FloCon 2019

Effective NetOp and SecOp system architectures require collecting and analyzing network traffic data in real time. With the advent of programmable switching fabrics like the Barefoot Networks Tofino ASIC, alongside packet processing Domain Specific Languages (DSL) like P4, instrumenting networks deeply in real time is doable. We have developed a YANG model-driven system for network monitoring and visibility, based on a commodity switch, that harnesses the power of a fully programmable dataplane to filter, aggregate and shape packet frames and simultaneously generate telemetry natively. These components combined together can now be leveraged to develop powerful streaming analytic pipelines implemented using on-premise or cloud-based in-memory computing architectures. Scalable collection, analysis, and processing of high-speed, high port count networks using commodity, dynamically repurposed and programmed switches and servers is now achievable.

Attendees will Learn:
​​​​How to build a streaming analytic pipeline for high-speed, high port count network monitoring. SecOps are improved by providing the design of component pieces needed to support real-time decisions.