[TALK]@Telematika

Talks & Presentations Collection

Ten Lessons From Telemetry
December 27, 2019

Ten Lessons From Telemetry

Streaming telemetry data enables network operators to bring network monitoring out of the 20th century and into the rich space of big data analytics. Having spent …

Utilizing Kea hook points for modern IP addressing

Utilizing Kea hook points for modern IP addressing

December 27, 2019

Kea is a new high performance, open source project for IPv4 and IPv6 addressing. Kea has hook points where you can add your own logic to parse incoming DHCP packet …
Coding BOF

Coding BOF

December 26, 2019

This pilot of a "Coding BOF" will be a unrecorded session, that will not require slides, where those interested could join together to share ideas and present the …
Enabling a true omnichannel ecosystem using adaptable backend platforms

Enabling a true omnichannel ecosystem using adaptable backend platforms

December 26, 2019

Every retailer is grappling with the challenge of creating a seamless omnichannel presence. While most understand that omnichannel is a necessity, its extremely difficult to build the proper architecture to gather, exchange, and draw insights from raw data. Kyu Cho and Sajid Mohamedy share the five elements that retailers must put in place to ensure a seamless ecommerce presence.
Hands-on DNSSEC with DNSViz

Hands-on DNSSEC with DNSViz

December 26, 2019

DNSSEC enables the authentication of DNS responses. Despite this benefit, expert DNS operators have observed that there are challenges in understanding, deploying, …
Incremental threat modeling: Never try to boil an ocean

Incremental threat modeling: Never try to boil an ocean

December 26, 2019

Threat modeling is one of the best techniques for achieving secure architectures. However, introducing it on existing complex projects requires time that architects and developers may not have. Irene Michlin introduces a technique for performing threat modeling in ongoing projects without a prohibitive initial time investment.
Investigation of Dependencies between IXPs

Investigation of Dependencies between IXPs

December 26, 2019

The intuitive understanding of the traffic dependencies of major IXPs is that if one IXP goes down the traffic volumes carried by this IXP moves to the other ones. …
King Tut architecture: Pyramids, patterns, and tests

King Tut architecture: Pyramids, patterns, and tests

December 26, 2019

What if we considered Mike Cohn's Testing Pyramid a strong statement about application architecture, not a test ratio edict? Could we explicitly design with testability in mind? Should we? What are the real benefits of popular approaches from the past decade, such as TDD, IoC, AOP, and MVx? Gary Pedretti explains how to bring all of these approaches together in a stable, rock-solid whole.
Lazy event sourcing: Living in the now

Lazy event sourcing: Living in the now

December 26, 2019

Yurii Rashkovskii shares a set of practical of approaches to designing event-sourcing-based systems, including a method of building the state of the world that uses a "lazy first" approach. This approach suggests that we don't know what the state of the world should include up front and therefore should defer this decision until the very end.
Lost Stars - Why Operators Switch off IPv6

Lost Stars - Why Operators Switch off IPv6

December 26, 2019

We discovered that 460 RIPE NCC members had recently stopped announcing their IPv6 prefix. We found that number quite concerning and contacted those members to ask …
Microservice standardization

Microservice standardization

December 26, 2019

Microservice architecture brings freedom for developers, but building a sustainable microservice ecosystem requires holding microservices to high architectural and operational standards. Susan Fowler introduces a set of standards that apply to all microservicesstandards that ensure microservice availability while preserving developer freedom.
Microservices architecture: A team's retrospective perspective

Microservices architecture: A team's retrospective perspective

December 26, 2019

Anthony Moralez offers a retrospective of a microservices application that his team built over the past year. You'll explore all of the key decision points and learn why the team chose the routes they did and why they might not choose them again if given a second chance.
Microservices: The supporting cast

Microservices: The supporting cast

December 26, 2019

Randy Layman looks at several members of the supporting cast that help to bring microservices to production readiness. Along the way, Randy talks about several patterns, including a pattern to clean data from inputs to help with PII and compliance concerns, patterns for request routing, and patterns around security.
Move Fast, Unbreak Things!

Move Fast, Unbreak Things!

December 26, 2019

Every network fails, and large networks fail more often. Many times the issue is clearly visible, but every now and then there is something that goes by undetected …
Platform as product: Serving the customer who serves the customer

Platform as product: Serving the customer who serves the customer

December 26, 2019

Whether an organization is an established leader, or breaking new ground, the mantra is always that we need to move faster. And of course, we need to scale. Architectural and development practices abound that should get us there: agile engineering, microservices, DevOps and so on. But it is not just the our software that needs to scale, but also our approach to delivering it.
POSIX for the data center

POSIX for the data center

December 26, 2019

The container orchestration wars are upon us. A dozen container orchestrators vie to be the kernel of the modern data center. But can the warring parties come together on a standard interface for modern cluster operations? Karl Isenberg explores what these parties have in common and outlines what a common interface might look like for operating these distributed operating systems.
Research and Education Track

Research and Education Track

December 26, 2019

The R&E track will feature presentations of some promising new ideas on both BGP measurement and analysis as well as DDoS defense. The following talks will be pres …
Running containerized applications securely in production

Running containerized applications securely in production

December 26, 2019

Research shows that 46% of deployed containers run for one hour and 27% run for about five minutes. In such a fast-paced, disposable computing environment, cloud operators struggle to keep their workloads and container environments under control. Giuseppe de Candia explains how to take the chaos out of these short-lived computing engines and the security implications to consider along the way.
The next generation of frontend architectures

The next generation of frontend architectures

December 26, 2019

Will Reactive programming be the default choice for modern apps? When would you want to use event emitters as opposed to event streams with operators? Luca Mezzalira answers these questions and more as he provides a detailed tour of frontend architectures, including where they've been and where we're headed.
What's NetDevOps? Why?

What's NetDevOps? Why?

December 26, 2019

The year is 2016. After little turmoil, DevOps has taken over the server world. However, deep in the heart of the cubicles, network engineers still toil and type a …
Abusing Google and Facebook login: On the risks in trusting third-party logins

Abusing Google and Facebook login: On the risks in trusting third-party logins

December 25, 2019

Using social logins is a good way to boost security. However, this often makes site owners complacent, skipping security measures they still need to maintain. Ido Safruti and Tomer Cohen explain how attackers have found ways to exploit this and bypass the auth providers defenses, attacking some of the worlds largest services, and demonstrate how to protect yourself from such attacks.
Activities in the IETF Routing Area

Activities in the IETF Routing Area

December 25, 2019

A brief update on what may be of interest in the IETF Routing Area. Examples: YANG modeling for Routing protocols, some information on recent new working groups (B …
Addressing Challenges in an Anycast CDN

Addressing Challenges in an Anycast CDN

December 25, 2019

Performance of online applications directly impacts user satisfaction. A major component of the user-perceived performance of the application is the time spent in …
ARIN Public Policy Consultation Session

ARIN Public Policy Consultation Session

December 25, 2019

ARIN will hold a Public Policy Consultation at NANOG 66 to discuss possible changes to number policy. Network operator feedback and face-to-face discussion of Inte …
Beyond matching: Applying data science techniques to IOC-based detection

Beyond matching: Applying data science techniques to IOC-based detection

December 25, 2019

Alex Pinto demonstrates how to apply descriptive statistics, graph theory, and nonlinear scoring techniques on the relationships of known network IOCs to log data and how to use those techniques to empower IR teams to encode analyst intuition into repeatable data techniques that can be used to simplify the triage stage and get actionable information with minimal human interaction.
BGP EVPN in Datacenter and Layer-3 Data Center Interconnect

BGP EVPN in Datacenter and Layer-3 Data Center Interconnect

December 25, 2019

This tutorial briefly introduces VXLAN and advantages of using EVPN in Datacenter. This tutorial will cover detailed information on: 1. BGP EVPN in Datacenter 2. L …
Common vulnerabilities and exposures in containers: What to know

Common vulnerabilities and exposures in containers: What to know

December 25, 2019

Clair is an open source container image security analyzer that enables developers to build services that scan containers for security threats and vulnerabilities. Quentin Machu offers an overview of Clair and explores a real-life example to demonstrate how Clair is able to automatically detect known vulnerabilities in Docker and rkt containers before they get exploited.
Continuous auditing for effective compliance with Rudder

Continuous auditing for effective compliance with Rudder

December 25, 2019

Rudder is an open source IT compliance automation tool that focuses on continuously checking configurations to provide a real-time high-level compliance status or break down noncompliance issues to a deep technical level. Jonathan Clarke offers an overview of Rudder and demonstrates how to use it to drill down to any issues that need remediating.