Saturday, June 12, 2010
Topic/Presenter
Full Abstract

Service Providers using MPLS infrastructure want to offer Multicast Services to their customers using the same MPLS core network that are used to offer unicast services. One of the widely deployed solutions has been Multicast VPN or mVPN. However, deploying mVPN has always demanded re-engineering their core links to carry PIM traffic. Also, they could not leverage high service availability features of Fast-reroute for multicast traffic passing through MPLS core.

Recently, IETF has come out with two good solutions: P2MP TE and mLDP, in which MPLS technology has been extended to carry Multicast Traffic using labels, known as Label switched Multicast. The solutions have eliminated the need for any PIM configurations within MPLS core and has greatly simplified service/operational maintenance requirements of SP providers.

This tutorial gives an introductory overview of the two new approaches: P2MP TE and mLDP used to carry Multicast Traffic through SP MPLS core.

The following topics will be covered as part of this tutorial:

  • Motivation
  • Multicast Solutions
  • P2MP TE Overview
  • mLDP Overview
  • P2MP TE Demo
  • Q and A

Speakers
Rajendra Chayapathi, Cisco Systems
Rajendra Chayapathi has been with Cisco Systems from 2000 and is based in San jose. He is a Sr.Technical Leader in Service Provider market segment in Core router business unit. His role includes working with Tier 1 SP in US, UK & Australia specifically in network strategies, customer interlock , design and operations, configuration and scaling. He is currently working on ISSU for Core routers. Prior to Cisco , he had worked in AT&T Labs for design and deployment of the IP Core Backbone network. Rajendra holds a MBA degree & is a CCIE 4991.

Utpal Mukhopadhyaya, Cisco Systems
Utpal Mukhopadhyaya is a Technical Leader at Cisco Systems, with over 10 years of experience in Systems and Solutions Testing. As part of Cisco's Network Solution Integration Test organization, Utpal designed, deployed, and troubleshooted IPv4/IPV6/MPLS networks for Service Providers. He has contributed to a number of white papers and made several presentations at training programs for network technology professionals. Utpal holds a Master's degree in Electrical Engineering from I.I.T Kanpur, India, and a Doctorate degree in Computer Science from University of Saskatchewan, Canada.

Full Abstract

This session will go into details of which routing protocol should be chosen for a large and complex network. The two protocol OSPF & ISIS will be compared side by side based on its functionality, usage, scalability and convergence. These two protocols will be compared in the light of IPv6 deployment also.

Speakers
Khalid Raza, Cisco Systems
Khalid is a Distinguished Engineer at Cisco Systems. As a recognized expert within Cisco and worldwide ISP community, Khalid has been designing
large scale IP and MPLS networks for over fifteen years. His expertise includes IP routing protocols (OSPF, ISIS and BGP), MPLS and ISP networks.

He represents Cisco in industry panel discussion and technical conferences around the world and discusses technologies and protocols related to large scale ISP and NRN networks.
Khalid has influenced technology directions and decisions within Cisco and ISP and NRN community worldwide. He has produced technical white papers and co-authored a book called "Large Scale IP Network Solutions". His current area of interest is converge networks and IPv6 routing protocols.

Faraz Shamim, Cisco Systems
Faraz Shamim, CCIE #4131, is a Network Consulting Engineer with Cisco Systems. He has written several documents, white papers and technical tips for OSPF, RIP, EIGRP and BGP on Cisco Connection Online, CCO (www.cisco.com). He has also been engaged in developing and teaching the Cisco Advance Training Bootcamps on Advanced IP Routing & IPv6. He has taught the Cisco Bootcamp Courses to several Universities and customers world wide. Faraz actively speaks at the US and International Conferences like Networkers and APRICOT on the subject of Link State

Protocols, IPv6 & MPLS. Faraz is also an author of a Cisco press CCIE series book, "Troubleshooting IP Routing Protocols". Faraz has been with Cisco Systems since 1997 and speaking at Networkers Cisco Live events since 2000.

Full Abstract

A giant tutorial on how MPLS works, how ISPs can benefit from it, and techniques for using it.

Speakers
Richard Steenbergen, nLayer Communications.

Sunday, June 13, 2010
Topic/Presenter
Full Abstract

The need for Label Multicast

  • What is the problem
  • issues with the existing multicast deployments
  • how the new model addresses it
Solutions
- mLDP
* Extensions to LDP
~ New Capabilities TLV
~ FEC Elements
~ Multicast FEC Element Encoding
~ p2mp mp2mp Operation
-- Tree creation

- p2mp-TE
* Extensions to RSVP
~ SESSION_OBJECT
~ SENDER_TEMPLATE

OAM Extensions for support for LSM
  • Multicast LSP Ping
  • Proxy LSP Ping
  • Multicast Connectivity Verification
Applications
  • PIM SSM Transit for IPv4/IPv6
  • mVPN Deployments (Default/Data)
  • Video Distribution/Contribution
  • FRR

Speakers
Shankar Vemulapalli, Cisco Systems
Shankar, CCIE # 2025, is a Technical Leader at Cisco Systems. As a lead architect, Shankar has worked on some of the largest MPLS deployments both in the Service Provider and Enterprise accounts. His expertise includes: Routing Protocols (OSPF, IS-IS & BGP), MPLS-VPNs, MPLS-TE. He is a frequent contributor both internal and external forums like APRICOT, NANOG . Also, he has contributed to several IETF RFCs on IS-IS and has written several white papers that are posted to Cisco.com website.

Full Abstract

Understanding Optical Transport Network (OTN) is key for success in addressing the emerging needs of next generation transport networks now and in the future. As IP based services continue to grow, new OTN-based solutions provide efficient means of transporting those services globally. Take this opportunity to learn more about what OTN is and why it is important to next generation transport.

Speakers
Michael Jamgochian, Alcatel-Lucent
Michael Jamgochian is the Director of Optics Business Development, Alcatel-Lucent. Michael has over 25 years of experience in the telecommunications field with Alcatel-Lucent and MCI. He is currently responsible for business development covering the Alcatel-Lucent Optical portfolio. His primary focus is driving these activities supporting Verizon's global network. Previous Alcatel-Lucent positions include Product Management in the Optical Network Division and Program Management on the AT&T U-verse program. MCI positions included facilities planning, network planning, and network provisioning.

Full Abstract

You've been using tools like Puppet and cfengine to corral the complexity on your servers. You revel in the scalability, reliability, and ease of maintenance of doing it The Right Way. You don't fear the next change because you know the tools will just get it Right. But you still tremble at an 'enable' prompt, hoping you remembered all the bits that need to be twiddled, on all the networking devices everywhere. Is your DNS tied on straight - both ways? Is it all *really* being monitored by Nagios? As your network's complexity increases, so do the errors, inconsistencies, and omissions caused by manual configuration, and brokenness abounds. But wait - there's a way out of the swamp! Come hear Brent Chapman as he reveals methods and tools for automating the mind-numbing task of configuring network devices and services. Among other things, he'll talk about his cool new open source 'Netomata Config Generator', which addresses some of these problems.

Speakers
Brent Chapman, Netomata, Inc
Brent Chapman is the founder, CEO, and technical lead of Netomata, Inc. He is the coauthor of the highly regarded O'Reilly & Associates book Building Internet Firewalls. He is also the founder of the Firewalls, List-Managers, and Network-Automation Internet mailing lists, and the creator of the Majordomo mailing list management package. In 2004, Brent was honored with the annual SAGE Outstanding Achievement Award 'for outstanding sustained contributions to the community of system administrators'. He has been a frequent and popular speaker at USENIX, LISA, BayLISA, and many other events over the past 15 years.

Full Abstract

Agenda:

Steering Committee Report
Program Committee Report
Mailing List Committee Report
Marketing Working Group Report
Merit Report
Transition Update
Open Discussion

Speakers
Moderator - Steve Feldman, Steering Committee Chair, CBS Interactive

Full Abstract

Silent Partner, Dyn

Recordings
Full Abstract

The Internet is changing and so is ARIN. ARIN will provide an update on the current state of affairs. Additionally, ARIN is going to be
unveiling a new Whois service by the first part of July that will have
many improvements.

Speakers
John Curran, ARIN

Full Abstract

The purpose of this panel is to encourage wide spread awareness of the
evolving IPv6 capabilities that are currently or soon to be supported in
popular home networking equipment. Overview of support for various IPv6
technologies along with details related to how end users will be provisioned
with IPv6 and how this impacts existing IPv4 services will be provided.
Enablement strategies and techniques for services providers will also be
covered specifically those of the cable variety. High level requirement for
IPv6 for in-home equipment like computers and other consumer electronics
will also be discussed. Finally other key topics critical to the adoption
of IPv6 including those related to DNS will be briefly discussed followed by
an interactive Q&A session.

Speakers
Moderator - John Jason Brzozowski, Comcast
At Comcast, John provides technical leadership and guides the firm's
deployment of IPv6. He leverages his expertise and experiences to drive the
adoption and implementation of IPv6 ensuring that innovative solutions are
in place to support traditional and next generation services. John has
contributed significantly to many standards and technologies critical to the
cable industry's adoption of IPv6, specifically those pertaining to voice,
video, and data. He works closely with CableLabs on DOCSIS and PacketCable
specifications and has contributed to IETF standards efforts.

John's work in the technical community currently includes support of the
North American IPv6 Task Force as a Steering Committee member, member of the
IPv6 Forum, and an active participant in various Cablelabs activities and
efforts. Through his work with these organization he helps to drive and
support critical IPv6 activities around the globe including but not limited
to promoting IPv6 education, awareness, and of course adoption. John also
serves as co-chair of the IETF DHC Working Group and co-chair of the MAAWG
IPv6 technical sub-committee.

Panelist - Allen Huotari, Cisco
Allen has over 25 years of experience in the networking and communications industry. Allen is a member of the Home Networking Products team for Cisco Consumer Products (formerly Linksys) and is responsible for the investigation of emerging technologies, and helping define functional requirements for next generation networking products (with special emphasis on wireless, powerline communications, and multimedia over IP). Allen currently serves on the Board of Directors for MoCA (Multimedia over Coax Alliance), HomePlug Powerline Alliance, and AVnu Alliance. He also regularly participates in WiFi Alliance and Digital Living Network Alliance (DLNA). Allen currently holds 7 patents and has many more pending. Allen is a BSEE with honors graduate of California State University in Northridge. When not engaged in communications design he enjoys discussing music, literature, philosophy, and theology.

Panelist - Salah Nassar, Netgear.
Panelist - James Woodyatt, Apple, Inc.
James is an Internet dialtone and protocol standards specialist on the AirPort and Time Capsule product firmware engineering team at Apple. I started my career in communications software in 1988, and I wrote my first original computer program in Data General Business BASIC at the age of nine.

Monday, June 14, 2010
Topic/Presenter
Full Abstract

Traffic matrices can greatly benefit key Service Provider activities like capacity planning, traffic engineering, better understand their traffic patterns and take meaningful peering decisions. Despite their importance, traffic matrices keep relatively behind the scenes and unspoken topic.

This talk wants to present a way to build traffic matrices with pmacct using telemetry data and BGP. Leveraging along the way some case-studies and with a technical cut. pmacct is a commonly used, free, open-source IPv4/IPv6 accounting package which integrates a NetFlow/sFlow and a multi-RIB BGP collector in a single piece of software and is autorhed by the presenter.

Speakers
Paolo Lucente, KPN International
Paolo Lucente currently serves as Architect/Designer at KPN International, a successful global IP backbone headquartered
in the Netherlands. Paolo is also the author of the free, open-source software package pmacct and a spare time consultant on complex network telemetry matters for IP backbones worldwide. Along with years of experience in the network operators arena, he brings an interest in the economics of traffic exchange in the public internet and is a contributor in many community forums, particularly in Europe. Previously, Paolo covered senior engineering and development positions at
some large national service providers across Europe and the regional research network in his home land in south Italy, Apulia.

Full Abstract

4:30 - 4:45
DNS Sec for the Root - Update
Duane Wessels, VeriSign

4:45 - 5:00
IETF Routing Protocol Security Work - KARP
Joel Halpern

5:00 - 5:15
Accidentally Importing Censorship: The I-Root Instance in China
Doug Madory, Renesys

5:15 - 5:30
Investigating Botnets and Current Attribution Feasibility
Levi Gundert, Team Cymru

5:30 - 5:45
Regional Botnet Detection
Michael Bailey, University of Michigan,
Jake Czyz, Manish Karrir, Merit Networks

5:45 - 5:55
Benefits of Protocol Fuzzing From a Security Point of View
Jim Deleskie

Speakers
Frank Scalzo, VeriSign

Full Abstract

The NANOG transition team along with Merit would like to have the opportunity to present the attendees:
1) reasons for the transition
2) transition plan
3) continuing role of Merit
4) open floor for Q&A

Speakers
Steering Committee Members

Full Abstract

Living Documents and Knowledge with Nowhere to Live!

What has transpired since the lightning talk, how to get involved, feedback on hot topics etc.

Speakers
Aaron Hughes, 6connect
Aaron brings more than 15 years of experience in the telecommunications industry.

Aaron Hughes is President and CTO at 6connect, Inc specializing in Internet Engineering automation solutions, cooling technologies and distributed managed services with a focus on IPv6. He is also the Chief Network Architect at UnitedLayer and is responsible for network topology planning, design and operations.

Aaron has also held network and system architecture and Sr. level management roles at Exponential, Lockheed Martin, Cariden Technologies, Terremark, Certainty Solutions, Quest Technologies, RCN, UtraNet and Channel (1) Communications.

Full Abstract

Alcatel-Lucent

Full Abstract

All first-time NANOG attendees are invited to attend a special breakfast where committee members, Merit staff and long-time NANOGers will talk about the organization, the meeting, and how to make best use of both. Please attend to learn more about NANOG and to maximize your first meeting--we promise to make it both lively and informative! The breakfast will be moderated by Ren Provo of Comcast.Guavus

Full Abstract

Welcome to NANOG49 in San Francisco! Monday's program will begin with opening remarks from the NANOG Program Committee, Merit and our host, Netflix:

  • David Meyer, Program Committee Chair, Cisco/UO

  • Don Welch, Merit Network

  • Ken Florance and David Temkin, Netflix

Speakers
Ken Florance, Netflix
David Meyer, Program Committee Chair, Cisco/UO
David Temkin, Netflix
Donald Welch, Merit Network

Full Abstract

We discuss the data driven architecture for constructing very large
warehouse scale computers and the network and software requirements
for making very large scale systems work. Contrary to the converged
next-generation network ideas that are currently in vogue we present a
cost-based model that leads to a simpler, cheaper architecture.

Speakers
Vijay Gill, Google
Vijay Gill is a network engineer at Google

Recordings
Full Abstract

In this talk we present some initial results from our analysis of data collected from the recently allocated 1/8 network block. There has been some concern regarding the usability of this block due to the presence of background traffic. We collected a 1 week long dataset consisting of all packets received at this block in the absence of any actual hosts. We then analyze this data in order to determine the origins of this data, the volume, how similar or different it might be from other newly allocated network blocks and finally whether there are some simple mechanisms that can help alleviate the problem.

Speakers
Michael Bailey, University of Michigan
Geoff Houston, APNIC
Farnam Jahanian, University of Michigan
Manish Karir, Merit Network
George Michaelson, APNIC
Eric Wustrow, Merit Network

Recordings
Full Abstract

Google is one of the few content providers that is embracing IPv6. This presentation will describe the reasons why, what Google has achieved in terms of IPv6 adoption, and what challenges had to be overcome along the way. It will briefly describe barriers to adoption and how Google is working to help the Internet community overcome them. It will show how networks can access virtually all Google services over IPv6 at production quality, how a number of substantial networks are already doing this today, and provide brief statistics of IPv6 deployment among Google users.

Speakers
Lorenzo Colitti, Google

Full Abstract

We present a detailed comparison of the IPv4 and IPv6 routing tables: the autonomous systems that participate in each, the prefixes they advertise and transit, and the economic relationships that are encoded in the ASPaths. Many of the relationships evident in the growing IPv6 table are replications of existing relationships between IPv4 peers, but a surprisingly large percentage are novel. We attempt to read the tea leaves and figure out what the emerging structure of the IPv6 routing table implies for the near-term adoption curve, as IPv4 space becomes increasingly precious.

Speakers
Jim Cowie, Renesys Corporation
Clint Hepner, Renesys Corporation

Full Abstract

This presentation will provide an introduction to the ongoing work on BGP prefix origin validation. As has been discussed in NANOG before and witnessed by several incidents in the past, prefix hijacking in BGP is a real issue. In conjunction with the SIDR working group at IETF, a framework has been designed and implemented to validate the origination AS of BGP routes. The slides will touch upon the implementation details and deployment models.

Speakers
Pradosh Mohapatra, Cisco Systems
Pradosh Mohapatra works in the core routing business unit at Cisco systems where his focus is on building the next-generation core routing platform and operating system. His expertise lies in routing protocols where he has wide implementation experience with BGP, IS-IS, and LDP. Prior to joining Cisco, Pradosh worked at Procket Networks as a protocol developer.

Full Abstract

802.1aq Shortest Path Bridging is being standardized by the IEEE as an evolution of the various spanning tree protocols. 802.1aq allows for true shortest path routing, multiple equal cost paths, much larger layer 2 topologies, faster convergence, vastly improved use of the mesh topology, single point provisioning for logical connectivity membership (E-LINE/E-LAN/E-TREE etc), abstraction of attached device MAC addresses from the transit devices, head end and/or transit multicast replication all while supporting the full suit of 802.1 OA&M. This tutorial will give an overview of 802.1aq, how it works, some discussion of where it applies and then will conclude with a peek at a 30+ node network consisting of several real switches and an emulator. Using some generic graphical tools and a CLI we will explore the behavior visually and also textually in a bit of detail.

Speakers
Peter Ashwood-Smith, Huawei Technologies Canada

Tuesday, June 15, 2010
Topic/Presenter
Recordings
Full Abstract

The speaker will discuss some of the challenges of designing and operating an enterprise grade QoS at one of the largest enterprise network with multivendor equipment peering with different MPLS providers with different contractual agreements.

In addition, he will discuss the development of commit scripts to handle various business logic and Capirca, Google's ACL management software that has been open sourced to the community.

Speakers
Tim Chung, Google

Full Abstract

Speakers
Jon Shipman, Justin.tv

Full Abstract

You are invited to visit the Vendor Collaboration Room during its open hours to learn about the support of IPv6 capabilities in a variety of networking equipment.A10 Networks

Recordings
Full Abstract

The Research Form will include:

  • Evaluating Potential Routing Diversity for Internet Failure Recovery

    by Bin Liu and Chengchen Hu, Tsinghua University; Kai Chen and Yan Chen, Northwestern University

    As the Internet becomes a critical infrastructure component of our global information-based society, any interruption to its availability can have significant economical and societal impacts. However, despite many research which tried to improve the resilience through the BGP policy-compliant paths, it has been demonstrated that the Internet is still highly vulnerable when major failures happen.

    In this work, we aim to overcome the inherent constraint of the existing BGP-compliant recovery schemes and, and propose to seek additional potential routing diversity through Internet eXchange Points (IXPs) and relaxing BGP peering links. The focus of this paper is to evaluate the potentiality of these two schemes, rather than on their implementations. Using our most complete AS link map with 31K nodes and 142K links, we demonstrate that the proposed schemes can recover 40% to 80% of disconnected paths on average (which cannot be recovered via BGP), with rich path diversity to avoid congested links. Our work suggests a promising venue to address the Internet failures.

  • A value-based framework for Internet peering agreements

    By Amogh Dhamdhere, CAIDA; Pierre Francois, UCL; Constantine Dovrolis, Georgia Tech

    Internet Service Providers (ISPs) use complex peering policies, stipulating various rules for peering with other networks. Peering strategy is often considered a ``black art'' rather than science, and the outcome of a peering negotiation can depend on factors that are neither technical nor economic. Consequently, ISPs do not have a clear idea of the networks they should peer with, and the price they should demand/offer to ensure a stable peering link. We propose a quantitative framework for settlement-free and paid-peering links, based on the ``value'' of a peering link, i.e., the benefit that networks see from that link. We first study a solution where a centralized oracle determines a provably stable, optimal and fair price for a paid-peering link, based on perfect knowledge of the revenues and costs of each network. We next show that with perfect knowledge, the centralized solution can be implemented individually by the peering networks. We then study the effects of inaccurate estimation of peering value by the peering networks. Finally, we examine how value-based peering affects the density of peering links, the nature of end-to-end paths, and the profitability of various network types in the global Internet.

  • DNSSEC Visualization

    By Casey Deccio, Sandia National Laboratories

    As DNSSEC adoption grows, more and more DNS administrators are signing their zones because of mandate, technical interest, or actual security need. However, the pervasiveness of DNSSEC misconfigurations in signed zones has shown that deployment is non-trivial. As increasing organizations begin deploying validating resolvers the misconfigurations will result in resolution failure. DNSSEC troubleshooting tools exist, but have historically been catered towards seasoned users and have not been comprehensive enough to identify issues among hierarchical and lateral dependencies. While they often confirm the problem, it is not easy to pinpoint the source. DNSViz was created to help administrators see the "entire picture" graphically from name queried to trust anchor. I will discuss as part of the presentation some of the common problems encountered with DNSSEC deployment, some techniques to help troubleshoot, and how DNSViz automates this process.

  • EyeP: Visualizing IPv4 Address allocation and usage

    By Lucas Wang, Lixia Zhang

    In this slides deck, we present a visualization tool EyeP to better understand IPv4 address allocation and usage in BGP. By using our tool, it's very convenient to capture where in address space have addresses been issued and what address blocks still remain unallocated. In addition, by correlating with global BGP routing table, we are able to see how many prefixes are announced within each allocated address block. We also observed that (1) around 25 /8 amount of addresses are allocated and are not announced in BGP, (2) 2000 ASes announced 1 ~ 1.5 /8 amount of unallocated prefixes in history. A subset of BGP monitors even observed 8 ASes, in different periods, announcing a long list of unallocated /8 prefixes.

Speakers
Moderator - Mohit Lad, None
Kai Chen, Northwestern University
Yan Chen, Northwestern University
Casey Deccio, Sandia National Laboratories
Casey Deccio is a Senior Member of Technical Staff at Sandia National Laboratories in Livermore, CA. He joined Sandia in 2004 after receiving his BS and MS degrees in Computer Science from Brigham Young University, and he is currently a PhD candidate at the
University of California, Davis. Casey's research interests lie primarily in modeling and analysis of DNS and DNSSEC, and he led
Sandia's DNSSEC deployment efforts.

Amogh Dhamdhere, CAIDA
Amogh Dhamdhere is currently a post-doctoral researcher with CAIDA, based at UCSD. Prior to joining CAIDA, he received his Ph.D. degree in Computer Science from Georgia Tech in 2009, and a bachelor's degree from Mumbai University in 2002. His research interests lie in the areas of Internet economics, Internet topology, and techniques for network monitoring/troubleshooting.

Constantine Dovrolis, Georgia Tech.
Pierre Francois, UCL.
Chengchen Hu, Tsinghua Unversity
Chengchen Hu received his B.S. degree from department of automation, Northwestern Polytechnical University, Xian, China, in 2003; and his Ph. D. degree from the department of computer science and technology, Tsinghua University, Beijing, China, in 2008. He is currently a postdoctoral research fellow in the department of computer science and technology of Tsinghua University. His research interests include high performance routers, traffic management and network measurement.

Bin Liu, Tsinghua Unversity
Lucas Wang, None
Lucas ( Jiangzhe) Wang is a Ph.D student in Internet Research Lab(IRL), UCLA. He is currently working on IP address allocation schemes to reduce fragmented address allocations, as well as anomaly detection for BGP prefix announcements. Together with Ricardo Olivera and Lixia Zhang, he built an IP address allocation and BGP RIB prefix monitoring system called "EyeP". Before joining UCLA in Sep/2009, he received his B.E. in software engineering from Nankai University (China).

Lixia Zhang

Full Abstract

Speakers
NANOG Staff

Full Abstract

The talk will focus on roles of ASICs in the design of modern high performance routers. The benefits of ASICs will be discussed and contrasted with other technologies. The talk will highlight the various tradeoffs in ASIC system design including silicon technology, chip partitioning, and memory technology. The important steps in ASIC design and verification, from concepts to production, will also be presented.

Speakers
Chang-Hong Wu, Juniper Networks

Full Abstract

After the earthquake that has destroyed Haiti on January 12, 2010, a lot of questions arise on how to get Internet infrastructure more resilient and reliable to survive and allow communications in emergency times. Right after the earthquake the newly settled IXP has survived and has allowed connectivity with the international Internet. That has permit people to use Facebook, twitter, Skype to communicate with their family locally or abroad. People under rubble have used mobile devices to send SOS messages.

Months after the tragedy some hot topics remain present:

  • Need for a renewable energy system to backup commercial power

  • Redundancy for submarine cable and other critical interconnection points

  • Plan for restoring submarine cables

Speakers
Moderator - Reynold Guerrier, Haiti Technology Group
Reynold Guerrier is a network engineer for over 14 years experience of which 6 had firmly placed to lead the technical direction of one of the largest ISPs in Haiti. He has a Master degree in mobile networks. He is currently the treasurer of the AHTIC which he is also a founding member. In 2009, he created with some colleagues the Haiti Technology Group whose objective is to provide monitoring services and customer support to ISPs.

Panelist - Max Larson Henry, OLPC-Haiti Project
Max Larson Henry is the IT Manager at the OLPC-Haiti Project, responsible for the deployment of a Wireless Network for Internet provisioning in the fourty schools of the project in rural Area in Haiti. Prior to joining OLPC, he was the Technical Director at Multilink. Previous to that, he was an ICT consultant at the office of the Minister of Public Works, Transport and Communication. He is also working for the State University of Haiti managing the Haitian ccTLD. A founding member of AHTIC, Max holds a MSc. in Database and System integration from CERAM(Centre Europeen de Recherche en Management), and a B.Sc. from the Faculty of Sciences of the State University of Haiti.

Full Abstract

CORESITE, Hurricane Electric

Full Abstract

X.509 Certificates and Public Key authentication are a well known and wide spread technology for authentication.

CACert offers free digital certificates built on a web-of-trust model of authentication. If you had one of the Thawte Web of Trust certificates, this is much the same and still Free. (No Verisign fees).

Owen DeLong is a CA Cert Assurer. Other Assurers are invited to participate as well.

You will need to bring at least one, preferably two pieces of Government issued ID (originals, not photocopies) to get assured. If you do not yet have a CA Cert identity, please create one prior to the session.

Speakers
Owen DeLong, Hurricane Electric

Full Abstract

A decade of research has been devoted to addressing vulnerabilities in BGP. The result is a plethora of BGP security proposals, each providing different types of security guarantees. To inform decisions about which of these protocols should be deployed in the Internet, we *quantify* and *compare* the ability of these protocols to blunt BGP "traffic attraction" attacks, namely, when an attacker manipulates BGP messages to blackhole traffic (e.g. prefix hijacks a la AS7007, Pakistan Telecom/YouTube), or intercept traffic (e.g. BGP man-in-the-middle attacks a la Pilosov & Kapela). We run simulations of traffic flow on maps of the Internet’s AS-level topology to determine and compare the impact of attacks on different BGP security protocols. The key implication of our work is that route filtering can be as effective as cryptographic routing protocols like Secure BGP (S-BGP) and secure origin BGP (soBGP).

Speakers
Sharon Goldberg, Microsoft Research & Boston University

Full Abstract

Prefix hijacking, in which an unauthorized network announces IP prefixes of other networks, is a major threat to the Internet routing security. Existing detection systems either generate many false positives, requiring frequent human intervention, or are designed to protect a small number of specific prefixes. Therefore they are not suitable to protect data traffic at networks other than the prefix owner during on-going hijacks.

We design and implement a system that detects a specific type of prefix hijacking, large route leaks, at real time and without requiring authoritative prefix ownership information.

In a large route leak, an unauthorized network hijacks prefixes owned by multiple different networks. By correlating suspicious routing announcements along the time dimension and comparing with a network’s past behavior, we are able to identify a network’s abnormal behavior of offending multiple other networks at the same time. Applying the detection algorithm to routing data from 2003 through 2009, we identify five to twenty large route leaks every year. They typically hijack prefixes owned by a few tens of other networks, last from a few minutes to a few hours, and pollute routes at most vantage points of the data collector.

In 2009 there are nine events detected, none of which was mentioned on operator mailing lists, but all of them are confirmed through our communication with individual operators of affected networks. The system can take real-time routing data feed and conduct the detection quickly, enabling automated response to these attacks without requiring authoritative prefix ownership information or human intervention.

Speakers
Qing Ju, University of Arizona
Varun Khare, University of Arizona
Beichuan Zhang, University of Arizona
Beichuan Zhang is an Assistant Professor in the Department of Computer Science
at the University of Arizona. His research interests include Internet routing
architectures and protocols, network topology, content distribution, and network security. He received Ph.D. in Computer Science from the University of California, Los
Angeles (2003) and B.S. from Peking University, China (1995).

Wednesday, June 16, 2010
Topic/Presenter
Full Abstract

Alcatel-Lucent

Full Abstract

This presentation will address planning and deployment for a 50Km link between the City of San Francisco's fiber network and the Farallon Islands off the coast of San Francisco in support of the scientist on the islands and the California Academy of Sciences project to provide a high quality live streaming camera on site. The presentation will cover the requirements for a very limited budget and power consumption, issues of remote deployments, long distance microwave links over the ocean, sensitivity to the largest breeding colony the contiguous United States.

Additional network topics will be the requirement to support various services on the island via VLANs, fiber deployment to overcome distance and lightning, RF path calculations, "tuning" of the radio modulations schemes to provide the best up-time and remote support of a location that may only be accessible once a month.

Speakers
Matt Peterson, Square Inc.
Matt Peterson leads Site-Ops at Square Inc., a consumer payment start-up in San Francisco. Previously he lead Site-Ops at Meta Interfaces; where help crafted a high availability video streaming service that continues to win high praise. Matt has held career advancing roles from NOC specialist, systems administrator to systems architect. The first non-profit Internet Exchange within San Francisco was co-founded by Matt in mid 2006 - SFMIX. Mr. Peterson's work has been presented at numerous industry conferences, such as APRICOT, SANOG, BSDCon, Defcon, CCC Camp, and 802 Planet. He lives and hacks within the San Francisco Bay Area.

Tim Pozar, Independent
Tim Pozar is a telecommunications consultant specializing in network, VoIP and microwave design and deployment for government and commercial applications. Recently, for 4 years, he was the first investor and VP of Operations of a west coast ISP. He has been an entrepreneur and developer by co-founding a number of companies such as The Little Garden (AS2914) (San Francisco's first ISP), Brightmail (first commercial anti-spam company) and Omniva (digital rights management). Previous to this for 25 years, Pozar was a radio broadcast engineer for commercial and non-commercial radio stations.

Full Abstract

JDSU has found that nearly 75% of all network issues have been a simple physical layer problem such as dirty connectors.
The premise of this session is to learn why fiber connectors are the weakest link in any fiber system and how proper inspection, cleaning and connecting can greatly reduce network degradations and outages.

The session covers:
• Fiber cleaning best practices
• Fiber cable types and fiber connectors
• Making a good fiber connection
• Inspect Before You Connect process

Speakers
Tyler Vander Ploeg, JDSU
Tyler is the Product Line Manager for JDSU’s Fiber Inspection & Test business unit. His nine years of experience in the fiber optic industry includes managing fiber optic connectivity and test products, authoring white papers and conducting training and education in fiber connectivity and test. He is also involved in several industry groups and committees.

Full Abstract

GoGrid

Full Abstract

Speakers
Ondrej Filip, CZ.NIC
Michael Sinatra, University of California, Berkeley
Todd Underwood

Full Abstract

Netalyzr (netalyzr.icsi.berkeley.edu) is an edge network debugging and measurement tool. It combines a Java applet and associated Javascript run within the user's browser to perform active measurements to custom servers we operate at ICSI and Amazon EC2. Tests include basic outbound port filtering, NAT detection, native IPv6 capability, hidden HTTP proxies and caches, DNS behavior, fragmentation, latency, bandwidth, and in-network buffering.

This talk will discuss how Netalyzr's tests operate and results based on more than 100,000 executions of the tool by users around the world. Among the interesting findings are common DNS and SIP aware network proxies, significant problems with fragmentation (with implications for DNSSEC deployment), chronic edge-network overbuffering, and deliberate DNS manipulations.

Speakers
Christian Kreibich, ICSI
Vern Paxson, ICSI
Nicholas Weaver, ISCI
Nicholas Weaver is a researcher at the International Computer Science Institute in Berkeley. His focus is on network security (including worms, bots, and malcode) and network measurement and debugging.

Recordings
Full Abstract

Speakers
David Meyer, Program Committee Chair, Cisco/UO