Versions Compared

Old Version 3

changes.mady.by.user David Schmitz

Saved on

compared with

New Version 4

changes.mady.by.user David Schmitz

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

TimeItemWhoNotes
 Start of meeting time in future 
  • As it is more appropriate for Silvia, Nino and Marco it was agreed now that in future our regular T6 VCs should start 15 minutes later, i.e. at 14:15 CET
  • Anyone who may have a problem with this, please tell
  Refocusing of current development in JRA2T6 in upcoming months 
  • It was decided with Jerry that in future, upcoming months the development activities (except CT development) have to be refocusing on FOD, i.e. making tangible progress on features in FOD
     which directly contribute to visible, useful functionality:

  • These features/functionalities are (ordered by priority, with most priority being on top):

    1. REST API for rule creation/change/deletion (in the new version on github): get it running and tested, and if needed enhancing it

    2. Replace the current NETCONF communication to the routers by direct BGP (e.g. using exabgp)

    3. Rule statistics monitoring: to visualize how many packets an active rule is actually dropping/rate-limiting to enable a FOD user (= NREN NOC member) to see the effect of a rule over time (e.g. to answer when did

    an mitigated attack actually stopped ?)

    4. Implement logging of FOD user activities, i.e. rules created/changed/deleted, especially regarding the automated rule change (1.)

  • David created a initial wiki page for development information of FOD which currently only contains the link to (new) github version: JRA2T6 Work Items / Firewall On Demand

  • Tomas agreed that he and Vaclav will provide development man power in next months and help so to get the new FOD version running, tested and will help to implement needed features

  • For this, David will liaise with Evangelos to get ssh accounts for Tomas and Vaclav on FOD testing machines (both will provide ssh keys for this purpose)

  • First goals are to get known to FOD code and installation (of new version) and then to test its REST API

  Status of FOD  
  • no progress regarding trial to get old FOD running with python2.7 on second testing machine
  Status of Event Processing  
  Status of DDoS detection/mitigation WG  
  Status of CT  
    
    
    
    

Action items

...