swinog

swinog@lists.swinog.ch

7 participants
2925 discussions

Fwd: [NLNOG] BGP Filter Guide
by Arnold Nipper 22 May '17

22 May '17

fyi, Arnold -------- Weitergeleitete Nachricht -------- Betreff: [NLNOG] BGP Filter Guide Datum: Wed, 17 May 2017 13:34:38 +0200 Von: Job Snijders <job(a)ntt.net> An: nlnog(a)nlnog.net Dear NLNOGers, We recently kickstarted a small effort to create a repository of guidance on developing sane BGP filters. http://bgpfilterguide.nlnog.net/guides/ The goal is to provide a go-to place which will help you develop a comprehensive route filtering policy tailored to your specific context. The guide is not meant as "blindly copy+paste this", but it should provide you with sufficient guidance to help you create your own filters. Afterall, each network operates in autonomy and will have their own considerations. The filtering guide is in its early stages: there is work to be done to improve the readability and internal consistency, and additional topics and aspects need to be added. If you want to contribute, just submit a pull-request via https://github.com/nlnog/bgpfilterguide . The guides themselves are simple markdown files as is visible here https://github.com/NLNOG/bgpfilterguide/tree/master/guides In case you identify an area which is not yet covered by one of the guides please consider opening a 'github issue' at https://github.com/nlnog/bgpfilterguide/issues so someone else can consider writing the guide. The entire project is hosted on github and using github's jekyll service for publication. So if you clone the repository you have everything it is. Please consider contributing in the following areas: - add new guides or extend use cases - readability improvements - open issues on topics that need to be addressed I'd like to thank Erik Bais for proposing and contributing to this initiative. Kind regards, Job _______________________________________________ NLNOG mailing list NLNOG(a)nlnog.net http://mailman.nlnog.net/listinfo/nlnog -- Arnold Nipper email: arnold(a)nipper.de mobile: +49 172 2650958

1 0

Advice after hoax
by Daniel Kamm 19 May '17

19 May '17

Hey mates, Sorry for off topic, but I've just got hoaxed by someone by adding one of my email addy to quite a number of newsletter lists, manually. Though most of them are on opt-in nicely. Seems like I've tread on someones toes lately. However, I am quite curious who it was or, at least, how far infos can be discovered. I know, that a legal complaint must be opened that information can be disclosed. But what is the reason for the complaint? Rather not "Urkundenfälschung" I guess, but what? Anyone has similar experience and is able to share? Or an advice for the complaint? Thanks for your PM. Best regards, - Dan PS: None of the "Welcome" mails disclose the source IP in any part of the message.

3 2

URGENT: Looking for 2-4x Arista transceiver
by Nico Schottelius 17 May '17

17 May '17

Hello, we are in the urgent need of at least 2 (better 4) RJ45 1 Gbit/s transceiver that are compatible with Arista switches. If anyone has some lying around, please contact me off list. Best, Nico -- Werde Teil des modernen Arbeitens im Glarnerland auf www.digitalglarus.ch! Lese Neuigkeiten auf Twitter: www.twitter.com/DigitalGlarus Diskutiere mit auf Facebook: www.facebook.com/digitalglarus

1 1

## Agenda - SwiNOG#31'ers - we're ready ##
by Simon Ryf 10 May '17

10 May '17

Dear SwiNOG community, We’ve just released the agenda for SwiNOG #31 on Tuesday 30.05.2017 on top of Gurten. I even heard that apparently, we could book the place with a nice-weather-and-sunshine package. Rumours I guess, but thank you Roman ;-) Registration ends 24.05.2017 23:59:00, after that - please write us for late reg (with extra costs). Agenda http://www.swinog.ch/meetings/swinog31/agenda.asp Freifunk; not a Hotspot solution | Magnus Frühling Freifunk is a community project, first mentioned 2002, connecting humans all over Germany and further. I will present why Freifunk is more than just hotspots. Freifunks brings people together and educates them while building an open, uncensored and local mesh network. Open Ethernet Switches - Decoupling Switch Software and Hardware | Arne Heitmann (Mellanox) This presentation gives an introduction and overview to addressing network functionality independently from specifically coupled hardware and NOS via open APIs and drivers. It discusses the trends and options for using open OSs for network operations and will show different architectural models, like ONIE (Open Network Install Environment), SwitchDev and others. DANE/DNSSEC | Daniel Stirnimann (SWITCH-CERT) Why do we trust an encrypted TLS connection? We trust it because the server certificate has been signed by one of the public certificate authorities for which your application (e.g. browser) has its public key pre-installed. But can we really trust the CAs? And how can we improve TLS encryption for applications such as mail where certificate warnings cannot be shown to the user? DANE (TLSA) specifies a protocol for publishing TLS server certificate associations via DNSSEC. The presentation will show the benefit of authenticated DNS data, provide usage guidance for the TLSA record. A brief .CH domain name TLSA survey. Summarizes application support for DANE/DNSSEC. Also, a very short demo of an unsigned domain take-over to issue a domain validated certificate. VXLAN - Thinking outside the (DC)Box | Christian Kuster (Huawei) SwissIX Update | Christian Wittenhorst (SwissIX) SwissIX Update Multi-tenancy with EVPN-VxLAN in Open Networking | Attilla de Groot (Cumulus Networks) Open Networking or "Web scale networking" is the concept where you're no longer tied into a single vendor for a network solution. You're free to choose your own hardware and software. Cumulus Networks has developed a Linux distribution that runs on switches in this concept. VxLAN has become the default overlay technology in modern datacenter design. Vendors have implemented their own control plane for VxLAN tunnels in DCs. The EVPN standard (RFC7432) provides a control plane that is interoperable between vendors. We have implemented EVPN-VxLAN support that allows an overlay network being built with BGP as the control plane protocol. At this time, there is support for L2 functionalities, but there is ongoing development on support for L3 features such as VxLAN routing with Multitenancy support. In this talk these new features will be shown, the details of the protocol and the design/security implications for large scale datacenter networks. - https://tools.ietf.org/html/rfc7432 - https://tools.ietf.org/html/draft-ietf-bess-evpn-overlay-07 L3 Routing to Hypervisor | Vincent Bernat (Exoscale) A common strategy for hypervisors in cloud is to act as a bridge for the client virtual machines. This provides a known environment for clients used to flat networks and DHCP. However, this limits scalability and resilience. To solve those issues, a hypervisor running Linux can be turned into a BGP-controlled router while still exposing a flat L2 network to clients. Presenter is myself. I need 30 minutes for talk and live demo. If needed, I can use more time since I have a lot of technical details I can share. Open Slot (to be filled) Network Automation – Road trip to an automated Network | Urs Baumann (INS - Institute for Networked Technology) SDN is on the top of the hype cycle and its definition gives a lot of room for interpretation. But do we really need the whole SDN stack to take advantage of it? Most SDN solutions are anyway based on proven technologies which are well-known for many years. In this speech, I will focus on the Network Automation part of SDN, I will show you examples of „low hanging fruits", describe ways of how to start with the implementation of network automation and how to grow it to a fully automated network. Open Slot (to be filled) Social Event Looking forward to seeing all of you!!! Simon SwiNOG

1 0

IaaS in Switzerland dualstacked & BGP for all x86/amd64 workloads
by WolfSec-Support 09 May '17

09 May '17

Hello all, we are looking for an IaaS provider, who can offer: - dualstack IPv4 and IPv6 - BGP setup to 2 routers (2 VM's on your infra / IaaS platform) - vlans / "private LANs" (where we have own prefixes / PA's via upper routers) - able to run not only Linux workloads / prepared images - able to install VM's via ISO-Images (also Win/xBSD's) (normally only 64bit) - offers some "HA" - e.g. automatic start of VM on other node in case of crashed hypervisor / server etc - we want to announce v6 prefixes as well as v4/24 prefixes (only a few) great but not musthave: - based on opensource platform (backend or completely) - peers with SwissIX any hints / offers we are glad to reveice :-) Cheers Stephan

2 1

using Git as a database back-end
by Stanislav Sinyagin 03 May '17

03 May '17

hi all, I'm preparing a new release of Torrus software, and it will replace BerkeleyDB back-end with Git. It appears that libgit2 provides a new, a bit tricky in learning, but very efficient object storage, and change tracking is available out of the box. In general, you can read and write your data objects directly in the Git repository, without the need of checking in and out the files in your filesystem. Also the objects can be automatically compacted, and that allows storing millions of objects without too much load on the filesystem resources and inode count. Of course it's not a fully blown database, and not even something like MongoDB, but it really is usable and convenient for document storage systems. Here are few working examples of using libgit2 (particularly, with its Perl binding, but it's similar in other programming languages): https://github.com/ssinyagin/git_raw_excercise Also, the new Torrus branch, and changes document: https://github.com/ssinyagin/torrus-newfeatures/tree/v3 https://github.com/ssinyagin/torrus-newfeatures/blob/v3/src/doc/devdoc/v3_c… If there's interest in the topic, I will prepare a presentation for the next Swinog meeting. -- Stanislav Sinyagin Senior Consultant, CCIE #5478 ssinyagin(a)k-open.com +41 79 407 0224

2 1

spare Rack?
by Steven Glogger 03 May '17

03 May '17

Hi everybody I'm looking for a quarter or half rack with doors :) Does someone has one around which he wants to trash? :) it's for a private project. greetings -steven

1 0

Contact at Salt
by Vincent Magnin 05 Apr '17

05 Apr '17

Hi, Can someone from Salt Mobile contact me off-list regarding an issue (IKEv2 tunnel)? Best Regards, Vincent

1 0

swisscom mail problems
by Daniel Anliker 05 Apr '17

05 Apr '17

Hi Can someone from IP-Plus / Swisscom contact me off-list regarding an issue with the Mailservers xxx.bluewin.ch. (Mail or +41 62 897 66 10) Cheers, Daniel

1 0

Fwd: [swinog-core] Ausführungsverordnungen BÜPF; Vernehmlassungsverfahren / Ordonnances d'application LSCPT; procédure de consultation / Ordinanze d’esecuzione LSCPT; procedura di consultazione
by Roman Hochuli 27 Mar '17

27 Mar '17

Hello All We received attached mail to swinog-core mailinglist which is mainly used for organizing the SwiNOG events. Therefore we decided to simply forward it to the mail swinog mailinglist for general consumption. -- SwiNOG Organisation Roman Hochuli Board Member

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

swinog