...
15:00 - 15:40 Performance Measurements and Acceleration Potential of Suricata, Lukas Kekely (CESNET) [PDF]slides
Abstract: IDS As the number of network security threats is rising and new threats are becoming more and more sophisticated, traffic processing by Intrusion Detection Systems (IDS) is getting significantly more complex. The rising processing complexity diminishes the achievable throughput and even utilizing the most powerful current CPUs, IDS are usually unable to operate at tens or hundreds of Gbps required by today’s fastest networks. In this presentation, we examine the performance of Suricata IDS in high-speed network deployment. Two versions of Suricata are tested:out-of-the-box Suricata software (without acceleration) against software Suricata enhanced by hardware accelerated data preprocessing. Measurements results on real network traffic are provided for both versions and compared in terms of achieved throughput and detection precision.
...
16:10 - 16:30 Outcomes from Jisc perfSONAR Workshop, Tim Chown (Jisc) (slides)
Abstract: Jisc held a perfSONAR training and developer discussion workshop in Manchester on 22/23 Nov 2017. The general objective of the training was to bootstrap and provide impetus to the perfSONAR measurement community for Janet-connected organisations and campuses in a context where Jisc is providing and running the central server and University networks are running one or two measurement points (MPs) reporting back to this central server. Tim will outline the current use of perfSONAR in the Janet community, the passive measurement tools currently provided by Jisc, and present the outcomes of this workshop including 'wish lists' for perfSONAR and potential future perfSONAR development and deployment activities.
...
09:30 - 10:10 RIPE Atlas Probes, Status, Brook Schofield (GÉANT) (slides)
Abstract: While eduroam® is the service we all know and love, there is no love lost when it fails to work! Network monitoring, log analysis and manual testing is employed when the service is established at the campus or roaming operator level but the rate of periodic testing usually drops over time and gaps in testing will result in the failure of the service for someone — let the finger pointing begin. There is a need to simulate the end user experience and ensure the service is working to narrow down where the failure has occurred. With efforts from SURFnet, Srce and Jisc to develop a monitoring probe the issue of scale was never overcome - the largest probe network that our community has access to is RIPE Atlas. The downside, no wireless interface! RIPE Atlas has now enabled that option in limited release… and we now need to catch up.
...
10:20 - 11:00 DTN Deployment and Experiments, Richard Highes-Jones (GÉANT) - remotelyremotely slides
Abstract:
11:00 - 11:10 Discussion
...