back to meeting agenda.

Monday Meeting Registration
Date/Time 7:30 AM to 5:00 PM
Location Grand Foyer
back to meeting agenda.
Monday Extended Breakfast
Date/Time 7:30 AM to 9:45 AM
Location Pacific B-K
Sponsors
Digital Realty
Kentik
back to meeting agenda.
Monday Espresso Bar
Date/Time 8:30 AM to 4:30 PM
Location Market Street Foyer
Sponsors
LightRiver Technologies
back to meeting agenda.
NANOG 75 Conference Opening
Date/Time 10:00 AM to 10:30 AM
Location Grand Ballroom
Presenters
Speaker
L Sean Kennedy
L Sean Kennedy is an active member of the Internet Engineering community and Chairperson of the NANOG Board of Directors.
Tina Morris, Amazon Web Services
Tina Morris is currently a Technical Developer at Amazon specializing in the strategy and deployment of IPv4 and IPv6 address resources. Prior to this Tina was working as a Network Engineer in the Cable Industry at Time Warner Cable and Bright House Networks for 10+ years and she has been in a role focused on IP strategy since 2009.
Edward McNair, NANOG
Michael Devito, Digital Realty
Brad Raymo, StackPath
I have been in the industry for over 9 years now. I started in the NOC as a level 1 technician and have worked my way up from there. My main focus over the past 5 years has been on interconnection. Prior to joining the Program Committee I served on the Communications Committee where I was responsible for social media outreach. I am excited to see where the industry goes and how I can impact it.
Presentation Files
Video Files
back to meeting agenda.
Should I run my own RPKI Certificate Authority?
Date/Time 10:30 AM to 11:00 AM
Location Grand Ballroom
Presenters
Speaker
Alex Band, NLnet Labs
Martin Hoffmann
Abstract Since 2011, the five RIRs have been offering Resource Public Key Infrastructure (RPKI) systems, aimed at making Internet routing more secure and reduce the risk of BGP hijacking. These systems allow members to log into web-based portals to request an RPKI certificate and use it to publish Route Origin Authorization (ROAs). In the hosted setup certificates, and keys, and signed products are all kept and published in the RIR infrastructure. However, four out of five RIRs also allow members to run their own RPKI infrastructure as a so-called Delegated RPKI Certificate Authority. LACNIC as the last RIR not to provide this option yet, is committed to have this functionality available by the end of 2019. While a hosted set-up serves many small ISPs well, there may be good reasons to run your own infrastructure instead. Possible use cases exist for: - Operators who require easier RPKI management that is integrated with their own systems in a more streamlined way - Operators who are security conscious and require that they are the only ones in possession of the private key of a system they use - Operators who want to be operationally independent from the parent RIR, such as National Internet Registries (NIRs) or Enterprises - Operators of global networks may wish to operate a single system, rather than maintain ROAs in up to five web interfaces. However, running your own CA comes at a cost. The talk will discuss these as well as possible mitigation strategies. For instance, providing the necessary availability can be managed by outsourcing publication to a cloud service provider. Finally, the talk will look into existing and upcoming options for deploying a CA. At the end of the talk, interested users will have a better understanding of which choice is best for their organization.
Presentation Files
Video Files
back to meeting agenda.
Overcoming challenges at the Oregon Country Fair
Date/Time 11:00 AM to 11:30 AM
Location Grand Ballroom
Presenters
Speaker
Jay Hennigan, Impulse Advanced Communications
Jay Hennigan is the Chief Network Architect for Impulse Advanced Communications, a network service provider based in Santa Barbara, California. Prior to Impulse Jay was one of the founders of WestNet Communications. He is an active volunteer with the Oregon Country Fair and is responsible for the recent deployment of CMTS technology there. Jay is CCIE #7880 and holds an FCC General Radiotelephone license.
Abstract The Oregon Country Fair is a three-day festival in a forested area with very limited cellular coverage. Most of the area has no grid power. Over 900 artisans and 90 food vendors serve upwards of 40,000 visitors during the July event. Providing payment card access to the nearly 1,000 vendors has been an ongoing challenge. The OCF IT crew has leveraged cable system technology to deploy a distributed wi-fi network throughout the fairgrounds. Challenges include powering the radio equipment, good coverage in the foliage, limiting access to necessary services, and environmental issues as the area is a flood zone in winter. Using CMTS and coaxial cable trunk lines was the key. Wireless nodes are powered via the distribution cable. The same network is also used for operational needs, security, etc.
Presentation Files
Video Files
back to meeting agenda.
Comparing the network performance of AWS, Azure and GCP
Date/Time 11:30 AM to 12:00 PM
Location Grand Ballroom
Presenters
Speaker
Archana Kesavan
Abstract Amazon Web Services, Microsoft Azure and Google Cloud all significantly invest in their backbone networks and global regional data center presence to support performance requirements. So how do these cloud networks actually behave and perform? This session will discuss the network performance and connectivity architecture findings gained from global measurements of Amazon Web Services, Microsoft Azure and Google Cloud, collected from global vantage points to cloud regions, within cloud backbones(inter-AZ and inter-region) and across clouds (multi-cloud). We’ll also share some interesting anomalies we observed in connectivity and performance stability, particularly in the Asia-Pacific region
Presentation Files
Video Files
back to meeting agenda.
Monday Lunch
Date/Time 12:00 PM to 1:15 PM
Location Pacific B-K
Sponsors
Approved Networks
Equinix
Oracle
back to meeting agenda.
Newcomers Lunch (Invite Only)
Date/Time 12:00 PM to 1:15 PM
Location Bayview Room
Sponsors
Mid-Atlantic NAP of Virginia
back to meeting agenda.
Next Gen Blackholing to Counter DDoS
Date/Time 1:30 PM to 2:00 PM
Location Grand Ballroom
Presenters
Speaker
Christoph Dietzel, DE-CIX / TU Berlin
Since June 2014, Christoph Dietzel has been member of the DE-CIX Research and Development team and is responsible for several research efforts. He is also involved in numerous projects funded by the public sector (EU, German Federal Ministries). Chris is a PhD student in the INET group, advised by Anja Feldmann at Technische Universität Berlin, since the end of 2014. His ongoing research interests focus on Internet measurements and security, routing, and traffic classification. Chris is also highly interested in IXP-related aspects of the Internet ecosystem.
Abstract Network attacks, including Distributed Denial-of-Service (DDoS), continuously increase in terms of bandwidth along with damage (recent attacks exceed 1.7 Tbps) and have a devastating impact on the targeted networks, thus, companies/governments. Over the years, mitigation techniques, ranging from blackholing to ACL filtering at routers, and on to traffic scrubbing, have been added to our defense toolboxes. Even though these mitigation techniques provide some protection, they either yield severe collateral damage, e.g., dropping legitimate traffic, are cost-intensive, or do not scale well for Tbps level attacks. In this talk we present our Next Generation Blackholing system, developed and deployed at DE-CIX by combining available hardware filters with a novel route server-based signaling mechanism. It builds upon the scalability of blackholing while limiting collateral damage by increasing its granularity. We present the design fundamentals and the building blocks while highlighting implementation challenges and performance evaluation.
Presentation Files
Video Files
back to meeting agenda.
Streaming Telemetry, 3+ year Journey
Date/Time 2:00 PM to 2:30 PM
Location Grand Ballroom
Presenters
Speaker
Mike Korshunov, TME @ Cisco
Technical marketing engineer in Service Provider BU @ Cisco. Care about networks and software, hackathon enthusiast.
Abstract Streaming Telemetry is a shift in paradigm to network monitoring & operations. End users decide to which models to subscribe, the common interface, such as OpenConfig can be used. Data pushed out of the device, increasing resource consumption efficiency. In this talk, we will review the current state, capabilities, toolchain used in the stack, latest developments & innovations such as gNMI and where to go next.
Presentation Files
Video Files
back to meeting agenda.
Public Speaking Forum
Date/Time 2:00 PM to 3:30 PM
Location Bayview Room
Presenters
Speaker
Christina Chu, NTT America
Christina serves as the Director of IP Strategic Planning in NTT America, Inc. She has over 20 years of experience in the Internet industry and is passionate in building communities. She has served four years in the NANOG Program Committee. She currently serves the Global Peering Forum board. Having participated in Toastmasters provides her firsthand experience the benefit of constant practice in improving one’s public speaking skills. She would love to help NANOG put together this public speaking program to nurture the community’s interest in presenting on stage.
Abstract Public Speaking Forum provides a positive and supportive environment in a small group for participants to improve self-confidence and skills in public speaking through practice and peer feedback. We will offer fifteen seats in a group with six 4-min speaking slots. Space is limited. Sign up is required. First come first served. If you sign up for a speaking slot, please prepare for a 4 mins speech with a topic of your choice. You can sign up for a speaking slot at https://www.nanog.org/meetings/nanog75/psf
back to meeting agenda.
Uncovering Remote Peering Interconnections at IXPs
Date/Time 2:30 PM to 3:00 PM
Location Grand Ballroom
Presenters
Speaker
Christoph Dietzel, DE-CIX / TU Berlin
Since June 2014, Christoph Dietzel has been member of the DE-CIX Research and Development team and is responsible for several research efforts. He is also involved in numerous projects funded by the public sector (EU, German Federal Ministries). Chris is a PhD student in the INET group, advised by Anja Feldmann at Technische Universität Berlin, since the end of 2014. His ongoing research interests focus on Internet measurements and security, routing, and traffic classification. Chris is also highly interested in IXP-related aspects of the Internet ecosystem.
Abstract Internet eXchange Points (IXPs) are Internet hubs that provide the switching infrastructure to interconnect networks and exchange traffic. While the initial goal of IXPs was to bring together networks residing in the same city or country, and thus keep local traffic local, we observe that this model is gradually shifting. Many networks connect to IXPs without having physical presence at their switch(es). This practice, called Remote Peering, is changing the Internet topology and economy, and has become subject of a contentious debate within the network operators community. However, despite the increasing attention it is drawing, the understanding of the characteristics and impact of remote peering is limited. In this work, we remove the veil between remote peering and IXPs, by introducing and thoroughly validating a methodology for discovering remote peers at IXPs. We (i) infer remote peers globally, with high accuracy (>95%), (ii) study the evolution of remote peering in time, and (iii) evaluate its impact on Internet performance and resilience. We observe that remote peering is a significantly common practice in all the IXPs studied; for the largest IXPs, remote peers account for 40% of their member base. We also show that today IXP growth is mainly driven by remote peering, which contributes two times more than local peering.
Presentation Files
Video Files
back to meeting agenda.
DNS Flag Day and beyond - how will it affect you?
Date/Time 3:00 PM to 3:30 PM
Location Grand Ballroom
Presenters
Speaker
Eddy Winstead, Internet Systems Consortium
Eddy has over 20 years of DNS, DHCP and sysadmin experience. He was a systems analyst and hostmaster for the North Carolina Research and Education Network (NCREN) for over a decade. At ISC, Eddy has delivered DNS + DNSSEC consulting, configuration audits and technical training.
Abstract A number of DNS software and service providers have announced that we will all cease implementing DNS resolver workarounds to accommodate DNS authoritative systems that don’t follow the EDNS protocol. Each vendor has pledged to roll out this change in some version of their software by the ‘Flag Day.’ Domains served by DNS servers that are not compliant with the standard will not function reliably after February 1, 2019, and may become unavailable. If your company’s DNS zones are served by non-compliant servers, your online presence will slowly degrade or disappear as ISPs and other organizations update their resolvers. When you update your own internal DNS resolvers to versions that don’t implement workarounds, some sites and email servers may become unreachable. This talk will cover the background of the changes, potential affects on Internet users/providers and testing methodologies to ensure minimal impact. *** Please note the following: We in the DNS community thought we had provided plenty of advance notice and forewarning of this flag day. We did not originally intend to give this talk at NANOG 75 as it is post flag day. However, we have received an alarming number of "OMG, will my DNS will stop working?" inquires in the past couple of weeks. It appears auditors have just started running compliance checks. As such, we feel this will now be a timely talk.
Presentation Files
Video Files
back to meeting agenda.
Monday PM Break
Date/Time 3:30 PM to 4:00 PM
Location Grand Foyer
Sponsors
Myriad360
PacketFabric
Solid Optics
back to meeting agenda.
Using open source tools to validate network configuration
Date/Time 4:00 PM to 4:30 PM
Location Grand Ballroom
Presenters
Speaker
Daniel Halperin, Intentionet, Inc.
Dan Halperin is the Head of Engineering at Intentionet. From 2015-2017, he was a Senior Software Engineer at Google and from 2012-2015 he served as the Director of Research for Scalable Data Analytics at the University of Washington eScience Institute. He is an experienced networking researcher, holding a Ph.D. in Computer Science and Engineering from the University of Washington with more than 30 published papers. His research has been awarded multiple best paper awards, and he has been awarded the Intel Foundation Ph.D. Fellowship. A veteran of open source, Dan served as co-founder and project committee member for Apache Beam since 2015, and he has contributed 40+ patches to the Linux kernel.
Abstract Bugs in network configuration can lead to security breaches and significant downtime, which in turn leads to monetary losses and damages the organization’s reputation. At the same time, network configuration is hard to get right because of the scale and heterogeneity of modern networks, the low-level nature of vendor configuration languages, and the complexity of intended policies. The emerging field of formal network validation is a direct response to this challenge. Researchers have recently developed a range of techniques to scalably and comprehensively reason about the correctness of the network configuration. I will present a network validation tool, called Batfish (www.batfish.org), along with its new Python client library, which is completely open source and has been used successfully inside many large networks. The talk will cover its software architecture, provide a hands-on view of using it for common validation tasks, and how the technology can be embed into the network’s lifecycle. The talk will include a detailed discussion of many bugs that Batfish has uncovered in real large networks.
Presentation Files
Video Files
back to meeting agenda.
Managing Network Device Properties as Code
Date/Time 4:30 PM to 5:00 PM
Location Grand Ballroom
Presenters
Speaker
Damien Garros, Network to Code
Abstract Device configuration templates have simplified a lot of things for the network industry but ​many networks are still managing their device properties (aka variables) manually which is very tedious and error prone. This talk will present a new approach to generate and manage network device properties easily using infrastructure as code principles.​
Presentation Files
Video Files
back to meeting agenda.
Peering Coordination Forum
Date/Time 5:00 PM to 6:30 PM
Location Pacific D-G
Abstract The forum provides time for attendees to meet and network with others in the peering community present at NANOG. Peering Representatives, who completed and submitted the form, will have a dedicated table for up to 2 representatives. They will be able to distribute business cards, and provide a white paper or 1 sheet marketing page. Please note, any other type of give-away is not allowed. There will also be a customized, rotating slide deck on display during the forum.
Sponsors
Ixia, a Keysight Business
back to meeting agenda.