Thomas Graf

Multiple teams at Siemens evaluated several SBOM formats available on the internet. All of them decided to use CycloneDX with some custom extensions. This talk is about the BOM format itself, why we decided to use CycloneDX as a base, and what the goals for this BOM are.

This talk demonstrates that programmability and performance does not require user space networking, it can be achieved in the kernel by generating BPF programs and leveraging the existing kernel subsystems. We will demo an early prototype which provides fast IPv6 & IPv4 connectivity to containers, container labels based security policy with avg cost O(1), and debugging and monitoring based on the per-cpu perf ring buffer.

Open vSwitch has traditionally focused on stateless L2-L4 packet processing. The introduction of stateful connection tracking, NAT, and L7 service integration extend the scope of Open vSwitch usage. In this talk, we will discuss the introduction of stateful services and cover the implementation of reflexive ACL and integration of L7 DPI on the data center edge.