nog.fi meeting 2026.06nog.fi meeting

The transition to post‑quantum cryptography (PQC) is no longer a theoretical concern but an inevitable and time‑critical transformation driven by the approaching quantum threat and externally defined transition timelines. Despite repeated evidence that cryptographic primitives offer temporary rather than permanent protection as a result of scientific breakthroughs and increased computational capabilities, system architectures are still widely designed in ways that make cryptographic updates risky, slow, and resource‑intensive. Achieving crypto‑agility in practice is challenging, but work towards it needs to continue.

In this talk we will talk about the magic of IPv4-with-IPv6 next-hops, and what this enables:

• IXPs without IPv4 peering LAN growth pain
• Completely seamless IPv4 routing at /32 granularity
• IPv4-free transport links (safe all the /31s!)
• A completely ARP free network infrastructure
• Full, ECMP enabled L3 underlays for 100G+ fabrics without LACP

Comes with a free invite to peer with V4LESS-AS; Your friendly RFC8950 test-bed at an IX near you. ;-)

Tony O’Sullivan will challenge the industry to rethink what it means to build serious infrastructure in an innovative, scalable, and sustainable way. In a world defined by geopolitical tension, climate shocks, and cable cuts, how can we meet customer expectations that don’t tolerate downtime? Tony will share his experiences by operating under fire, literally, and by scaling a lean, 44-country network that has stayed online when others have failed.

ASPA (AS Provider Authorization) is a new RPKI object type that AS holders can use to authorize their upstream providers in BGP. This allows providers to verify the paths they receive from customers and reject invalid AS paths. Furthermore, it helps to detect routing 'valleys' and reject such leaks.

This presentation focuses on the following:

• Introduction into the ASPA verification algorithm
• ASPA signing in the RIPE NCC RPKI Dashboard
• ASPA validation in practice
• Uptake and lessons learned so-far

NLNOG maintains multiple tools for network operators. From sharing shell access via the NLNOG RING to checking IRR and RPKI via the IRRexplorer. And that is not even all.

We will go over what the tools do, what they're useful for, and what challenges we run into maintaining them.

In this talk, Daniel Wagner, Researcher at DE-CIX, reports on the latest progress made in the RIPE labs article series about the IRR landscape. This talk will include insights not yet released on the influence of AS-SET heterogeneity, their lookup order and lastly, the actual traffic impact at a very large IXP.
IRR DBs are used for Route Server prefix filter generation. Their data correctness is critical to enable traffic flow through the peering fabric. Hence, the insights from this overall series propose a call to action which is subject to discussion with the community.

Quick introduction, to how you can use local AI to interact with Veeam products

Hi,
Draft presentation from FusionLayer (sponsor) on in-house developed solution to help manage mobile access network investments.
Jani Nieminen, Fusionlayer
jani.nieminen@fusionlayer.com
+358 44 994 7968

Experiences on virtualizing different type of GPUs on multiple different hardware and some ways to provide them to actually paying customers.

In October 2026, ICANN will conduct the next root zone KSK rollover, the first since the 2018 DNS root KSK rollover. For network operators running validating resolvers, this should now be a routine event, provided that root trust anchors are correctly managed using RFC 5011, or operated using RFC 9718

This talk is a practical, no-nonsense walkthrough of how to confirm your infrastructure is ready. Aimed at technical audiences, it focuses on simple, actionable checks operators can perform today: verifying that resolvers use managed trust anchors, confirming the active root KSK, and inspecting RFC 5011 state where available. We will cover concrete commands and expected outputs for common resolver software that can be integrated into existing operational workflows.

The goal is straightforward: give operators a short, reliable checklist they can run in minutes to ensure their resolvers will seamlessly follow the rollover.

Most network engineers pick a vendor and learn its tools. This session takes a different angle. Starting from a real ISP and IXP lab built on EVE-NG, I'll show how the same Python automation skills, querying live state, provisioning BGP peers, and pushing wide config changes work across both MikroTik RouterOS and Cisco IOS-XE, using their native APIs. No Ansible, no heavy frameworks. Just HTTP, JSON, and a few dozen lines of Python that any network engineer can read, own, and extend. The goal isn't to compare vendors or declare a winner, it's to show that when you understand the protocol underneath, the vendor becomes just a detail.

1. RIPE NCC Exec Board Elections.
2. Questions on the outcome of the GM
3. Concerns on financing of regional events
4. Feargas McKay last memorial Edinburgh

If people are interested I could have a short talk / lightning talk about this topic, the EC has proposed quite a complex voluntary conciliation and we do not yet know how the discussions will end. Just an offer, just in a case people would like to have an update.