Agenda

Monday, 4 June
09:00-10:00	Registration and Welcome Coffee
10:00-11:30	Opening Plenary Grand Ballroom Welcome to ENOG 15 Axel Pawlik, RIPE NCC Elena Voronina, General Manager, MSK-IX, Local Host Sergey Myasoedov, ENOG PC Chair RIPE NCC Update An update on the RIPE NCC’s activities, tools and services from Axel Pawlik. RIPE NCC Update Axel Pawlik, RIPE NCC Lightning Talks RIPE Networking App This is the first time the RIPE Networking App is being used at ENOG. This talk focuses on the app and also the development process of building a mobile phone application and some of the pitfalls we came across while developing a multi-platform mobile app. More information about the RIPE Networking App RIPE Networking App Adam Castle, RIPE NCC RACI: The RIPE Academic Cooperation Initiative The RIPE NCC is looking for talented researchers in the field of Internet technology to share their research with the RIPE community as part of the RIPE Academic Cooperation Initiative (RACI). Successful applicants will receive complimentary tickets, travel and accommodation to the meetings (RIPE, MENOG, ENOG and SEE) and the opportunity to present their work to some of the leading technical figures in the Internet world. RACI: The RIPE Academic Cooperation Initiative Gergana Petrova, RIPE NCC Operators and IETF Back in 2014 operators’ community self-organized and provided feedback to the IETF on the aspects that appear to be sub-optimal or inefficient regarding the participation of operators and adherence to their requirements and input into Internet technology evolution processes. Four years have passed since, and IETF leadership would like to report to operations community on what has been done, what is in the plans, what is IETF up to, and how it could be improved further. IETF as an organization works best on specific technical problems. It does not necessary has enough of the operational input on what those problems are and whether the proposed solutions would in fact address the operator’s requirements. This is a communications problem – two way communication in fact, for gathering the requirements from the field and developing solutions, and for spreading the information on the new architectural directions and technical solutions. This is a panel style discussion led by IESG and IAB members and meant to present the work done to address the operators’ engagement concerns, briefly discuss major new development areas in the IETF, and to start an ongoing communication channel between IETF and ENOG communities. Operators and IETF Participants: Ignas Bagdonas, Jeff Tantsura, Alexey Melnikov
11:30-12:00	Coffee Break
12:00-13:30	Plenary Grand Ballroom TLS 1.3: What’s New We very soon will have (hopefully) new specification of TLS protocol – TLS 1.3. The presentation describes major changes introduced by this protocol and what does it mean for end users an companies. TLS 1.3: What’s New Belyavskiy Dmitry Status Update on DMARC Work in IETF: Deployment Experience and What is Next Alexey Melnikov, IETF Area Director BGP Wedgies and How to Avoid Them (RACI) BGP Wedgies (Informational RFC 4264) occur when routing policies interact in a way that unwanted stable routing. Examples will be presented. Recent theoretical results suggests a “rule of thumb” for mitigation. BGP Wedgies and How to Avoid Them (RACI) Timothy Griffin, University of Cambridge Lightning Talk IDN Universal Acceptance. Status of the Question Andrey Vorobyev, .RU / .РФ Domain Coordination Center
13:30-15:00	Lunch
15:00-16:30	Plenary Grand Ballroom Anti Spoofing. Reboot Volumetric DDoS attacks have become the real threat to Internet stability. Their source is poorly configured services that allow amplifying attacks combined with the opportunity to spoof source IP address. Majority of these vulnerable services are not under control of ISPs, but ISP controls traffic. During these report, I will reevaluate common ways to detect spoofed traffic and discuss possible future solutions. Anti Spoofing. Reboot Alexander Azimov, Qrator Labs Why Internet is Still On-line? Panel discussion about connectivity problems in the Internet. Why Internet is Still On-line? Moderator: Aleksey Uchakin, LinkmeUp Participants: Martin J. Levy, Cloudflare; Ignas Bagdonas, Equinix; Alex Semenyaka, RIPE NCC; Alexander Asimov, Qrator Labs.
16:30-17:00	Coffee Break
17:00‑18:30	Tutorial 1 Grand Ballroom Netconf/YANG tutorial Tutorial about network programmability. We can start with Netconf overview. Yang overview. How-to to play/work with it with virtual routers from Cisco, Juniper and Nokia. Also the CI/CD use to make it possible to test services on the virtual routers connected in the LAB network segment. Netconf/YANG tutorial Evgeny Zobnitsev, Factor Group Russian Language with simultaneous translation in English	Workshop Troitsky Room ROA Signing Party Alex Semenyaka RIPE NCC, Alexander Azimov Qrator Labs. Russian Language Only
18:30‑19:00	BoF Grand Ballroom Russian Regulations What is regulated by the states, what are regulatory objects and subjects? How regulations affects networks (and network engineers)? Which technical measures had to be implemented in Russia to comply local regulations? (Compared to another ENOG or RIPE region) How network professionals can participate and affect regulations? How networking professionals and Internet infrastructure businesses should cooperate, to create comfort regulatory environment? Are we too late? Russian Regulations Moderator: Alexander Isavnin
20:00-onwards	Networking Dinner

Tuesday, 5 June
09:30-10:00	Registration and Welcome Coffee
10:00-11:30	Plenary Grand Ballroom IPv6 Multihoming for Enterprise Networks The presentation discusses the most common scenarios of connecting an enterprise network to multiple ISPs using IPv6 address space assigned by an ISP. IPv6 Multihoming for Enterprise Networks Jen Linkova Users’ Fingerprinting Techniques from TCP Traffic (RACI) Encryption at the application layer is often promoted to protect privacy, i.e., to prevent someone in the network from observing users’ communications. In this work we explore how to build a profile for a target user by observing only the names of the services contacted during browsing, names that are still not encrypted and easily accessible from passive probes. Would it be possible to uniquely identify a target user from a large population that accesses the same network? Aiming at verifying if and how this is possible, we propose and compare three methodologies to compute similarities between users’ profiles. We use real data collected in networks, evaluate and discuss performance and the impact of quality of data being used. To this end, we propose a machine learning methodology to extract the services intentionally requested by users, which turn out to be important for the profiling purpose. Results show that the classification problem can be solved with good accuracy (up to 94%), provided some ingenuity is used to build the model. Users’ Fingerprinting Techniques from TCP Traffic (RACI) Luca Vassio, Politecnico di Torino Country View on Russia “Country View On Russia” is a follow-up on the presentation “Country View on Belarus” at ENOG 14, which moves the focus from Belarus to Russia and pays specific attention to the intersection between Internet and economy. The three main highlights are: – IPv4 Depletion – Internet and Economy – IPv6 The presentation is concluded with the latest results based on active Internet measurements from RIPE Atlas and other networks. Country View on Russia Christian Teuschel, RIPE NCC Lightning Talk CAREN for IPv6 Deployment and Measurement Practices in Central Asia (RACI) Almaz Bakenov, American University of Central Asia
11:30-12:00	Coffee Break
12:00-13:30	Plenary Grand Ballroom ASN Routing Policies in RIPE DB Aim of the report to explore import/export policies described in ASN objects used by Russian ISPs in RIPE DB: Is it actual (compare to BGP) Explore AS-SET objects: num of ASNs, IPv4 and IPv6 prefixes Test AS-SETs for loops ASN Routing Policies in RIPE DB Dmitrii Kovalenko, ididb.ru 1.1.1.1 On April 1st, Cloudflare announced DNS resolver 1.1.1.1 on it’s blog. This talk will review that offering. It will also provide an update on how the routing for that address was cleaned up globally. 1.1.1.1 Martin J. Levy, Cloudflare, Inc. Current State of the Root Zone DNSSEC Keyroll The DNS root zone KSK roll, originally intended for 11 October 2017, has been postponed. The reason for the postponement is newly available data, described in the IETF’s “Signaling Trust Anchor Knowledge in DNS Security Extensions (DNSSEC)” (known as RFC 8145), which suggests some recursive servers are not sufficiently ready. This presentation will include details on the reason for the postponement, a plan for resuming as well as advice on how operators can prepare (if they haven’t already) for the new KSK. Current State of the Root Zone DNSSEC Keyroll Edward Lewis, ICANN Lightning Talk Anycast Routing Implementation for Caching DNS Servers in Volga TTK MR Denis Mikhlevich
13:30-15:00	Lunch
15:00-16:30	Plenary Grand Ballroom Euro-IX Update including the IXPDB and Tools Internet Exchange Points (IXPs) are network facilities that enable the interconnection of three or more independent networks, primarily for the purpose of facilitating the exchange of Internet traffic. IXPs are considered core Internet infrastructure and carry a growing percentage of the world’s Internet traffic. While there are a number of disparate websites and resources, which contain various data on IXPs, none are globally authoritative and fully comprehensive. This makes it difficult for network operators, researchers and other interested parties to make informed decisions related to the global Internet ecosystem. The Internet eXchange Federation (IX-F), has developed a system that will fill this gap. It will acquire data directly from IXPs through automation; aggregate and promote useful third-party data sources; and provide valuable insight, reporting, data export and visualisation functionality. Aim is to work closely with the Internet technical community throughout the project and host workshops that help to promote use of the system and encourage the application of best common practices (BCPs). This presentation talks about the database and our future plans. Euro-IX Update including the IXPDB and Tools Rebecca Class-Peter, Euro-IX Lightning Talk PeeringDB Update PeeringDB is around since 14 years now and is the only DB where you can find interlinked information you need for interconnection. Networks (aka ASN), IXP and Colocation. As PeeringDB proved to be so critical for day-to-day operations an association was founded to be able to guarantee a long term future and financial stability. Several committees are taking care for support, the infrastructure and future feature development. This talk highlights recent developments and is looking for input from the community esp. regarding internationalisation of the GUI. PeeringDB Update Arnold Nipper, PeeringDB RIFT – Routing in FAT Trees Jeff Tantsura, Nuage Networks Memcache Amplification DDoS: Lessons Learned In November 2017, researchers have found a new class of amplification DDoS attacks: the memcached amplification. At the beginning of March 2018 those attacks were already in the wild, with a bandwidth close to 1,7 Gbps. What we’re going to discuss is an analysis of the threat structure, causes and consequences, and what we’re able to do to prevent such issues from happening next time. Memcache Amplification DDoS: Lessons Learned Artyom Gavrichenkov, Qrator Labs
16:30-17:00	Coffee Break
17:00-18:30	Closing Plenary Grand Ballroom OpenDataPlane Project OpenDataPlane (ODP) is an open source API for network data plane applications, representing the abstraction between a network chip and an application. Now vendors, such as TI, Freescale, Cavium, are releasing an SDK with ODP support on their SoC chips. If we draw an analogy with the graphic stack, then ODP can be compared with the OpenGL API, but for network programming field. The idea this presentation is to tell about the ODP API, internal structure and show some performance metrics. Using ODP as an abstraction of real hardware allows you to avoid vendor locks, get better performance and the most import – to not be involved into the details of the configuration and optimization of the device where application is launched. Networking can be divided into 2 components: control plane – for configuration, and data plane – for data processing . Because the hardware of different manufacturers (network SoC) works differently, has different offload modules, implemented in different SDKs, has different I/O ports, and so on – a problem in writing high-performance applications that do not depend on the hardware platform and at the same time use hardware accelerators exist. The same application can run as bare metal, and in linux and inside the VM. The SoC hardware manufacturer knows all details of his device and can create implementation of ODP API for that platform. At the same time, a developer who writes an ODP application, simply uses the ODP API and gets the maximum performance. OpenDataPlane Project Maxim Uvarov, Linaro Networking Group Role of Machine Learning in Network Monitoring and Automation Network analytics is enabled by large scale collection of routing topology, traffic, and performance data from the devices. This data can then be machine learned for trends, anomaly detection and clustering. In this talk, we present several service provider use cases in network monitoring and automation spce and show how network analytics and machine learning enables realizing the use cases. Role of Machine Learning in Network Monitoring and Automation Cengiz Alaettinoglu, Packet Design Lightning Talks RIPE IPmap Victor Naumov, RIPE NCC Work in RIPE WGs Alex Semenyaka, RIPE NCC Operation of 9.9.9.9 DNS Nishal Goburdhan, PCH.NET Farewell
18:30‑20:30	Closing Reception

Этот текст также доступен на русском