CHI-NOG 13

Each workshop requires Session Registration. Please register for the additional section during registration. 

Add to Calendarcalendarcalendarcalendarcalendar

Join us to learn how your organization can implement ARIN routing security services such as Resource Public Key Infrastructure (RPKI) and more. Whether you’re looking to shore up your foundational knowledge or wade into the currents of routing security, this expert-led session will provide you with the insights and skills you need. Program topics include routing security fundamentals, ARIN’s RPKI services, understanding relying party validators, and best practices for managing RPKI for your resources. A laptop will be required for this event.

Add to Calendarcalendarcalendarcalendarcalendar

• 

  Brad Gorman

  Director of Customer Technical Services

  American Registry for Internet Numbers (ARIN)

Sponsors

This is a lab-based session for ISPs and network operators on deploying DNSSEC validation and implementing DNSSEC signing for customer and company domains. Workshop participants will work through short lab modules covering DNS diagnostic tools (dig, Extended DNS Errors, and dnsviz), effective use of dig with DNSSEC, DNSSEC signature validation on resolvers, automation in signing, and the chain of trust for DNSSEC keys. While there are few slides, most of the time is spent at the keyboard. The workshop assumes familiarity with DNS fundamentals and a basic understanding of what DNSSEC is and what problem it solves. Prior experience with running a resolver or authoritative server is helpful but not required.

Add to Calendarcalendarcalendarcalendarcalendar

• 

  Eddy Winstead

  Consulting Engineer

  Internet Systems Consortium

Sponsors

There is huge interest in network automation, and most everyone sees the value. But often people are not sure how to get started beyond simple scripting. The Network Automation Forum (NAF) is developing a Network Automation Framework to help address the challenges of automation, provide a contextual starting point, and guide evolving automation solutions. The framework helps you to think about what you want to accomplish, how to meet those goals, and helping you ensure that you’ve considered all aspects of an automation solution. This short presentation begins by briefly examining the drivers for and obstacles to network automation and the various approaches you can take to implementing automation in your network, before introducing the elements of the framework itself.

Add to Calendarcalendarcalendarcalendarcalendar

As Artificial Intelligence (AI) workloads move from experimental phases to massive production scale, the underlying data center network must evolve to meet unprecedented demands for bandwidth, low latency, and lossless communication. This presentation provides a foundational roadmap for network engineers transitioning from traditional general-compute architectures to specialized AI networking environments. Key technical pillars covered include: Architecture & Topologies, Congestion Control, Load Balancing, Segmentation, and Operations & Visibility.

Add to Calendarcalendarcalendarcalendarcalendar

Recent advances in large-scale AI systems, including distributed training, inference and Mixture-of-Experts (MoE) architectures, are driving significant east-west traffic within data centers. Many of these workloads require sending identical or highly correlated data, such as model weights, gradients, or token streams, to multiple receivers simultaneously. This point-to-multipoint communication is typically implemented using repeated unicast flows, leading to bandwidth amplification and scaling challenges at 400 Gbps and beyond. This talk examines where AI workloads are inherently point-to-multipoint and explores how IP multicast and related mechanisms can address these inefficiencies, drawing on recent IETF discussions and proposals such as BIER.

Add to Calendarcalendarcalendarcalendarcalendar

Directed Acyclic Graph (DAG)-based Multipath Traffic Engineering (MPTE) is a new approach that combines traditional traffic engineering with advanced load balancing. It improves multipath utilization in TE networks while adding TE controls to multipath-focused architectures. This talk introduces the MPTE architecture and its role in the evolution of bandwidth engineering. We present two key constructs—MPTE DAG (MPTED) tunnels and MPTED junctions—and show how they enable scalable, flexible, and efficient traffic distribution. We also review practical implementations across different forwarding planes and provisioning models, demonstrating how MPTE enhances performance, resilience, and resource efficiency in modern networks.

Add to Calendarcalendarcalendarcalendarcalendar

Integrating AI into NetOps: Building, Buying, and Leading the Change Abstract2: This talk provides a critical overview of how modern AI, from build-your-own use of LLMs, agents, MCP servers, to vendor-built capabilities, is beginning to reshape NetOps. We will (go beyond hype to) explore practical, real-world applications for immediate use (such as optimizing Methods of Procedure (MOPs), analyzing packet captures, and generating Python scripts). We’ll address the equally important leadership and strategic challenges, including navigating build versus buy decisions, establishing trust in AI systems, and establishing and building organizational support for AI projects. Drawing on real-world examples, we will conclude with a forward-looking perspective on cross-domain AIOps as an emerging superpower for network and overall technology management.

Add to Calendarcalendarcalendarcalendarcalendar

There has been significant progress in the realm of Resource Public Key Infrastructure (RPKI) for BGP routing security. We've reached over 50% of BGP prefixes having Route Origin Authorizations (ROAs) signed by resource holders. Also, most major networks have already implemented Route Origin Validation (ROV) based on those ROAs. However, we're still falling short of secure BGP routing, even against hijacks, which ROV is meant to prevent. In this presentation, I will talk about flaws that still exist in even major networks who have otherwise implemented ROV. There exist critical edge cases that allow networks who do not own IP prefixes to still hijack or blackhole traffic toward them.

Add to Calendarcalendarcalendarcalendarcalendar

The use of digital coherent optics in routers and switches has exploded onto the scene over the last 6 years. This talk will give a brief introduction into today's DCO and their use cases, from simple point to point dark fiber to complex ROADM based DWDM networks. We will then focus on the managed standards such as CMIS and practices for managing the optics. Key configuration parameters, performance monitoring measurements, and why these are important will be covered. The talk will then provide some practical examples on how to manage and monitor the optics using standard models.

Add to Calendarcalendarcalendarcalendarcalendar

The workshop will build an AI backend network fabric used to enable GPU-to-GPU communication for training and inference workloads. This session is designed for engineers looking to understand how high-performance AI and HPC clusters are built. As part of the workshop, participants will explore key enabling technologies such as RoCEv2, Priority Flow Control, Explicit Congestion Notification, real-time streaming telemetry, and understand how they work together to deliver scalable, low-latency, and high-throughput performance. Each participant will be provided with their own dedicated lab environment, allowing them to build and experiment with the fabric in a guided playground. Attendees will implement rail-optimized AI Fabric and configure lossless Ethernet required for RDMA-based workloads. The workshop will also introduce an intent based approach to network design, enabling users to deploy and manage complex configurations in a simplified automated way for closed loop automation.

Add to Calendarcalendarcalendarcalendarcalendar

• 

  Mohammad Zaman

  SDN and New Product Engineer

  Nokia
• 

  Amer Fakhar

  Principal Solutions Architect

  Nokia

Sponsors

This talk is a practical walkthrough of internet measurement and observability tools available to operators and researchers today. We'll cover routing databases RPKI validation BGP route archives active measurement platforms and geolocation sources exploring how each works and how their data can be combined to investigate operational issues or study global network behavior.

Add to Calendarcalendarcalendarcalendarcalendar

Quantum communications have progressed significantly, moving from a theoretical concept to small-scale experiments to recent metropolitan-scale demonstrations. As the technology matures, it is expected to revolutionize quantum computing in much the same way that classical networks revolutionized classical computing. However, scalability has emerged as a major challenge, particularly in terms of the number and heterogeneity of nodes, the distances between nodes, the diversity of applications, and the scale of user demand. This talk will describe InterQnet, a multidisciplinary project that advances scalable quantum communications through a comprehensive approach that improves devices, error handling, and network architecture, with two prongs: InterQnet-Achieve for practical heterogeneous network realizations, and InterQnet-Scale for architectural system studies.

Add to Calendarcalendarcalendarcalendarcalendar

AI assistants can write code but can they build networks? This session demonstrates an AI lab assistant that takes a natural-language prompt designs a topology generates router configurations launches a virtual network and verifies it comes up cleanly -- all without manual intervention.In a live demo the assistant will be given a single brief -- simple SRv6 L3VPN" -- and we'll watch the full workflow unfold: topology design configuration generation container orchestration and post-launch validation. Once the network is running we'll take it a step further by having the assistant query live router state and use it to produce an SRv6 primer grounded in actual forwarding behavior rather than textbook theory.The session covers the practical workflow of AI-assisted lab building what works well today where the rough edges are and what this approach means for how network engineers learn prototype and validate designs."

Add to Calendarcalendarcalendarcalendarcalendar

The networking industry has an interesting relationship with open network operating systems. Hyperscalers have been deploying them with considerable success for several years. Vendors have made marketing noise around SONiC support, and the trade press treats disaggregation as inevitable. Yet practical, operator-focused discussion of what it actually takes to build and sustain an open NOS ecosystem remains remarkably thin. This talk expands on a lightning talk originally presented at NANOG 92 and tackles the uncomfortable middle ground between hype and reality, examining where common objections hold up and where they don't, and addressing the capitalist realities of supported open source, development priorities, and operator leverage

Add to Calendarcalendarcalendarcalendarcalendar

Open Pipes is a new nonprofit building community-owned Internet Exchanges, starting with Chicago Open Pipes (ChOP). This talk covers what Open Pipes is, why it exists, how the nonprofit structure works, and what it looks like for operators in the Chicago metro. We'll also preview the layer 3 services ChOP offers out of the box, designed to lower the bar for networks to get value early on. The nonprofit model is built to be replicable - ChOP is the first, not the only. When operators own the infrastructure, the incentives change: neutral, resilient, and built for the community that depends on it.

Add to Calendarcalendarcalendarcalendarcalendar

Many network engineers follow a similar path: they master the CLI, hit a ceiling of manual tasks, and then turn to Python and automation to scale their own output. But a second, more difficult transition occurs when that hero scripter moves into a leadership or advisory role. Success is no longer measured solely by the elegance of your code, but by the capability, culture, and scale of the systems you build for others. In this session, Rob Martin discusses the professional and psychological shift from being a technical fixer to a strategic leader, exploring the hurdles of scaling your impact through others.

Add to Calendarcalendarcalendarcalendarcalendar

2026 is the year that global IPv6 traffic has consistently peaked above the 50% mark. In the future as networks migrate to IPv6 either due to dual-stack, IPv6-mostly, or migrating to single stack IPv6, the advantages of implementing the current generation internet protocol are stronger than ever.

Add to Calendarcalendarcalendarcalendarcalendar

Autonomous Network Operations is often framed as an AI problem, but at its core it is a control systems challenge. True autonomy requires a closed-loop system: detect, diagnose, decide, remediate, and verify. This loop only works when cause-and-effect relationships are repeatable and reliable. Without deterministic root cause analysis (RCA), autonomy devolves into guesswork. This talk explains why topology-aware, evidence-driven RCA is the critical hinge for autonomy, viewing networks as graphs where dependencies drive failure propagation. It highlights Graph Neural Networks as engines for causal computation, while positioning Large Language Models for orchestration and human interaction—not causal decision-making.

Add to Calendarcalendarcalendarcalendarcalendar

Most network operators run some DNS infrastructure. Some run authoritative nameservers for their own zones. Others run recursive resolvers for their customers. Yet there has not been a widely adopted baseline for what good enough DNS security operations actually looks like. ICANN's KINDNS initiative attempts to fill this gap by defining a small set of voluntary, concrete operational practices for five categories of DNS operators, covering both authoritative and recursive services. The practices include things like enabling DNSSEC validation, separating authoritative and recursive services onto distinct servers, restricting zone transfers, implementing encrypted transport, and hardening the underlying platform. This talk will explain what KINDNS is, why it matters to network operators, and how it relates to MANRS on the routing security side.

Add to Calendarcalendarcalendarcalendarcalendar