DKNOG14

Europe/Copenhagen
Scandic Copenhagen

Scandic Copenhagen

Vester Søgade 6, 1601 Copenhagen
Description

DKNOG14

Watch the recordings of the talks on our YouTube channel: https://www.youtube.com/@DKNOG

DKNOG14 was held on March 7-8 2024 at Scandic Copenhagen.

Don't miss the chance to meet people with different backgrounds from the networking industry and create new connections. Whether you are a fresh graduate or a senior professional, learn something inspiring and catch up with the latest technology trends.

Conference and social networking event map

 

Sponsors

The DKNOG conference could not be arranged without the generous sponsorships from the following organizations and companies:

Platinum

Gold

 

Silver

 

Associate 

Participants
Surveys
Feedback - Announcing the DKNOG Mentorship program
Feedback - BNG Blaster - Open Source Network Tester
Feedback - coherent optical transceivers - current capabilities and future possibilities
Feedback - DNS Monitoring with Prometheus and dns_exporter
Feedback - How much RPKI do you want in your BGP ?
Feedback - Introduction to DNS-OARC
Feedback - issues and impacts in bgp peering configurations
Feedback - Name that Datacenter! Quiz
Feedback - NaWas non-profit community based anti-DDoS concept
Feedback - Operator perspective: introducing 400 ZR+
Feedback - PeeringDB update
Feedback - RPKI: Enhancing Security with Robust Deployment
Feedback - SCION: Secure Path-Aware Internet Routing
Feedback - Software Defined Networking (SDN) in Disaggregated, Open Optical Networks
Feedback - SP Edge Security Service Scale-out Architectures
Feedback - SRv6 uSID Introduction
Feedback - Sustainable network automation: From minimum viable product to mature valued platform
Feedback - The Fallacies of IP/Optical Convergence and a Case for Smart Coherent Pluggables
Feedback - The Quiz is back!
Feedback - Using NetFlow to fight DDoS at the source
Feedback - Your Automation Journey: From Scripting to Intent
    • 1
      Registration and Breakfast
    • 2
      Welcome
      Speaker: Lasse Jarlskov (DKNOG)
    • 3
      Sustainable network automation: From minimum viable product to mature valued platform

      At DKNOG12 I talked about lessons learned in the implementation of a new network automation platform for a service provider network with thousands of existing business to business services. It's now been in operation for almost two and a half years.

      Since then, the platform has grown, bugs have appeared and been squashed, and new functionality has been steadily added.

      This talk will focus on the lessons and experiences gained.

      In this talk I will present some of the key learnings, both good and bad, and try to sum up these experiences for you to take away into your own automation projects.

      About the speaker

      Allan Eising works for Telia Company as an architect and lead developer in the network automation team. He has worked with service provider networking for close to two decades and still dreams of a day where network automation will take care of all the tedious work so network engineers can focus on solving interesting problems instead of copy/pasting into terminal windows.

      Speaker: Allan Eising (Telia Company)
    • 4
      Your Automation Journey: From Scripting to Intent

      An exploration of network automation, specifically crafted for experienced network engineers. This session will guide you through different automation types, from scripting for task automation to the advanced strategies of intent-based networking. We'll clarify the vital role of a 'Source of Truth' in network automation, discuss the integration of workflow engines into broader network strategies, and distinguish between templates and services in practical scenarios. Designed to offer clear, actionable insights, this talk aims to enable your assessment of network automation techniques.

      Speaker: James Henderson (Data Ductus Inc.)
    • 11:00 AM
      Coffee Break
    • 5
      RPKI: Enhancing Security with Robust Deployment

      A recent RPKI incident emphasised the crucial role of a robust RPKI infrastructure, rigorous testing, and well-defined outage procedures. Despite a temporary disruption, the prompt response and the underlying RPKI infrastructure's resilience averted significant Internet disturbances. To minimise RPKI outages and enhance Internet security, organisations should adopt practices such as regular testing, automated monitoring, and staff education.

      Speaker: Mr Gerardo Viviers (RIPE NCC)
    • 6
      SCION: Secure Path-Aware Internet Routing

      SCION is a secure path-aware Internet architecture, designed to achieve high resilience to routing attacks and path selection for Internet users and operators with safety critical traffic such as in the financial, healthcare and power sectors. RPKI/ROV is useful for origin validation but does not validate paths, ASPA is still an experimental technology, whilst BGPSEC has yet to be widely deployed and needs explicit router support along a path to achieve the full benefits.

      SCION has commercial and open-source implementations and is in production use by the financial services industry in Switzerland and internationally - including the SU, Korea and Singapore - as well as the SCION Research & Education Network (SCIERA).

      This talk will discuss the SCION design and architecture, its trust model, and how it can be deployed. It will also discuss the IETF/IRTF work, and the community efforts supported by the SCION Association to encourage further deployment and development.

      Speaker: Kevin Meynell (SCION Association)
    • 12:30 PM
      Lunch
    • 7
      BNG Blaster - Open Source Network Tester

      Originally developed as an access protocol tester, the BNG Blaster has undergone a significant evolution, transforming into a comprehensive network testing tool that now encompasses both access and routing functionalities. Its scope has expanded beyond the assessment of access protocols and now encompasses a broader spectrum, involving the evaluation of network functionalities at large. Contrary to its nomenclature, the BNG Blaster isn’t restricted only to BNG (Broadband Network Gateway) testing.

      It simulates a massive number of PPPoE and IPoE (DHCP) subscribers, encompassing IPTV and L2TP (LNS). Additionally, it supports all common routing protocols such as IS-IS, OSPF, LDP and BGP. This allows for comprehensive testing of both BNG and non-BNG routers, enabling end-to-end evaluations.

      The included traffic generator serves various functions. It can be used to verify forwarding, conduct QoS tests, and measure convergence times. With the capacity to handle millions of separate tracked flows, it allows for thorough verification of every forwarding state within a complete internet routing table. Furthermore, it enables the transmission of traffic to each specific QoS queue present in service edge routers with detailed per-flow statistics like receive rate, loss or latency.

      The BNG Blaster is used by leading network operators like Deutsche Telekom AG with their famous Access 4.0 project, network hard- and software vendors like RtBrick and many more.

      https://rtbrick.github.io/bngblaster/#

      Speaker: Christian Giese
    • 8
      DNS Monitoring with Prometheus and dns_exporter

      This talk is about DNS monitoring with Prometheus and dns_exporter, a multi-target Prometheus exporter with an exclusive focus on DNS monitoring. It is built on the excellent libraries dnspython and the Prometheus Python client library.

      dns_exporter can be used to monitor availability and performance of DNS servers, and to validate the responses they return. It can monitor recursive and authoritative servers regardless of the software they run. You can use it to make sure your (or your providers) DNS servers are sending the replies you expect, and configure Prometheus and Alertmanager to notify you if something stops working.

      dns_exporter supports doing DNS queries over plain port 53 UDP and TCP, as well as DoT, DoH, and DoQ.

      Speaker: Mx Thomas Tykling Rasmussen
    • 9
      Using NetFlow to fight DDoS at the source

      Is spoofed traffic coming through your network? Are you absolutely sure? Service providers have an obligation to identify and remediate spoofed traffic coming through their networks. This talk discusses how a NetFlow analysis platform and be used to identify and remediate the spoofed traffic that drives DDoS attacks.

      Speaker: Nina Bargisen (Kentik)
    • 3:00 PM
      Coffee Break
    • 10
      coherent optical transceivers - current capabilities and future possibilities

      With the speed of 400G coherent technology was introduced to pluggable optical transceivers (OIF 400ZR and OpenZR+). This technology is complex and powerful for your network, it even has influence on your network device operating system.
      This talk will provide first insight in Nokia's implementation as well as known or potential interoperability issues addressed by the OIForum. If your transport system, router or even switch already provides coherent pluggable transceivers check the available interface parameters. You can send me these CLI outputs / management software screenshots to thomas.weible@flexoptix.net. I will try to include it into the presentation.
      And finally new formfactors for 800G and 1,6T will be part of the game as well. Stay tuned....

      Speaker: Thomas Weible
    • 11
      The Fallacies of IP/Optical Convergence and a Case for Smart Coherent Pluggables

      The data rate and performance of small form factor optical transceivers have developed tremendously over the past couple of decades, and the latest generation pluggable DWDM transceivers deliver very good reach performance without sacrificing router faceplate density. However, there are some risk areas to consider when swapping transponders for pluggables.

      DWDM technology is getting closer to Shannon's limit, putting increased focus on other optical transport cost drivers, such as transmission fiber, optical amplifiers and design margins. Operational challenges also loom: how to maintain end-to-end management and avoiding organizational challenges associated with combining IP and optical teams.

      This talk will briefly cover the opportunities and challenges with going to IPoWDM architectures, and make a case for how to maintain architectural and organizational separation between layers 1 and 3 by leveraging smart pluggable optics.

      Speaker: Johan Bäck (Infinera)
    • 12
      issues and impacts in bgp peering configurations

      Showing often seen issues at peering configurations and speaking about their consequences and duties when operating a network and expecting traffic engineering behaving as per the plan.

      Speaker: Mr Bernd Spiess (DE-CIX)
    • 13
      Name that Datacenter! Quiz

      Quiz about datacenters in DK

      Speaker: Lasse Jarlskov (DKNOG)
    • 6:00 PM
      Evening Social Scandic Kødbyen

      Scandic Kødbyen

      Skelbækgade 3A 1717 Copenhagen

      Dinner

    • 14
      Registration and Breakfast
    • 15
      Welcome Back
    • 16
      SRv6 uSID Introduction

      Jakub Horn, Cisco Principal TME in MIG BU responsible for Segment Routing has the ability to join this year event and give an Update on SRv6 uSID.

      Speaker: Mr Jakub Horn (Cisco)
    • 11:00 AM
      Coffee Break
    • 17
      NaWas non-profit community based anti-DDoS concept

      NaWas provides internet service providers such as hosting and cloud companies with unique protection against DDoS attacks. This type of attack poses a growing problem for the digital infrastructure. Members work together to keep the costs of DDoS mitigation low and maintain high availability and knowledge on this subject.

      Speaker: Mr Frank Dupker (NaWas by NBIP)
    • 18
      SP Edge Security Service Scale-out Architectures

      In this presentation we will look at how Service Providers can leverage existing and widely available network equipment including (virtual) routers and (virtual) firewalls to build scale out security services, for example CGNAT, clusters. As Service Providers are pushing more and more traffic from their (residential) customers towards the internet there is a need for higher bandwidth CGNAT. Physical, scale up, boxes cannot coop with this increased demand. Also current available x86 processors have become so powerful that in many cases it makes sense to offload security services to it instead of using hardware ASICS for this task.
      We will look at some of the shortcomings of current available solutions and will propose a few options for scale-out architectures.
      CGNAT is just one of the use cases, other use cases include IPsec services, packet inspection, etc.

      Speaker: Melchior Aelmans (Juniper Networks)
    • 12:30 PM
      Lunch
    • 19
      How much RPKI do you want in your BGP ?

      RPKI is more and more widespread, and as more networks create their ROAs, the global routing becomes more and more secure. There is, however, an aspect of having more widespread use of RPKI, that has not yet been considered. Some networks have decided to perform Route Origin Validation (ROV) and then put the resulting information in BGP communities.
      This action, while done with the best intentions, helps pollute the globalr routing system with more updates than necessary, and is increasing the amount of BGP updates propagated over the Internet.
      In this talk I will present the issue, describe the implications, and show the measurements and the results that lead to the work being carried on about creating a draft BCP at the IETF for networks suggesting to avoid using communities to carry RPKI information.

      Speaker: Massimiliano Stucchi (Internet Society)
    • 20
      Software Defined Networking (SDN) in Disaggregated, Open Optical Networks

      Software defined networking (SDN) has made it possible to move the control plane to the software allowing for converged management and control of the network elements (NE) by utilizing standard open interfaces for both the southbound (SBI) and the northbound (NBI) interfaces thereby paving the path for open and disaggregated optical networks. The disaggregation requires interoperability, is highly desired and is in-line with the industry trends where both partial and full disaggregation options exist. In the optical network, it is the optical SDN domain controller that allows for service provisioning, increasing capacity, FCAPS monitoring, operation, and management of the network elements within the open line system (OLS) via standard SBI APIs and protocols. At the same time, these operation and configuration capabilities are also made available to the hierarchical SDN controller via standard NBI APIs and protocols. In this talk, we’ll look at the overall technology, the associated advantages and disadvantages and the way forward.

      Speaker: Dr Alley Hameedi (Smartoptics)
    • 2:30 PM
      Coffee Break
    • Lightning Talks

      Listen to short lightning talks. We accept registrations on the spot

      • 21
        Announcing the DKNOG Mentorship program

        DKNOG has decided to launch a mentorship program. This talk will describe who is eligible to participate, how the program will look like and what one can expect from it. For more info and to register please refer to:

        https://events.dknog.dk/e/mentorship

        Speaker: Valerija Kamchevska
      • 22
        Operator perspective: introducing 400 ZR+

        400G ZR+ offers the opportunity to move towards IPoWDM and numerous field trials and deployments have already been announced. This talk will focus on our own experience of deploying coherent pluggables, the motivation behind and the challenges we faced along the way. While some of the benefits are quite straightforward, like cost savings and some of the challenges are more than obvious, like the siloed approach to IP and WDM in most of today's network operators, what else did we realize while doing this?

        Speaker: Valerija Kamchevska
      • 23
        PeeringDB update

        Chriztoffer will give us an update on PeeringDB

        Speaker: Chriztoffer Hansen
      • 24
        Introduction to DNS-OARC
        Speaker: Phil Regnauld
    • 25
      The Quiz is back!

      The DKNOG quiz will close off the meeting with an opportunity to win prizes by showing off how closely you were following the talks at DKNOG14...

      Speakers: Fearghas McKay, Massimiliano Stucchi (AS58280.net)
    • 26
      Wrap Up/End of Program