[TALK]@Telematika

dns

IPv6, the DNS and Big Packets

January 23, 2020

We are now at that point in the transition to IPv6 when we are hearing some ISPs talk about an IPv6-only service in the near future. But are we really ready? This …

Further Dispatches from the DNS Frontier

January 22, 2020

DNS-OARC regularly co-locates its Domain Name Systems Operations Workshops with NANOG, and is doing so again in San Jose immediately before NANOG71. The impact of …

A DGA Odyssey: Passive DNS Driven DGA Analysis

January 21, 2020

Domain Generation Algorithm (DGA) techniques have been commonly used by bot-masters to evade detection, which dynamically produce quantities of seemingly random do …

Overview of ICANN Identifier Technologies Health Indicator (ITHI) Project

January 21, 2020

This talk could be either in the General Session or the DNS track. We would like to a submit a presentation on the ITHI project at ICANN. See details at http://www …

Securing Your DNS Infrastructure in 5 Minutes

January 21, 2020

DNS is critical to the operation of just about every organization operating today, but too many organizations overlook DNS as part of their security plan. This talk provides a practical step by step guide to ensuring an organization's DNS is secure.

Automating Access Control Lists with OpenDaylight and OpenVSwitch

January 19, 2020

Available Cloud solutions does not ever meet all requirements for company environments. With that in mind, Globo.com embraced an open cloud solutions, Apache Cloudstack, and began developing together …

Failover early: When to failover at your CDN

January 19, 2020

By failing to prepare, you are preparing to fail. Your risk mitigation strategy must layer the most cost-efficient strategies to effectively mitigate or reduce the adverse effects of failure. Manuel Alvarez explores using the CDN as a failover tool, reviewing use cases and demonstrating how to decide whether to use a CDN by evaluating costs, benefits, operations, and time to mitigate.

Lightning Talks

January 19, 2020

3:30PM UDPing by Ian Flint and Igor Gashinsky 3:40PM Root DNSSEC KSK Rollover by Punky Duero 3:50PM Will I be replaced by a script? The future of network engineeri …

2017 DNSSEC KSK Rollover

January 16, 2020

The new Root Zone DNSSEC Key Signing Key will become ready for operations (but not yet in use) on February 2, 2017. Anyone employing or tracking DNSSEC validation …

NAT64/DNS64 experiments

January 16, 2020

More and more ISPs are deploying NAT64/DNS64. As with any new technology there is always the fear that "something" will go wrong. Both on the ISP's side (customers …

Hands-On DNSSEC with DNSViz

January 15, 2020

DNSSEC enables the authentication of DNS responses. Despite this benefit, expert DNS operators have observed that there are challenges in understanding, deploying, …

So you inherited a DNS server....

January 15, 2020

This tutorial will discuss the increasingly common situation where a network or system administrator inherits a legacy DNS server and explains how to migrate the s …

Lightning Talk: Salty DNS: Automate all the things

January 14, 2020

A talk that touches on the reasons, struggles, and eureka moments while using automation in a large infrastructure. Will shortly speak about why we moved from Pupp …

The phone book is on fire: Lessons from the Dyn DNS DDoS attack

January 6, 2020

When the DDoS attack crushed Dyn last October, did your DNS fail? Heroku's sure did. In response, Lex Neva deep dove into everything DNS to learn how to implement resilient DNS properlyreading RFCs, asking questions of pros, and performing real-world experiments when no one knew the answers. Join Lex to find out what does work and all the crazy details of DNS that he uncovered.

Orchestrating multihomed cloud services for a fast and resilient edge

December 14, 2019

With members in every corner of the world, LinkedIn has built services around six CDNs, numerous PoPs, and three DNS platforms. Samir Jafferali explains how LinkedIn uses big data to steer DNS intelligently, optimizes the CDNs for performance, mitigates DDoSes, and measures metrics using RUM and synthetic monitoring and shares best practices that edge teams of all sizes can benefit from.

CoreDNS Salon

December 10, 2019

Join us for an open discussion on CoreDNS! This will be an opportunity to learn more about CoreDNS, as well as discuss use cases, issues, and other matters with some of the maintainers. Well start wi …

Locking it down: A security primer for web developers

December 8, 2019

Your users are almost certainly vulnerable in one way or another. Mike North explores a series of common web app security pitfalls, first demonstrating how to exploit the vulnerability and then recommending a pragmatic and effective defense against the attack. Buckle up, because Mike's about to take some things you love and depend on and smash them to bits.

WG Multitenancy Deep Dive

December 6, 2019

Kubernetes has supported "soft" multitenancy since the beginning, with features such as namespaces, ResourceQuota, and resource-based scheduling. Over the years Kubernetes has added a number of sophis …

Switching From External Load Balancing to consul & ingress [I]

November 22, 2019

At Concur we integrated our kubernetes clusters to our own internal F5 ecosystem which worked well for internal data center deployments but turned out to be cumbersome when trying to maintain a consis …

Paint the landscape and secure your data center with Apache Spot

November 4, 2019

Cesar Berho and Alan Ross offer an overview of open source project Apache Spot (incubating), which delivers next-generation cybersecurity analytics architecture through unsupervised learning using machine-learning techniques at cloud scale for anomaly detection.