NSRC / mnNOG
[Main Page](index.html "Main Page")
# Routing Infrastructure and Security Operations: Agenda # ## Time Schedule ## |Schedule |Time | |------------------|----------------| |Session 1 |09:00 - 10:30 | |Break |10:30 - 11:00 | |Session 2 |11:00 - 12:30 | |Lunch |12:30 - 13:30 | |Session 3 |13:30 - 15:30 | |Break |15:30 - 16:00 | |Session 4 |16:00 - 17:30 | ## Instructors ## | FL | Name | Email | Organization | Country | |----|-----------------------|----------------------------|--------------|---------------| | PS | Philip Smith | philip(at)nsrc(dot)org | [NSRC](https://nsrc.org)| AU | | AS | Anar Sosor | anar(at)erdemnet(dot)mn | [Erdemnet](http://erdemnet.mn/) | MN | | UE | Ulsbold Enkhtaivan | ulsbold(at)mobicom(dot)mn | [Mobicom](https://www.mobicom.mn/) | MN | ## Sessions ## | DAY 1 | Topic | Inst | Presentations | Exercises | |------------------------|---------------------------|---------|---------------------------------------------------|----------------------------------------| | Session 1.1 | Introduction to the RISO Workshop | TBD | [PDF](networking/routing-security/en/presentations/Introduction.pdf) | | | Session 1.2 | Lab Setup | TBD | | [Lab Setup](networking/routing-security/en/labs/setup.html) | | | | | | [Lab Access](networking/routing-security/en/labs/lab-access.html) | | | | | | [Address Plan](networking/routing-security/en/labs/address-plan.html) | | Session 1.3 | IS-IS Introduction | TBD | [PDF](networking/peering-ixp/en/presentations/ISIS-introduction.pdf) | | | Session 1.4 | IS-IS | TBD | | [IS-IS Lab](networking/routing-security/en/labs/is-is.html) | | Session 1.5 | Securing the Router | TBD | | [Securing Router Lab](networking/routing-security/en/labs/securing-router.html) | | Session 1.6 | BGP Introduction | TBD | [PDF](networking/peering-ixp/en/presentations/BGP-introduction.pdf) | | | Session 1.7 | Scaling BGP | TBD | [PDF](networking/peering-ixp/en/presentations/Scaling-BGP.pdf) | | | Session 1.8 | iBGP | TBD | | [iBGP Lab](networking/routing-security/en/labs/ibgp.html) | | **DAY 2** | | | | | | Session 2.1 | BGP Attributes | TBD | [PDF](networking/peering-ixp/en/presentations/BGP-Attributes.pdf) | | | Session 2.2 | BGP Policy | TBD | [PDF](networking/peering-ixp/en/presentations/BGP-Policy.pdf) | | | Session 2.3 | eBGP with Transit | TBD | | [eBGP Lab](networking/routing-security/en/labs/ebgp.html) | | Session 2.4 | Multihoming Introduction | TBD | [PDF](networking/peering-ixp/en/presentations/Multihoming-Intro.pdf) | | | Session 2.5 | Private Peer | TBD | | [Private Peer Lab](networking/routing-security/en/labs/private.html) | | Session 2.6 | Multihoming: Inbound TE | TBD | [PDF](networking/peering-ixp/en/presentations/Multihoming-InboundTE.pdf) | | | **DAY 3** | | | | | | Session 3.1 | Multihoming: Outbound TE | TBD | [PDF](networking/peering-ixp/en/presentations/Multihoming-OutboundTE.pdf) | | | Session 3.2 | IXP Peering | TBD | | [IXP Peering Lab](networking/routing-security/en/labs/ixp.html) | | Session 3.3 | BGP Best Practices | TBD | [PDF](networking/peering-ixp/en/presentations/BGP-BCP.pdf) | | | Session 3.4 | PeeringDB & IRR | TBD | | [PeeringDB & IRR Lab](networking/routing-security/en/labs/ops-bcp.html) | | Session 3.5 | Peering Policies | TBD | | [Peering Policy Lab](networking/routing-security/en/labs/ixp-policy.html) | | Session 3.6 | BGP Communities | TBD | [PDF](networking/peering-ixp/en/presentations/BGP-Communities.pdf) | | | Session 3.7 | Communities Lab | TBD | | [Communities Lab](networking/routing-security/en/labs/communities.html) | | **DAY 4** | | | | | | Session 4.1 | Securing BGP | TBD | | [Securing BGP Lab](networking/routing-security/en/labs/securing-bgp.html) | | Session 4.2 | Remote Trigger Blackhole Filtering | TBD | [PDF](networking/routing-security/en/presentations/RTBH.pdf) | | | Session 4.3 | RTBH within an AS | TBD | | [RTBH within an AS Lab](networking/routing-security/en/labs/RTBH-local.html) | | Session 4.4 | RTBH between ASes | TBD | | [RTBH between ASes Lab](networking/routing-security/en/labs/RTBH-interAS.html) | | Session 4.5 | Unicast Reverse Path Forwarding | TBD | | [uRPF Lab](networking/routing-security/en/labs/uRPF.html) | | **DAY 5** | | | | | | Session 5.1 | BGP Origin Validation | TBD | [PDF](networking/routing-security/en/presentations/BGP-Origin-Validation.pdf) | | | Session 5.2 | Installing RPKI Validator Cache | TBD | | [Validator Lab](networking/routing-security/en/labs/validator.html) | | Session 5.3 | Configuring RPKI on routers | TBD | | [RPKI Lab](networking/routing-security/en/labs/rpki.html) | | Session 5.4 | Configuring Route Origin Validation on routers | TBD | | [ROV Lab](networking/routing-security/en/labs/rov.html) | | Session 5.5 | Propagating Route Origin Validation state | TBD | | [ROV Propagation Lab](networking/routing-security/en/labs/rov-state.html) | | Session 5.6 | Troubleshooting BGP | TBD | [PDF](networking/peering-ixp/en/presentations/Troubleshooting-BGP.pdf) | | | Session 5.7 | RouteViews: Use Cases | TBD | [PDF](networking/routing-security/en/presentations/NSRC_RouteViews_UseCases.pdf) | | | Session 5.8 | Troubleshooting BGP | TBD | | [Troubleshooting Lab](networking/routing-security/en/labs/troubleshooting.html) | ## Additional Information ## - [RFC8212 - Default External BGP (EBGP) Route Propagation Behavior without Policies](https://tools.ietf.org/html/rfc8212) - [Internet Routing Security Best Practices for Network Operators (MANRS)](https://www.manrs.org/manrs/) - [RIPE 706 MANRS Implementation Guide](https://www.ripe.net/publications/docs/ripe-706) - [BCP 38 - Network Ingress Filtering to Defeat Denial of Service Attacks which employ IP Source Address Spoofing](https://tools.ietf.org/html/bcp38) - [RFC7454 - BGP Operations Security](https://tools.ietf.org/html/rfc7454) - [NLnetLabs Routinator Installation Instructions](https://github.com/NLnetLabs/routinator/blob/master/README.md) - [RFC7115 - Origin Validation Operation Based on the Resource Public Key Infrastructure (RPKI)](https://tools.ietf.org/html/rfc7115) - [RFC8097 - BGP Prefix Origin Validation State Extended Community](https://tools.ietf.org/html/rfc8097)