NANOG71

As on a Darkling Plain: Network Survival in an Age of Pervasive DDoS

As on a Darkling Plain: Network Survival in an Age of Pervasive DDoS

January 23, 2020

In this presentation, we will discuss a significant new evolution of the standard DDoS attack model which presents unique challenges for network operators and end- …
Developing and evolving your own control plane

Developing and evolving your own control plane

January 23, 2020

At Fastly we run our own control plane built on top of open-source software, this fact enables us to do things you can't do with traditional protocols. However, wi …
IPv6, the DNS and Big Packets

IPv6, the DNS and Big Packets

January 23, 2020

We are now at that point in the transition to IPv6 when we are hearing some ISPs talk about an IPv6-only service in the near future. But are we really ready? This …
Keynote: Why the Internet is the only network that matters

Keynote: Why the Internet is the only network that matters

January 23, 2020

Dave Schaeffer founder of Cogent Communications will provide his perspective on the trends and challenges facing the IP industry drawing on his experience founding …
Network Automation: past, present, and future

Network Automation: past, present, and future

January 23, 2020

Moderator - Jesse Sowell, Cybersecurity Postdoctoral Fellow, Stanford University Speaker: Mircea Ulinic - Cloudflare, Network Systems Engineer, NAPALM maintainer, …
Optical Illusions: Content Providers and the Impending Transformation of International Transport

Optical Illusions: Content Providers and the Impending Transformation of International Transport

January 23, 2020

In just the past four years, large content providers such as Google, Facebook, and Microsoft have directly invested in 14 submarine cables The market's largest ban …
A Flowspec API for easier packet filtering during incidents

A Flowspec API for easier packet filtering during incidents

January 22, 2020

With the inclusion of Flowspec support in routers came the opportunity to better respond to malicious traffic events. In the case of Oracle + Dyn, we wanted to int …
BGP Large Community for Route Leak Detection

BGP Large Community for Route Leak Detection

January 22, 2020

In general, BGP autonomous system (AS) relationships are either customer-transit or peer-peer. A route received from a transit or a peer can only be sent to a cust …
Further Dispatches from the DNS Frontier

Further Dispatches from the DNS Frontier

January 22, 2020

DNS-OARC regularly co-locates its Domain Name Systems Operations Workshops with NANOG, and is doing so again in San Jose immediately before NANOG71. The impact of …
Getting started with OpenConfig

Getting started with OpenConfig

January 22, 2020

This session provides a practical introduction to vendor neutral operations using OpenConfig. It provides an overview of model design principles and a close look …
How to use Machine Learning for Testing and Implementing Optical Networks

How to use Machine Learning for Testing and Implementing Optical Networks

January 22, 2020

Optical transport networks are evolving to have unprecedented flexibility with advances such as finely tunable bitrate transponders, allowing dynamically-adaptive …
Mapping of Address and Port using Translation (MAP-T): Deployment at Charter Communications

Mapping of Address and Port using Translation (MAP-T): Deployment at Charter Communications

January 22, 2020

The current scarcity of IPv4 Internet addresses is a concern for service providers and other large organizations that provide broadband Internet access. The prefer …
Model Driven APIs for the Network infrastructure Layer

Model Driven APIs for the Network infrastructure Layer

January 22, 2020

Over the past decade, there has been an increasing amount of interest in the industry (Service APIs (NPF), I2RS (IETF) etc.) to create a standardized API at the ne …
Operationalizing ISP cooperation during DDoS attacks.

Operationalizing ISP cooperation during DDoS attacks.

January 22, 2020

As large network DDoS attacks grow in scale, it becomes more important that ISPs be able to work together to quickly address issues in real time.We propose a fra …
Recent BGP Innovations for Operational Challenges

Recent BGP Innovations for Operational Challenges

January 22, 2020

A lot of progress has been made in the IETF IDR and GROW Working Groups over the last year to address BGP operational challenges. Several new proposals that solve …
Segment Routing IPv6 The Network as A Computer and deployment use-cases with Comcast

Segment Routing IPv6 The Network as A Computer and deployment use-cases with Comcast

January 22, 2020

Segment Routing (SR) is an architecture based on the source routing paradigm that seeks the right balance between distributed (network-wide) intelligence and centr …
A DGA Odyssey: Passive DNS Driven DGA Analysis

A DGA Odyssey: Passive DNS Driven DGA Analysis

January 21, 2020

Domain Generation Algorithm (DGA) techniques have been commonly used by bot-masters to evade detection, which dynamically produce quantities of seemingly random do …
Command Execution in Heterogeneous Network at Facebook scale

Command Execution in Heterogeneous Network at Facebook scale

January 21, 2020

Facebook's global network has tens of thousands of network devices from a variety of vendors. We need to run commands on these devices for monitoring, provisioning …
Fast Egress Protection

Fast Egress Protection

January 21, 2020

Fast recovery from network failures has been always in the focus of network architects and designers. It is especially important, as many new application (voice/si …
Lightning Talk: Managing network devices like servers

Lightning Talk: Managing network devices like servers

January 21, 2020

Beginning with the release Nitrogen (2017.7), Salt provides support to manage network gear that allows execution of custom software. Examples of such platforms inc …
Lightning Talk: OpenConfig - progress toward vendor-neutral network management

Lightning Talk: OpenConfig - progress toward vendor-neutral network management

January 21, 2020

In this lightning talk, we provide an update on progress toward the vision of the automated, multi-vendor network management stack. We will focus on a set of freel …
Lightning Talk: The Root Canary Project: Measuring the (postponed) rollover of the Root KSK

Lightning Talk: The Root Canary Project: Measuring the (postponed) rollover of the Root KSK

January 21, 2020

In this lightning talk I want to introduce the Root Canary Project that monitors the rollover of the Root KSK from many different vantage points. It should act as …
Overview of ICANN Identifier Technologies Health Indicator (ITHI) Project

Overview of ICANN Identifier Technologies Health Indicator (ITHI) Project

January 21, 2020

This talk could be either in the General Session or the DNS track. We would like to a submit a presentation on the ITHI project at ICANN. See details at http://www …
The critical role of Maximum SID Depth (MSD) hardware limitations in Segment Routing ecosystem and how to work around those

The critical role of Maximum SID Depth (MSD) hardware limitations in Segment Routing ecosystem and how to work around those

January 21, 2020

The presentation talks about the problem space and possible workarounds: MSD Maximum SID Depth Generic concept defining number of SIDs, HW/SW are capable of imp …