dns

Comparing the Performance of Public DNS Resolvers

Comparing the Performance of Public DNS Resolvers

February 12, 2020

Will present performance comparisons between public DNS resolvers, both for IPv4 and IPv6 service. Performance comparisons are based on measurements taken from glo …
Grep for Evil

Grep for Evil

February 12, 2020

Evil has been lurking in the Internet since its inception. The IETF recognized this, releasing RFC 3514 on the evil bit. Unfortunately it isn't widely adopted , so …
Lightning Talk: Identifying DNS Open Resolvers in IPv6

Lightning Talk: Identifying DNS Open Resolvers in IPv6

February 10, 2020

Introduction As all of you know, having DNS servers considered Open Resolvers is very negative, both for those who leave the service open, for the Internet and for …
That KSK Roll

That KSK Roll

February 10, 2020

The Key Signing Key of the Root zone of the DNS will roll on October 11. This lightening talk briefly explains DNSSEC and the role of the KSK, and the way in which …
Preventing (Network) Time Travel with Chronos

Preventing (Network) Time Travel with Chronos

February 9, 2020

The Network Time Protocol (NTP) synchronizes time across computer systems over the Internet. Unfortunately, NTP is highly vulnerable to time shifting attacks, in …
T-Mobile's journey to IPv6 Only networking

T-Mobile's journey to IPv6 Only networking

February 9, 2020

Over the last 10 years, T-Mobile have had a strategy of removing our dependency of IPv4. In the spring of 2017 we finally flipped the switch and turned off IPv4 fo …
Death to Whois

Death to Whois

February 4, 2020

Death to Whois An exploratory look at RDAP ## Introduction While writing code for PeeringDB, I did extensive work querying and comparing RDAP results across the …
DNS Survival Guide

DNS Survival Guide

February 3, 2020

A contemporary network service heavily depends on domain name system operating normally. Yet, often issues and caveats of typical DNS setup are being overlooked. D …
Fundamentals of DDoS Mitigation

Fundamentals of DDoS Mitigation

February 2, 2020

In this tutorial, the attendees will go over the basics of Denial of Service attacks and network technology pertaining to them. The tutorial goes over the OSI netw …
Rebuilding the airplane in flight. . .safely

Rebuilding the airplane in flight. . .safely

January 29, 2020

Rewriting the key software component of your platform from scratch is always intimidating. Shannon Weyrick and James Royalty discuss NS1's recent DNS server rewrite and outline the steps the company took to roll it out across its globally distributed network with no downtime.
Revisiting HTTP/2

Revisiting HTTP/2

January 29, 2020

Now that adoption is ramped up and HTTP/2 is being regularly used on the internet, it's a good time to revisit the protocol and its deployment. Hooman Beheshti reviews protocol basics and digs into core features such as interaction with TCP, server push, priorities and dependencies, and HPACK.
Test, measure, iterate: Balancing good enough and perfect in the critical path (sponsored by NS1)

Test, measure, iterate: Balancing good enough and perfect in the critical path (sponsored by NS1)

January 28, 2020

In critical path services such as DNS, stability is imperative above all else. Kris Beevers examines the trade-offs between risk and velocity faced by any high-growth, critical path technology business.
Deep learning on YARN: Running distributed TensorFlow, MXNet, Caffe, and XGBoost on Hadoop clusters

Deep learning on YARN: Running distributed TensorFlow, MXNet, Caffe, and XGBoost on Hadoop clusters

January 24, 2020

In order to train deep learning and machine learning models, you must leverage applications such as TensorFlow, MXNet, Caffe, and XGBoost. Wangda Tan discusses new features in Apache Hadoop 3.x to better support deep learning workloads and demonstrates how to run these applications on YARN.
Software Defined Networking for CDNs and Tier 2 Service Providers

Software Defined Networking for CDNs and Tier 2 Service Providers

January 22, 2020

The ongoing shift from hardware-based, dedicated network functionality to software-based networking built on virtualized infrastructure appears to be in full swing. Content Delivery Networks (CDNs), w …
Lightning Talk: CoreDNS Over gRPC: Reliable Service Discovery for Kubernetes

Lightning Talk: CoreDNS Over gRPC: Reliable Service Discovery for Kubernetes

January 11, 2020

While service discovery in Kubernetes may be provided via multiple mechanisms, DNS is the most commonly used and highly recommended for its ease of use. One challenge with DNS-based service discovery …
Intro: CoreDNS

Intro: CoreDNS

January 3, 2020

CoreDNS is a flexible and extensible DNS server with a focus on service discovery. Often used as a part of the Kubernetes deployment, CoreDNS can serve as the cluster DNS for Kubernetes. With the uniq …
A Basic Kubernetes Debugging Kit: curl, jq, openssl, and Other Best Friends

A Basic Kubernetes Debugging Kit: curl, jq, openssl, and Other Best Friends

December 31, 2019

Joe Thompson walks you through a set of essential command-line Linux tools curl, jq, openssl, netcat, dig and others and how to use them to debug network and other issues in your Kubernetes cluste …
Understanding CoreDNS in Kubernetes

Understanding CoreDNS in Kubernetes

December 26, 2019

In Kubernetes 1.11, CoreDNS is Generally Available (GA) as a DNS-based service discover option. In this presentation, we will go over the default CoreDNS configuration - "Corefile" - used when deployi …
Serverless content delivery

Serverless content delivery

December 25, 2019

The lines between static and dynamic content are blurred, and its more difficult than ever to choose the right technologies for your requirements and budget. John Chapin takes you on a step-by-step journey from hosting static content on AWS S3 to deploying dynamic, complex business logic mere milliseconds away from your users, with AWS CloudFront, Lambda@Edge, and more.
Leveraging multiplatform DNS for web application resiliency (sponsored by Oracle + Dyn)

Leveraging multiplatform DNS for web application resiliency (sponsored by Oracle + Dyn)

December 21, 2019

Matt Torrisi demonstrates how to build domain traffic easily by enabling multiplatform DNS, covers the important criteria in assessing DNS network compatibility, and walks you through using DNS as a traffic-steering platform.
Rebuilding the airplane in flight. . .safely

Rebuilding the airplane in flight. . .safely

December 20, 2019

Rewriting the key software component of your platform from scratch is always intimidating, especially when you guarantee 100% uptime, your platform is in the critical application delivery path, and your environment is highly distributed. Shannon Weyrick discusses NS1's recent DNS server rewrite and the steps the company took to roll it out across its globally distributed network with no downtime.
Switching the Engine (DNS) in Kubernetes: Benchmarks and Possibilities

Switching the Engine (DNS) in Kubernetes: Benchmarks and Possibilities

December 20, 2019

DNS is one of the core components making Kubernetes run. Its essential for most services and service discovery. Its critical, underappreciated and overlooked at the same time. With the recent switch …
Deep Dive: Cloud Provider SIG

Deep Dive: Cloud Provider SIG

December 19, 2019

The long term goal of SIG Cloud Provider is to promote a vendor neutral ecosystem for our community. New vendors providing support for Kubernetes should feel equally empowered to do so as any of today …
The internet versus your sites: Taking action against internet volatility (sponsored by Oracle + Dyn)

The internet versus your sites: Taking action against internet volatility (sponsored by Oracle + Dyn)

December 19, 2019

When the internet is not bombarding your DNS with bogus requests, its trying to execute malicious SQL queries and crawling your site with bots (some good, some bad). Join Kyle York to learn how to take action.
Deep Dive: CoreDNS

Deep Dive: CoreDNS

December 12, 2019

CoreDNS is a DNS server written in Go. It can be used in a multitude of environments because of its flexibility. The flexibility is due to CoreDNS unique plugin-based architecture: if some functional …
Lightning Talk: Scaling Distributed Deep Learning with Service Discovery: How CoreDNS Helps Distributed TensorFlow Tasks

Lightning Talk: Scaling Distributed Deep Learning with Service Discovery: How CoreDNS Helps Distributed TensorFlow Tasks

December 8, 2019

Training models with modern deep learning architecture is often computationally intensive and requires an efficient distributed system at scale. Such systems in distributed machine learning community …
Clusters as Cattle: How to Seamlessly Migrate Apps across Kubernetes Clusters

Clusters as Cattle: How to Seamlessly Migrate Apps across Kubernetes Clusters

November 23, 2019

Before the arrival of Cloud Native, IT departments frequently treated each component–a service/application, a virtual machine, or a bare metal server–as a special, fragile entity that required the u …
Federated Prometheus Monitoring at Scale

Federated Prometheus Monitoring at Scale

November 18, 2019

In Media Build and Products under Oath, We run 12 production Kubernetes clusters running across our data centers with ~1200 machines with multi-tenant deployments. We monitor our cluster with Promethe …