====== LKNOG 10 Workshops ====== LKNOG10 host the following three workshop tracks. ---- ====== WORKSHOP1 ====== ===== Segment Routing Workshop (Train-the-Trainer) ===== ==== Synopsis ==== The emergence of Software Defined Networking (SDN) is having a disruptive influence on the world of data networking and is leading to a fundamental re-think of how networks are architected. This Workshop will provide an in-depth understanding of Segment Routing (SR), one of the key elements/technologies in the SDN framework, along with hands-on labs. ==== Target Audience ==== Anyone currently operating an IP and/or Multiprotocol Label Switching (MPLS) network who is interested in Segment Routing with a view to implement it in the near future. ==== Pre-requisites ==== To ensure maximum benefit from the training, we recommend that participants come with a solid understanding of routing concepts and experience with dynamic routing protocols, such as Open Shortest Path First (OSPF), Intermediate System to Intermediate System (IS-IS), and Border Gateway Protocol (BGP). In addition, a good understanding of MPLS and MPLS services is also essential, as it provides the foundation for comprehending how services are delivered and managed in SR-enabled networks. Detailed Agenda can be found [[https://academy.apnic.net/en/events?id=a0BOc000004p3uPMAQ|here]]. ---- ====== WORKSHOP2 ====== ===== Managing and Securing Internet Identifiers ===== ==== Workshop Description ==== This workshop provides participants with a comprehensive understanding of the management, operation, and security of Internet identifiers such as IP addresses, Autonomous System Numbers (ASNs), and the Domain Name System (DNS). It aims to strengthen participants' technical knowledge and practical skills in managing Internet identifier resources securely, efficiently, and in accordance with globally recognized best practices. The workshop covers fundamental concepts of Internet Identifier management, allocation, registration, and operational practices, along with key security technologies and mechanisms such as DNS Security Extensions (DNSSEC), Internet Protocol Security (IPsec), and Resource Public Key Infrastructure (RPKI). Participants will explore how these technologies contribute to the security, stability, and resilience of Internet infrastructure by protecting DNS information, securing IP communications, and strengthening routing security. The workshop consists of presentations, interactive discussions, hands-on lab sessions and emphasizes real-world operational scenarios, common security challenges, and practical approaches to improving Internet infrastructure resilience. ==== Topics Covered ==== * Overview of Internet Identifiers (IPv4, IPv6, ASNs, DNS) * Organisational functions (ICANN/IANA, RIRs, Registry/Registrar functions) * Registration of Internet Identifiers (WHOIS, RDAP) * Root Server System and Operation * DNS Operations (Recursive, Authoritative) * Reverse DNS * Securing Internet Identifiers * Internet Protocol Security (IPSec) * Resource Public Key Infrastructure (RPKI) * DNS Security Extensions (DNSSEC) * BCP Frameworks (KINDNS, MANRS) * Universal Acceptance (IDNs, EAI) ==== Target Audience ==== The course is designed for network engineers, DNS administrators, Internet service provider (ISP) operators, cybersecurity professionals, network operations personnel, technical staff from government and regulatory organizations, and other professionals involved in the management, operation, and security of Internet infrastructure. Detailed Agenda can be found [[lknog10:identifiers|here]]. ---- ====== WORKSHOP3 ====== ===== Advanced Networking and IXP Operations ===== ==== Day1 ==== === Constructing a secure SD-WAN architecture === As businesses rely more on cloud-based applications, organizations with remote offices and distributed workforces must adapt their network infrastructure. Traditional WANs, often using costly MPLS or leased lines, route all traffic through centralized data centres, creating latency, performance bottlenecks, and operational complexity. Managing multiple point products adds to the challenge, increasing visibility gaps and troubleshooting difficulties. This workshop explores how SD-WAN offers a dynamic, cost-effective alternative to static WAN architecture. Participants will learn how Secure SD-WAN enhances performance, reduces costs, and integrates security directly into the network. Through centralized management and advanced traffic optimization, organizations can improve cloud application access, streamline operations, and maintain robust security across their distributed environments. Participants who attend this workshop will learn how to: * Configure and deploy SD-WAN using an SD-WAN Orchestrator * Setting up IPsec VPN * Installing the managed gateway policies * Configure VPN tunnel endpoints * Creating an SD-WAN template * Cloning a template * Assign and install the template * Edit the default route * Examining the configurations * Verify the failover to VPN * Verify return to MPLS * Create and validate SD-WAN performance SLAs and rules * Test and validate SLA and WAN link failure scenarios * Implement and verify the branch to branch optimization solution ==== Day2 ==== === Exploring Next-Generation Carrier and Enterprise Networking Technologies === As networks continue to evolve to support cloud services, AI workloads, ultra-high-bandwidth applications, and increasingly distributed users and devices, both service providers and enterprises need to prepare for the next generation of network technologies. This workshop will provide participants with a broader technical understanding of emerging carrier and enterprise networking technologies, with 5G and Private 5G as key areas. The session will also cover developments in fixed networks through F5G, next-generation transport and backhaul technologies such as SRv6 and NG-OTN, the evolution of enterprise networking through next-generation Wi-Fi and LAN technologies, and networking requirements in the AI era. Participants will gain an understanding of: * 5G architecture and evolution * Private 5G networks, architectures, deployment models, and use cases * Evolution of fixed networks and the concept of F5G * Next-generation IP networking and SRv6 * Evolution of optical transport and NG-OTN technologies * Emerging requirements for carrier backhaul and transport networks * Evolution of enterprise campus networks * Next-generation Wi-Fi technologies, including the direction towards Wi-Fi 8 * Latest LAN technologies and intelligent campus networking * Network for AI – networking requirements for AI workloads, data centres, and high-performance computing * AI for Network – how AI can support network operations, optimization, automation, and assurance * Networking in the AI Era – how AI is reshaping carrier and enterprise network architectures * Convergence of carrier, cloud, AI, and enterprise networking * Key technology trends shaping future network architecture and operations ==== Day3 ==== Next-Gen firewalling in the AI era. ==== Day4 ==== IXP Operations tutorial and hands-on Detailed Agenda can be found [[lknog10:advancednetwork|here]].