Adam Kalisz

nftables is the default firewall implementation on CentOS/ RHEL 8 and was backported to CentOS 7 as well. I will quickly show how to migrate to nftables on CentOS 7.

None

With the advent of Software Defined Networking (SDN) and Linux becoming the de facto basis for new developments and standards in networking, having a somewhat current overview of what is possible and how it approximately works is almost overwhelming. This talk will present current Linux networking components that are in a usable state and that might have escaped your attention. It will delve briefly into observability tools with focus on working at usable speed for today's networks. Basic understanding of networking (VLAN, routing) is assumed. The talk will progress to advanced topics quickly.

None

So you collect about a Gigabyte of traffic metadata each hour and want to filter out anomalies, such as a spike in TCP RST or a host, that is surprisingly chatty with foreign hosts. A simple yet relatively performant approach is to use Python and the DPKT library. This will be a quick start tutorial and some experience with using it.

None

OpenSSH being almost everywhere is a handy tool for most users and administrators. This talk will have many practical examples and related explanations such as: - the intricacies of SSH tunneling - public/ private key login and restrictions that can be applied - setting up and keeping up a SSH connection on boot or after a downtime - SOCKS proxy, browser, APT and YUM setup with SOCKS - poor mans VPN (sshuttle and other possibilities) - Ansible over a restrictive jump host - if time allows crazy stuff as: - SSH as a tor hidden service - OpenVPN over SSH - obfsproxy and SSH - Tips for further resources, discussion