uk: Комп'ютерні науки

description: IETF is discussing Trusted Execution Environment Provisioning (TEEP) protocol to manage remote installation/update/deletion of a TA (Trusted Application) in TEE (Trusted Execution Environment) which provides hardware isolated environment in the CPU. TEEP is designed to be general among different CPU architectures. We have implementation of TEEP on the new RISC-V cpu. Our implementation is designed to be portable to another TEE architecture. The requirement for portability is discussed at the event. IETF is discussing Trusted Execution Environment Provisioning (TEEP) protocol to manage remote installation/update/deletion of a TA (Trusted Application) in TEE (Trusted Execution Environment) which provides hardware isolated environment in the CPU. TEEP is designed to be general among different CPU architectures, but primary implementations are proceeding on Intel SGX and ARM TrustZone. Therefore, we have implemented of TEEP on Keystone which is a TEE project on RISC-V led by UC Berkeley. TEEP consists of 3 major software components; “TEEP Broker” on the normal OS, “TEEP Agent” in the TEE, and “Trusted Application Manager (TAM)” on a remote server. These components manage certificates for authenticating TEE and TAM, and code signing of TA. All of the certificates are based on PKI key management. The challenges of having TEEP functionality on RISC-V is how to minimize the complexity of required features of TEEP inside TEE while keeping the portability of existing TA. The TEE is not meant to have full scale of POSIX API development environment which are convenient for developer but not ideal for minimizing security who would like to focus on code size. Some of the features we have added to Keystone runtime are HTTP/HTTPS and Concise Binary Object Representation (CBOR) parser. Our initial implementation of TEEP was implemented on Arm TrustZone with OP-TEE and then moved to Keystone on RISC-V. The presentation will also include instruction of basic concept and design of TEEP.

uk: вхід без авторизації

name: TEEP (Trusted Execution Environment Provisioning) Implementation on RISC-V: Introduction of TEEP and implementation on RISC-V


Babar Khan

type: Person

cs: Informatika

de: Informatik

fi: tietojenkäsittelytiede

uk: Комп'ютерні науки

en: Computer Science

fr: Informatique

da: Datalogi

es: Ciencias de la Computación

nl: Informatica

cs: Technické vědy

de: Ingenieurwissenschaften

fi: tekniikka

uk: Інженерія

en: Engineering Sciences

fr: Ingénierie

da: Ingeniørvidenskab

es: Ingeniería

nl: Engineering

description: Hardware accelerators are being increasingly integrated into today’s heterogenous computing systems to achieve improved performance. However, the resulting heterogenous hardware also increases the challenge to ensure the security of these accelerators. High-Level Synthesis (HLS) automates the creation of a register transfer level (RTL) description of a digital circuit starting from its high-level specification (e.g., C/C++/SystemC). In this talk, I would like to discuss different extensions and methodologies to High-Level Synthesis (HLS) compilers for generating secure accelerators. Precisely addressing the HLS vulnerabilities like side-channel listed in Common Weakness Enumeration (CWE) list.

TIB AV-Portal

type: Service

type: WebContent

type: MediaObject

@language: en

cs: přihlášení není vyžadováno

de: keine Anmeldung erforderlich

uk: вхід без авторизації

en: no login required

nl: geen login vereist

name: Hardware-Aided Trusted Computing in High-Level Synthesis (HLS) for FPGAs

FOSDEM VZW

type: Organization

cs: Video

de: Video

fi: Video

uk: Відео

en: Video

fr: Vidéo

da: Video

nl: Video

es: Video


uk: Комп'ютерні науки

description: Supported since Linux 5.10, the AMD SEV Encrypted State (SEV-ES) feature can be used to protect the confidentiality of a virtual machine (VM) by means of encryption and attestation. Although the memory and registers of the VM are encrypted, the VM still communicates with the hypervisor for the emulation of special instructions and devices. Because these operations have not been previously considered part of the attack surface, we discovered that a malicious hypervisor can provide semantically incorrect information in order to bypass SEV-ES. In this talk, I provide technical details on the handling of special operations with SEV-ES, practically show how the original implementation could be exploited, and finally I show how the interfaces were hardened to fix the issues. This talk includes four different attacks which: 1) use virtual devices to extract encryption keys and secret data from a virtual machine. 2) reduce the entropy of probabilistic kernel defenses in the VM by carefully manipulating the results of the CPUID and RDTSC instructions. 3) extract secret data or inject code by forging fake MMIO regions over the VM’s address space. 4) trick the VM to decrypt its stack and use Return Oriented Programming to execute arbitrary code inside the VM.

uk: вхід без авторизації

name: Exploiting Interfaces of SEV-ES-protected Virtual Machines


uk: Комп'ютерні науки

description: This presentation provides a brief overview on the rise of OpenStreetMap communities and activities on the Africa continent.

uk: вхід без авторизації

name: OpenStreetMap in Africa: A quick overview of the rise of OSM communities on the Africa continent


Introduction to OSGeo

uk: Комп'ютерні науки

description: The Open Source Geospatial Foundation (OSGeo) is a not-for-profit organization whose mission is to foster global adoption of open geospatial technology by being an inclusive software foundation devoted to an open philosophy and participatory community driven development.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Iaso is a platform created to support geo-rich data collection efforts, mainly in public health in emerging countries. The key feature that it supports is that any survey is linked to an organizational unit that is part of a canonical hierarchy. Each one of these org. units can have a location and a territory. The mobile data collection tool can be used to enrich this hierarchy with additional GPS coordinates, names corrections, etc ... which can then be validated by officials of the organizations in question through the web dashboard. This leads to continuous improvements of the geographic references available through the routine activities already planned (e.g. locating and registering health facilities while investigating malaria cases). The tool has been used in multiple data collection efforts, notably in the domain of Performance Based Financing of health services in D.R. Congo, Niger, Cameroon and Nigeria and is more and more used to compare multiple versions of official organisational hierarchies when a canonical one needs to be rebuilt. We are for example working on such efforts to rebuild a school map for DRC with the NGO Cordaid. To help for this type of project, we provide location selection interfaces, multiple levels of audits and an API open to data scientists for analysis and mass edits. This presentation will demo the main features of the platform, and give some context about its creation. Iaso has been created by the company Bluesquare (https://bluesquarehub.com/, based in Belgium), specialised in software and services for public health, and has become open source under the MIT License in November 2020. It is still under heavy development, but is already the basis of at least a dozen projects. On the roadmap, we have features for a patient registry, monitoring tools for data collectors, and microplanning activities (producing routes for monitoring teams). It is also extensively used in connection with DHIS2, the open source Data For Health Information System. Iaso is made of a white labeled Android application using Java/Kotlin and reusing large parts of the ODK projects and a web platform programmed using Python/GeoDjango on top of PostGIS. Frontend is mainly React/Leaflet. One of the aims is the ease of integration with other platforms. We already have csv and geopackage imports and exports and target easy integration with OSM.

uk: вхід без авторизації

name: Iaso: Geo-aware Data Collection, Curation and Analysis.: A new web + Android platform geared toward enhancing geographical data by benefitting from the routine health data collection activity.


uk: Комп'ютерні науки

description: MoveTK is a reusable, well tested, high performant, feature-rich library that incorporates state of the art algorithms for computational movement analysis. The library is designed to be extensible such that it can be adapted for various movement analysis tasks. The library has been developed as part of a collaboration between HERE Technologies, Eindhoven University of Technology and Utrecht University under the Commit2Data program. This talk is intended to showcase the scalability of MoveTK to large geo-spatial data sets. Moreover, through visualisations, we will demonstrate the various movement analysis algorithms that are available in MoveTK. Any scalable movement analysis task can be based on three fundamental building blocks: (a) the representation of (geo-)spatial movement data (b) the shape and specifically geometric aspect of movement and (c) algorithms that have theoretical bounds on their time and space complexity. Therefore, we will present the design decisions adopted in MoveTK, that allows seamless interoperability between these fundamental building blocks.

uk: вхід без авторизації

name: MoveTK: the movement toolkit: A library for understanding movement


uk: Комп'ютерні науки

description: Recent developments in Python data visualization libraries (particularly HoloViews & GeoViews) enable data analysts and scientists to quickly and intuitively create interactive data visualizations. In this talk, we dive into examples of visualizing open government data from public web services as well as large movement datasets.

uk: вхід без авторизації

name: Spatial data exploration in Jupyter notebooks: The power of interactive vizualizations with GeoPandas and HoloViews


uk: Комп'ютерні науки

description: YouthMappers is a global mapping community of university students creating, using, and advocating for open geospatial data and technology. Since the creation of the network in 2015, this has grown to more than 200 chapters, with impactful projects being led and conducted by young people. We’ll share about who we are, how chapters are leveraging open geospatial data and FOSS4G, and any more during this presentation.

uk: вхід без авторизації

name: YouthMappers: Building a global community of changemakers through open maps


Live Panel: join us for discussion

uk: Комп'ютерні науки

description: Panel discussion or live demo tbd. A talk was cancelled so we have a free slot.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: After moving to Minsk, I pondered on making a local map for my neighbourhood, with all the shops and amenities. People would visit it on the web and see where are things. Two years passed, I didn't make it. And only in December I've got an idea that would work. A community does not need no maps. What it needs is conversation. So I made a map app 2.0: one that doesn't rely on 1) web, 2) maps. Of course inside it's all about geo.

uk: вхід без авторизації

name: Telegram Bot For Navigation: A perfect map app for a neighbourhood doesn't need a map


uk: Комп'ютерні науки

description: The longest flow path is one of the most important geospatial parameters that is used for hydrologic analysis and modeling. However, there are not many available GIS tools that can compute this watershed parameter. At the same time, there have been almost little to no efforts in improving its computational efficiency since its first, to the presenter's best knowledge, introduction by Smith (1995) when the geospatial data resolution was relatively coarser. In this talk, the presenter introduces a new algorithm that applies Hack's law to the discovery of the longest flow path and its efficient implementation as a GRASS module called r.accumulate. He compares its performance to that of commercial ArcHydro's Longest Flow Path tool. Lastly, he introduces a proof-of-concept version of the Web-based Hydrologic Modeling System (WHydroMod) built using GRASS, PyWPS, MapServer, and OpenLayers, and discusses how r.accumulate can be used to improve the efficiency of geospatial computation for WHydroMod.

uk: вхід без авторизації

name: r.accumulate: Efficient computation of hydrologic parameters in GRASS: Improving the performance of geospatial computation for web-based hydrologic modeling


uk: Комп'ютерні науки

description: OSGeoLive is a self-contained bootable DVD, USB thumb drive or Virtual Machine based on Lubuntu, that allows you to try a wide variety of open source geospatial software without installing anything. It is composed entirely of free software, allowing it to be freely distributed, duplicated and passed around. It provides pre-configured applications for a range of geospatial use cases, including storage, publishing, viewing, analysis and manipulation of data. It also contains sample datasets and documentation. You will get to know the project and what you can learn and have a look behind the scenes.

uk: вхід без авторизації

name: OSGeoLive: Your Open Source Geospatial Toolkit: Get to know OSGeoLive and discover a whole world of geospatial tools and data


uk: Комп'ютерні науки

description: Come and hear about the developments in LibreOffice that were triggered by a need in the Collabora Online. The most notable examples are the Notebookbar improvements, but there are other, like async dialogs in the core, new parameters to various .uno: commands that improve scripting capabilities, and many others.

uk: вхід без авторизації

name: How Collabora Online development improves LibreOffice


Using IDEs for LibreOffice development

uk: Комп'ютерні науки

description: The LibreOffice buildsystem has support to create auxiliary files that allow easy integration with various IDEs. This talk will show you how to use it and how it works and where its limitations are.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: LibreOffice: Interesting Talks from Community Members

uk: вхід без авторизації

name: LibreOffice Lightning Talks: Interesting Talks from Community Members


uk: Комп'ютерні науки

description: LibreOffice was launched as a free office suite for Windows, macOS and Linux in 2010, by a large majority of OpenOffice community members. Over the years, the project has made a significant code cleaning and refactoring effort, and created a robust development infrastructure entirely based on open source software. Today, LibreOffice is available for the cloud and mobile platforms, in different flavours, optimized for community and enterprise users.

uk: вхід без авторизації

name: LibreOffice Technology: the unique FOSS platform for personal productivity


uk: Комп'ютерні науки

description: This talk will show how to use LibreOffice's graphical user interface (GUI) to interact with your favorite database. It will cover how to connect LibreBase to a MariaDB database (both free and open source software) in order to inspect and play with your data, especially for new users. Through a live demo, all steps will be presented to successfully start LibreBase and MariaDB through Docker, and how to integrate them through the MariaDB ODBC connector. The process will show how to solve problems with a wrong setup and packages. At the end, a Dockerfile will be created to build the image and automate the above process.

uk: вхід без авторизації

name: Using LibreOffice with MariaDB [and Docker]


uk: Комп'ютерні науки

description: Collabora Online (COOL) is a LibreOffice-based online office suite with collaborative editing. Time-to-start-hacking COOL has been lowered from ~a day to ~10 minutes thanks to integration with GitPod, a dev environment in the cloud, on its GitHub repo. We will try to share the story on and discuss these topics: - What was it like in the past - The search for ways to lower the barrier - Cloud dev environments - Setting up the repo for GitPod integration - Adapting the infra/CI for faster builds in the cloud (and its nice side effects) - Quick start on hacking COOL in the cloud - Some numbers - Can it be applied also to core (LibreOffice) repo? How?

uk: вхід без авторизації

name: Lowering the Barrier for New Developers: Developing in the cloud via GitPod


uk: Комп'ютерні науки

description: Making Collabora Online and it's LibreOffice technology as simple as possible to consume for users with limited time or technical skill is vital. Hear how we bundled COOL as an AppImage, plugged it into PHP, and implemented a websocket proxy-protocol to make that happen. Collabora Online uses websockets to bring the LibreOffice core's rendering to users' browsers and mobiles. This gives us a smooth low latency editing experience. This however requires a persistent server process, something inimical to the PHP processes we integrate with. Hear how we overcame this limitation, to get an AppImage that can bootstrap, and a protocol that re-uses the HTTP keep-alive to rather successfully emulate a polling websocket based on PHP. Hear about some of the pit-falls we fell into, and the 'obvious' ideas to make things better that didn't pan out.

uk: вхід без авторизації

name: Making Nextcloud Hub COOL: Implementing out of the box collaboration


uk: Комп'ютерні науки

description: LibreOffice was capable for handling PDF signatures since 2016 already. There have been recent improvements in the past year, namely creating visible PDF signatures and reworking the underlying PDF signature verification functionality to use PDFium for tokenization. This means that PDF signature verification (which happens implicitly, during opening any PDF files) now uses much more battle-tested code to provide this feature. Come and see how this work is implemented, where are the still rough edges and how you can help.

uk: вхід без авторизації

name: Handling PDF digital signatures in LibreOffice with PDFium


uk: Комп'ютерні науки

uk: вхід без авторизації

name: The Perfect Gerrit Patch: A consumer report


uk: Комп'ютерні науки

description: LibreOffice was ported to run on macOS on Apple Silicon during summer and autumn of 2020. Most of it was very straightforward, just a recompilation. This talk will describe the details that required more effort.

uk: вхід без авторизації

name: Porting LibreOffice to macOS on Apple Silicon: Easy bits were easy, hard bits were not so hard


uk: Комп'ютерні науки

description: This talk will walk you through the process of writing your first LibreOffice unittest either with Python or with C++

uk: вхід без авторизації

name: LibreOffice QA: How to write your first test


uk: Комп'ютерні науки

description: Come and join us to hear about the ongoing porting effort, to get LibreOffice to fully run inside a web browser.

uk: вхід без авторизації

name: LibreOffice WASM - the How and Why: A status report from the journey to get LibreOffice into the browser, fully*


Editable nested fields in Writer

uk: Комп'ютерні науки

description: Word fields are far more flexible than ODF/Writer fields - to most users, the additional expressiveness doesn't matter, but for some specialized use cases, Writer is limited. Writer had a rudimentary implementation of Word compatible fields for about 10 years, but it never worked well. We have added the ability to round-trip nested Word fields in RTF/DOCX formats, and fixed a bunch of long standing bugs along the way.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: There have been many implementations of different object inspector tools for LibreOffice, most popular being xray and MRI, but they were only available as extensions. This is an invaluable tools to inspect and to better understand the structure of UNO objects, which is particularly useful for writing macros or extensions. The problem is that the existing object inspector tools are not so simple to use, because of their nature as an extension and in addition the user has to search and install it in addition to LibreOffice. For this reasons TDF has offered a tender to implement a build-in tool, that can be more integrated into LibreOffice and is always available to the user. The tender has been awarded to Collabora and we are in the process of implementing it. In this talk we want to present the tool, what has been done so-far and how it will look like when finished.

uk: вхід без авторизації

name: Build-in "xray" like UNO object inspector


uk: Комп'ютерні науки

description: ODF, LibreOffice native document format, is the only standard file format which allows full interoperability. ODF is robust, predictable, resilient, well documented, and based on existing standards. It is the perfect answer for digital content sharing.

uk: вхід без авторизації

name: Introduction to ODF: Basics of Interoperability: Tips and Tricks to Tackle the Most Common Issues


uk: Комп'ютерні науки

description: While the coronavirus pandemic continues to send shockwaves throughout almost all industries, it’s important for developers to nurture their communities in a well-efficient way and prepare them for the future. The overwhelmed communication systems, improving remote culture, and fostering community coordination are the three main areas on which we need to focus on. It is important to recognize that community development is an organic process, the listed steps (not in order) are to be considered on how we empower people, communities, and the industries around us: Learn about the community Listen to community members Bring people together to develop a shared vision Assess community assets and resources, needs and issues Help community members to recognize and articulate areas of concern and their causes Establish a 'vehicle for change’ Develop an action plan Implement an action plan Evaluate the results of actions Reflect and regroup People want to live in resilient and healthy communities. Well-being and positive mental health start here. Further mental health services need to consider how they harness the assets and strengths of communities in developing approaches that empower people in their recovery journeys.

uk: вхід без авторизації

name: Strengthening Developer Communities in mid of pandemic


CheriBSD: A memory safe POSIX OS

uk: Комп'ютерні науки

description: CHERI is a portable architectural extension providing spatial, referential, and temporal memory safety along with strong, light-weight compartmentalization. CheriBSD is a port of FreeBSD supporting CHERI on Arm Morello, MIPS, and RISC-V. CheriBSD is the reference POSIX OS implementation for CHERI. CheriBSD supports unmodified binaries from the native architecture plus CheriABI programs which have strong spatial, referential, and temporal safety guarantees. I will discuss our implementation of CheriBSD with a focus on CheriABI.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Trusted RV is a combination of 4 core 64bit RISC-V (AC: Application Core) and 1 core 32bit RISC-V Secure Coprocessor (SU: Secure Unit). The SU works as a "Root of Trust" and keeps critical information (e.g., Device Key, Certificate). The SU boots before the 64Bit RISC-V and controls it (i.e., secure boot, etc). The communication from the AC to the SU is limited for TEE (i.e., Keystone Encalve) only and keeps security. Trusted RV is implemented on an FPGA (Xilinx VC707) and a simulator. We have developed the Trusted RV which is a combination of 4 core 64bit RISC-V and 1 core 32bit RISC-V Secure Coprocessor. The secure coprocessor works as a "Root of Trust" and keeps critical information (e.g., Device Key, Certificate). The secure coprocessor offers machine mode only and runs Zephyr OS. The Zephyr OS includes crypto and certificate-verification libraries and manages the 64bit RISC-V. The secure coprocessor boots before the 64bit RISC-V and verifies it. The secure coprocessor is tightened with RISC-V Keystone on the 64bit RISC-V to keep security. The 64bit RISC-V runs Keystone as TEE (Trusted Execution Environment), and Secure Monitor (SM) runs on machine mode under the Linux kernel. The secure communication between 64bit RISC-V and Secure Coprocessor is managed by SM only. The communication is passed to a Trusted Application (TA) in a Keystone Enclave only. The secure communication is implanted on the shared memory and mutual interrupts between 64bit RISC-V and Secure Coprocessor. This mechanism is also used for the remote attestation of Keystone which based on the key in the secure coprocessor. The Trusted RV is implemented on a simulator for software development, as well as FPGA (Xilinx VC707).

uk: вхід без авторизації

name: Trusted RV: 64bit RISC-V TEE with Secure CoProcessor as Root of Trust


uk: Комп'ютерні науки

description: What if you could add a Gitlab runner to your herd for just a few bucks to alleviate your existing runners and to improve your jobs wasted time in the queue? Wouldn't it be even better if that improvement could cost nothing, because you already have everything on hand? Being able to build/test/deploy on a remote machine each time we commit has been a major progress for us, developers. Furthermore, by using Docker, things have been so much easier! No more dependency hell when you have to build and test two incompatible products. This solution looks almost perfect… until you reach a threshold. As your Gitlab-ci will become more and more popular within your organization, you may experience longer waiting queues until the next batch of Runners is released. So you may go from praising the CI to cursing the CI. You maybe have a Raspberry Pi taking dust on your desk or in your drawer. What’s the point? What’s the connection with the CI? Well… What if I told you you could transform this momentarily useless piece of hardware into a brand new Gitlab-ci Runner? This way, you could shorten the time your jobs spend in the queue. But wait, there is more. What if there was a cheaper solution that could allow you to create a Gitlab-ci Runner for a 15€ investment? You may have heard about Banana Pi, Orange Pi, and other variations of fruit Pi(e). The competition is harsh between these manufacturers, and you can find pretty nifty machines for darn cheap. These machine can run Docker, and even Gitlab-Runner on top of it.

uk: вхід без авторизації

name: ARM your continuous integration system with fruits!


uk: Комп'ютерні науки

description: It brings the concept of roles that help classify your automation tasks/playbooks and group them by purpose. But : When should we use Ansible roles? How to create and test Ansible roles? What tools do we have to ease the process? How can we apply best practices of software development (TDD) to ensure your roles are doing what they are intended to? This talk will introduce you to Ansible Roles testing will Ansible Molecule; a tool used to drive ansible roles testing. Moreover, we will try to apply the Test Driven Development (TDD) process to test our roles. So, come and see us, to learn more about Ansible and Ansible Roles Testing. Ansible is the simplest way to automate apps and IT infrastructure. Application Deployment + Configuration Management + Continuous Delivery.

uk: вхід без авторизації

name: Unit Testing Ansible Roles using TDD with Molecule


uk: Комп'ютерні науки

description: Commonly used CI systems operate as SAAS solutions, where the user is not running the CI stack locally. This lends itself to debugging pitfall as developers cannot easily reproduce the problem locally and cannot interactively examine it. This talk proposes an inverted design, where self-operated CI tool can be used both in the cloud as well as locally, supporting interactive debugging sessions. The recent surge of CI systems has created an interesting new problem, where a failure occurs in a specific test environment but does not appear in the familiar environment used by the developer. This problem is compounded by the batch nature of such systems, where a developer can merely push additional patches to some branch to trigger an asynchronous execution process. During the development of Ubuntu Core operating system, this problem was amplified by the fact building and testing a full OS image is a time-consuming process, leading to cycles that spanned hours and lead to frustration. Snapd developers created the spread program to solve this, among other, problem. The SAAS solution became a thin wrapper around spread, which allocates, provisions, uses and finally discards the test environment. Crucially, almost all errors can be reproduced locally, as spread runs as a standalone tool, using QEMU, LXD, Google Compute Engine or Linode as executors. This allows anyone to run spread locally, in interactive mode, and explore the problem without putting additional load on the centralized CI system, greatly improving the debugging process.

uk: вхід без авторизації

name: Interactive debugging in CI: Genesis and future of the spread tool


uk: Комп'ютерні науки

description: CD platforms are a critical part of the development process, and without it, nothing would go to production. How can we really know what is happening inside, and measure indicators that we can track and improve to ensure a smooth continuous delivery experience? Based on our experience at Dailymotion, we'll see why Continuous Delivery Indicators are important, how to define them, and then how to collect and visualize them. We'll share which stability and throughput indicators we are tracking, and why. We'll see how we implemented the collection and visualization of these indicators using open-source tools such as Golang, PostgreSQL, and Grafana. We'll highlight the importance of Kubernetes-based CD components, such as Jenkins X, Lighthouse, and Tekton, which heavily rely on Kubernetes CRD and thus provide events for everything happening. We'll also highlight the importance of Gitops-based workflows, where every operation goes through a VCS such as Git, and thus produce more events. This in turn makes it easy to get notifications for all actions, making our indicators collection process a simple one.

uk: вхід без авторизації

name: Collecting and visualizing Continuous Delivery Indicators: In a Kubernetes-based CI/CD platform, using Jenkins X, Lighthouse, Tekton, PostgreSQL and Grafana


uk: Комп'ютерні науки

description: Three phrases keep popping up when talking about modern workflows and development and deployment techniques; CD, GitOps, and progressive delivery. Three phrases keep popping up when talking about modern workflows and development and deployment techniques. We have continuous delivery to automate the complete lifecycle of applications from a commit to a Git repository, all the way until a release is deployable to production. Then we have GitOps to define the desired states of our environments and let the machines handle the converge the actual into the desired state. Finally, there is a lot of focus on different deployment strategies grouped under progressive delivery. They are all focused on the iterative release of features to make the process safe, prevent downtime, and reduce the blast radius of potential issues. While those three practices and the tooling behind those are focusing on specific areas, the "real" benefits are obtained when they are combined. Nevertheless, many did not yet reach that stage. Each of those practices alone can be daunting and, frankly, scary. Yet, we should go a step further and explore how to combine them together and see the benefits such a solution might provide. Through a hands-on demo, we will combine Argo CD as a tool of choice for applying GitOps, Argo Rollouts for progressive delivery, and Argo Workflows for continuous delivery pipelines that will tie those two together with the rest of the steps needed in the lifecycle of our applications. If we are successful, we might remove humans from all the actions coming after pushing changes to Git repositories.

uk: вхід без авторизації

name: Combining Progressive Delivery With GitOps And Continuous Delivery


uk: Комп'ютерні науки

description: Tracing is awesome. Full stop. But what tracing? In fact, even just on Linux, there are quite a few tracing solutions, aren't there they? In this session we'll show off and compare ftrace and LTTng and, for visualizing the collected data, KernelShark and Trace Compass when tracing both baremetal and virtualized systems. With tracing, we can get to understand what is really happening while our software is running at a great level of detail. Depending on the adopted tracing solution, that applies to user-space components, to OS kernels or even to both. The collected data can be very helpful when investigating bugs and misbehaviors, but can also be used for understanding the internals of the system and for chasing performance degradations or improvements. On Linux, tracing can be done in a variety of ways. This talk will focus on two: ftrace and LTTng. The aim is describing their characteristics and show how each one works. After that we will show what are the main differences between them in terms of what they are capable of, how the are used and last but not least the overhead they introduce, measured with several benchmarks. We will also cover the tools that one can use to visualize the often huge amount of data that is usually collected during a tracing session. Both textual ones, such as trace-cmd and babeltrace2, and graphical ones, such as KernelShark and Trace-Compass. Last but not least, we will offer some insights on how to use these two mechanisms for tracing virtualized environments. I.e., how can you use them for tracing what is going on both on the host and inside one or more guests, at the same time, and how good are they for such purpose?

uk: вхід без авторизації

name: A Comparison of ftrace and LTTng for Tracing Baremetal and Virtualized Workloads


uk: Комп'ютерні науки

description: Quality expectations are increasing day by day, market demand is changing rapidly and digital technologies are influencing QA practices. How do we adapt? QA plays a strategic role, it is a connection point between development and operations. DevOps can speed up the development, but what can you expect without a robust QA strategy? Continuous development and continuous delivery is impossible without a comprehensive QA strategy. How can we accelerate software delivery without sacrificing quality? Join this presentation and you will find out why QA and Ops have a complimentary mindset, how you can implement a QAOps framework and why it matters.

uk: вхід без авторизації

name: QAOps - The Latest Trend in QA & Software Delivery


Events in CI/CD

uk: Комп'ютерні науки

description: Continuous integration and deployment (CI/CD) system are hardly ever ceaseless as the name would suggest; they do aim though to follow changes in code, configurations and versions. They often achieve that by both handling and generating events. For instance, a CD system receives an event that describes a new version of an application, and it runs a workflow in response. When the workflow starts or when it reaches completion, the CD system generates events for the benefit of other processes that may want to trigger tests against the newly deployed application version. In this short presentation, we introduce the "Events in CI/CD" interest group, part of the Continuous Delivery Foundation, and its mission of standardization and interoperability between CI/CD systems via events.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Many of the challenges developers encounter with CI pipelines stem from the fact that CI is siloed from the rest of the development process: • Because development environments are configured separately from CI (and are often pared down and simplified), devs run into hard-to-predict CI errors caused by discrepancies in environments. • Integration and end-to-end tests are commonly available only in CI, meaning that troubleshooting these test failures requires long and inefficient feedback loops—every fix requires a developer to push and wait for another CI run. In this talk, we will describe and demonstrate how to use the open source project Garden to ensure that environments are consistent and predictable at every step of the pre-production pipeline—from development, to testing, to CI. We’ll also show how to give developers the ability to run integration and end-to-end tests during the development process, making it easier to catch and fix issues when it’s most efficient.

uk: вхід без авторизації

name: Configure Once, Run Everywhere: How and Why to Use a Common Configuration for Dev, Testing, and CI Environments


uk: Комп'ютерні науки

description: Performance is a crucial property of software for both closed and open source software. Assuring that performance requirements are met in the CI process using benchmarks or load tests requires heavy manual effort for benchmark and load test specification. Unit tests often cover a big share of the use cases of a software and are maintained anyway. While they have some downsides for measuring the performance, e.g. since they test corner cases or use functional utilities like mocks, they still are a way of measuring realistic use cases with nearly no manual effort. Therefore, we develop the tool Peass (https://github.com/DaGeRe/peass), which transforms unit tests into performance unit tests and measures their performance. The stand-alone tool Peass can be integrated into the CI-process using Peass-CI, which makes it possible to run performance tests with every build in Jenkins. The talk starts by introducing the basic idea of Peass. Then, the steps of the current prototype of Peass are presented: - a regression test selection, which prunes all unit tests that can not have a performance change by comparison of the execution traces of the same unit tests in two software versions and the source code of the called methods, - a measurement method, which repeats VM starts and measurement iterations inside the VM until the performance change can be statistically reliably detected and - a root cause analysis, which identified the node of the call tree which causes a performance change by measurement of individual nodes. Finally, the talk demonstrates the usage of Peass in a running Jenkins instance.

uk: вхід без авторизації

name: Identifying Performance Changes Using Peass


uk: Комп'ютерні науки

description: Kubernetes, GitOps, and Infrastructure as Code are as powerful as they are popular and seem like the perfect match. Consequently, using Terraform to maintain Kubernetes clusters and resources is a very common use-case. And it requires careful integration of many moving parts, from Terraform providers and modules, to CI/CD pipelines and triggers. However, despite this being such a popular use-case, teams previously had no alternative than writing everything from scratch. On the software development side we use frameworks to avoid reinventing the wheel for similarly common use-cases. But for the less mature infrastructure as code ecosystem use-case specific frameworks are a new concept. This talk will introduce Kubestack. An open-source framework for Terraform, that brings the developer experience of frameworks from application development to infrastructure as code. Get an overview of how you can use the framework as a foundation to build even advanced multi-cloud and multi-cluster Kubernetes automation. And how Kubestack's GitOps workflow allows teams to reliably suggest, review, validate and apply changes to their infrastructure environments.

uk: вхід без авторизації

name: Improving the Developer Experience of Infrastructure as Code and GitOps


uk: Комп'ютерні науки

description: The Kubernetes tooling landscape is littered with template based solutions to deal with all the YAML needed to get things done. Kuberig takes a different approach that developers will love! No need to learn another template language or tool. With Kuberig you define your resources using Kotlin code and deploy them by executing Gradle tasks. Simple. Since this is a lightning talk I will be skipping Kubernetes, Custom Resource Definition, Gradle and Gradle plugin writing basics.

uk: вхід без авторизації

name: Kuberig, Kubernetes without the YAML burn-out!


uk: Комп'ютерні науки

description: When Everything as Code converges to automate/test your processes, in this talk we would like to discuss further our journey and our vision to handle our automation programmatically. When we started to use Jenkins at Elastic, there was already a team providing the service, similar to the SaaS you could see nowadays, so teams were encouraged to handle their automation using the Configuration as Code paradigm with the Jenkins Job Builder tool, but at a certain moment of time this particular approach didn’t scale much, and that’s when we started to think about a more robust, testable and automated CI/CD ecosystem. Then our journey started by applying the below principles and practices: - Everything as Code - Everything is Tested - Documentation as Code - Functional testing - Continuous Improvement - Continuous Deployment All the above concepts are the ones that helped us in this journey and that’s the reason for this talk to share our experience and vision. Besides gathering from you your opinions and feedback.

uk: вхід без авторизації

name: Who watches the watchers? A Jenkins journey


uk: Комп'ютерні науки

description: Recently, the MariaDB Foundation has been developing a new continuous integration framework for the MariaDB Server. The goal of buildbot.mariadb.org is to ensure that each change is properly tested on all supported platforms and operating systems. Our new CI uses almost exclusively latent workers, more exactly Docker latent workers. In this talk, I will present a main overview of the CI infrastructure, the advantages of using latent workers and talk about the challenges that we encountered along the way. This includes a broad range of aspects, ranging from misconfigurations to Buildbot code changes to ensure that everything runs smoothly. In order to ensure that MariaDB runs smoothly, it needs to be tested on multiple platforms and configurations. In order to obtain a gain both in terms of speed and flexibility, we have decided to use Docker latent workers. In this way, each different environment is defined in a separate dockerfile. Besides having a clean and concise environment definition, using latent workers has the advantage of requiring minimal configurations on the worker machines. This makes the process of adding new hardware very easy, mainly involving installing Docker and configuring Docker remote access. Now that we have the build environments defined, we can start testing. The process starts by cloning the MariaDB server repo and creating a source tarball. Then, all other configurations are triggered, all using the same source tarball. While it seemed quite straightforward, the whole process turned out to be more challenging than we expected. This includes a quite long list of issues ranging from files mixups, weird sporadic failures where the main testing process was killed, grid view customizations to multi-master configuration and master-worker file transfer problems. In this talk, I will talk in more detail about these issues and tell you more about our experience and how we managed to overcome them.

uk: вхід без авторизації

name: MariaDB Buildbot, the journey of a reinvention


uk: Комп'ютерні науки

description: Continuous Delivery practices have evolved significantly with the cloud-native paradigm. GitOps & Chaos Engineering are at the forefront of this new CD approach, with an ever-increasing pattern involving Git-backed pipeline definitions that implement “chaos stages” in pre-prod environments to gauge service-level objective (SLO) compliance. In this talk, Juergen Etzlstorfer (maintainer of Keptn CNCF project) will discuss how you can construct pipelines that include chaos experimentation (using LitmusChaos) while simulating real-world load, and implement quality gates (based on SLOs) to ensure only resilient applications are deployed into production. He will also demonstrate how you can include chaos tests to your existing CD pipelines without the need of rewriting them.

uk: вхід без авторизації

name: Putting Chaos into Continuous Delivery: How to increase the resilience of your applications


uk: Комп'ютерні науки

description: GitOps looks straightforward from the outset, but early implementations showed that piecing together your GitOps workflow involves many decisions - big and small - adding up to a lot of work. In this talk you get to know multiple GitOps strategies through OpsGit, a hypothetical company that embarks on the GitOps journey. They start naive, but functional, then stairstep their workflow to support multiple teams and environments. This talk will also be the first show of Gimlet, an open-source project that provides the tools and workflows whether you are just getting started with GitOps, or want to use GitOps at scale. At the end of the talk you will know how to implement GitOps at your company, and will have access to example git repositories to replicate the approaches presented in the talk.

uk: вхід без авторизації

name: Stairstep your Kubernetes deployment workflow with Gimlet and GitOps: From naive but functional setups, to GitOps at scale


The Road to Interoperability in CI/CD

uk: Комп'ютерні науки

description: The emergence of virtualization, containers, and cloud native has resulted in tremendous advances in enabling organizations to develop new services and make them available to end users. In addition, new paradigms such as Continuous Integration (CI) and Continuous Delivery (CD) allow organisations to do this much faster than before, empowering them to go to market ahead of the competition. Despite its many advantages, the CI/CD ecosystem has its challenges. This session will discuss issues arising from the lack of interoperability across proliferating CI/CD technologies. We will look at end user case studies, including existing integration initiatives such as that between Tekton and Jenkins X. However, these initiatives are localised to the projects involved and do not address the challenges holistically. We will highlight the necessity, and greater sustainability, of a holistic approach to interoperability in the CI/CD ecosystem and invite attendees to join community efforts.

uk: вхід без авторизації


MariaDB: Server Roadmap

uk: Комп'ютерні науки

description: MariaDB Corporation is currently working on plenty of features for MariaDB 10.6. At the same time we already have a long list of things to add in future versions of MariaDB. This talk will look at the main tasks for 10.6 and future versions of MariaDB. At the same time we are hoping to get feedback and suggestions from the community

uk: вхід без авторизації


Migrating MariaDB Cluster to ARM

uk: Комп'ютерні науки

description: MariaDB has been releasing packages for ARM for quite some time now. ARM is known to have a lower cost of ownership there-by delivering more TPS for the same cost, effectively generating cost savings. Any changes to the working production environment would surely make DBA/dev-ops anxious and we are talking about migrating to a different architecture altogether. How complex is that? Is it feasible? Is it the right time to look into it? What about the ecosystem/other aspects? We will try to answer all such questions through this talk. We would discuss the why and how aspect, highlighting the step-step approach how user could migration existing MariaDB cluster to ARM, tools compatibility, do and don't, revert back to the old system (if needed rarely), etc....

uk: вхід без авторизації


Making DDL's Atomic in MariaDB

uk: Комп'ютерні науки

description: Crash safety is one of the requirements of modern databases. Although DML is crash safe (depending on storage engine), DDL is still problematic. MariaDB 10.6 will implement atomic DDL. Currently RENAME and DROP are fully supported for all database objects and the goal is to implement all remaining operations. This talk will go into the technical details of the atomic DDL implementation, explaining how it provides crash safety.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Getting started guides for application development with databases are important for learning the basics. Naturally they tend to target ease of understanding. However, these choices for simplicity can make it hard to scale or operate without downtime once your application starts to grow. This talk aims to cover a few things you and your team can start doing to help lay a foundation for growth and flexibility.

uk: вхід без авторизації

name: Databases beyond the tutorials: Database usage for the real world for flexibility and scale


uk: Комп'ютерні науки

description: In any block-oriented, update-in-place database with log-based recovery, two kinds of page flushing are needed. Eviction flushing is necessary when all least recently used blocks are dirty (modifications exist in the buffer pool). Checkpoint flushing (writing out the oldest modified page first) allows the log checkpoint to advance, shortening the potential recovery time by logically discarding the start of the log. Any write of a persistent page must be preceded by a corresponding log write and optional doublewrite, to guarantee that crash recovery works. We will cover some improvements in this area in MariaDB Server's version of InnoDB storage engine. We will also discuss how a database could be configured to minimize write amplification. MariaDB 10.5 simplified page flushing and fixed bottlenecks that had originally been worked around by introducing multiple buffer pool instances and multi-threaded flushing. It turns out that a single buffer pool and page flushing thread (assisted by a log flushing thread) can still saturate most contemporary I/O subsystems. Data structures were simplified, some synchronous writes replaced with asynchronous ones, and mutex contention reduced through more use of atomic memory operations.

uk: вхід без авторизації

name: Buffer Pool Performance Improvements in the InnoDB Storage Engine of MariaDB Server: How the LRU replacement and log checkpoints were made faster in MariaDB 10.5


MySQL Performance for DevOps

uk: Комп'ютерні науки

description: MySQL performance can be improved by tuning queries, server options, and hardware. Traditionally it was an area of responsibility of three different roles: Development, DBA, and System Administrators. Now DevOps handle these all. But there is a gap. Knowledge, gained by MySQL DBAs after years or focus on a single product is hard to gain when you focus on more than one. This is why Sveta Smirnova (Percona, Support Team) is doing this session. She will show minimal, but the most effective, set of options that will improve your MySQL performance. For illustrations, she will use real user stories from her Support experience.

uk: вхід без авторизації


Welcome to the MariaDB devroom

uk: Комп'ютерні науки

description: A brief introduction and overview of what you can expect from the MariaDB devroom at FOSDEM

uk: вхід без авторизації


uk: Комп'ютерні науки

description: All about MariaDB packaging in two of the most widely-used Linux distros, Debian and Ubuntu, including the strict requirements demanded by distros, and the impact on fixing bugs “upstream” in MariaDB itself.

uk: вхід без авторизації

name: Debian, Ubuntu & MariaDB: MariaDB post-release quality assurance in Debian and Ubuntu: What Linux distros can do about software quality


uk: Комп'ютерні науки

description: This talk aims to cover everything about the current state of JSON support. First, I'll cover the newest addition, JSON_TABLE in MariaDB 10.6. Then, I'll discuss the power of JSONPath in MariaDB and how it compares to the SQL Standard and other databases. This is technically non-news but it hasn't been discussed before. Finally, we'll take a look at other present and missing features and see what are the biggest and lowest-hanging fruits in JSON support in MariaDB.

uk: вхід без авторизації

name: JSON Support: news, non-news, and the bigger picture


The MariaDB Jupyter Kernel

uk: Комп'ютерні науки

description: The reliability and performance of Open Source database solutions can’t be contested. They are fast and they are stable, but they fell short of integrating nicely with the latest data science and research workflows. If you store your data in MariaDB or even other database systems from the MySQL family, I am proud to let you know we have been working hard to create a beautiful Open Source friendship between the MariaDB Server and the Jupyter ecosystem. The MariaDB Jupyter kernel aims to improve the interaction with your data, it allows you to run MariaDB directly in a Jupyter notebook. You can display the results of your favorite SELECTs in Matplotlib graphics or export them into a DataFrame in another Python Notebook through database specific %magic commands. This talk covers the current state of the MariaDB kernel, the existing features, how to install and use it and how we imagine it should look like in terms of functionalities in the near future. It also explains the inner structure of the kernel, how to pass different configuration options and shows demos for some of the most common use cases. There is no background knowledge expected to understand the content of this talk, if you've ever used a Jupyter notebook, a SQL database or both, or you'd just love to learn about these technologies, you're more than welcome to attend.

uk: вхід без авторизації


Mariabackup - too rarely used

uk: Комп'ютерні науки

description: Mariabackup is another backup tool for MariaDB. But it is still not used very frequently. In this presentation we will have a short look how this backup works and what we can do with it. Mariabackup full backup is a fast and reliable backup/restore method for a whole instance. With the partial restore we can also restore one table or several tables together (aka schema). Point-in-Time-Recovery is also possible with Mariabackup (do not confuse this with incremental backup). But it becomes more tricky for one schema or table only. And finally this can also be done on a MariaDB Galera Cluster.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: This talk will present a proper procedure of migrating applications from proprietary database systems (such as Oracle or SQL Server) to MariaDB. The talk will give an overview of the steps required to successfully perform a full migration. built from the experience of migrating DBS Bank's core infrastructure from Oracle to MariaDB.

uk: вхід без авторизації

name: Migrating from other databases to MariaDB


MariaDB Observability

uk: Комп'ютерні науки

description: A broken MariaDB means broken Application, so maintaining insights in MariaDB operational performance is critical. Thankfully MariaDB offers a lot in terms of observability to resolve problems quickly and get great insights into opportunities for optimization. In this talk, we will cover the most important observability improvements in MariaDB ranging from Performance Schema and Information Schema to enhanced error logging and optimizer trace. If you're a Developer or DBA passionate about Observability or just want to be empowered to resolve MariaDB problems quickly and efficiently you should attend this talk.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Introduce a use case from a Chinese who migrated one of their important applications from Oracle to MariaDB with very few modifications to the application. I will cover the entire migration process and experience, including tools to check the Oracle syntax compatibility with MariaDB and tools to compare the execution results of Oracle and MariaDB, and the proxy that receives and interprets the Oracle network protocol to MariaDB.

uk: вхід без авторизації

name: Migration from Oracle to MariaDB with no application change


MariaDB Roles: Overview and Migration

uk: Комп'ютерні науки

description: MariaDB has had roles all the way back in 10.0 (2013). MySQL now supports roles as well, starting with 8.0. This talk will go through an overview of Roles in MariaDB and how they can be used. The talk will also highlight the differences, as well as the migration requirements, should you need to move to (or from) MariaDB. Roles in MariaDB follow the SQL Standard implementation. Roles are a very useful feature for ensuring ease of use for a DBA. Not only that, but thanks to DEFAULT ROLE, applications not previously aware of roles can make use of them transparently. In this talk we will cover the following aspects of Roles: * Creating, granting, activating. * Roles granted to roles (the role graph) * Default Roles * Information schema tables * Differences to MySQL, migration with mariadb-dump.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: The presentation will show how and why use UNION/INTERSECT/EXCEPT. How combine them to get expected result. We will also dive into implementation details (with the help of the EXPLAIN command) to understand how MariaDB executes these set operators. This will help in understanding and troubleshooting performance problems.

uk: вхід без авторизації

name: Set operations UNION, INTERSECT, and EXCEPT in MariaDB: How to use and combine them.


How to shard MariaDB like a Pro?

uk: Комп'ютерні науки

description: In this talk, I'd like to give brief information about how to shard your data under MariaDB topologies and the possibility of using frameworks such as Vitess. While discussing the pros and cons of sharding I would like to showcase how structured horizontal sharding can scale your database almost infinitely. The audience will benefit from how others sharding to scale unlimited under both cloud and Kubernetes realm. In this short talk, I'd like to demo a case study that can be an example to get started for many. Vitess is a database clustering system for horizontal scaling of MySQL through sharding. By enabling shard-routing logic, Vitess allows application code and database queries to remain agnostic to the distribution of data onto multiple shards. With Vitess, you can split, merge, and migrate shards as your needs grow. With its compatibility to development frameworks and integration to open-source tools, Vitess has been a core component of several high traffic OLTP sites around the world and serving data across different platforms. Vitess is also the first Linux Foundation/Cloud Native Computing Foundation graduated open-source database project.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: With MariaDB in a general case (backup, proper shutdown, storage engines incompatibilities, Galera, async replication, and maybe few bugs and corner cases aside) it should be possible to easily and directly upgrade from one major version to the other, skipping any number of intermediate major versions in between. mysql_upgrade utility is designed to fix all incompatibilities in the mysql.* system tables. In frames of this talk the details of its implementation and actions are discussed, as well as some known bugs and problems that it does not solve. Upgrades to MariaDB 10.4 and 10.5 are covered, from versions at least as old as MySQL 5.5.

uk: вхід без авторизації

name: Upgrading to a newer major version of MariaDB: What mysql_upgrade really does and what problems remain


uk: Комп'ютерні науки

description: How to use Vagrant to automate the creation of development machines running MariaDB. Usually a devops team takes care of creating development machines that the developers will use in their daily work. Vagrant makes this task very easy. Though, there are some good practices that will increase development/production parity and will help developers to optimise their code.

uk: вхід без авторизації

name: Creating Vagrant development machines for MariaDB: HowTo and Best Practices


Hardware acceleration for unikernels

uk: Комп'ютерні науки

description: Applications demand fast and secure execution in diverse environments (Cloud data centers, Edge Nodes, mobile platforms etc.). Execution efficiency has been facilitated by the introduction of specialized compute elements (eg. GPUs), in order to accelerate specific parts of tasks/workloads (such is image processing). At the same time, too abstract deployment and management burdens, service providers use virtualization and container technologies. Eliminating the software overheads of these abstractions, especially in the context of hardware off-load/acceleration is a challenge and requires a number of factors to be taken into consideration: (a) portability, (b) performance, and (c) security. In this talk, we attack the first two factors and examine the option of unikernels and their surrounding ecosystem (application porting frameworks, orchestration frameworks, lightweight virtualization backends) in the context of hardware acceleration. We present our efforts in porting a novel hardware acceleration framework, vAccel, to the rumprun unikernel, digging into the internals of semantic abstraction for ML inference, as well as its implementation on rumprun and QEMU/KVM. We describe the frontend/backend driver port, the runtime needed to support the actual execution on the hardware and showcase our results in a brief demo of two unikernel frameworks performing ML inference on images.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Microkernels, partial virtual machines and internet of threads are not unrelated. The challenge of this talk is to show that the new libioth providing an effective and flexible support for the internet of threads can open interesting perspectives for a wider range of applications. A network protocol stack can be implemented as a library. There are several examples: lwip/lwipv6, picoxnet, lkl. These libraries can be used to implement processes connected as network nodes (the so called "Internet of Thread" processes) or to implement network protocol stack servers for microkernels. The main goal of libioth is to provide a convenient API to interoperate with different network stack implementations. Libioth is also an infrastructure where the actual implementations can be loaded as plug-ins. Libioth's API is minimal: it includes the complete set of Berkeley Sockets functions, some functions to add or delete a stack and 'msocket', an extended version of 'socket' providing one more leading argument to select which stack should manage the communication. Libioth does not provide in its API any specific function to set up the network configuration, e.g. to configure the IP addresses/routes etc. These features are provided through netlink (see RFC3549). "nlinline" is a simple and effective set of inline functions to manage the network configuration. The data link layer infratructure used by libioth is VDE, Virtual Distributed Ethernet. Although libioth has been primarily designed for the Internet of Threads, the way it is used in the vunetioth module of vuos has many similarities with the network protocol stack servers for the microkernels. Several concepts and many building blocks of libioth can be useful in microkernel development. The design of the minimal API itself can be used to reuse existing stack implementations in network protocol stack servers. Libnlq (a sibling project of libioth) is a library able to process netlink requests, and can be used to add the netlink support to those stack implementations providing configuration through a custom specific API.

uk: вхід без авторизації

name: libioth: The definitive API for the Internet of Threads


Pluggable device drivers for Genode

uk: Комп'ютерні науки

description: Resilience is often touted as the biggest advantage of component-based systems over monolithic architectures. The catchy part of the story often told is the containment of faults via sandboxing. However, the story has another inconvenient side that often remains untold. Components are interdependent. Whenever a central low-level component fails, dependent software stacks suffer under the outage. The talk presents Genode's recent breakthroughs to address this second part of the story, in particular making the system resilient against flaky device drivers. Component-based operating systems promise the containment of software faults and vulnerabilities by separating functionality into sandboxed components. In practice however, a contained fault is still a fault. Whenever a fault happens in a central server component, clients have to suffer under the outage of the server. Device drivers are especially problematic because they tend to be fragile while being a hard dependency for critical software stacks on running on top. Even though a bug in the driver cannot subvert the information security of the dependent components, it cuts the lifelines of those components. This fundamental problem calls for an architectural solution. We found the key in the reversal of the dependency relationships for several classes of device drivers. During this line of work, we re-stacked Genode's low-level GUI stack and turned network device drivers into disposable components. Thanks to these changes, drivers for framebuffer, input, network, and wireless devices can now be started, killed, updated, and restarted at anytime without disrupting applications. The talk provides a holistic view of Genode's recent architectural changes, gives insights into the though process, outlines the methodology applied for turning big parts of the system upside down, presents limitations, and gives an outlook to the future of Genode and Sculpt OS.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: The seL4 Foundation was created in April 2020 as a Project of the Linux Foundation. Its aim is to provide an open and neutral framework for developing seL4 and its ecosystem and promote update. The talk will give an overview of the seL4 Foundation, its goals and activities and the benefits of joining.

uk: вхід без авторизації

name: The seL4 Foundation: What it is and why you should get involved


uk: Комп'ютерні науки

description: I will provide an update on developments in the seL4 ecosystem in the past 12 months. Highlights include the creation of the seL4 Foundation and some of its activities since, and the functional correctness proof of seL4 on the RISC-V architecture. I will also discuss our work on time protection, a principled and systematic approach to prevention of timing channels and on-going work on its formal verification.

uk: вхід без авторизації

name: The seL4 Report: An Update From seL4 Land


uk: Комп'ютерні науки

description: Panel discussion and an extended Q&A session on the state of microkernel-based operating systems in 2021 and related topics.

uk: вхід без авторизації

name: Panel Discussion: State of Microkernels in 2021


uk: Комп'ютерні науки

description: In this talk we give an update on the Unikraft Linux Foundation open source project, a fully modular and librarized unikernel that aims to provide outstanding performance while making it easy to port off-the-shelf applications into unikernels. In particular, we will go into details how Unikraft (1) fully modularizes OS primitives so that it is easy to customize the unikernel and include only relevant components, (2) exposes a set of composable, performance-oriented APIs in order to make it easy for developers to obtain high performance and (3) aims for POSIX compatibility, already supporting over 130+ syscalls. In addition, there are ongoing efforts to integrate Unikraft into popular frameworks such as Kubernetes and Prometheus in order to finally bring the promise of unikernels to the mainstream. Our recent evaluation using off-the-shelf popular applications such as Nginx, SQLite, and Redis shows that running such applications on Unikraft results in a 30%-50% performance improvement compared to Linux guests. Unikraft images for these apps are around 1MB, require less than 10MB of RAM to run, and boot in around 1ms on top of the VMM time (total boot time 2ms-70ms). During the talk we will show a brief demo. Unikraft is Xen Project incubator project.

uk: вхід без авторизації

name: Unikraft: Building extremely Fast, Specialized Unikernels the Easy Way


uk: Комп'ютерні науки

description: Welcome talk and introduction to the Microkernel Devroom at FOSDEM 2021.

uk: вхід без авторизації

name: Microkernel devroom: Welcome and Introduction


uk: Комп'ютерні науки

description: Good monitoring allows us to quickly troubleshoot problems and ensure that they remain minor blips rather than escalate into hours or days of downtime. But what is “good”? Just like good code, good monitoring should include tests and documentation to ensure that it’s always valid and easily used by everyone. In this lightning talk, I’ll share best practices for validating and documenting your monitoring.

uk: вхід без авторизації

name: Proper Monitoring: Applying development practices to monitoring


uk: Комп'ютерні науки

description: Grafana Tempo is a new high volume distributed tracing backend whose only dependency is object storage. Unlike other tracing backends Tempo can hit massive scale without a massive and difficult to manage Elasticsearch or Cassandra cluster. The current trade off for using object storage is that Tempo supports search by trace id only. However, we will see how this trade off can be overcome using the other pillars of observability. In this session we will use an OpenTelemetry instrumented application to demonstrate how to use logs and Prometheus exemplars to find traces effectively in Tempo. Internal Grafana metrics will also be shared as we all discuss how to scale tracing as far as possible with less operational cost and complexity than ever before.

uk: вхід без авторизації

name: Getting Started with Grafana Tempo: High Volume Distributed Tracing Built on Top of Object Storage


uk: Комп'ютерні науки

description: The lifecycle of a machine learning model only begins once it's in production. In this talk we provide a practical deep dive of the best practices, principles, patterns and techniques around production monitoring of machine learning models. We will cover standard microservice monitoring techniques applied into deployed machine learning models, as well as more advanced paradigms to monitor machine learning models through concept drift, outlier detector and explainability. We'll dive into a hands on example, where we will train an image classification machine learning model from scratch, deploy it as a microservice in Kubernetes, and introduce advanced monitoring components as architectural patterns with hands on examples. These monitoring techniques will include AI Explainers, Outlier Detectors, Concept Drift detectors and Adversarial Detectors. We will also be understanding high level architectural patterns that abstract these complex and advanced monitoring techniques into infrastructural components that will enable for scale, introducing the standardised interfaces required for us to enable monitoring across hundreds or thousands of heterogeneous machine learning models.

uk: вхід без авторизації

name: Production Machine Learning Monitoring: Outliers, Drift, Explainers & Statistical Performance


uk: Комп'ютерні науки

description: Bpftrace is a relatively new open source tracer for modern Linux (kernels 5.x.y) for analyzing production performance problems and troubleshooting software. Basic usage of the tool, as well as bpftrace-based one liners and small scripts useful for MariaDB DBAs (and even developers) are presented. Problems of MariaDB Server dynamic tracing with bpftrace are discussed.

uk: вхід без авторизації

name: Monitoring MariaDB Server with bpftrace on Linux: Problems and Solutions


uk: Комп'ютерні науки

description: Recently Google published a paper on their monitoring system Monarch, which happened to have similar design choices to the existing CNCF Incubated project: Thanos! During this talk, two of Thanos maintainers will explain why Thanos could be claimed as an unintentional open source evolution of Google Monitoring Systems like Monarch. Google is known for building massive, global scale solutions. While organizations rarely have a similar scale, we can learn from those solutions while developing in Open Source. We all see the successes of Kubernetes which was inspired by Google Borg, and Prometheus based on Google Borgmon. During this talk, two of Thanos maintainers will explain why Thanos could be claimed as an unintentional open source evolution of Google Monitoring Systems like Monarch. By following this comparison, the audience will learn the general pattern of using and scaling the Thanos system. This talk will also reveal the exciting direction of the project including the map-reduce pushdown for PromQL queries for massive cost reduction (don’t tell anyone!)

uk: вхід без авторизації

name: A Google Monitoring System, Monarch… in Open Source?


Observability for beginners

uk: Комп'ютерні науки

description: Observability is not a new idea, it first originated in control theory. In control theory observability is defined as "A measure of how well internal states of a system can be inferred from knowledge of its external outputs" We software folks borrowed the term and now define it as the property of any system that allows us to understand what is going on with them, monitor what they are doing and get the information we need to operate & troubleshoot. In this talk, I am going to give an introduction to observability and also talk about how someone can contribute in this space.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Have you heard about the USE Method (Utilization - Saturation - Errors), RED (Rate - Errors - Duration) or Golden Signals (Latency - Traffic - Errors - Saturations)? In this presentation, we will talk briefly about these different, but similar “focuses” and discuss how we can apply them to the data infrastructure performance analysis troubleshooting and monitoring.

uk: вхід без авторизації

name: Performance Analysis and Troubleshooting Methodologies for Databases


uk: Комп'ютерні науки

description: How do you monitor Postgres? What information can you get out of it, and to what degree does this information help to troubleshoot operational issues? What if you want/need to log all the queries? That may bring heavy trafficked databases down. At OnGres we’re obsessed with improving PostgreSQL’s observability. So we worked together with Tetrate folks on an Envoy’s Network Filter extension for PostgreSQL, to provide and extend observability of the traffic inout a cluster infrastructure. This extension is public and open source. You can use it anywhere you use Envoy. It allows you to capture automated metrics and to debug network traffic. This talk will be a technical deep-dive into PostgreSQL’s protocol decoding, Envoy proxy filters and will cover all the capabilities of the tool and its usage and deployment in any environment.

uk: вхід без авторизації

name: PostgreSQL Network Filter for EnvoyProxy


uk: Комп'ютерні науки

description: Mercurial is a Distributed Version Control System mainly written in Python. While it is often the VCS of choice for monorepos for its great scalability, certain parts remain slower than they should be. Over the past two years, an effort to rewrite parts of the Mercurial core in Rust has seen multiple significant wins in performance, even compared to C implementations.

uk: вхід без авторизації

name: A journey to performance: Using Rust in Mercurial


uk: Комп'ютерні науки

description: We sometimes hear statements like "Mozilla is one of the oldest Free & Open Source projects in existence today, with more than 20 years of history - and still going strong". But where exactly did this project come from? What happened early in its history? What did the project go through to come to where it is today? This talk will try to answer those questions and compress multiple decades into less than an hour - or at least give an overview of the big-picture events this project lived through. As the audience may be more familiar with recent than earlier years, more emphasis will be put on times when the project was still young - for some things even reaching back to times before the speaker joined the community in 1999. After attending this talk, you will hopefully have a better understanding of the background of the Mozilla project and how it has helped shaping the web for the better, something that will hopefully continue into the future. The roots of Mozilla go back almost to the beginning of the web itself. The first broadly used web browser in university circles was NCSA Mosaic - the co-writer of that piece of software created a commercial variant back in 1993, going under the commercial name of "Netscape" when it was released and became the first major web browser in Internet history. But its code name, right from the start, was "Mozilla". When Netscape open-sourced its code in March of 1998, that code name became the public name of the open source project, and over the years, Mozilla attracted a large community of developers, localizers, and more. A non-profit Mozilla Foundation was created, with a "corporation" subsidiary for tax reasons, and a huge list of projects and products have been associated with Mozilla over its more than 20 years of history. The most well-known is of course the Firefox web browser, which has been one of the most-used open-source products for many years - hundreds of thousands of people browse the web with Mozilla Firefox even nowadays. After decades, this project and community is still going strong - hopefully continuing to do so in the future. The speaker has been with this community for over 20 years himself and the talk will give you and overview of the origin, past, and present of this interesting project.

uk: вхід без авторизації

name: Mozilla History: 20+ Years And Counting: An overview of origins, past, and present


uk: Комп'ютерні науки

description: 2020 was an isolating year. During a time of travel restrictions and social distancing, Mozilla Hubs (hubs.mozilla.com) provided a safe place for people to come together virtually. This open source project allows users to quickly create custom 3D spaces, and invite others to join using only a link. It is browser-based, and works across a wide variety of devices - no downloads required. From conferences, to weddings, to art galleries and even windsurfing lessons, over the last year we’ve seen a huge variety of creative applications that our team had never imagined. In this talk I showcase exciting work created by the Hubs community, and share specific insights learned while managing Hubs’ rapidly growing user-base. Attendees will discover how to foster an open, accessible & delightful community.

uk: вхід без авторизації

name: Open, Accessible & Delightful: building the Mozilla Hubs community during COVID-19


uk: Комп'ютерні науки

description: The time has come for Kuma — the platform that powered MDN Web Docs — to evolve. For quite some time now, the MDN developer team has been planning a radical platform change. That change has now landed. In short, we have moved away from our wiki model where the content was stored in a centralized SQL database, to a decentralized pull request model via Github. Our tech stack has also radically changed, paving the way for faster future development, ease of maintenance, and opening up the platform for contribution from our community. During this talk, I will share the history of the project, talk about our recent achievements, demonstrate how to contribute to both the MDN Web Docs content and the underlying platform, and take a peek at what the future looks like for MDN Web Docs.

uk: вхід без авторизації

name: Rethinking the Biggest Developer Resource on the Web: MDN Web Docs ~ Past, Present and Future


Thunderbird in 2021

uk: Комп'ютерні науки

description: A talk about Thunderbird's journey in 2020 and 2021.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: MySQL Group Replication is a solution that implements a fault-tolerant database system in which redundant components can be removed automatically without compromising the overall system's availability. The Asynchronous Replication Connection Failover feature complements this by further increasing the resilience of replication connections between a replica and a set of sources. It allows asynchronous replicas to switch to a new replication source when the current connection fails. Therefore, an asynchronous replica can automatically switch-over its replication connection to a new member, when it is replicating from a Group Replication group, for instance. In this session we will present how Asynchronous Replication Connection Failover feature automates the process of re-establishing a replication connection to another source, upon failure of the current one. We will also present about how this feature integrates with Group Replication and thus how setting it up can be automated as well. Come and learn more about this new and exciting replication feature in MySQL, directly from the engineers developing the product.

uk: вхід без авторизації

name: Automatic Connection Failover for Asynchronous Replication Channels


uk: Комп'ютерні науки

description: Did you wake up one day to find a baby database left in a box by your front door? While it was cute and fairly self-sufficient at first, has it now hit database puberty and is it making you wish there were such a thing as DBA school? Did you feed your database after midnight or let it get in contact with water and is it now making your life a living hell? Don't panic, because here's a 20 minute cram session of the most basic database parenting skills as well as general things you should be aware of when starting out with MySQL.

uk: вхід без авторизації

name: Hitchhiker's Guide to MySQL: Don't panic.


uk: Комп'ютерні науки

description: Tools and approaches based on /proc samp0ling (like 0x.tools by Tanel Poder or ad hoc scripts) allow to measure individual thread level activity in MySQL server on Linux, like thread sleep states, currently executing system calls and kernel wait locations. If needed you can drill down into CPU usage of any thread or the system as a whole. Historical data can be captured for post factum analysis, without much impact on the system and no need to install or change anything in its configuration. In this presentation I am going to summarize what's possible with /proc and show useful examples for MySQL DBAs.

uk: вхід без авторизації

name: Linux /proc filesystem for MySQL DBAs: Sampling /proc content for troubleshooting


Running MySQL on ARM

uk: Комп'ютерні науки

description: MySQL joined the ARM ecosystem with 8.x release. This opened up a completely new vertical and provided a cost-effective alternative to users. With multiple cloud providers providing ARM instances more and more users/developers are getting interested in running MySQL on ARM. Let's explore what it means to run MySQL on ARM through enhancement done, what more could be optimized, patches already in pipelines, features that could benefit from more cores on ARM, state of ecosystem how it could be further improved, any special configurations to tune, performance, stability, notes on migration, do and don't, etc...

uk: вхід без авторизації


uk: Комп'ютерні науки

description: The presentation will be focused on dealing with an unexpected high traffic event as it is happening. We will address the impact a traffic spike can have on your database – from poor query response time to replication lag issues – and provide actionable tips and tricks. We will talk about how to bring your database under control, earn performance gains and delight your customers.

uk: вхід без авторизації

name: 18 Things To Do When You Have a MySQL Bottleneck: From Traffic Spike... in 20 minutes


uk: Комп'ютерні науки

description: Fortunately MySQL NDB Cluster already has auto-healing, data distribution, instant scaling and many other features built-in - making it a perfect fit for Cloud Native. This session walks through the few steps necessary to deploy a distributed NDB setup in a Kubernetes cluster manually or with an operator. NDB runs in Kubernetes serving mission critical microservices at the heart of Cloud Native production systems. The experience from these adventures mix with knowledge gained from building an NDB operator from scratch. Boiled down to a few tips and tricks are hopefully helpful to guide around the usual traps running NDB or any database in Kubernetes.

uk: вхід без авторизації

name: MySQL NDB 8.0: Sure you can run your database in kubernetes: Successfully run your MySQL NDB Cluster in kubernetes


uk: Комп'ютерні науки

description: Group replication is a mature and feature rich solution for data replication and automation of fail-over. To be able to operate without human intervention, it relies on group-based coordination protocols and as such require constant interaction between servers over the network. As such, adjusting the configuration to deal with network instability is something that should be done to get the most of the replication deployment. This session showcases the best practices that allow you to deploy Group Replication, in terms of network isolation - isolate Group Replication traffic from application traffic - either in making it cope better with higher latency networks or network with a non-negligible packet loss rate. Come and learn about the best practices to deploy Group Replication over unreliable networks.

uk: вхід без авторизації

name: Group Replication: Best Practices for Network Deploy


uk: Комп'ютерні науки

description: During this session, I will show how we can start from a single instance to MySQL InnoDB Cluster, the automated HA solution for MySQL, passing by the following architecture: - Single MySQL - Source / Asynchronous Replica - InnoDB ReplicaSet - InnoDB Cluster I will cover the limitations of each options and how to migrate from one to the next one with minimal downtime.

uk: вхід без авторизації

name: From single MySQL instance to HA: The journey to InnoDB Cluster


uk: Комп'ютерні науки

description: I'll explain the newest addition to the MySQL wire format that allows client applications to pass data in the COM_QUERY command that then can be processed by the server and components in various ways. I'll demonstrate how an audit plugin and the SQL query itself can take advantage of the data passed by the client. COM_QUERY can now take named binary values parameters. And the server can serve the values of these to components and plugins. As well as the SQL query itself. Let's learn how to prepare these values using the C API and how to process them inside the server.

uk: вхід без авторизації

name: MySQL: Protocol’s Query Attributes: Passing extra (meta-)data about/to queries over the wire


25 years of MySQL - A Retrospective

uk: Комп'ютерні науки

description: MySQL has now been arounds for over a quarter of a century. So what has really changed since 3.21 has become available? So how did a little programming project become the ubiquitous database? This session is a look at the many changes in the product, the company, and the people involved in MySQL.

uk: вхід без авторизації


Better User Management under MySQL 8.0

uk: Комп'ютерні науки

description: MySQL has added many new features to make user account management easier. The server can now generate random passwords that follow the rules you manage. If you have too many 'Dave's or 'Fred's in your organization, you can store GCOS like information in the mysql.user.User_attributes column to directly identify who you are referencing. And you can now have dual passwords on an account. These additions can make account management much easier but only if you know about them!

uk: вхід без авторизації


uk: Комп'ютерні науки

description: MySQL XA transaction processing has a series of pitfalls and issues that make it NOT crash safe nor fault tolerant. In this talk the author would like to share his insights, findings and analysis about such issues and MySQL transaction processing in general, and how he and his team solved all these issues and made MySQL XA transaction processing really crash safe and fault tolerant, which is crucial to use MySQL as storage nodes of a distributed DBMS such as Kunlun. In an era of data explosion, more and more database users will need distributed databases to scale out ever increasing data management needs. From the author's past decade of database kernel development experience in Oracle and Tencent, he knows that although MySQL is an excellent DBMS in itself, its storage capacity has a limit of a couple of terabytes. Beyond that, users would need table sharding to scale to multiple MySQL storage clusters to get good performance. And using MySQL as part of a distributed database will be more and more pervasive in the future, thus it's crucial that the MySQL XA transaction processing issues be well understood and solved. In the author’s former work in Tencent TDSQL development team, he took the initiative to evolve TDSQL from a simple table sharding solution to a full-blown distributed DBMS which handles distributed transaction and query processing, among others, and TDSQL since then has been widely used inside Tencent and in Tencent’s public cloud service. In this work they solved a series of MySQL-5.7 XA transaction processing issues and pitfalls, so that TDSQL is made crash safe and fault tolerant. And they reported such XA crash-safety bugs to MySQL official team and contributed the initial patches too. Since Aug 2019, the author left Tencent and started to develop Kunlun distributed DBMS, which uses MySQL 8.0 as storage nodes. Based on his previous experiences and knowledge of using MySQL-5.7 in TDSQL, he and his team implemented a series of features and functionality to make MySQL 8.0 XA transaction processing crash safe and fault tolerant. Note that community MySQL XA modules lack such guarantees. In this session the author would like to share the insights and findings of some of the XA transaction processing issues&pitfalls, as well as the analysis and solution.

uk: вхід без авторизації

name: Making MySQL-8.0 XA transaction processing crash safe: The key to use MySQL as storage nodes for distributed databases


MySQL Router: REST API

uk: Комп'ютерні науки

description: MySQL Router is part of MySQL InnoDB Cluster and MySQL InnoDB ReplicaSet, but not only. This piece of software is still unknown by many users but improved a lot during the last year. In this session, the audience will learn about MySQL Router's REST API. How to enable it and how to use it. We will also see how this API can be integrated into a monitoring solution and I will share my journey dealing with its authentication: I will share my thoughts and best practices.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Containers, kubernetes and virtualizations are, as never before, the shining objects of our times. While we are used to implementing them in case of stateless situations, it becomes more difficult to see them serve properly in case of stateful solutions like RDBMS. But after I have won some personal reluctance, I started to experiment with the Percona Operator for MySQL. With this presentation, I will bring you a short journey as a result of my experience as DBA in the usage of the Percona Operator for MySQL. We will see from one side failures, misunderstanding and some frustration. From the other side a learning process that brings me to have better comprehension of the possible utilization and the best way to achieve it. Finally my personal considerations.

uk: вхід без авторизації

name: Review of the Percona Operator for MYSQL from a DBA prospective


uk: Комп'ютерні науки

description: Two MySQL queries that will return the same result, may sometimes have totally different queries plans. This happens because the query optimizer does not realize that the queries are equivalent. In this presentation, we will discuss how we can rewrite queries to help the optimizer find a better query plan. We will show several examples of how we can transform subqueries to make them more efficient, and we will also discuss how we can identify queries that can become faster if a subquery is replaced by window functions. Finally, we will discuss how MySQL 8.0 can do some of these transformations automatically.

uk: вхід без авторизації

name: Rewrite Your Complex MySQL Queries for Better Performance


uk: Комп'ютерні науки

description: This session reveals four experimental Vitess developments that automate away complex database operations. With these developments Vitess is able to run its own database infrastructure, transparently to the user, and take control of risky and elaborate situations and operations. We will briefly explain the Vitess architecture and how it supports said control, and discuss the following developments: - Throttling: pushback for massive writes. - Table life cycle: safe and lazy DROP TABLE operations. - Online DDL: automating, scheduling and managing online schema migrations. - HA, failovers and cluster healing via vitess/orchestrator (aka vtorc). Vitess is a CNCF open source database clustering system for horizontal scaling of MySQL.

uk: вхід без авторизації

name: Open Source Database Infrastructure with Vitess


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Let's find NeMo together: welcome, overview, lineup


uk: Комп'ютерні науки

description: Julian and I work for Icinga and want to shed some light on what, how and why we do what we do and also what YOU can do. The format is going to be a bit like a podcast, where we just talk about our topics for a little and try to provide some light entertainment while staying technical. We were thinking of covering the following topics: - What is Icinga - what can Icinga do for me? - Where do our strengths (and weaknesses) lie? - How does our development work at the moment? - Which direction would we like to go with it? - How can someone contribute to the project?

uk: вхід без авторизації

name: Talking about Icinga and Icinga development: Chatting about the current state and how to contribute to Icigna


uk: Комп'ютерні науки

description: Telegraf is an agent for collecting, processing, aggregating, and writing metrics. With over 200 plugins, Telegraf can fetch metrics from a variety of sources, allowing you to build aggregations and write those metrics to InfluxDB, Prometheus, Kafka, and many more targets. In this talk, we'll take a look at the different plugins Telegraf provides for collecting metrics about our networks, as well as the latest features of InfluxDB 2 that make sharing our configurations with others a piece of cake.

uk: вхід без авторизації

name: Network Monitoring with InfluxDB 2 and Telegraf


uk: Комп'ютерні науки

description: So you want to monitor a large-scale network-- where do you start? This talk will give you some practical tips in strategizing your network monitoring to avoid future problems, detect those you didn’t know are causing performance issues and save your time in configuration. You’ll learn practical tips, summarized into 3 simple rules, coming from the speaker’s 20+ years of experience as a network specialist. Whether you're starting your monitoring from scratch or improving an existing setup, these tips will be useful for you to have a holistic network monitoring. Along with the practical tips, the speaker will show some demos on how you can apply them using Checkmk, an open source IT monitoring software. We will discuss best practices to take advantage of rule-based monitoring in discovering all your network interfaces. After learning the fundamentals, we'll discuss how you can take it further with network flow monitoring using ntopng. This will help you troubleshoot network issues through in-depth network performance monitoring and network flow analyses. By the end of the talk, you’ll get to learn a holistic approach to network monitoring; saving your organization lots of time, as well as budget for hiring external consultants.

uk: вхід без авторизації

name: 3 Rules to Rule Them All: Large-scale Network Monitoring


uk: Комп'ютерні науки

description: When companies and setups grow, network monitoring has to scale. This talk will walk you through an expanding and growing Naemon setup from city to global scale showing what will go wrong and how to mitigate those challenges. On the way, the tools Thruk, Mod-Gearman and LMD will be introduced.

uk: вхід без авторизації

name: Monitoring Large Networks with Naemon: challenges in distributed monitoring at global scale.


Using nDPI for Monitoring and Security

uk: Комп'ютерні науки

description: As most of modern traffic is now encrypted, deep packet inspection is becoming a key component for providing visibility in network traffic. nDPI is an open source toolkit able to detect application protocols both in plain text and encrypted traffic, extract metadata information, and detect relevant cybersecurity information. This talk shows how nDPI can be used in real life to monitor network traffic, report key information metrics and detect malicious communications. The pervasive use of encrypted protocols and new communication paradigms based on mobile and home IoT devices has obsoleted traffic analysis techniques that relied on clear text analysis. DPI (Deep Packet Inspection) is a key component to provide network visibility on network traffic. nDPI is an open source toolkit designed to detect application protocols on both plain and encrypted traffic. it is also able to extract relevant metadata information including metrics on encrypted traffic for easy classification and accounting. This talk introduces nDPI, demonstrate how to use it in real life examples, and it presents how it can be effectively used not only for traffic monitoring but also in cybersecurity being it able to detect unusual traffic behaviour and security issues.

uk: вхід без авторизації