern standards and modern Internet

Speaker: Mr Ondrej Sury (Internet Systems Consortium)

BIND 9 - Make a modern DNS Server.key

BIND 9 - Make a modern DNS Server.pdf

Presentation Video

15:05 → 15:20 Anycast in the Cloud

Nominet have recently expanded their Auth DNS Infrastructure into the "Cloud" this talk is aimed at talking about how we did that and the challenges we came up against during the project

Speaker: Mr Brett Carr (Nominet)

Anycast-Cloud-UKNOF4-3.pdf

Anycast-Cloud-UKNOF4-3.pptx

Anycast-Cloud-UKNOF.pptx

Presentation Video

15:20 → 15:50 None of us knew what we were doing, we made it up as we went along - Part 3

Dusting off the old hard drives again, and forcing them to give up some more old history. This time with some interesting tales from around the turn of the millennium in the middle of the dot com bubble and beyond.

Speaker: Paul Thornton (PRT Systems Ltd)

None_of_us_knew_what_we_were_doing_etc_3v0.pdf

None_of_us_knew_what_we_were_doing_etc_3v0.pptx

Presentation Video

15:50 → 16:15 Afternoon Coffee Break

16:15 → 16:40 Journey from Service Provider to Infrastructure Player

Speaker: Richard Shaw (Zen)

Presentation Video

UKNOF Presentation April 2019.pptx

UKNOF_Zen_April_2019.pdf

16:40 → 17:10 NAT64Check v.2 tool

As many mobile operators were moving to IPv6 only which is incompatible with IPv4 on the wire, it’s necessary to employ transition mechanisms such as 464XLAT or NAT64.

When using NAT64 there are many things that need to be checked to ensure they work correctly. NAT64check has therefore been developed to allow websites to be checked for consistency over IPv4, IPv6-only and NAT64, as well to compare responsiveness using the different protocols. This allows network and system administrators to easily identify anything is ‘broken’ and to pinpoint where the problems are occurring, thus allowing any non-IPv6 compatible elements on the website to be fixed. For example, even if a web server is not running IPv6 (why not?), hardcoded IPv4 addresses can cause NAT64 to fail. After quite successful first version of the tool we decided to build version 2, a complete rewrite, built on different, distributed architecture and platform. NAT64Check v.2 tool is published, so we'll discuss mainly new version of the tool.

Jan Zorz from ISOC will give an insight and discuss some issues that he found while testing NAT64/DNS64 technology in real life scenarios and use-cases.

Speaker: Mr Jan Zorz (Internet Society)

Jan_Zorz-Nat64check-v2-2.2.pdf

Jan_Zorz-Nat64check-v2-2.2.pptx

Presentation Video

17:10 → 17:25 Psychology of IPv6

Thoughts about the human side of IPv6 deployment which has often an underestimated and unexpected influence on the progress of your IPv6 project. It is a humorous and serious look at what really prevents/makes IPv6 deployments happen based on my experience over the years in various companies and the UK IPv6 Council.

Speaker: Mrs Veronika McKillop (UK IPv6 Council)

Presentation Video

VMcKillop_Psychology_IPv6_UKNOF43-Apr2019.pdf

17:25 → 17:40 IPv6-only Remote Access VPN - a road less travelled

You may have heard that the road towards an IPv6 only network is a really bumpy one, probably that is why it is not taken that much. To stay with the analogy, in this presentation I will cover how it felt for Microsoft CCE (formerly known as Microsoft IT) to drive their Next Generation Remote Access VPN service down that route. We haven’t arrived yet, but along the way we have already passed several points of interest that are worth telling about not only to family but also to the friends from the industry.

Speaker: Zsolt Horvath (Microsoft)

Presentation Video

zshorvat-ipv6onlyvpn-aroadlesstravelled.pdf

17:40 → 17:55 Scanning IPv6 Address Space… and the remote vulnerabilities it uncovers

During some research which found CVE-2018-19298 (MikroTik IPv6 Neighbor Discovery Protocol exhaustion), I uncovered a larger problem with MikroTik RouterOS’s handling of IPv6 packets. This led to CVE-2018-19299, an unpublished and as yet unfixed (despite almost one year elapsing since vendor acknowledgement) vulnerability in RouterOS which allows for remote, unauthenticated denial of service. Unpublished… until UKNOF 43!

Speaker: Marek Isalski (Faelix Limited)

Presentation Video

UKNOF 43 IPv6 Scanning Marek Isalski.pdf

17:55 → 18:00 Wrap-up, UKNOF44

Speaker: Mr Keith Mitchell (UKNOF)

Wrap-up

18:00 → 20:00 Pints n' Packets