Loading…
DevConf.cz 2016 has ended
Can’t make it to #DevConfCZ for any reason? You can still attend virtually: youtube.com/RedHatCzech

Sign up or log in to bookmark your favorites and sync them to your phone or calendar.

Networking [clear filter]
Friday, February 5
 

13:10 CET

How to Connect Imaginary Computers Using Imaginary Networks
The increasing use of virtualization and containerization technologies has led to an explosion of "virtual" network devices and technologies--tun, veth, bridges, VLAN, VXLAN, Open vSwitch, and others. This talk will give an overview of these technologies, and show how they're used in OpenShift to connect containers together in a virtual network spanning multiple physical hosts.

Speakers
avatar for Dan Winship

Dan Winship

Principal Software Engineer, Red Hat
OpenShift, sig-networkingopenshift-sdn, ovn-kuberneteskube-proxy, iptables, networking e2e testsOpenShift-specific networking features that I really should have made more effort to move upstream by now...


Friday February 5, 2016 13:10 - 13:50 CET
a. D105 (300 places)

14:00 CET

Whats the big deal about Networking?
If you have ever wondered:
* What is the big deal about networking
* Why does networking not work right out of the box
* Why is networking so complicated
* I am happy with my 192.16.1.1 address, why does the world need more complications than that?
* What is Internet of things
or any such questions please stop by and we will de-mystify it for you.

In this talk we would remove the mystery behind networking.
What are Open vSwitch, DPDK, OVN, VxLan, DPDK, Geneve and other different pieces of networking all about?
We will cover NFV applications, Openstack Applications and Container applications. And what goes on behind the scenes in the networking space.

Speakers
avatar for Rashid Khan

Rashid Khan

Director Networking, Red Hat
Red hat networking team out of westford
HS

Hannes Sowa

Red Hat
As a heavy user of the linux networking stack I also sometimes spotted problems, which one day got me to submit my first patches. I regularly tried to review patches and solve problems in the IPv6 stack, when they came up. This got me the opportunity to join Red Hat's kernel networking... Read More →


Friday February 5, 2016 14:00 - 14:40 CET
c. D0207 (90 places)

14:50 CET

New Features in Open vSwitch
In the past year, Open vSwitch have been receiving plenty of new major features useful for cloud infrastructure (Open Stack, Docker) and telco industry (NFV). Some of the features are still under development, some are ready to be used. Among the most important ones are conntrack and NAT support, conversion of tunneling code to lightweight tunnels, tunneling over IPv6, MPLS and NSH support. This talk will present the new and upcoming features with explanation, examples and usage. The new Open Virtual Network (OVN) project that is co-developed with Open vSwitch will be mentioned, too, but its detailed coverage is out of scope of this presentation. "

Speakers
avatar for Jiri Benc

Jiri Benc

Principal Kernel Engineer, Red Hat
Jiri is a Linux kernel developer with networking background. His main focus nowadays is on network virtualization and networking solutions for cloud computing.


Friday February 5, 2016 14:50 - 15:30 CET
c. D0207 (90 places)

15:40 CET

Open vSwitch in Userspace
Open vSwitch is a software switch designed for virtualization hosts, but capable to handle much more than that. Although its design allows a kernel component for acceleration, it's possible to use Open vSwitch with a data plane in userspace, either using DPDK or tap devices and PACKET sockets.

This presentation is a deep dive on how Open vSwitch operates, specially in the userspace part. It will show some details of its design, and a live demo using VMs, containers, tunnels and IPv6.

Speakers
avatar for Thadeu Lima de Souza Cascardo

Thadeu Lima de Souza Cascardo

Thadeu Cascardo is a Senior Software Engineer at Red Hat, working with the Networking Services team. He contributes to Open vSwitch and sometimes to Linux.http://cascardo.eti.br/blog/http://social.libreplanetbr.org/cascardo


Friday February 5, 2016 15:40 - 16:20 CET
c. D0207 (90 places)

16:30 CET

Networking in container world
When containers are treated as disposable microservices that can be spawned quickly across a virtual or bare-metal infrastructure, it becomes a challenge to provide network connectivity to them.

No container will live without a network access; almost all large scale deployments will orchestrate containers that involve multiple tenants with specific demands around access and security. e.g. network isolation, egress firewall, load balancers, public IP address etc.

This presentation speaks about the problem space, and discusses current solutions being developed with a live demo of a solution from openshift (github.com/openshift/origin; github.com/openshift/openshift-sdn; kubernetes.io).

Speakers
avatar for Rajat Chopra

Rajat Chopra

Engineer, Red Hat
Rajat works for Red Hat Inc. as an engineer in the core development of OpenShift and kubernetes projects. He is the original author of openshift-sdn - one of the earliest container networking solutions and the default container networking software for OpenShift. He is an expert in... Read More →


Friday February 5, 2016 16:30 - 17:10 CET
c. D0207 (90 places)
 
Saturday, February 6
 

10:40 CET

What's new in NetworkManager
NetworkManager is probably known to every free software hacker. It's userspace plumbing that serves the needs of all kinds of networked machines. It's able to connect your laptop or a phone to a wireless network as well as manage complex networking configurations for the servers.

For the last years we've been busy improving NetworkManager. We've added support for LLDP, improved privacy with MAC randomization and RFC7217 addressing, enhanced the interoperability, added a handful of features to the management tools and much more.

We'd like to share the current status and our outlook towards future work.

Speakers
avatar for Lubomir Rintel

Lubomir Rintel

Lubomir is a free software enthusiast based in Brno, Czech Republic. The projects he has contributed to include Perl, Linux kernel and Fedora distribution. Currently he spends most of his time improving NetworkManager, the Linux connection manager.http://v3.sk/~lkundrak/ 


Saturday February 6, 2016 10:40 - 11:20 CET
d. E112 (156 places)

10:40 CET

What's new in NetworkManager (streaming)
Streaming from E112. 

NetworkManager is probably known to every free software hacker. It's userspace plumbing that serves the needs of all kinds of networked machines. It's able to connect your laptop or a phone to a wireless network as well as manage complex networking configurations for the servers.

For the last years we've been busy improving NetworkManager. We've added support for LLDP, improved privacy with MAC randomization and RFC7217 addressing, enhanced the interoperability, added a handful of features to the management tools and much more.

We'd like to share the current status and our outlook towards future work.

Speakers
avatar for Lubomir Rintel

Lubomir Rintel

Lubomir is a free software enthusiast based in Brno, Czech Republic. The projects he has contributed to include Perl, Linux kernel and Fedora distribution. Currently he spends most of his time improving NetworkManager, the Linux connection manager.http://v3.sk/~lkundrak/ 


Saturday February 6, 2016 10:40 - 11:20 CET
e. E104 (72 places)

11:30 CET

Automated network stack testing
I'd like to do an introduction of LNST - Linux Network Stack Test project, a tool that that supports development and execution of automated and portable network tests.

Project link: http://lnst-project.org/

A short live demo will be part of the presentation.

Speakers
avatar for Jan Tluka

Jan Tluka

I work at Red Hat as a Senior Kernel-QE Engineer focused on the kernel networking subsystem. I'm a contributor to upstream project LNST - Linux Network Stack Test project.


Saturday February 6, 2016 11:30 - 12:10 CET
e. E104 (72 places)

12:20 CET

nftables
nftables is the project that aims to replace the existing {ip,ip6,arp,eb}tables tools. nftables provides a new packet filtering framework and a new userspace utility. nftables is built upon the building blocks of the Netfilter infrastructure such as the existing hooks, the connection tracking system, the userspace queueing component and the logging subsystem.

The talk will explain some of the shortcomings of the existing iptables infrastructure, how these were addressed in nftables,
and highlight some of the nftables features over iptables for administrators.

I will also briefly cover advantages for deverlopers that wish to interact with packet filtering/nat setup in a programmatic fashion.

Speakers
FW

Florian Westphal

Linux Kernel Engineer, Red Hat
I am a contributor to the Linux kernel network stack, in paticular netfilter. I am also a member of the netfilter core team which also maintains various userspace tools and libraries, such as iptables, nftables, conntrack-tools and ulogd. I am employed by Red Hat.


Saturday February 6, 2016 12:20 - 13:00 CET
e. E104 (72 places)
 
Sunday, February 7
 

10:40 CET

MACsec: encryption for wired LANs
MACsec, or IEEE 802.1AE, is an encryption standard for wired LANs. It can protect DHCP traffic and VLANs, prevent tampering on ethernet headers. It can be used on its own, or rely on 802.1X for key distribution via the MACsec Key Agreement (MKA) extension.

This talk will give an overview of MACsec, present some use cases, describe the proposed implementation for the Linux kernel, and future work.

Speakers
SD

Sabrina Dubroca

Linux Kernel engineer, Red Hat contributor to the networking stack


Sunday February 7, 2016 10:40 - 11:20 CET
e. E104 (72 places)

11:30 CET

Kernel Network Stack Challenges at 100Gbit/s speeds
As network speeds continue to increase from 10Gbit/s, to 40Gbit/s, and very soon to 100Gbit/s the rate at which packets can arrive increases, and as a result the amount of of time to process packets decreases to as little as 6.7ns per packet at 100Gbit/s.

This talk explains the challenges the kernel network stack is facing, and describe some strategies and mitigation techniques to handle these increasing network speeds.

Recent improvement to the TX layer will be explained, but it cannot standalone. Further improvements to the RX layer and qdisc layer are still needed.

The memory subsystem is also pressured to its limits, and plumbering and cooperation between networking and MM (Memory Management) kernel developers are needed.

Speakers
avatar for Jesper Dangaard Brouer

Jesper Dangaard Brouer

Linux Kernel Developer, Red Hat
Jesper Dangaard Brouer is Principal Kernel Engineer at Red Hat, and is part of the team that maintains the Linux Kernel Network Stack. He is working from the comfort of this home in Denmark, outside Copenhagen. He has participated in several invitation only developer conferences... Read More →



Sunday February 7, 2016 11:30 - 12:10 CET
e. E104 (72 places)

12:20 CET

Why use iproute2?
This will be a tour of iproute2 features, showing which dedicated tools it supersedes, why it is superior to them and what additional functionality it provides.

I intend to show most of the presented things live in order to better illustrate how working with the 'ip' command looks and feels like.

The project home page is available at: http://www.linuxfoundation.org/collaborate/workgroups/networking/iproute2

Motivation behind this talk is my impression that many users still adhere to traditional tools like 'ifconfig', 'route' or 'netstat' and therefore never get familiar enough with iproute2 to intuitively get around with it for use-cases where there's no alternative to it.

Speakers
avatar for Phil Sutter

Phil Sutter

Red Hat developer, maintaining nftables packages in RHEL., Red Hat
Long-time Linux user, studied computer scientist, software engineer at Red Hat.


Sunday February 7, 2016 12:20 - 13:00 CET
e. E104 (72 places)