Page History

• (info page for FoD development https://wiki.geant.org/pages/viewpage.action?pageId=63965046)
• FoD v1.5 = FoD with new functionalities: rule range specification, current rule behavior statistic graphs, multi-tenant rule control REST-API
• FoD v1.6 = FoD with automated rule proposal from RepShield
• FoD v1.5 pilot installation
  • Missing pysnmp requirement was installed by Puppet engineer
  • Unprecedented issues happened at new UAT machine and on test machine, investigation by Tomáš revealed that this was caused by wrong config and now solved issues with beanstalk daemon on which FoD is depending on.
• Other FoD v1.5 pilot preparations
  • Existing user documentation (as presentation document) update currently in progress
  • Excel sheet for pilot acceptance criteria reviewed
  • Pilot evaluation survey which was of used for FoD v1.1 has to be reviewed and updated for v1.5
  • Finally, Evangelos will prepare an introduction mail for designated pilot users
• FoD v1.5 production service documents
  • Now for the future production phase of FoD v1.5 (and all further versions) all necessary PLM documents have to be prepared, e.g. CBA, service description, service design plan
  • Especially for the operative documents this will be done in close cooperation of Evangelos
  • For most PLM documents, this will be done by filling the FoD service template wiki pages (https://wiki.geant.org/display/gn42jra2/Firewall-On-Demand+%28FoD%29+Service) which David started to fill
  • Evangelos will check the service template to get acquainted with it
• FoD v1.6 (with RepShield) development/testing/pilot:
  • Issues with FlowMon delivering NSHaRP events to Warden connector have to be investigated

GARR DDoS D/M PoC

• Silvia/Nino will report progress via mail

A10 with FlowMon PoC in GÉANT

• initial config (e.g. so-called UDP/TCP zones) done in cooperation with help of A10
• expected to be ready in 2-3 weeks, lasting 1 month
• interested NRENs/institutions can take part (their subnets being monitored/informed about/protected)
  • Tomáš: CESNET NoC could be interested
• maybe, to also have T6 inside view, Silvia/Nino could take part, to investigate usefulness and applicability (e.g. concept, workflow, tools, support) of PoC from users side

• Warden/RepShield VM for FoD v1.6 pilot (compare above)
  • now receives events from CESNET warden, but not all, only sampled before of performance issues
• RepShield/NERD development: AS number support improved
  • (before: only IP addresses/prefixes in stored events have been statically mapped to their AS)
  • now: regular polling of association between AS and IP prefixes in general
  • => basis for effective grouping of events by AS and reputation score for AS as a whole
  • idea: similarly improve existing GEO location support, e.g. for map visualizations

Reference documentation for CT server v1.0 is progressing

• Magnus provided a draft (manpages created out of ascii doc) of it in T6 wiki (

• CT Reference Documentation)

Deliverable M8.4 "CT Production Service"

• A draft for the deliverable which is due for review at end of September has been created by Ivana
• Its content will basically correspond to (where applicable) the various sub pages of the newly created CT service template in the wiki at https://wiki.geant.org/display/gn42jra2/Certificate+Transparency+%28CT%29+Service
• Linus/Magnus will look at both the draft of the deliverable and the service template

• Location: Prague is to be used (thanks to Tomáš and Václav)
• date: 21-22.11.2017 (2 half days meeting)
• detailed time: 21.11, 12:30 - 22.11, 13:30
• agenda to be defined
• location:
  • at CESNET office near Dejvická metro station which can be easily reached from Airport via Bus+Metro
  • address: Zikova 1905/6, 160 00 Praha 6-Dejvice (https://www.google.cz/maps/place/Zikova,+160+00+Praha+6/@50.1017425,14.3876213,17z/data=!3m1!4b1!4m5!3m4!1s0x470b953b9ed075f3:0x2478e1daf47528f6!8m2!3d50.1017391!4d14.38981?hl=en)
  • route from Airport via Bus+Metro: https://www.google.cz/maps/dir/Vaclav+Havel+Airport,+Prague+6/Zikova,+160+00+Praha+6/@50.0973032,14.2467214,11.35z/data=!4m14!4m13!1m5!1m1!1s0x470bbfa7db790dcb:0x2fad80d1aca4f6ac!2m2!1d14.2631811!2d50.101791!1m5!1m1!1s0x470b953b9ed075f3:0x2478e1daf47528f6!2m2!1d14.38981!2d50.1017391!3e3?hl=en
• Tomáš will send some recommendations for hotels
• Linus will attend, Magnus will be on holiday

• Everybody in T6 is invited to come there
• Time is 03-04.10.2017
• Registration at https://eventr.geant.org/events/2564
• There will be a "Network Monitoring and Management" session where
  • Evangelos will present about NSHaRP and FoD (10min)
  • David will present about other parts of T6, i.e., mainly RepShield and CT (10min)
  • Afterwards a 15-min discussion will follow

• Proposal for eduVPN, a unified approach for the possibility and provisioning of VPN-connectivity to home organization

from any foreign organizations is in preparation.

Next VC

 29.11.2017, 14:15-15:15 CE(S)T, due to Symposium and David being on

holiday, public holiday in germany, SC2017