[Main Page](index.html "Main Page")
# Routing Infrastructure and Security Operations: Agenda # ## Time Schedule ## |Schedule |Time | |------------------|----------------| |Session 1 |09:00 - 10:30 | |Break |10:30 - 11:00 | |Session 2 |11:00 - 12:30 | |Lunch |12:30 - 14:00 | |Session 3 |14:00 - 15:30 | |Break |15:30 - 16:00 | |Session 4 |16:00 - 17:30 | ## Instructors ## | FL | Name | Email | Organization | Country | |----|-----------------------|----------------------------|--------------|---------------| | XY | Named, Appropriately | instructor(at)uoregon(dot)edu | [University of Oregon](http://uoregon.edu)| USA | ## Sessions ## | DAY 1 | Topic | Inst | Presentations | Exercises | |------------------------|---------------------------|---------|---------------------------------------------------|----------------------------------------| | Session 1.1 | Introduction to the RISO Workshop | TBD | [PDF](networking/routing-security/en/presentations/Introduction.pdf) | | | Session 1.2 | IS-IS Introduction | TBD | [PDF](networking/bgp-deploy/en/presentations/ISIS-introduction.pdf) | | | Session 1.3 | Lab Setup | TBD | | [Lab Setup](networking/routing-security/en/labs/setup.html) | | Session 1.4 | Lab Access | TBD | | [Lab Access](networking/routing-security/en/labs/lab-access.html) | | | | | | [Address Plan](networking/routing-security/en/labs/address-plan.html) | | Session 1.5 | IS-IS | TBD | | [IS-IS Lab](networking/routing-security/en/labs/is-is.html) | | Session 1.6 | Securing the Router | TBD | | [Securing Router Lab](networking/routing-security/en/labs/securing-router.html) | | Session 1.7 | BGP Introduction | TBD | [PDF](networking/bgp-deploy/en/presentations/BGP-introduction.pdf) | | | Session 1.8 | Scaling BGP | TBD | [PDF](networking/bgp-deploy/en/presentations/Scaling-BGP.pdf) | | | **DAY 2** | | | | | | Session 2.1 | BGP Attributes | TBD | [PDF](networking/bgp-deploy/en/presentations/BGP-Attributes.pdf) | | | Session 2.2 | iBGP | TBD | | [iBGP Lab](networking/routing-security/en/labs/ibgp.html) | | Session 2.3 | BGP Policy | TBD | [PDF](networking/bgp-deploy/en/presentations/BGP-Policy.pdf) | | | Session 2.4 | eBGP with Transit | TBD | | [eBGP Lab](networking/routing-security/en/labs/ebgp.html) | | Session 2.5 | Multihoming Introduction | TBD | [PDF](networking/peering-ixp/en/presentations/Multihoming-Intro.pdf) | | | Session 2.6 | Multihoming: Inbound Traffic Engineering | TBD | [PDF](networking/peering-ixp/en/presentations/Multihoming-InboundTE.pdf) | | | Session 2.7 | Private Peer | TBD | | [Private Peer Lab](networking/routing-security/en/labs/private.html) | | Session 2.8 | IXP Peering | TBD | | [IXP Peering Lab](networking/routing-security/en/labs/ixp.html) | | **DAY 3** | | | | | | Session 3.1 | Multihoming: Outbound Traffic Engineering | TBD | [PDF](networking/peering-ixp/en/presentations/Multihoming-OutboundTE.pdf) | | | Session 3.2 | Peering Policies | TBD | | [Peering Policy Lab](networking/routing-security/en/labs/ixp-policy.html) | | Session 3.3 | BGP Best Practices | TBD | [PDF](networking/bgp-deploy/en/presentations/BGP-BCP.pdf) | | | Session 3.4 | PeeringDB & IRR | TBD | | [PeeringDB & IRR Lab](networking/routing-security/en/labs/ops-bcp.html) | | Session 3.5 | Securing BGP: MaxAS | TBD | | [Securing BGP Lab: MaxAS](networking/routing-security/en/labs/securing-bgp-maxas.html) | | Session 3.6 | Securing BGP: Max Prefix | TBD | | [Securing BGP Lab: Max Prefix](networking/routing-security/en/labs/securing-bgp-maxprefix.html) | | Session 3.7 | BGP Communities | TBD | [PDF](networking/peering-ixp/en/presentations/BGP-Communities.pdf) | | | **DAY 4** | | | | | | Session 4.1 | Securing BGP: GTSM | TBD | | [Securing BGP Lab: GTSM](networking/routing-security/en/labs/securing-bgp-GTSM.html) | | Session 4.2 | Securing BGP: PrivateAS | TBD | | [Securing BGP Lab: Private AS](networking/routing-security/en/labs/securing-bgp-privateAS.html) | | Session 4.3 | Unicast Reverse Path Forwarding | TBD | [PDF](networking/routing-security/en/presentations/uRPF.pdf) | | | Session 4.4 | Unicast Reverse Path Forwarding Lab | TBD | | [uRPF Lab](networking/routing-security/en/labs/uRPF.html) | | Session 4.5 | Remote Trigger Blackhole Filtering | TBD | [PDF](networking/routing-security/en/presentations/RTBH.pdf) | | | Session 4.6 | RTBH within an AS | TBD | | [RTBH within an AS Lab](networking/routing-security/en/labs/RTBH-local.html) | | Session 4.7 | RTBH between ASes | TBD | | [RTBH between ASes Lab](networking/routing-security/en/labs/RTBH-interAS.html) | | **DAY 5** | | | | | | Session 5.1 | BGP Origin Validation | TBD | [PDF](networking/routing-security/en/presentations/BGP-Origin-Validation.pdf) | | | Session 5.2 | Installing RPKI Validator Cache | TBD | | [Validator Lab](networking/routing-security/en/labs/validator.html) | | Session 5.3 | Configuring RPKI on routers | TBD | | [RPKI Lab](networking/routing-security/en/labs/rpki.html) | | Session 5.4 | Configuring Route Origin Validation on routers | TBD | | [ROV Lab](networking/routing-security/en/labs/rov.html) | | Session 5.5 | Propagating Route Origin Validation state | TBD | | [ROV Propagation Lab](networking/routing-security/en/labs/rov-state.html) | | Session 5.6 | Using RTBH on an ROV enabled network | TBD | | [RTBH with ROV Lab](networking/routing-security/en/labs/rov-rtbh.html) | ## Additional Information ## - A ZIP archive of these materials - [RFC8212 - Default External BGP (EBGP) Route Propagation Behavior without Policies](https://tools.ietf.org/html/rfc8212) - [Internet Routing Security Best Practices for Network Operators (MANRS)](https://www.manrs.org/manrs/) - [RIPE 706 MANRS Implementation Guide](https://www.ripe.net/publications/docs/ripe-706) - [BCP 38 - Network Ingress Filtering to Defeat Denial of Service Attacks which employ IP Source Address Spoofing](https://tools.ietf.org/html/bcp38) - [RFC7454 - BGP Operations Security](https://tools.ietf.org/html/rfc7454) - [Internet Routing Security Best Practices for Network Operators (MANRS)](https://www.manrs.org/manrs/) - [BCP 38 - Network Ingress Filtering to Defeat Denial of Service Attacks which employ IP Source Address Spoofing](https://tools.ietf.org/html/bcp38) - [NLnetLabs Routinator Installation Instructions](https://github.com/NLnetLabs/routinator/blob/master/README.md) - [RFC7115 - Origin Validation Operation Based on the Resource Public Key Infrastructure (RPKI)](https://tools.ietf.org/html/rfc7115) - [RFC8097 - BGP Prefix Origin Validation State Extended Community](https://tools.ietf.org/html/rfc8097)