management

Model Driven APIs for the Network infrastructure Layer

Model Driven APIs for the Network infrastructure Layer

January 22, 2020

Over the past decade, there has been an increasing amount of interest in the industry (Service APIs (NPF), I2RS (IETF) etc.) to create a standardized API at the ne …
Command Execution in Heterogeneous Network at Facebook scale

Command Execution in Heterogeneous Network at Facebook scale

January 21, 2020

Facebook's global network has tens of thousands of network devices from a variety of vendors. We need to run commands on these devices for monitoring, provisioning …
Lightning Talk: OpenConfig - progress toward vendor-neutral network management

Lightning Talk: OpenConfig - progress toward vendor-neutral network management

January 21, 2020

In this lightning talk, we provide an update on progress toward the vision of the automated, multi-vendor network management stack. We will focus on a set of freel …
Live Patching, Virtual Machine Introspection and Vulnerability Management: A Primer and Practical Guide

Live Patching, Virtual Machine Introspection and Vulnerability Management: A Primer and Practical Guide

January 21, 2020

The talk covers several technologies and best practices to managing Security Vulnerabilities, which are told as interconnected stories. We will cover how the largest clouds in production came togeth …
Understanding SCHED_DEADLINE

Understanding SCHED_DEADLINE

January 20, 2020

Starting in Linux version 3.14, a new scheduling class was introduced. Called SCHED_DEADLINE, this scheduling class implements Earliest Deadline First (EDF) along with a Constant Bandwidth Scheduler ( …
Automating Access Control Lists with OpenDaylight and OpenVSwitch

Automating Access Control Lists with OpenDaylight and OpenVSwitch

January 19, 2020

Available Cloud solutions does not ever meet all requirements for company environments. With that in mind, Globo.com embraced an open cloud solutions, Apache Cloudstack, and began developing together …
How Linux Containers can Help to Manage Development Environments for IoT and Embedded Systems

How Linux Containers can Help to Manage Development Environments for IoT and Embedded Systems

January 19, 2020

In this presentation, Yan Vugenfirer will show appropriate techniques for seamless use of containers in development process for embedded and IoT. The implementation of those techniques will be demonst …
Radix Tree, IDR APIs and Their Test Suite

Radix Tree, IDR APIs and Their Test Suite

January 19, 2020

Linux radix tree is a mechanism by which a (pointer) value can be associated with a (long) integer key efficiently in terms of storage, and lookups. Additional features driven by kernel-specific needs …
The Networking Grand Challenge

The Networking Grand Challenge

January 18, 2020

This talk proposes a Networking Grand Challenge: to build a self-driving network one that runs itself in all aspects, from self-discovery to configuration to mon …
Practical, team-focused operability techniques for distributed systems

Practical, team-focused operability techniques for distributed systems

January 17, 2020

Matthew Skelton shares five practical, tried-and-tested techniques for improving operability with many kinds of software systems, including the cloud, serverless, on-premises, and the IoT.
An Internet-Wide Analysis of Traffic Policing

An Internet-Wide Analysis of Traffic Policing

January 16, 2020

Abstract: Large flows like videos consume significant bandwidth. Some ISPs actively manage these high volume flows with techniques like policing, which enforces a …
Optics Evolution and Challenge for Router Interface

Optics Evolution and Challenge for Router Interface

January 16, 2020

Optics Evolution and Challenge for Router Interface NANOG 69 Talk February 6-8, 2017 Samuel Liu Director, Product Line Management, IP and Optical Networks, Noki …
Securing an IoT System from the Ground Up

Securing an IoT System from the Ground Up

January 16, 2020

Hacks involving IoT devices are now familiar headline news. DDoS attacks on major websites, remote control of cars and medical devices, surveillance using devices in homes, and more are increasingly c …
BoF: Automating Vulnerability Scanning with Vuls

BoF: Automating Vulnerability Scanning with Vuls

January 15, 2020

Vulnerability lifecycle management without automation is a huge burden. You have to constantly watch out for any new vulnerabilities and keep a manual inventory of installed software to determine whic …
Architecturing and securing IoT platforms with microservices

Architecturing and securing IoT platforms with microservices

January 14, 2020

IoT device management and multiprotocol messaging platforms demand specific architectural decisions and high-concurrency approaches due to the massive number of expected devices. Drasko Draskovic and Janko Isidorovic share an architecture, implementation, and testing procedures needed to create an industry-grade IoT platform based on microservices and Docker containers.
Your (container) secret's safe with me.

Your (container) secret's safe with me.

January 14, 2020

In a containerized deployment, how do you safely pass secrets like passwords and certificates between containers without compromising their safety? If orchestration means a container can run on any machine in the cluster, how do you minimize who knows your secrets? Liz Rice explores the risks and shares best practices for keeping your secrets safe.
How to break the rules

How to break the rules

January 12, 2020

Societies work because we follow the rules, but what if those same rules are holding us back? The problem may be because we are failing to change our habits. Dan North introduces some uncomfortable truths from Eliyahu Goldratt, author of The Goal, a cornerstone of modern management theory, that help us recognize and challenge this behavior and unlock the true value from our technology.
Enabling Innovation through Cloud Composition

Enabling Innovation through Cloud Composition

January 10, 2020

This session will describe the injection of cloud innovation into Mercedes-Benzs Silicon Valley Innovation Lab. As an Innovation Architect, Joe Leavers role is to be a startup scout for Mercedes-Ben …
Serverless in production: An experience report

Serverless in production: An experience report

January 10, 2020

AWS Lambda has changed the way we deploy and run software, but the serverless paradigm has created new challenges to old problems around testing, CI/CD, and ops. Yan Cui shares solutions to these challenges, drawing on his experience running Lambda in production.
Data Science for Community Managers

Data Science for Community Managers

January 9, 2020

We will present some typical community management worries about community health, productivity and visibility and how some open source tools could be used to face them. Open source development transpa …
Giving Everyone Access To Open Source Best Practices: The OpenChain Curriculum

Giving Everyone Access To Open Source Best Practices: The OpenChain Curriculum

January 7, 2020

This talk will explain how the OpenChain Curriculum team assembled and released extensive compliance training material under CC-0 licensing. It will expand on how this material can be either used for …
hugetlbfs, Still Alive and Kicking

hugetlbfs, Still Alive and Kicking

January 7, 2020

Linux support for huge pages has been around since the early 2.6 time frame. When support was added, it followed the 'everything is a file' model and the result was hugetlbfs. hugetlbfs represents a p …
Using Secure Keys for Disk Encryption

Using Secure Keys for Disk Encryption

January 7, 2020

Secure keys are a special kind of wrapped keys: keys wrapped by a wrapping key (KEK) that is securely located in an inaccessible environment (typically a hardware security module, aka HSM). Outside th …
Build Cloud Infrastructure with Cheap ARM Boards

Build Cloud Infrastructure with Cheap ARM Boards

January 6, 2020

The DozenCloud Project, based on OpenStack, proposes a reasonably efficient model to construct low power virtual private cloud computing systems based on the customization of open source software tech …
Death of the ESB: 10 Pitfalls in the Transition to Cloud-Native Integration

Death of the ESB: 10 Pitfalls in the Transition to Cloud-Native Integration

January 6, 2020

As we move from an ESB world to a microservices API focused world, the need for integration does not go away, if fact it is arguably far more important today than ever. Based on customer engagements, …
Managing server secrets at scale with a vaultless password manager

Managing server secrets at scale with a vaultless password manager

January 6, 2020

Ever wondered how to quickly and efficiently rollover all of your servers SSH keys or how to securely manage diskless systems? Ignat Korchagin outlines a simple approach that combines hardware support and a little cryptography to help operationalize the management of all the secrets in your cloud.
Microservices secrets management with Vault

Microservices secrets management with Vault

January 6, 2020

Its great that youve moved to microservices, but how are you distributing secrets? Seth Vargo offers an overview of Vaults unique approach to secret management by providing secrets as a service for your services (and your humans too), which is highly scalable and easily customizable to fit any environment.
Systems management with a voice UI using Amazon Alexa

Systems management with a voice UI using Amazon Alexa

January 6, 2020

Voice UIs like Amazon's Alexa can make systems management simple, intuitive, and delightful. The virtual private assistant feel of a VUI, coupled with the abstraction that voice commands bring, break the tedium of management tasks. Karthik Kirupanithi demonstrates how to put together an Alexa skill that can perform tasks using the EC2 Systems Manager.