SysAdmin2022/index.html

<!doctype html>
<html>
  <head>
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no">
    
    <title>SysAdmin2022</title>
    
    <link rel="stylesheet" href="dist/reset.css">
    <link rel="stylesheet" href="dist/reveal.css">
    <link rel="stylesheet" href="dist/theme/solarized.css">

    <style type="text/css">
      /* Copyright notice */
      #copyright {
	  position: absolute;
	  bottom: 0%;
	  left: 0%;
	  text-size: tiny;
      }
      .reveal .footer {
	  position: absolute;
	  bottom: 1em;
	  left: 1em;
	  font-size: 0.5em;
      }
    </style>
		  
    <!-- Theme used for syntax highlighted code -->
    <link rel="stylesheet" href="plugin/highlight/monokai.css">
  </head>
  <body>
    <div class="reveal">
      <div class="slides">
	<section>
	  <h2>Learning about slightly more advanced networking with linux</h2>
	  <p><b>Paul Warren</b></p>
	  <p>Mastodon: @pwarren@mastodon.thewarrens.name </p>
	  <p>email: paul at thewarrens.name </p>
	  <p>&copy; 2021 Paul Warren</p>
	  <p>CC BY-NC-SA<p>
	</section>

	<section><h2 style="color:red">! WARNING !</h2>
	  <p>I am not a network engineer, there are gaps in my knowledge</p>
	  <p>The words I use might not be the correct ones</p>
	  <p>Please don't blame me if your network stops networking</p>
	  <p class="fragment">Maybe don't go and try building an ISP based off this talk :)</p>
	</section>

	<section><h2>What even is a network?</h2>
	  <p class="fragment fade-in-then-out">Ethernet?</p>
	  <p class="fragment fade-in-then-out">Token Ring?</p>
	  <p class="fragment fade-in-then-out">IPX?</p>
	  <p class="fragment fade-in-then-out">AX.25?</p>
	</section>
	<section><h2>What even is a network?</h2>
	  <p class="fragment fade-in-then-out">ipv4?</p>
	  <p class="fragment fade-in-then-out">ipv6?</p>
	  <p class="fragment fade-in-then-out">tcp?</p>
	  <p class="fragment">Allows connections between computers</p>
	  <aside class="notes">
	    <p>We are going to mostly focus on Ethernet and IPv6</p>
	</section>
	
	<section><h2>Managed networks</h2>
	  <p class="fragment"><b>Controls</b> connections between computers</p>
	  <p class="fragment"><b>Scales</b> connections between computers</p>
	  <p class="fragment"><img src="3tier.png" /><p>
	    <aside class="notes">
	      <p>Most of us probably work in a managed network</p>
	      <p>Most of us probably have a pretty flat edge network at home</p>
	      <p>Diagram is nice, but hides complexities at each layer.<p>
	    </aside>
	</section>
	<section><h2>Layers!</h2>
	  <p class="fragment">Like an onion!</p>
	  <p class="fragment">That 7 layer thing from the OSI</p>
	  <p class="fragment">Ethernet -> IP -> ICMP/TCP/UDP</p>
	  <p class="fragment">Administrative overlays</p>
	  <p class="fragment">VPNs and Tunnels</p>
	  <aside class="notes">
	    <p>or a parfait</p>
	    <p>which you can mostly ignore, as what we generally use doesn't conform to it. But it does provide a good framework for assisting understanding</p>
	    <p>Like firewalls, web-proxies/SSL MITM, But also access rights etc</p>
	  </aside>
	</section>
	
	<section><h2>Layers</h2>
	  <p>This means the Physical layers do not have to match the Logical connections</p>
	  <p class="fragment">Networks are also a bit fractal in nature</p>
	  <p class="fragment">For the purposes of this talk, we can ignore a lot of complexity</p>
	</section>

	<section><h2>An easy one!</h2>
	  <p>VLANS</p>
	  <p class="fragment">Ethernet layer</p>
	  <p class="fragment">Designed to limit broadcast storms</p>
	  <p class="fragment">Can also separate IP networks on the same Ethernet</p>
	  <p class="fragment">Tagged and Untagged/Default</p>
	  <p class="fragment">IEEE 802.1Q</p>
	  <aside class="notes">
	    <p>beware of strange implementations, windows seems to take Router Advertisements from all vlans, regardless of tag</p>
	  </aside>
	</section>
	
	<section><h2>VLANs in linux</h2>
	  <p>Are pretty easy!</p>
	  <pre class="fragment"><code data-trim data-noescape>
	    ip link add link enp0s2 name enp0s2.2501 vlan id 2501
	    ip -6 addr add 2001:db8:2501::10/64 dev enp0s2.2501
	    ip link set dev enp0s2.2501 up
	    </code>
	  </pre>
	</section>

	<section><h2>VLANs in linux</h2>
	  <p>Various different methods of making it go in different distributions</p>
	  <p class="fragment">Debian: in /etc/network/interfaces</p>
	  <pre class="fragment">
	    <code>auto enp1s0.2502
iface enp1s0.2502 inet dhcp
iface enp1s0.2502 inet6 auto</code>
	  </pre>
	  <p class="fragment">OpenWRT has a nice GUI</p>

	  <aside class="notes">
	    <p>OpenWRT: can also use the hardware present on most hardware routers to assign vlans to specific ports</p>
	</section>

	<section><h2>VLANs in linux</h2>
	  <p>Here's what I've done</p>
	  <img src="Diagrams/MyVLans.png"></img>
	  <aside class="notes">
	    <p>Guest Wifi</p>
	    <p>Access VLAN</p>
	    <p>Netflix, Youtube, my webhost, desktops/work computers</p>
	  </aside>
	</section>

	<section><h2>What even is a router?</h2>
	  <p class="fragment">Two or more interfaces</p>
	  <p class="fragment">Some logic to determine where a packet goes</p>
	  <aside class="notes">
	    <p>Not necessarily physical</p>
	    <p>Sounds simple right?</p>
	  </aside>
	</section>
	
	<section><h2>Linux Routing</h2>
	  <p>Add to sysctl config:</p>
	  <pre class="fragment"><code data-trim data-noescape>
	      net.ipv4.ip_forward = 1
	      net.ipv6.conf.all.forwarding = 1
	      net.ipv6.conf.default.forwarding = 1
	    </code>
	  </pre>
	  <p class="fragment">And we're done!</p>
	  <p class="fragment">Yeah, not really :)</p>
	</section>
	
	<section><h2>Static Routes</h2>
	  <p>Manually added, or scripted routes that don't change</p>
	  <pre><code data-trim data-noescape>
	      ip route add 172.17.0.0/24 via 172.16.0.254 dev wg0
	    </code>
	  </pre>
	</section>
	
	<section><h2>Static Routes</h2>
	  <pre width="110%"><code width="110%">ip -6 route add 2001:db8:2501::/64 via 2001:db8:2500::1 dev enp0s1
ip -6 route add 2001:db8:2502::/64 via 2001:db8:2500::1 dev enp0s1
ip -6 route add 2001:db8:2600:beef:/64 via 2001:db8:face::1 dev wg0</code>
	  </pre>
	  <aside class="notes">
	    <p>As you can imagine this quickly becomes unwieldy with expanding networks</p>
	  </aside>
	</section>

	<section><h2>Static Routes</h2>
	  <img src="Diagrams/MyVLansExt.png"></img>
	</section>

	<section><h2>Enter dynamic routes</h2>
	  <p class="fragment">Advertise your LANs</p>
	  <p class="fragment">Discovering routes to other LANs</p>
	  <p class="fragment">Optional: Do some logic</p>
	  <p class="fragment">Add them to the routing table</p>
	  <p class="fragment">Userspace daemons</p>
	  <p class="fragment">talking to the kernel networking stack</p>
	</section>				   

	<section><h2>Dynamic Routing</h2>
	  <p>Open Shortest Path First (OSPF)</p>
	  <p>Uses Dijkstra's algorithm</p>
	  <p class="fragment">RFC2328</p>
	  <p class="fragment">RFC5340</p>
	  <p class="fragment">For: Dynamic routes inside your networks</p>
	</section>
	
	<section><h2>Dynamic Routing</h2>
	  <p>Border Gateway Protocol (BGP)</p>
	  <p class="fragment">RF4271</p>
	  <p class="fragment">For: Sharing dynamic routes outside your network with other Autonomous Sytstems (AS)</p>
	  <notes class="aside">
	    <p>"AS" is used a lot in the ISP world, and your ISP will have an assigned AS Number</p>
	  </notes>
	</section>

	<section><h2>The Userspace Daemons</h2>
	  <p>BIRD: Berkeley Internet Routing Daemon</p>
	  <p>Quagga: Fork of Zebra</p>
	  <p>OpenBGPd/OpenOSPFd: from the OpenBSD project</p>
	  <p class="fragment">Significant overlap, but they are different</p>
	  <p class="fragment">I've not used Quagga, or the OpenBSD ones</p>
	  <p class="fragment">There are probably others!</p>
	</section>
	
	<section><h2>intro to bird</h2>
	  <p>Powerful</p>
	  <p class="fragment">Complex to configure</p>
	  <p class="fragment">Use version control</p>
	  <aside class="notes">
	    <p>Not quite turing complete</p>
	    <p> git on /etc/bird or wherever your distro stores it.</p>
	  </aside>  
	</section>

	<section><h2>Intro to bird configuration</h2>
	  <p>/etc/bird.conf</p>
	  <pre><code data-trim data-noescape>router id 10.9.99.6;

log "/var/log/bird/bird.log" all;
debug protocols { states, routes, filters, interfaces }

protocol kernel {
        import none;
        export all;
}

protocol device {
        # defaults...
}
	    </code>
	  </pre>
	</section>
	
	<section><h2>Intro to bird configuration</h2>
	  <p>/etc/bird.conf</p>
	  <p>Each router needs a unique ID</p>
	  <p class="fragment">Protocol blocks, There are lots of types</p>
	  <p class="fragment">They are how bird knows what to talk to and how</p>
	  <aside class="notes">
	    <p>router ID. usually one of router's IPv4 addresses. Default: the lowest IPv4 address of a non-loopback interface. World (your network) unique<p>
	      
	</section>

	<section><h2>Intro to bird configuration</h2>
	    <pre><code data-trim data-noescape>protocol ospf {
        area 0 {
                interface "lo" {
                        stub;
                };
                interface "vlan1001" {
                };
                interface "vlan1034" {
                        stub;
                };
        };
		}
	      </code>
	    </pre>
	    <notes class="aside">
	      <p> There are a lot more options than stub or default</p>
	      <p>BIRD documentation is really good</p>
	</section>
	
	<section><h2>Intro to bird configuration</h2>
	  <p><img src="Diagrams/bird-prototable.png"></img></p>
	  <notes class="aside">
	    <p>Import vs Export</p>
	    <p>Master Table</p>
	    <p>Logic in Pipes</p>
	</section>

	<section><h2>A funky thing you can do with OSPF</h2>
	  <p>A necessary service</p>
	  <p class="fragment">Contained within a network</p>
	  <p class="fragment">Data more efficiently obtained across local links</p>
	  <p class="fragment">Can still get the costly versions if local goes down</p>
	</section>

	<section><h2>A funky thing you can do with OSPF</h2>
	  <p>An IP for a host that provides that service</p>
	  <p class="fragment">Can use that same IP in two different places in the network</p>
	  <p class="fragment">Confused routing?</p>
	  <p class="fragment">OSPF to the rescue!</p>
	</section>

	<section><h2>A funky thing you can do with OSPF</h2>
	  <p><img src="Diagrams/OSPF_HA.png"></img></p>
	</section>

	<section><h2>Why use a 'real' router</h2>
	  <p>Linux based router:</p>
	  <p class="fragment">NIC Hardware</p>
	  <p class="fragment">-> whole packet to Driver memory</p>
	  <p class="fragment">-> various kernel subsystems</p>
	  <p class="fragment">Routing decision made</p>
	  <p class="fragment">Then back out the same path</p>
	</section>

	<section><h2>Why use a 'real' router</h2>
	  <p>Enterprise level router</p>
	  <p class="fragment">NIC Hardware</p>
	  <p class="fragment">Just Enough Packet to get the address</p>
	  <p class="fragment">-> routing silicon</p>
	  <p class="fragment">Routing decision made</p>
	  <p class="fragment">Silicon switched to forward packet out correct NIC Hardware</p>
	</section>

	<section><h2>Why use a 'real' router</h2>
	  <p>Performance</p>
	  <p class="fragment">Some work being done on 'zero copy' networking in linux</p>
	  <p class="fragment">io_uring also has some smarts for this</p>
	</section>
	
	<section><h2>Why use a 'real' router</h2>
	  <p>Other Considerations</p>
	  <p class="fragment">Network Engineers are</p>
	  <p class="fragment">Not familiar with linux networking</p>
	  <p class="fragment">will have significant skills using commercial routing software</p>
	  <p class="fragment">Hardware ruggedness, suitability for datacentre</p>
	  <p class="fragment">power consumption</p>
	</section>
	    
	<section><h2>¿Por qué no los dos?</h2>
	  <p>OpenWRT is a linux based distribution for real networking hardware</p>
	  <aside class="note">
	    <p>Consumer grade mostly, but some enterprise level routers are supported</p>
	</section>

	<section><h2>BGP</h2>
	  <p>Sorry, didn't get to explore this as much as I'd like</p>
	  <p>Not too confident talking about it as yet</p>
	  <p>Is how the internet is put together</p>
	</section>

	<section><h2>Bonus homework</h2>
	  <p>Why did I use 2001::db8::/32?</p>
	  <p>Why did I use /64s?</p>
	  <p>I highly recommend going through KNorrie's network examples: <a href="https://github.com/knorrie/network-examples">https://github.com/knorrie/network-examples</a></p>
	  <p>OSPF Areas</p>
	  <p>Auth* for OSPF</p>
	  <p>Automatic transfers of internal aggregate networks to BGP (Something I've not investigated much)</p>
	</section>
	
	<section><h2>Resources</h2>
	  <p>These slides: <a href="https://gitea.pwarren.id.au/pwarren/SysAdmin2022">https://gitea.pwarren.id.au/pwarren/SysAdmin2022</a></p>
	  <p>bird: <a href="https://bird.network.cz/">https://bird.network.cz</a></p>
	  <p>Openwrt: <a href="https://openwrt.org">https://openwrt.org/</a></p>
	  <p>The OpenWRT IRC channel, currently on the OFTC network</p>
	  <p>BenEater's <a href="https://www.youtube.com/watch?v=-wMU8vmfaYo">"Why was facebook down for five hours" </a></p>
	  <p><a href="https://www.ieee802.org/1/pages/802.1Q-2014.html">802.1Q</a></p>
	</section>
	
      </div>
    </div>
    
    <script src="dist/reveal.js"></script>
    <script src="plugin/notes/notes.js"></script>
    <script src="plugin/markdown/markdown.js"></script>
    <script src="plugin/highlight/highlight.js"></script>
    <script>
      // More info about initialization & config:
      // - https://revealjs.com/initialization/
      // - https://revealjs.com/config/
      Reveal.initialize({
	  hash: true,
	  
	  // Learn about plugins: https://revealjs.com/plugins/
	  plugins: [ RevealMarkdown, RevealHighlight, RevealNotes ]
      });
    </script>
  </body>
</html>
initial reveal.js import 2021-09-29 21:52:51 +10:00			`<!doctype html>`
			`<html>`
First inputs 2021-09-29 23:04:50 +10:00			`<head>`
			`<meta charset="utf-8">`
			`<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no">`

			`<title>SysAdmin2022</title>`

			`<link rel="stylesheet" href="dist/reset.css">`
			`<link rel="stylesheet" href="dist/reveal.css">`
			`<link rel="stylesheet" href="dist/theme/solarized.css">`
Licensing 2021-10-06 21:06:23 +11:00
			`<style type="text/css">`
			`/* Copyright notice */`
			`#copyright {`
			`position: absolute;`
			`bottom: 0%;`
			`left: 0%;`
			`text-size: tiny;`
			`}`
			`.reveal .footer {`
			`position: absolute;`
			`bottom: 1em;`
			`left: 1em;`
			`font-size: 0.5em;`
			`}`
			`</style>`

First inputs 2021-09-29 23:04:50 +10:00			`<!-- Theme used for syntax highlighted code -->`
			`<link rel="stylesheet" href="plugin/highlight/monokai.css">`
			`</head>`
			`<body>`
			`<div class="reveal">`
			`<div class="slides">`
			`<section>`
			`<h2>Learning about slightly more advanced networking with linux</h2>`
			`<p><b>Paul Warren</b></p>`
			`<p>Mastodon: @pwarren@mastodon.thewarrens.name </p>`
			`<p>email: paul at thewarrens.name </p>`
Licensing 2021-10-06 21:06:23 +11:00			`<p>© 2021 Paul Warren</p>`
			`<p>CC BY-NC-SA<p>`
First inputs 2021-09-29 23:04:50 +10:00			`</section>`
more intro bits 2021-09-30 22:04:57 +10:00
			`<section><h2 style="color:red">! WARNING !</h2>`
few more slides 2021-10-06 20:39:47 +11:00			`<p>I am not a network engineer, there are gaps in my knowledge</p>`
			`<p>The words I use might not be the correct ones</p>`
more intro bits 2021-09-30 22:04:57 +10:00			`<p>Please don't blame me if your network stops networking</p>`
			`<p class="fragment">Maybe don't go and try building an ISP based off this talk :)</p>`
			`</section>`

Calm down headings, more fragments 2022-01-13 23:09:51 +11:00			`<section><h2>What even is a network?</h2>`
First inputs 2021-09-29 23:04:50 +10:00			`<p class="fragment fade-in-then-out">Ethernet?</p>`
			`<p class="fragment fade-in-then-out">Token Ring?</p>`
			`<p class="fragment fade-in-then-out">IPX?</p>`
			`<p class="fragment fade-in-then-out">AX.25?</p>`
			`</section>`
Calm down headings, more fragments 2022-01-13 23:09:51 +11:00			`<section><h2>What even is a network?</h2>`
First inputs 2021-09-29 23:04:50 +10:00			`<p class="fragment fade-in-then-out">ipv4?</p>`
			`<p class="fragment fade-in-then-out">ipv6?</p>`
more intro bits 2021-09-30 22:04:57 +10:00			`<p class="fragment fade-in-then-out">tcp?</p>`
First inputs 2021-09-29 23:04:50 +10:00			`<p class="fragment">Allows connections between computers</p>`
VLANs started 2021-11-15 20:48:40 +11:00			`<aside class="notes">`
			`<p>We are going to mostly focus on Ethernet and IPv6</p>`
First inputs 2021-09-29 23:04:50 +10:00			`</section>`

Calm down headings, more fragments 2022-01-13 23:09:51 +11:00			`<section><h2>Managed networks</h2>`
First inputs 2021-09-29 23:04:50 +10:00			`<p class="fragment"><b>Controls</b> connections between computers</p>`
few more slides 2021-10-06 20:39:47 +11:00			`<p class="fragment"><b>Scales</b> connections between computers</p>`
First inputs 2021-09-29 23:04:50 +10:00			`<p class="fragment"><img src="3tier.png" /><p>`
			`<aside class="notes">`
few more slides 2021-10-06 20:39:47 +11:00			`<p>Most of us probably work in a managed network</p>`
VLANs started 2021-11-15 20:48:40 +11:00			`<p>Most of us probably have a pretty flat edge network at home</p>`
few more slides 2021-10-06 20:39:47 +11:00			`<p>Diagram is nice, but hides complexities at each layer.<p>`
First inputs 2021-09-29 23:04:50 +10:00			`</aside>`
			`</section>`
more intro bits 2021-09-30 22:04:57 +10:00			`<section><h2>Layers!</h2>`
few more slides 2021-10-06 20:39:47 +11:00			`<p class="fragment">Like an onion!</p>`
			`<p class="fragment">That 7 layer thing from the OSI</p>`
VLANs bits 2021-11-23 19:13:24 +11:00			`<p class="fragment">Ethernet -> IP -> ICMP/TCP/UDP</p>`
few more slides 2021-10-06 20:39:47 +11:00			`<p class="fragment">Administrative overlays</p>`
more progress 2021-10-16 19:37:58 +11:00			`<p class="fragment">VPNs and Tunnels</p>`
few more slides 2021-10-06 20:39:47 +11:00			`<aside class="notes">`
			`<p>or a parfait</p>`
VLANs bits 2021-11-23 19:13:24 +11:00			`<p>which you can mostly ignore, as what we generally use doesn't conform to it. But it does provide a good framework for assisting understanding</p>`
more progress 2021-10-16 19:37:58 +11:00			`<p>Like firewalls, web-proxies/SSL MITM, But also access rights etc</p>`
Calm down headings, more fragments 2022-01-13 23:09:51 +11:00			`</aside>`
more progress 2021-10-16 19:37:58 +11:00			`</section>`
Calm down headings, more fragments 2022-01-13 23:09:51 +11:00
			`<section><h2>Layers</h2>`
more content, section fix 2021-10-20 16:41:25 +11:00			`<p>This means the Physical layers do not have to match the Logical connections</p>`
more progress 2021-10-16 19:37:58 +11:00			`<p class="fragment">Networks are also a bit fractal in nature</p>`
			`<p class="fragment">For the purposes of this talk, we can ignore a lot of complexity</p>`
			`</section>`

VLANs bits 2021-11-23 19:13:24 +11:00			`<section><h2>An easy one!</h2>`
VLANs started 2021-11-15 20:48:40 +11:00			`<p>VLANS</p>`
			`<p class="fragment">Ethernet layer</p>`
			`<p class="fragment">Designed to limit broadcast storms</p>`
			`<p class="fragment">Can also separate IP networks on the same Ethernet</p>`
tagging, basic routing 2021-12-20 07:13:39 +11:00			`<p class="fragment">Tagged and Untagged/Default</p>`
			`<p class="fragment">IEEE 802.1Q</p>`
VLANs started 2021-11-15 20:48:40 +11:00			`<aside class="notes">`
VLANs bits 2021-11-23 19:13:24 +11:00			`<p>beware of strange implementations, windows seems to take Router Advertisements from all vlans, regardless of tag</p>`
Calm down headings, more fragments 2022-01-13 23:09:51 +11:00			`</aside>`
VLANs started 2021-11-15 20:48:40 +11:00			`</section>`
Calm down headings, more fragments 2022-01-13 23:09:51 +11:00
VLANs started 2021-11-15 20:48:40 +11:00			`<section><h2>VLANs in linux</h2>`
			`<p>Are pretty easy!</p>`
VLANs bits 2021-11-23 19:13:24 +11:00			`<pre class="fragment"><code data-trim data-noescape>`
VLANs started 2021-11-15 20:48:40 +11:00			`ip link add link enp0s2 name enp0s2.2501 vlan id 2501`
			`ip -6 addr add 2001:db8:2501::10/64 dev enp0s2.2501`
			`ip link set dev enp0s2.2501 up`
tagging, basic routing 2021-12-20 07:13:39 +11:00			`</code>`
VLANs started 2021-11-15 20:48:40 +11:00			`</pre>`
VLANs bits 2021-11-23 19:13:24 +11:00			`</section>`
VLANs started 2021-11-15 20:48:40 +11:00
VLANs bits 2021-11-23 19:13:24 +11:00			`<section><h2>VLANs in linux</h2>`
			`<p>Various different methods of making it go in different distributions</p>`
tagging, basic routing 2021-12-20 07:13:39 +11:00			`<p class="fragment">Debian: in /etc/network/interfaces</p>`
Calm down headings, more fragments 2022-01-13 23:09:51 +11:00			`<pre class="fragment">`
better routes 2022-01-12 19:57:07 +11:00			`<code>auto enp1s0.2502`
			`iface enp1s0.2502 inet dhcp`
			`iface enp1s0.2502 inet6 auto</code>`
tagging, basic routing 2021-12-20 07:13:39 +11:00			`</pre>`
			`<p class="fragment">OpenWRT has a nice GUI</p>`
VLANs bits 2021-11-23 19:13:24 +11:00
tagging, basic routing 2021-12-20 07:13:39 +11:00			`<aside class="notes">`
			`<p>OpenWRT: can also use the hardware present on most hardware routers to assign vlans to specific ports</p>`
			`</section>`
More content 2022-01-13 23:10:15 +11:00
			`<section><h2>VLANs in linux</h2>`
			`<p>Here's what I've done</p>`
			`<img src="Diagrams/MyVLans.png"></img>`
			`<aside class="notes">`
			`<p>Guest Wifi</p>`
			`<p>Access VLAN</p>`
			`<p>Netflix, Youtube, my webhost, desktops/work computers</p>`
			`</aside>`
			`</section>`

VLANs bits 2021-11-23 19:13:24 +11:00			`<section><h2>What even is a router?</h2>`
extra >s gone, reshuffle order 2021-10-25 15:59:55 +11:00			`<p class="fragment">Two or more interfaces</p>`
			`<p class="fragment">Some logic to determine where a packet goes</p>`
			`<aside class="notes">`
			`<p>Not necessarily physical</p>`
			`<p>Sounds simple right?</p>`
tagging, basic routing 2021-12-20 07:13:39 +11:00			`</aside>`
extra >s gone, reshuffle order 2021-10-25 15:59:55 +11:00			`</section>`

			`<section><h2>Linux Routing</h2>`
Calm down headings, more fragments 2022-01-13 23:09:51 +11:00			`<p>Add to sysctl config:</p>`
extra >s gone, reshuffle order 2021-10-25 15:59:55 +11:00			`<pre class="fragment"><code data-trim data-noescape>`
tagging, basic routing 2021-12-20 07:13:39 +11:00			`net.ipv4.ip_forward = 1`
			`net.ipv6.conf.all.forwarding = 1`
			`net.ipv6.conf.default.forwarding = 1`
extra >s gone, reshuffle order 2021-10-25 15:59:55 +11:00			`</code>`
			`</pre>`
			`<p class="fragment">And we're done!</p>`
			`<p class="fragment">Yeah, not really :)</p>`
tagging, basic routing 2021-12-20 07:13:39 +11:00			`</section>`

Calm down headings, more fragments 2022-01-13 23:09:51 +11:00			`<section><h2>Static Routes</h2>`
extra >s gone, reshuffle order 2021-10-25 15:59:55 +11:00			`<p>Manually added, or scripted routes that don't change</p>`
			`<pre><code data-trim data-noescape>`
			`ip route add 172.17.0.0/24 via 172.16.0.254 dev wg0`
			`</code>`
			`</pre>`
			`</section>`
tagging, basic routing 2021-12-20 07:13:39 +11:00
Calm down headings, more fragments 2022-01-13 23:09:51 +11:00			`<section><h2>Static Routes</h2>`
			`<pre width="110%"><code width="110%">ip -6 route add 2001:db8:2501::/64 via 2001:db8:2500::1 dev enp0s1`
better routes 2022-01-12 19:57:07 +11:00			`ip -6 route add 2001:db8:2502::/64 via 2001:db8:2500::1 dev enp0s1`
Calm down headings, more fragments 2022-01-13 23:09:51 +11:00			`ip -6 route add 2001:db8:2600:beef:/64 via 2001:db8:face::1 dev wg0</code>`
tagging, basic routing 2021-12-20 07:13:39 +11:00			`</pre>`
			`<aside class="notes">`
			`<p>As you can imagine this quickly becomes unwieldy with expanding networks</p>`
			`</aside>`
			`</section>`
extra >s gone, reshuffle order 2021-10-25 15:59:55 +11:00
Calm down headings, more fragments 2022-01-13 23:09:51 +11:00			`<section><h2>Static Routes</h2>`
			`<img src="Diagrams/MyVLansExt.png"></img>`
			`</section>`

tagging, basic routing 2021-12-20 07:13:39 +11:00			`<section><h2>Enter dynamic routes</h2>`
Calm down headings, more fragments 2022-01-13 23:09:51 +11:00			`<p class="fragment">Advertise your LANs</p>`
			`<p class="fragment">Discovering routes to other LANs</p>`
			`<p class="fragment">Optional: Do some logic</p>`
			`<p class="fragment">Add them to the routing table</p>`
jan2 updates 2022-01-02 10:36:36 +11:00			`<p class="fragment">Userspace daemons</p>`
			`<p class="fragment">talking to the kernel networking stack</p>`
tagging, basic routing 2021-12-20 07:13:39 +11:00			`</section>`
RFCs added 2021-10-25 16:11:13 +11:00
			`<section><h2>Dynamic Routing</h2>`
			`<p>Open Shortest Path First (OSPF)</p>`
Calm down headings, more fragments 2022-01-13 23:09:51 +11:00			`<p>Uses Dijkstra's algorithm</p>`
RFCs added 2021-10-25 16:11:13 +11:00			`<p class="fragment">RFC2328</p>`
			`<p class="fragment">RFC5340</p>`
jan2 updates 2022-01-02 10:36:36 +11:00			`<p class="fragment">For: Dynamic routes inside your networks</p>`
RFCs added 2021-10-25 16:11:13 +11:00			`</section>`
more progress 2021-10-16 19:37:58 +11:00
RFCs added 2021-10-25 16:11:13 +11:00			`<section><h2>Dynamic Routing</h2>`
			`<p>Border Gateway Protocol (BGP)</p>`
			`<p class="fragment">RF4271</p>`
Calm down headings, more fragments 2022-01-13 23:09:51 +11:00			`<p class="fragment">For: Sharing dynamic routes outside your network with other Autonomous Sytstems (AS)</p>`
			`<notes class="aside">`
			`<p>"AS" is used a lot in the ISP world, and your ISP will have an assigned AS Number</p>`
			`</notes>`
jan2 updates 2022-01-02 10:36:36 +11:00			`</section>`

			`<section><h2>The Userspace Daemons</h2>`
			`<p>BIRD: Berkeley Internet Routing Daemon</p>`
			`<p>Quagga: Fork of Zebra</p>`
Calm down headings, more fragments 2022-01-13 23:09:51 +11:00			`<p>OpenBGPd/OpenOSPFd: from the OpenBSD project</p>`
jan2 updates 2022-01-02 10:36:36 +11:00			`<p class="fragment">Significant overlap, but they are different</p>`
Calm down headings, more fragments 2022-01-13 23:09:51 +11:00			`<p class="fragment">I've not used Quagga, or the OpenBSD ones</p>`
			`<p class="fragment">There are probably others!</p>`
First inputs 2021-09-29 23:04:50 +10:00			`</section>`
RFCs added 2021-10-25 16:11:13 +11:00
More content 2022-01-08 21:24:04 +11:00			`<section><h2>intro to bird</h2>`
			`<p>Powerful</p>`
			`<p class="fragment">Complex to configure</p>`
			`<p class="fragment">Use version control</p>`
			`<aside class="notes">`
			`<p>Not quite turing complete</p>`
More content 2022-01-13 23:10:15 +11:00			`<p> git on /etc/bird or wherever your distro stores it.</p>`
More content 2022-01-08 21:24:04 +11:00			`</aside>`
			`</section>`
More content 2022-01-13 23:10:15 +11:00
			`<section><h2>Intro to bird configuration</h2>`
			`<p>/etc/bird.conf</p>`
			`<pre><code data-trim data-noescape>router id 10.9.99.6;`

			`log "/var/log/bird/bird.log" all;`
			`debug protocols { states, routes, filters, interfaces }`

			`protocol kernel {`
			`import none;`
			`export all;`
			`}`

			`protocol device {`
			`# defaults...`
			`}`
			`</code>`
			`</pre>`
			`</section>`
More content 2022-01-08 21:24:04 +11:00
			`<section><h2>Intro to bird configuration</h2>`
			`<p>/etc/bird.conf</p>`
			`<p>Each router needs a unique ID</p>`
More content 2022-01-13 23:10:15 +11:00			`<p class="fragment">Protocol blocks, There are lots of types</p>`
			`<p class="fragment">They are how bird knows what to talk to and how</p>`
More content 2022-01-08 21:24:04 +11:00			`<aside class="notes">`
More content 2022-01-13 23:10:15 +11:00			`<p>router ID. usually one of router's IPv4 addresses. Default: the lowest IPv4 address of a non-loopback interface. World (your network) unique<p>`
More content 2022-01-08 21:24:04 +11:00
jan2 updates 2022-01-02 10:36:36 +11:00			`</section>`
More content 2022-01-08 21:24:04 +11:00
missing end tag 2022-01-12 21:38:09 +11:00			`<section><h2>Intro to bird configuration</h2>`
More content 2022-01-13 23:10:15 +11:00			`<pre><code data-trim data-noescape>protocol ospf {`
			`area 0 {`
			`interface "lo" {`
			`stub;`
			`};`
			`interface "vlan1001" {`
			`};`
			`interface "vlan1034" {`
			`stub;`
			`};`
			`};`
			`}`
			`</code>`
			`</pre>`
			`<notes class="aside">`
			`<p> There are a lot more options than stub or default</p>`
			`<p>BIRD documentation is really good</p>`
missing end tag 2022-01-12 21:38:09 +11:00			`</section>`
jan2 updates 2022-01-02 10:36:36 +11:00
More content 2022-01-13 23:10:15 +11:00			`<section><h2>Intro to bird configuration</h2>`
			`<p><img src="Diagrams/bird-prototable.png"></img></p>`
OSPF_HA bits 2022-01-13 23:11:10 +11:00			`<notes class="aside">`
			`<p>Import vs Export</p>`
			`<p>Master Table</p>`
			`<p>Logic in Pipes</p>`
More content 2022-01-13 23:10:15 +11:00			`</section>`
More content 2022-01-08 21:24:04 +11:00
OSPF_HA bits 2022-01-13 23:11:10 +11:00			`<section><h2>A funky thing you can do with OSPF</h2>`
			`<p>A necessary service</p>`
			`<p class="fragment">Contained within a network</p>`
			`<p class="fragment">Data more efficiently obtained across local links</p>`
			`<p class="fragment">Can still get the costly versions if local goes down</p>`
			`</section>`

			`<section><h2>A funky thing you can do with OSPF</h2>`
			`<p>An IP for a host that provides that service</p>`
			`<p class="fragment">Can use that same IP in two different places in the network</p>`
			`<p class="fragment">Confused routing?</p>`
			`<p class="fragment">OSPF to the rescue!</p>`
			`</section>`

			`<section><h2>A funky thing you can do with OSPF</h2>`
Cleanups 2022-01-14 08:59:25 +11:00			`<p><img src="Diagrams/OSPF_HA.png"></img></p>`
			`</section>`

			`<section><h2>Why use a 'real' router</h2>`
			`<p>Linux based router:</p>`
			`<p class="fragment">NIC Hardware</p>`
			`<p class="fragment">-> whole packet to Driver memory</p>`
			`<p class="fragment">-> various kernel subsystems</p>`
			`<p class="fragment">Routing decision made</p>`
			`<p class="fragment">Then back out the same path</p>`
OSPF_HA bits 2022-01-13 23:11:10 +11:00			`</section>`

Cleanups 2022-01-14 08:59:25 +11:00			`<section><h2>Why use a 'real' router</h2>`
			`<p>Enterprise level router</p>`
			`<p class="fragment">NIC Hardware</p>`
			`<p class="fragment">Just Enough Packet to get the address</p>`
			`<p class="fragment">-> routing silicon</p>`
			`<p class="fragment">Routing decision made</p>`
			`<p class="fragment">Silicon switched to forward packet out correct NIC Hardware</p>`
			`</section>`
More content 2022-01-08 21:24:04 +11:00
Cleanups 2022-01-14 08:59:25 +11:00			`<section><h2>Why use a 'real' router</h2>`
			`<p>Performance</p>`
			`<p class="fragment">Some work being done on 'zero copy' networking in linux</p>`
			`<p class="fragment">io_uring also has some smarts for this</p>`
			`</section>`

			`<section><h2>Why use a 'real' router</h2>`
			`<p>Other Considerations</p>`
			`<p class="fragment">Network Engineers are</p>`
			`<p class="fragment">Not familiar with linux networking</p>`
			`<p class="fragment">will have significant skills using commercial routing software</p>`
			`<p class="fragment">Hardware ruggedness, suitability for datacentre</p>`
			`<p class="fragment">power consumption</p>`
			`</section>`

More content 2022-01-08 21:24:04 +11:00			`<section><h2>¿Por qué no los dos?</h2>`
			`<p>OpenWRT is a linux based distribution for real networking hardware</p>`
			`<aside class="note">`
			`<p>Consumer grade mostly, but some enterprise level routers are supported</p>`
			`</section>`
Cleanups 2022-01-14 08:59:25 +11:00
			`<section><h2>BGP</h2>`
			`<p>Sorry, didn't get to explore this as much as I'd like</p>`
			`<p>Not too confident talking about it as yet</p>`
			`<p>Is how the internet is put together</p>`
			`</section>`
More content 2022-01-08 21:24:04 +11:00
more content, section fix 2021-10-20 16:41:25 +11:00			`<section><h2>Bonus homework</h2>`
			`<p>Why did I use 2001::db8::/32?</p>`
			`<p>Why did I use /64s?</p>`
tagging, basic routing 2021-12-20 07:13:39 +11:00			`<p>I highly recommend going through KNorrie's network examples: <a href="https://github.com/knorrie/network-examples">https://github.com/knorrie/network-examples</a></p>`
More content 2022-01-08 21:24:04 +11:00			`<p>OSPF Areas</p>`
More content 2022-01-13 23:10:15 +11:00			`<p>Auth* for OSPF</p>`
Cleanups 2022-01-14 08:59:25 +11:00			`<p>Automatic transfers of internal aggregate networks to BGP (Something I've not investigated much)</p>`
more content, section fix 2021-10-20 16:41:25 +11:00			`</section>`
more progress 2021-10-16 19:37:58 +11:00
First inputs 2021-09-29 23:04:50 +10:00			`<section><h2>Resources</h2>`
			`<p>These slides: <a href="https://gitea.pwarren.id.au/pwarren/SysAdmin2022">https://gitea.pwarren.id.au/pwarren/SysAdmin2022</a></p>`
			`<p>bird: <a href="https://bird.network.cz/">https://bird.network.cz</a></p>`
			`<p>Openwrt: <a href="https://openwrt.org">https://openwrt.org/</a></p>`
more intro bits 2021-09-30 22:04:57 +10:00			`<p>The OpenWRT IRC channel, currently on the OFTC network</p>`
tagging, basic routing 2021-12-20 07:13:39 +11:00			`<p>BenEater's <a href="https://www.youtube.com/watch?v=-wMU8vmfaYo">"Why was facebook down for five hours" </a></p>`
Remove old bits 2022-01-13 23:10:25 +11:00			`<p><a href="https://www.ieee802.org/1/pages/802.1Q-2014.html">802.1Q</a></p>`
First inputs 2021-09-29 23:04:50 +10:00			`</section>`
Remove old bits 2022-01-13 23:10:25 +11:00
First inputs 2021-09-29 23:04:50 +10:00			`</div>`
			`</div>`

			`<script src="dist/reveal.js"></script>`
			`<script src="plugin/notes/notes.js"></script>`
			`<script src="plugin/markdown/markdown.js"></script>`
			`<script src="plugin/highlight/highlight.js"></script>`
			`<script>`
			`// More info about initialization & config:`
			`// - https://revealjs.com/initialization/`
			`// - https://revealjs.com/config/`
			`Reveal.initialize({`
			`hash: true,`

			`// Learn about plugins: https://revealjs.com/plugins/`
			`plugins: [ RevealMarkdown, RevealHighlight, RevealNotes ]`
			`});`
			`</script>`
			`</body>`
initial reveal.js import 2021-09-29 21:52:51 +10:00			`</html>`