swinog October 2026

swinog@lists.swinog.ch

7 participants
4 discussions

DNSSEC Root KSK Rollover this weekend
by Oli Schacher 13 Oct '26

13 Oct '26

Hi everyone, Just a reminder that the next DNSSEC root Key Signing Key (KSK) rollover is coming up on 11 October 2026. For those operating DNSSEC-validating resolvers, it might be worth double-checking that your resolvers have picked up the new KSK-2024 trust anchor (key tag 38696) through standard software updates or RFC5011. There's a handy test provided by Cloudflare to check whether your resolvers are ready: https://dnstest.dev/ksk-2024/ Cheers, Oli

4 3

SwiNOG #42 - Agenda Published
by Simon Ryf 12 Oct '26

12 Oct '26

Dear SwiNOG community, The Agenda for SwiNOG #42 - Tuesday 20th & Wednesday 21st of October 2026 is published! https://www.swinog.ch/meetings/swinog42<https://www.swinog.ch/meetings/swinog42/> 📋 SwiNOG #42 - Agenda 📅 Day 1 - Tuesday, October 20 12:00 🍽 Lunch & Networking (60 min) 13:00 Welcome & Opening 13:10 Dominik Haenni | Zurich Forensic Science Institute Reality, Rewritten: AI as Forger and Investigator 13:55 Daniel Schatzmann Automating Target Discovery in the gNMIc Operator 14:20 Mischa Diehm | narrowin On-prem LLM Cluster for Network and Security Analyses 14:45 Remi Locherer | Arista Networks Networking for AI 15:10 ☕Coffee Break (40 min) 15:50 Simon Schlauri | Ronzani Schlauri Attorneys Internet Domain Blocking: Current Legal Situation and Outlook 16:20 Yannick Gautier | Nokia From Connectivity to Cyber Resilience: Defense in Depth 16:50 Marco Martinez | Swisscom Managing IP Allocation with an Open-Source DDI 17:15 Pascal Gloor | /dev/true Who are you? 17:25 Closing Day 1 17:30 🍽 Apéro & Dinner 19:00 🤖 Guided Museum Visit 📅 Day 2 - Wednesday, October 21 09:00 Welcome & Opening Day 2 09:05 Claudio Jeker | RSSF Beyond RPKI Origin Validation: BGP Roles & ASPA 09:30 Tobias Bühler | NetFabric From Lab to Production: The Hard Parts of Agentic NetOps 09:55 Alexander North | Swisscom The Cloud-Native Advantage: Intent-based Network Automation 10:20 ☕ Coffee Break (30 min) 10:50 Fabian Schulz | Swisscom The Accidental Platform Team: Kubernetes Operators 11:15 Martin Winter | NetDEF / FRRouting FRRouting Open Discussion 11:35 Fiona Weber | WDZ / Wobcom Small BNGs 12:00 Gianpaolo Del Matto | THE PHINTAGE COLLECTOR Retro Networks 12:20 Andrew Vieyra | CommunityRack.org CommunityRack - New Focus, New Projects, More Bits! 12:40 Thomas Fritz | Rheintal IX Rheintal IX Update 12:55 Arist Volger | SwissIX SwissIX Update 13:00 Closing Day 2 🍽 13:05 Lunch & Networking 🤝 13:30 1:1 Meetings & Personal Networking 📍 Location ENTER Technikwelt Solothurn Gewerbestrasse 4, 4552 Derendingen 🚌 Optional shuttle bus available from Solothurn railway station. 🎟 Registration For late registration - please contact us at swinog-core(a)swinog.ch Already a big "Thank You" to our Sponsors 🥇 Gold Sponsor SwissIX and supporters AWS Emitec AG Flexoptix Nokia 🛠 Tool Sponsor NIX.CZ Looking forward to seeing you all at SwiNOG #42!

1 0

Swisscom BBCS-F, XGS-PON packetloss resulting in slow TCP sessions?
by Benoit Panizzon 08 Oct '26

08 Oct '26

Hi Gang We are seeing an issue with one of our BBCS-F customers which we can not quite explain. So I wonder if you also experience the same issue with 'some' of your customers. * Swisscom Profile 1G/1G. * ZyXEL PM7300 Bridge (also swapped for Nokia Bridge or FritzBox) * PPPoE session terminated on Linux Notebook (also tested with Windows behind FritzBox). * Testing with iperf3 Result Upstream: ~900 Mbit/s as expected. Result Downstream: 1 TCP Session: ~280 Mbit/s not OK 5 TCP Session: ~500 Mbit/s not OK 10 TCP Session: ~800 MBit/s acceptable Iperf3 shows a slightly increased number of TCP retransmits. iperf3 UDP test with pushing 800Mbit/s shows about 0.2% packetloss. Well, this somehow explains why 1 TCP session does not get up to speed. Customer is working with an applications downloading large data junks from the cloud - using one TCP session at the time - of course he is not happy. Exact same set-up on another BBCS-F 1G/1G service, in a neighboring town reaches ~900Mbit/s in UP and DOWN with just one TCP session - less packetloss with UDP less retransmits. Case opened with Swisscom FAN-port was switched. Case closed. Issue got slightly better but still not acceptable. Case re-opened meeting with Swisscom/Cablex tech on customer site. He connects his test-device which shows 900Mbit/s Downstream. Our tech checks this test-device and finds out, it opens 100 concurrent TCP connections to a Swisscom Speed-Test servers - our tech asked to Swisscom tech to please re-test in a more realistic scenario, 1 to 2 TCP session. Swisscom tech does so, download speed drops to below 300 Mbit/s, upload speed is fine, confirming our measurements. So we persuaded Swisscom the issue is real, they will continue to investigate and hopefully find and fix the cause right? Case closed: Resolution: Test was performed by 'standard' Swisscom Speed-Test opening 100 concurrent TCP connections. Proof was provided that there is no speed issue with 'standard' customer behavior. Customer has to open multiple TCP connections to reach advertised speed which Swisscom considers to be the way Customers have to use their service. I managed to re-open the case to more deeply investigate, why this is the issue with this one customer and not with our reference service about 3km away reaching 900Mbit/s down with just one TCP connection. So out of curiosity: Do others also observe this 'one TCP connection slow because of slight packetloss' issue with some BBCS-F customers? Is there known cause and solution? Mit freundlichen Grüssen -Benoît Panizzon- -- I m p r o W a r e A G - Leiter Commerce Kunden ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 Pratteln Fax +41 61 826 93 01 Schweiz Web http://www.imp.ch ______________________________________________________

1 0

SwiNOG #42: full program online, registration closes Monday 09:00
by Roman Hochuli 08 Oct '26

08 Oct '26

Dear SwiNOG community, The full program for SwiNOG #42 is online: https://www.swinog.ch/meetings/swinog42/ The essentials: - When: Tuesday, October 20 (from 12:00) to Wednesday, October 21, 2026 - Where: Enter Technikwelt Solothurn, Gewerbestrasse 4, Derendingen - Fee: CHF 150 to 220 (incl. social event) - Registration closes: Monday, October 12, 09:00 The lineup (single track): - Tobias Bühler (NetFabric): From Lab to Production: The Hard Parts of Agentic NetOps - Gianpaolo Del Matto (The Phintage Collector): Retro Networks - Mischa Diehm (narrowin): On-prem LLM cluster for network and security analyses - Thomas Fritz (Rheintal IX): Rheintal IX Update - Yannick Gautier (Nokia): From Connectivity to Cyber Resilience: Defense in Depth for the Connected Enterprise - Pascal Gloor (/dev/true): Who are you? - Dominik Haenni (Zurich Forensic Science Institute): Reality, Rewritten: AI as Forger and Investigator - Claudio Jeker (RSSF): Beyond RPKI Origin Validation: what do we gain with RFC 9234 (BGP Roles) and ASPA - Remi Locherer (Arista Networks): Networking for AI - Marco Martinez (Swisscom): Managing IP Allocation with an Open-Source DDI - Alexander North (Swisscom): The Cloud-Native Advantage: Intent-based Network Automation - Daniel Schatzmann: Automating Target Discovery in the gNMIc Operator - Simon Schlauri (Ronzani Schlauri Attorneys): Internet Domain Blocking: Current Legal Situation and Outlook on the Current Revision of the Telecommunications Act - Fabian Schulz (Swisscom): The Accidental Platform Team: Kubernetes Operators at Swisscom - Andrew Vieyra (CommunityRack.org): CommunityRack: New focus, new projects, more bits! - Arist Volger (SwissIX): SwissIX: the mandatory 5' update before lunch - Fiona Weber (WDZ / Wobcom): Small BNGs - Martin Winter (NetDEF / FRRouting): FRRouting Open Discussion Day 1 ends with an apero, followed by dinner, networking and a guided tour of the Enter museum (social event ticket required). New this time: bilateral meetings on day 2 On the afternoon of the second day, we set aside dedicated time and space for bilateral meetings. To help you make the most of it, SwiNOG is using NIX.CZ Meet for the first time. It's a well-established meeting tool already used at many other industry conferences. You can see who's attending, request meetings and fix your slots in advance, so you arrive with a plan rather than hunting people down in the hallway. All registered participants will receive an invitation email for the tool soon, which is one more reason to register before Monday. Many thanks to NIX.CZ for providing the tool. Getting there: Solothurn is about an hour from Bern and 1h20 from Zurich. There's a shuttle bus from Solothurn station to the venue (CHF 20, add it during registration; regular public transport tickets aren't valid on it). Parking is available on site. Thank you to our sponsors SwiNOG is run by volunteers and stays affordable thanks to the support of our sponsors. A big thank you to: - Gold Sponsor: SwissIX - Supporters: Emitec AG, Flexoptix, Nokia - Tool Sponsor: NIX.CZ If you've been on the fence, now is the time, and bring your colleagues along. https://register.swinog.ch See you in Solothurn! SwiNOG Core Team

1 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

swinog October 2026