UKNOF45 (London)

Wednesday 15 Jan 2020, 09:00 → 20:00 Europe/London

Broadgate 1 & 2 (etc Venues Bishopsgate)

Keith Mitchell (UKNOF)

The UK Network Operators' Forum is returning to London for UKNOF45 on Wednesday 15th January!

UKNOF events offer an OPEN environment for anyone within or interested in the Internet Industry. Network with industry colleagues, participate in knowledge sharing and freshen up on best practice around network operations and security.

For more information about UKNOF itself, please visit our primary site.

Social Media hashtag: #UKNOF45

We are currently looking for sponsors to support UKNOF. 

---

PINTS N' PACKETS Networking Event SPONSOR

---

PARTNERS

---

 

Registration: Now closed.

Call for Presentations: Now closed.

Webcast: http://uknof.bogons.net/uknof45.html (was live on 15 January)

IRC Chatroom: #uknof@irc.terahertz.net

Twitter hashtag: #UKNOF45

Volunteers: We always appreciate volunteer help in setting up and running UKNOF events. If you're interested in helping at UKNOF45, please indicate this on the registration form. Our helpers always make a big difference.

Sponsors: We have the following funding opportunities for UKNOF in 2020 (covering UKNOF45, UKNOF46 and UKNOF47)

• Meeting & Pints n' Packets Sponsorships
• Annual Corporate Patronage for 2020
• Monthly Friends of UKNOF Patronage for individuals and companies

If you are interested in supporting UKNOF, please contact us on admin@uknof.org.uk

Timetable.xlsx

09:00 Registration

1 Introduction and Welcome

Speaker: Mr Keith Mitchell (UKNOF)

Attendee Information

Information.odp

2 Building a Greenfield Fixed-line ISP in 2019

An architectural overview of how Sky Italia's broadband network was built, the technologies used, and the decisions made based on previous learnings.

Speaker: Richard Patterson (Sky)

Presentation Video

Richard Patterson - Building Broadband Network in 2019 - UKNOF RESIZED 4-3.pdf

Richard Patterson - Building Broadband Network in 2019 - UKNOF RESIZED 4-3.pptx

3 Improving Network Security and agility using 100Gbps SmartNICs

Mellanox have enhanced their popular ConnectX-5 and Connect-6 High Performance NICs by adding multiple on-board ARM processors and an Open V-Switch to create a hybrid NIC/System on a chip.

The ARM cores on these devices can support various Linux distributions allowing some unique use-cases for improving network agility on bare metal servers and adding enhanced security and state-awareness to customer traffic loads. We will cover some examples where this new programmable technology can offer some interesting enhancements to traditional server/network architectures.

Speaker: Ahmad Atamlh (Mellanox)

Improving Network Security - UKNOF London - Jan 2020[1] - Read-Only.pdf

Presentation Video

4 RIPE NCC Training and E-Learning

Given the most recent changes and new added services to our Training and E-Learning offer, we would like to update the UKNOF community on what and how they can collaborate with us in 2020.We will cover the plans for Training and E-Learning, introduce the community to the new RIPE NCC Certified Professionals Programme and ask for volunteers to take part in exam questions writing.
We will end the talk with a Kahoot quiz about RIPE Database and IPv6.

Speaker: Ms Sandra Bras

Presentation Video

SandraBras4-3UKNOF45.key

SandraBras4-3UKNOF45.pdf

11:15 Morning Coffee Break

5 Trends in Open Optical Networks and the evolution of Embedded Optics

Presentation about the trends in open optical networks with focus on disaggregation and the open initiatives. Challenges and possibility's to use new highspeed DWDM formats embedded in the host equipment.

Speaker: Kent Lidström (Smartoptics)

Presentation Video

Trends in Open Optical Networks and the evolution of Embedded Optics.pdf

Trends in Open Optical Networks and the evolution of Embedded Optics.pptx

6 Using closed-loop automation based on open-source tools to ease operations tasks

One of the most time-consuming tasks in the daily operational job is a standard network rollout or a troubleshooting. Both of these tasks, in a vast majority, is highly standardised in sense of the operations to be performed. Converting this tasks into the code (scripts, programme, *-books) and coupling then with event-driven execution creates the foundation of the closed-loop automation.

Speaker: Mr Karneliuk Anton

Karneliuk_com_uknof_cla.pdf

Karneliuk_com_uknof_cla.pptx

Presentation Video

7 What Does A Good Design Look Like?

Knowing what a "good" design looks like requires more than just raw technical knowledge. This is a talk about how to create designs that successfully implement a technical solution, with years of stressful anecdotes thrown in.

Talk length is circa 30 minutes.

Speaker: Mr James Bensley

Presentation Video

What Does A Good Design Look Like

What Does A Good Design Look Like

8 A word from the PC - Funding Update, Patronage & Sponsorship

Speakers: Chris Russell (UKNOF), Fearghas McKay (Flexoptix // UKNOF)

Presentation Video

13:10 Lunch Break

9 PGP Signing Session

Speaker: Duncan Lockwood

10 OAuth with PeeringDB for Network Operators

Logging into websites using our Google / Twitter / Facebook / GitHub accounts is a web browsing paradigm most of us are very used to nowadays. The technology underlining the ability to register or login to one site using your account details from another site is OAuth (Open Authorization) - an open standard for token-based authentication and authorization on the internet.

PeeringDB has recently completed the development of their own OAuth service. This new feature opens a number of interesting possibilities for network to network ISPs and IXPs to provide their customers with registration-free access to portals and other online services. This reduces the administrative burden on providers and delivers a better user experience for customers.

This presentation will discuss OAuth: how it works, is it secure and can it be trusted. We will then review PeeringDB's implementation and how INEX now uses PeeringDB's OAuth service to allow our members access our IXP Manager portal.

Speaker: Mr O'Donovan Barry (INEX)

Presentation Video

uknof45-202001-oauth-for-netops.pdf

11 Processing BGP updates with RabbitMQ

Apart from routing decisions, BGP updates can be used for many purposes like alerting on hijack attemps and for scientific research.
At the NaWas we use BGP updates from our customers for purposes like:
* alerting our NOC team
* add customer based profiles in our devices, based on the customers AS number
* dynamically add ACL's in our system for traffic monitoring
* update split sflow application, based on destination AS number

For our purposes we developed an message queueing infrastructure where BGP updates are transmitted as messages. All kind of tools can use these message to take all kind of actions.
The basic infrastructure uses ExaBGP and RabbitMQ. Python is used for building the action tools.
The beauty of this solutions is the use of standard open source tools and the seperation of the updates and actions. With this setup any programming language can be used to write your own actions.

In the presentation the infrastructure and tools are presented. The set up is open source and is available on github.
In a live demo the use of this infrastructure on the full table BGP updates is demonstrated. As examples a full tables as a whole is processed in 2 a 3 minutes and the realtime updates will be shown.

Speaker: Pim van Stam (NBIP-NaWas)

bgp-rabbitmq-uknof52-2.key

bgp-rabbitmq-uknof52-2.pdf

Presentation Video

12 ARTEMIS: an Open-source Tool for Detecting BGP Prefix Hijacking in Real Time

ARTEMIS is a defense approach against BGP prefix hijacking attacks. It is (a) based on accurate and fast detection operated by the AS itself, by leveraging the pervasiveness of publicly available BGP monitoring services (such as RIPE RIS and RouteViews), and it (b) enables flexible and fast mitigation of hijacking events.

The open-source tool provides the following services to an operational network that deploys it:

1. Real-time monitoring of BGP updates, using BGP streaming services
   from the RIPE NCC's Routing Information System (RIS) (RIS live),
   RouteViews and CAIDA BMP feeds, as well as monitors that are
   deployed locally in the network that ARTEMIS protects (e.g., using
   exaBGP interfaces to the network's BGP border routers).
2. Accurate and comprehensive detection of BGP prefix hijacking
   attacks, within seconds from their initiation.
3. Flexible and automated mitigation of BGP prefix hijacking attacks,
   using practical mechanisms (such as prefix de-aggregation), within
   seconds to minutes from the initiation of the attacks.

Users can choose to enable only some of these services (each requiring the previous one to be enabled).

ARTEMIS contributes to a more secure Internet, since:

1. It offers a network operator an easy-to-use open-source tool to
   detect and counter, in real-time, BGP hijacking attacks (e.g.,
   sub-prefix, fake origin) against its own prefixes.
2. It is complementary to RPKI. By working in concert, the two
   approaches can offer more complete proactive (RPKI) and reactive
   (ARTEMIS) protection against BGP prefix hijacking attacks.
3. It surpasses the state of the art (i.e., third party detection
   services) in terms of detection speed, comprehensiveness, and
   accuracy, by leveraging both global (BGP monitors) and local
   (network operator contextual knowledge) information and scalable
   architectures for collecting and analysing incoming BGP feeds.

In this talk, we provide a presentation of ARTEMIS tool and a demo (slides/video) on the practical operation of ARTEMIS.

ARTEMIS website:
https://www.inspire.edu.gr/artemis

ARTEMIS GitHub repository:
https://github.com/FORTH-ICS-INSPIRE/artemis

Speaker: Mr Petros Gigis (UCL)

ARTEMIS_UKNOF.pdf

ARTEMIS_UKNOF.pptx

Presentation Video

15:35 Afternoon Coffee Break

13 Fantastic People and Where to Find them

Making layers 8 and 9 work for you.

Speaker: Julia Freeman

fantastic-people-nlnog-2019.pdf

Presentation Video

14 Observations from BT & DT Encrypted DNS experiments

This presentation will provide an overview of early observations from BT and DT Encrypted DNS experiments and trials. Key insights to aid standards and industry alliance discussions will also be highlighted.

Speaker: Andy Fidler (BT Plc)

Presentation Video

UKNOF 45 Update on BT and DoH trials Issue 1 140120.pdf

15 DoH in Chrome

Speaker: Kenji Baheux (Google)

Presentation Video

16 Mystique: A Fine-grained and Transparent Congestion Control Enforcement Scheme

TCP congestion control is a vital component for the latency of Web services. In practice, a single congestion control mechanism is often used to handle all TCP connections on a Web server, e.g., Cubic for Linux by default. Considering complex and ever-changing networking environment, the default congestion control may not always be the most suitable one. Adjusting congestion control to meet different networking scenarios usually requires modification of TCP stacks on a server. This is difficult, if not impossible, due to various operating system and application configurations on production servers. In this talk, I will introduce Mystique, a light-weight, flexible, and dynamic congestion control switching scheme that allows network or server administrators to deploy any congestion control schemes transparently without modifying existing TCP stacks on servers. We have implemented Mystique in Open vSwitch (OVS) and conducted extensive test-bed experiments in both public and private cloud environments. Experiment results have demonstrated that Mystique is able to effectively adapt to varying network conditions, and can always employ the most suitable congestion control for each TCP connection. More specifically, Mystique can significantly reduce latency by 18.13% on average when compared with individual congestion controls.

Speaker: Dr Posco Tso (Loughborough University)

Mystique_UKNOF45.pdf

Presentation Video

17 Wrap-up, UKNOF46

Speaker: Mr Keith Mitchell (UKNOF)

18:00 Pints n' Packets