SlideShare a Scribd company logo
FFMUC goes wild
Tech talk at #rc3 28.12.2020
awlnx
● Annika Wickert
● Senior Network Engineer
● Twitter @awlnx
krombel
● Matthias Kesler
● IT Consultant
● Twitter @kr0mbel
Who are we?
pkoerner
● Peter Körner
● IT since CBM, 2C3, FF 6y,
DL9HCZ, working @Red Hat
● Twitter @pkoerner81929
FFMUC?
• Freie Netze München e.V. seit 2014
• Community Freifunk München seit 2004
• No registration of nodes
• Wifi
• #FFMEET
• DoH/DoT/DNSCrypt
Jitsi to close the social gap during corona
• An upcoming Freifunk Meeting was about to get canceled because of Corona
• Many people especially schools seemed in need of an easy to use conference
system
• “Freifunk verbindet”
• Christmas 2020
FFMEET appeared in the press
Technical challenges
• Scaling (nginx, prosody etc)
• Firefox a WebRTC nightmare
• Running on nightly builds
• Automation
Many participants and supporters!
Restart of Freie Netze München e.V.
• FNMUC was kinda abandoned
• We need an entity which can sign contracts and
acquire money
• Elections in July
• Since then many new members, many actions,
lots of ideas and high motivation
AS212567
• IPv4: 5.1.66.0/24 + 185.150.99.0/24
• IPv6: 2001:678:e68::/48 + 2001:678:ed0::/48
• When we need to switch datacenters we keep the address space
• We can multi-home much easier
• More possible sponsors
• We can join Internet Exchanges! #PeeringFamily
• Abuse handling is done by FNMUC e.V.
Preparing the new datacenter
● Pre-Installing everything possible
● Switching to Ubuntu 20.04 from Debian (mostly) stretch
● Run an overlay network for easier cross-site communication (Nebula)
● Much SaltStack code: https://github.com/freifunkMUC/ffmuc-salt-public
Journey to vienna
Vienna!
We are online!
Use more bandwidth!
• New DC has a bigger uplink
• Users cannot use it, because fastd does not perform very well
• L2TP performs very good but has no encryption
• We experimented with Wireguard before and were very happy with it
Wireguard vs fastD
• FastD is a single threaded userspace process
• Wireguard runs in kernel space thus has to be multithreaded
• Wireguard cannot transport Layer2 Protocols - B.A.T.M.A.N. is one ...
• We need another encapsulation which solves this problem => VXLAN
WireguardVXLANB.A.T.M.A.N.
Gateways
• Everything is automated with Saltstack
• systemd-networkd takes care of all interfaces
• 800 - 1000 Nodes per Gateway are easy
• We run whole FFMUC on just two gateways
We are pioneering much stuff
• There was no systemd-networkd integration for B.A.T.M.A.N.
=> So we wrote it: https://github.com/systemd/systemd/pull/17252
• There was no firmware integration
=> So we wrote it:
https://github.com/freifunk-gluon/community-packages/pull/6
• There was no daemon to accept wireguard keys
=> So we wrote it: https://github.com/freifunkMUC/wgkex
How does it work?
• Wireguard Peers on the gateways are created by wgkex
• Allowed IP is derived from the publickey of the node
• VXLAN Forwarding database entry are created by wgkex
WGKex?
Debugging … Flamegraphs and Bugs
• Wireguard performs well but we have too much load on our gateways. Why?
Community
• Freifunk Darmstadt and Freifunk Regensburg helped a lot during development
of wgkex!
• B.A.T.M.A.N. developers helped a lot during debugging the performance issue
and created many bugfixes
• Everything is opensource and available on Github
https://github.com/freifunkMUC
• More background and all fixes:
https://ffmuc.net/freifunkmuc/2020/12/03/wireguard-firmware/
So is it faster?
Other Services
• Chat for our Community (and people interested in Jitsi ;) ) https://chat.ffmuc.net
• Public DoH/DoT/DNSCrypt resolver https://doh.ffmuc.net
Encrypted DNS
• As we appeared in c’t much growth the last month (link in appendix)
New datacenter in munich
Much code ...
Feedback, comments
Wir freuen uns über jede konstruktive Kritik:
Community & Social Media
We need members and supporters
• We have monthly costs for data centers, IP space etc.
• We have a association called Freie Netze München e.V.
• We only have a few number of admins at the moment
• New ideas christmas presents
https://ffmuc.net/freifunkmuc/2020/12/12/weihnachtsaktion/
=> We need more people! Sign up here:
https://ffmuc.net/wiki/doku.php?id=ev:start
“Das andere
Weihnachts
geschenk!”
FFMUC at #rC3
• Jitsi/FFMUC Meet Raum 24/7: https://meet.ffmuc.net/ffmuc-rc3
• FFMUC Chat (Mattermost): https://chat.ffmuc.net/
• Wireguard background:
https://ffmuc.net/freifunkmuc/2020/12/03/wireguard-firmware/
• FFMUC Wiki Knowledge Base:
https://ffmuc.net/wiki/doku.php
More links
• Freifunk München Map: https://map.ffmuc.net
• Freifunk München: https://ffmuc.net
• Freifunk: https://freifunk.net
• Freifunk Karte: https://freifunk-karte.de
• RIPE Anchor: https://atlas.ripe.net/probes/6886/
• RIPE Stats: https://stat.ripe.net/as212567

More Related Content

What's hot

Understanding Android Benchmarks
Understanding Android BenchmarksUnderstanding Android Benchmarks
Understanding Android BenchmarksKoan-Sin Tan
 
Velocity 2015 linux perf tools
Velocity 2015 linux perf toolsVelocity 2015 linux perf tools
Velocity 2015 linux perf tools
Brendan Gregg
 
BPF / XDP 8월 세미나 KossLab
BPF / XDP 8월 세미나 KossLabBPF / XDP 8월 세미나 KossLab
BPF / XDP 8월 세미나 KossLab
Taeung Song
 
Meet cute-between-ebpf-and-tracing
Meet cute-between-ebpf-and-tracingMeet cute-between-ebpf-and-tracing
Meet cute-between-ebpf-and-tracing
Viller Hsiao
 
GUI design using JAVAFX.ppt
GUI design using JAVAFX.pptGUI design using JAVAFX.ppt
GUI design using JAVAFX.ppt
TabassumMaktum
 
Docker Forensics
Docker ForensicsDocker Forensics
Docker Forensics
Joel Lathrop
 
Bypass_AV-EDR.pdf
Bypass_AV-EDR.pdfBypass_AV-EDR.pdf
Bypass_AV-EDR.pdf
Farouk2nd
 
Yocto usage for Graphics SDK on AM335x
Yocto usage for Graphics SDK on AM335xYocto usage for Graphics SDK on AM335x
Yocto usage for Graphics SDK on AM335x
Prabindh Sundareson
 
Staring into the eBPF Abyss
Staring into the eBPF AbyssStaring into the eBPF Abyss
Staring into the eBPF Abyss
Sasha Goldshtein
 
BPF: Tracing and more
BPF: Tracing and moreBPF: Tracing and more
BPF: Tracing and more
Brendan Gregg
 
Linker and loader upload
Linker and loader   uploadLinker and loader   upload
Linker and loader upload
Bin Yang
 
X / DRM (Direct Rendering Manager) Architectural Overview
X / DRM (Direct Rendering Manager) Architectural OverviewX / DRM (Direct Rendering Manager) Architectural Overview
X / DRM (Direct Rendering Manager) Architectural OverviewMoriyoshi Koizumi
 
stackconf 2022: Intro to Netbox
stackconf 2022: Intro to Netbox stackconf 2022: Intro to Netbox
stackconf 2022: Intro to Netbox
NETWAYS
 
Open Source Logging and Monitoring Tools
Open Source Logging and Monitoring ToolsOpen Source Logging and Monitoring Tools
Open Source Logging and Monitoring Tools
Phase2
 
HKG18-203 - Overview of Linaro DRM
HKG18-203 - Overview of Linaro DRMHKG18-203 - Overview of Linaro DRM
HKG18-203 - Overview of Linaro DRM
Linaro
 
Understanding eBPF in a Hurry!
Understanding eBPF in a Hurry!Understanding eBPF in a Hurry!
Understanding eBPF in a Hurry!
Ray Jenkins
 
2024 Incognito Conference (03/24) - 1-Day로 보는 V8 보호 기법 및 동작
2024 Incognito Conference (03/24) - 1-Day로 보는 V8 보호 기법 및 동작2024 Incognito Conference (03/24) - 1-Day로 보는 V8 보호 기법 및 동작
2024 Incognito Conference (03/24) - 1-Day로 보는 V8 보호 기법 및 동작
Ju Chanhyoung
 
Open Source IDS Tools: A Beginner's Guide
Open Source IDS Tools: A Beginner's GuideOpen Source IDS Tools: A Beginner's Guide
Open Source IDS Tools: A Beginner's Guide
AlienVault
 
Dataplane programming with eBPF: architecture and tools
Dataplane programming with eBPF: architecture and toolsDataplane programming with eBPF: architecture and tools
Dataplane programming with eBPF: architecture and tools
Stefano Salsano
 
Distributed fun with etcd
Distributed fun with etcdDistributed fun with etcd
Distributed fun with etcd
Abdulaziz AlMalki
 

What's hot (20)

Understanding Android Benchmarks
Understanding Android BenchmarksUnderstanding Android Benchmarks
Understanding Android Benchmarks
 
Velocity 2015 linux perf tools
Velocity 2015 linux perf toolsVelocity 2015 linux perf tools
Velocity 2015 linux perf tools
 
BPF / XDP 8월 세미나 KossLab
BPF / XDP 8월 세미나 KossLabBPF / XDP 8월 세미나 KossLab
BPF / XDP 8월 세미나 KossLab
 
Meet cute-between-ebpf-and-tracing
Meet cute-between-ebpf-and-tracingMeet cute-between-ebpf-and-tracing
Meet cute-between-ebpf-and-tracing
 
GUI design using JAVAFX.ppt
GUI design using JAVAFX.pptGUI design using JAVAFX.ppt
GUI design using JAVAFX.ppt
 
Docker Forensics
Docker ForensicsDocker Forensics
Docker Forensics
 
Bypass_AV-EDR.pdf
Bypass_AV-EDR.pdfBypass_AV-EDR.pdf
Bypass_AV-EDR.pdf
 
Yocto usage for Graphics SDK on AM335x
Yocto usage for Graphics SDK on AM335xYocto usage for Graphics SDK on AM335x
Yocto usage for Graphics SDK on AM335x
 
Staring into the eBPF Abyss
Staring into the eBPF AbyssStaring into the eBPF Abyss
Staring into the eBPF Abyss
 
BPF: Tracing and more
BPF: Tracing and moreBPF: Tracing and more
BPF: Tracing and more
 
Linker and loader upload
Linker and loader   uploadLinker and loader   upload
Linker and loader upload
 
X / DRM (Direct Rendering Manager) Architectural Overview
X / DRM (Direct Rendering Manager) Architectural OverviewX / DRM (Direct Rendering Manager) Architectural Overview
X / DRM (Direct Rendering Manager) Architectural Overview
 
stackconf 2022: Intro to Netbox
stackconf 2022: Intro to Netbox stackconf 2022: Intro to Netbox
stackconf 2022: Intro to Netbox
 
Open Source Logging and Monitoring Tools
Open Source Logging and Monitoring ToolsOpen Source Logging and Monitoring Tools
Open Source Logging and Monitoring Tools
 
HKG18-203 - Overview of Linaro DRM
HKG18-203 - Overview of Linaro DRMHKG18-203 - Overview of Linaro DRM
HKG18-203 - Overview of Linaro DRM
 
Understanding eBPF in a Hurry!
Understanding eBPF in a Hurry!Understanding eBPF in a Hurry!
Understanding eBPF in a Hurry!
 
2024 Incognito Conference (03/24) - 1-Day로 보는 V8 보호 기법 및 동작
2024 Incognito Conference (03/24) - 1-Day로 보는 V8 보호 기법 및 동작2024 Incognito Conference (03/24) - 1-Day로 보는 V8 보호 기법 및 동작
2024 Incognito Conference (03/24) - 1-Day로 보는 V8 보호 기법 및 동작
 
Open Source IDS Tools: A Beginner's Guide
Open Source IDS Tools: A Beginner's GuideOpen Source IDS Tools: A Beginner's Guide
Open Source IDS Tools: A Beginner's Guide
 
Dataplane programming with eBPF: architecture and tools
Dataplane programming with eBPF: architecture and toolsDataplane programming with eBPF: architecture and tools
Dataplane programming with eBPF: architecture and tools
 
Distributed fun with etcd
Distributed fun with etcdDistributed fun with etcd
Distributed fun with etcd
 

Similar to FFMUC goes wild - Infrastructure recap 2020 #rc3

FFMUC presents #ffmeet - #virtualUKNOF
FFMUC presents #ffmeet - #virtualUKNOFFFMUC presents #ffmeet - #virtualUKNOF
FFMUC presents #ffmeet - #virtualUKNOF
Annika Wickert
 
DevCon 5 (July 2013) - WebSockets
DevCon 5 (July 2013) - WebSocketsDevCon 5 (July 2013) - WebSockets
DevCon 5 (July 2013) - WebSockets
Crocodile WebRTC SDK and Cloud Signalling Network
 
Challenges and experiences with IPTV from a network point of view
Challenges and experiences with IPTV from a network point of viewChallenges and experiences with IPTV from a network point of view
Challenges and experiences with IPTV from a network point of view
brouer
 
Kranky Geek WebRTC 2015 - What's next for WebRTC?
Kranky Geek WebRTC 2015 - What's next for WebRTC?Kranky Geek WebRTC 2015 - What's next for WebRTC?
Kranky Geek WebRTC 2015 - What's next for WebRTC?
Kranky Geek
 
FFMUC: Half a year with WireGuard
FFMUC: Half a year with WireGuardFFMUC: Half a year with WireGuard
FFMUC: Half a year with WireGuard
Annika Wickert
 
ESP8266 and IOT
ESP8266 and IOTESP8266 and IOT
ESP8266 and IOT
dega1999
 
WebRTC: A front-end perspective
WebRTC: A front-end perspectiveWebRTC: A front-end perspective
WebRTC: A front-end perspective
shwetank
 
Videoconferencing Technology Workshop
Videoconferencing Technology WorkshopVideoconferencing Technology Workshop
Videoconferencing Technology WorkshopVideoguy
 
Andrea De Gaetano - An Adventure with ESP8266 firmwares and IOT
Andrea De Gaetano - An Adventure with ESP8266 firmwares and IOTAndrea De Gaetano - An Adventure with ESP8266 firmwares and IOT
Andrea De Gaetano - An Adventure with ESP8266 firmwares and IOT
Codemotion
 
Dc ch01 : data communications, data networks, and the internet
Dc ch01 : data communications, data networks, and the internetDc ch01 : data communications, data networks, and the internet
Dc ch01 : data communications, data networks, and the internet
Syaiful Ahdan
 
FFMEET: running a non-profit conference system
FFMEET: running a non-profit conference systemFFMEET: running a non-profit conference system
FFMEET: running a non-profit conference system
Annika Wickert
 
Moving to software-based production workflows and containerisation of media a...
Moving to software-based production workflows and containerisation of media a...Moving to software-based production workflows and containerisation of media a...
Moving to software-based production workflows and containerisation of media a...
Kieran Kunhya
 
NAB2022: Essentials for Media over IP Network Design
NAB2022: Essentials for Media over IP Network DesignNAB2022: Essentials for Media over IP Network Design
NAB2022: Essentials for Media over IP Network Design
Koji Oyama
 
Facebook and Telecom
Facebook and TelecomFacebook and Telecom
Facebook and Telecom
Marie-Paule Odini
 
Marchand leny mass digitization systems and open source software
Marchand leny mass digitization systems and open source softwareMarchand leny mass digitization systems and open source software
Marchand leny mass digitization systems and open source software
FIAT/IFTA
 
Using Eclipse and Lua for the Internet of Things - EclipseDay Googleplex 2012
Using Eclipse and Lua for the Internet of Things - EclipseDay Googleplex 2012Using Eclipse and Lua for the Internet of Things - EclipseDay Googleplex 2012
Using Eclipse and Lua for the Internet of Things - EclipseDay Googleplex 2012
Benjamin Cabé
 
Troubleshooting Layer 2 Ethernet Problem: Loop, Broadcast, Security
Troubleshooting Layer 2 Ethernet Problem: Loop, Broadcast, Security Troubleshooting Layer 2 Ethernet Problem: Loop, Broadcast, Security
Troubleshooting Layer 2 Ethernet Problem: Loop, Broadcast, Security
GLC Networks
 
Building the Internet of Things with Eclipse IoT - IoTBE meetup
Building the Internet of Things with Eclipse IoT - IoTBE meetupBuilding the Internet of Things with Eclipse IoT - IoTBE meetup
Building the Internet of Things with Eclipse IoT - IoTBE meetup
Benjamin Cabé
 
Dc ch02 : protocol architecture
Dc ch02 : protocol architectureDc ch02 : protocol architecture
Dc ch02 : protocol architecture
Syaiful Ahdan
 

Similar to FFMUC goes wild - Infrastructure recap 2020 #rc3 (20)

FFMUC presents #ffmeet - #virtualUKNOF
FFMUC presents #ffmeet - #virtualUKNOFFFMUC presents #ffmeet - #virtualUKNOF
FFMUC presents #ffmeet - #virtualUKNOF
 
DevCon 5 (July 2013) - WebSockets
DevCon 5 (July 2013) - WebSocketsDevCon 5 (July 2013) - WebSockets
DevCon 5 (July 2013) - WebSockets
 
Challenges and experiences with IPTV from a network point of view
Challenges and experiences with IPTV from a network point of viewChallenges and experiences with IPTV from a network point of view
Challenges and experiences with IPTV from a network point of view
 
Kranky Geek WebRTC 2015 - What's next for WebRTC?
Kranky Geek WebRTC 2015 - What's next for WebRTC?Kranky Geek WebRTC 2015 - What's next for WebRTC?
Kranky Geek WebRTC 2015 - What's next for WebRTC?
 
FFMUC: Half a year with WireGuard
FFMUC: Half a year with WireGuardFFMUC: Half a year with WireGuard
FFMUC: Half a year with WireGuard
 
ESP8266 and IOT
ESP8266 and IOTESP8266 and IOT
ESP8266 and IOT
 
WebRTC: A front-end perspective
WebRTC: A front-end perspectiveWebRTC: A front-end perspective
WebRTC: A front-end perspective
 
Videoconferencing Technology Workshop
Videoconferencing Technology WorkshopVideoconferencing Technology Workshop
Videoconferencing Technology Workshop
 
Andrea De Gaetano - An Adventure with ESP8266 firmwares and IOT
Andrea De Gaetano - An Adventure with ESP8266 firmwares and IOTAndrea De Gaetano - An Adventure with ESP8266 firmwares and IOT
Andrea De Gaetano - An Adventure with ESP8266 firmwares and IOT
 
Dc ch01 : data communications, data networks, and the internet
Dc ch01 : data communications, data networks, and the internetDc ch01 : data communications, data networks, and the internet
Dc ch01 : data communications, data networks, and the internet
 
FFMEET: running a non-profit conference system
FFMEET: running a non-profit conference systemFFMEET: running a non-profit conference system
FFMEET: running a non-profit conference system
 
Moving to software-based production workflows and containerisation of media a...
Moving to software-based production workflows and containerisation of media a...Moving to software-based production workflows and containerisation of media a...
Moving to software-based production workflows and containerisation of media a...
 
NAB2022: Essentials for Media over IP Network Design
NAB2022: Essentials for Media over IP Network DesignNAB2022: Essentials for Media over IP Network Design
NAB2022: Essentials for Media over IP Network Design
 
Facebook_TIP_Nov
Facebook_TIP_NovFacebook_TIP_Nov
Facebook_TIP_Nov
 
Facebook and Telecom
Facebook and TelecomFacebook and Telecom
Facebook and Telecom
 
Marchand leny mass digitization systems and open source software
Marchand leny mass digitization systems and open source softwareMarchand leny mass digitization systems and open source software
Marchand leny mass digitization systems and open source software
 
Using Eclipse and Lua for the Internet of Things - EclipseDay Googleplex 2012
Using Eclipse and Lua for the Internet of Things - EclipseDay Googleplex 2012Using Eclipse and Lua for the Internet of Things - EclipseDay Googleplex 2012
Using Eclipse and Lua for the Internet of Things - EclipseDay Googleplex 2012
 
Troubleshooting Layer 2 Ethernet Problem: Loop, Broadcast, Security
Troubleshooting Layer 2 Ethernet Problem: Loop, Broadcast, Security Troubleshooting Layer 2 Ethernet Problem: Loop, Broadcast, Security
Troubleshooting Layer 2 Ethernet Problem: Loop, Broadcast, Security
 
Building the Internet of Things with Eclipse IoT - IoTBE meetup
Building the Internet of Things with Eclipse IoT - IoTBE meetupBuilding the Internet of Things with Eclipse IoT - IoTBE meetup
Building the Internet of Things with Eclipse IoT - IoTBE meetup
 
Dc ch02 : protocol architecture
Dc ch02 : protocol architectureDc ch02 : protocol architecture
Dc ch02 : protocol architecture
 

More from Annika Wickert

Flow monitoring explained - From packet capture to data analysis - the use of...
Flow monitoring explained - From packet capture to data analysis - the use of...Flow monitoring explained - From packet capture to data analysis - the use of...
Flow monitoring explained - From packet capture to data analysis - the use of...
Annika Wickert
 
FFMUC jitsi-report after first two weeks
FFMUC jitsi-report after first two weeks FFMUC jitsi-report after first two weeks
FFMUC jitsi-report after first two weeks
Annika Wickert
 
Freifunk Munich - How to scale Jitsi
Freifunk Munich - How to scale JitsiFreifunk Munich - How to scale Jitsi
Freifunk Munich - How to scale Jitsi
Annika Wickert
 
Bio routing - DKNOG9
Bio routing  - DKNOG9Bio routing  - DKNOG9
Bio routing - DKNOG9
Annika Wickert
 
Raspberry PI 4 Freifunk Offloader
Raspberry PI 4 Freifunk OffloaderRaspberry PI 4 Freifunk Offloader
Raspberry PI 4 Freifunk Offloader
Annika Wickert
 
FFMUC pkg-latest
FFMUC pkg-latestFFMUC pkg-latest
FFMUC pkg-latest
Annika Wickert
 

More from Annika Wickert (6)

Flow monitoring explained - From packet capture to data analysis - the use of...
Flow monitoring explained - From packet capture to data analysis - the use of...Flow monitoring explained - From packet capture to data analysis - the use of...
Flow monitoring explained - From packet capture to data analysis - the use of...
 
FFMUC jitsi-report after first two weeks
FFMUC jitsi-report after first two weeks FFMUC jitsi-report after first two weeks
FFMUC jitsi-report after first two weeks
 
Freifunk Munich - How to scale Jitsi
Freifunk Munich - How to scale JitsiFreifunk Munich - How to scale Jitsi
Freifunk Munich - How to scale Jitsi
 
Bio routing - DKNOG9
Bio routing  - DKNOG9Bio routing  - DKNOG9
Bio routing - DKNOG9
 
Raspberry PI 4 Freifunk Offloader
Raspberry PI 4 Freifunk OffloaderRaspberry PI 4 Freifunk Offloader
Raspberry PI 4 Freifunk Offloader
 
FFMUC pkg-latest
FFMUC pkg-latestFFMUC pkg-latest
FFMUC pkg-latest
 

Recently uploaded

Generating a custom Ruby SDK for your web service or Rails API using Smithy
Generating a custom Ruby SDK for your web service or Rails API using SmithyGenerating a custom Ruby SDK for your web service or Rails API using Smithy
Generating a custom Ruby SDK for your web service or Rails API using Smithy
g2nightmarescribd
 
Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...
Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...
Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...
UiPathCommunity
 
The Art of the Pitch: WordPress Relationships and Sales
The Art of the Pitch: WordPress Relationships and SalesThe Art of the Pitch: WordPress Relationships and Sales
The Art of the Pitch: WordPress Relationships and Sales
Laura Byrne
 
Designing Great Products: The Power of Design and Leadership by Chief Designe...
Designing Great Products: The Power of Design and Leadership by Chief Designe...Designing Great Products: The Power of Design and Leadership by Chief Designe...
Designing Great Products: The Power of Design and Leadership by Chief Designe...
Product School
 
Mission to Decommission: Importance of Decommissioning Products to Increase E...
Mission to Decommission: Importance of Decommissioning Products to Increase E...Mission to Decommission: Importance of Decommissioning Products to Increase E...
Mission to Decommission: Importance of Decommissioning Products to Increase E...
Product School
 
Kubernetes & AI - Beauty and the Beast !?! @KCD Istanbul 2024
Kubernetes & AI - Beauty and the Beast !?! @KCD Istanbul 2024Kubernetes & AI - Beauty and the Beast !?! @KCD Istanbul 2024
Kubernetes & AI - Beauty and the Beast !?! @KCD Istanbul 2024
Tobias Schneck
 
How world-class product teams are winning in the AI era by CEO and Founder, P...
How world-class product teams are winning in the AI era by CEO and Founder, P...How world-class product teams are winning in the AI era by CEO and Founder, P...
How world-class product teams are winning in the AI era by CEO and Founder, P...
Product School
 
Epistemic Interaction - tuning interfaces to provide information for AI support
Epistemic Interaction - tuning interfaces to provide information for AI supportEpistemic Interaction - tuning interfaces to provide information for AI support
Epistemic Interaction - tuning interfaces to provide information for AI support
Alan Dix
 
Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered Quality
Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered QualitySoftware Delivery At the Speed of AI: Inflectra Invests In AI-Powered Quality
Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered Quality
Inflectra
 
Neuro-symbolic is not enough, we need neuro-*semantic*
Neuro-symbolic is not enough, we need neuro-*semantic*Neuro-symbolic is not enough, we need neuro-*semantic*
Neuro-symbolic is not enough, we need neuro-*semantic*
Frank van Harmelen
 
GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...
GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...
GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...
James Anderson
 
AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...
AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...
AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...
Product School
 
To Graph or Not to Graph Knowledge Graph Architectures and LLMs
To Graph or Not to Graph Knowledge Graph Architectures and LLMsTo Graph or Not to Graph Knowledge Graph Architectures and LLMs
To Graph or Not to Graph Knowledge Graph Architectures and LLMs
Paul Groth
 
Accelerate your Kubernetes clusters with Varnish Caching
Accelerate your Kubernetes clusters with Varnish CachingAccelerate your Kubernetes clusters with Varnish Caching
Accelerate your Kubernetes clusters with Varnish Caching
Thijs Feryn
 
FIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdf
FIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdfFIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdf
FIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdf
FIDO Alliance
 
JMeter webinar - integration with InfluxDB and Grafana
JMeter webinar - integration with InfluxDB and GrafanaJMeter webinar - integration with InfluxDB and Grafana
JMeter webinar - integration with InfluxDB and Grafana
RTTS
 
LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...
LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...
LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...
DanBrown980551
 
FIDO Alliance Osaka Seminar: FIDO Security Aspects.pdf
FIDO Alliance Osaka Seminar: FIDO Security Aspects.pdfFIDO Alliance Osaka Seminar: FIDO Security Aspects.pdf
FIDO Alliance Osaka Seminar: FIDO Security Aspects.pdf
FIDO Alliance
 
Unsubscribed: Combat Subscription Fatigue With a Membership Mentality by Head...
Unsubscribed: Combat Subscription Fatigue With a Membership Mentality by Head...Unsubscribed: Combat Subscription Fatigue With a Membership Mentality by Head...
Unsubscribed: Combat Subscription Fatigue With a Membership Mentality by Head...
Product School
 
UiPath Test Automation using UiPath Test Suite series, part 4
UiPath Test Automation using UiPath Test Suite series, part 4UiPath Test Automation using UiPath Test Suite series, part 4
UiPath Test Automation using UiPath Test Suite series, part 4
DianaGray10
 

Recently uploaded (20)

Generating a custom Ruby SDK for your web service or Rails API using Smithy
Generating a custom Ruby SDK for your web service or Rails API using SmithyGenerating a custom Ruby SDK for your web service or Rails API using Smithy
Generating a custom Ruby SDK for your web service or Rails API using Smithy
 
Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...
Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...
Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...
 
The Art of the Pitch: WordPress Relationships and Sales
The Art of the Pitch: WordPress Relationships and SalesThe Art of the Pitch: WordPress Relationships and Sales
The Art of the Pitch: WordPress Relationships and Sales
 
Designing Great Products: The Power of Design and Leadership by Chief Designe...
Designing Great Products: The Power of Design and Leadership by Chief Designe...Designing Great Products: The Power of Design and Leadership by Chief Designe...
Designing Great Products: The Power of Design and Leadership by Chief Designe...
 
Mission to Decommission: Importance of Decommissioning Products to Increase E...
Mission to Decommission: Importance of Decommissioning Products to Increase E...Mission to Decommission: Importance of Decommissioning Products to Increase E...
Mission to Decommission: Importance of Decommissioning Products to Increase E...
 
Kubernetes & AI - Beauty and the Beast !?! @KCD Istanbul 2024
Kubernetes & AI - Beauty and the Beast !?! @KCD Istanbul 2024Kubernetes & AI - Beauty and the Beast !?! @KCD Istanbul 2024
Kubernetes & AI - Beauty and the Beast !?! @KCD Istanbul 2024
 
How world-class product teams are winning in the AI era by CEO and Founder, P...
How world-class product teams are winning in the AI era by CEO and Founder, P...How world-class product teams are winning in the AI era by CEO and Founder, P...
How world-class product teams are winning in the AI era by CEO and Founder, P...
 
Epistemic Interaction - tuning interfaces to provide information for AI support
Epistemic Interaction - tuning interfaces to provide information for AI supportEpistemic Interaction - tuning interfaces to provide information for AI support
Epistemic Interaction - tuning interfaces to provide information for AI support
 
Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered Quality
Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered QualitySoftware Delivery At the Speed of AI: Inflectra Invests In AI-Powered Quality
Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered Quality
 
Neuro-symbolic is not enough, we need neuro-*semantic*
Neuro-symbolic is not enough, we need neuro-*semantic*Neuro-symbolic is not enough, we need neuro-*semantic*
Neuro-symbolic is not enough, we need neuro-*semantic*
 
GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...
GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...
GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...
 
AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...
AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...
AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...
 
To Graph or Not to Graph Knowledge Graph Architectures and LLMs
To Graph or Not to Graph Knowledge Graph Architectures and LLMsTo Graph or Not to Graph Knowledge Graph Architectures and LLMs
To Graph or Not to Graph Knowledge Graph Architectures and LLMs
 
Accelerate your Kubernetes clusters with Varnish Caching
Accelerate your Kubernetes clusters with Varnish CachingAccelerate your Kubernetes clusters with Varnish Caching
Accelerate your Kubernetes clusters with Varnish Caching
 
FIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdf
FIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdfFIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdf
FIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdf
 
JMeter webinar - integration with InfluxDB and Grafana
JMeter webinar - integration with InfluxDB and GrafanaJMeter webinar - integration with InfluxDB and Grafana
JMeter webinar - integration with InfluxDB and Grafana
 
LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...
LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...
LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...
 
FIDO Alliance Osaka Seminar: FIDO Security Aspects.pdf
FIDO Alliance Osaka Seminar: FIDO Security Aspects.pdfFIDO Alliance Osaka Seminar: FIDO Security Aspects.pdf
FIDO Alliance Osaka Seminar: FIDO Security Aspects.pdf
 
Unsubscribed: Combat Subscription Fatigue With a Membership Mentality by Head...
Unsubscribed: Combat Subscription Fatigue With a Membership Mentality by Head...Unsubscribed: Combat Subscription Fatigue With a Membership Mentality by Head...
Unsubscribed: Combat Subscription Fatigue With a Membership Mentality by Head...
 
UiPath Test Automation using UiPath Test Suite series, part 4
UiPath Test Automation using UiPath Test Suite series, part 4UiPath Test Automation using UiPath Test Suite series, part 4
UiPath Test Automation using UiPath Test Suite series, part 4
 

FFMUC goes wild - Infrastructure recap 2020 #rc3

  • 1. FFMUC goes wild Tech talk at #rc3 28.12.2020
  • 2. awlnx ● Annika Wickert ● Senior Network Engineer ● Twitter @awlnx krombel ● Matthias Kesler ● IT Consultant ● Twitter @kr0mbel Who are we? pkoerner ● Peter Körner ● IT since CBM, 2C3, FF 6y, DL9HCZ, working @Red Hat ● Twitter @pkoerner81929
  • 3. FFMUC? • Freie Netze München e.V. seit 2014 • Community Freifunk München seit 2004 • No registration of nodes • Wifi • #FFMEET • DoH/DoT/DNSCrypt
  • 4. Jitsi to close the social gap during corona • An upcoming Freifunk Meeting was about to get canceled because of Corona • Many people especially schools seemed in need of an easy to use conference system • “Freifunk verbindet” • Christmas 2020
  • 5. FFMEET appeared in the press
  • 6. Technical challenges • Scaling (nginx, prosody etc) • Firefox a WebRTC nightmare • Running on nightly builds • Automation
  • 7. Many participants and supporters!
  • 8. Restart of Freie Netze München e.V. • FNMUC was kinda abandoned • We need an entity which can sign contracts and acquire money • Elections in July • Since then many new members, many actions, lots of ideas and high motivation
  • 9. AS212567 • IPv4: 5.1.66.0/24 + 185.150.99.0/24 • IPv6: 2001:678:e68::/48 + 2001:678:ed0::/48 • When we need to switch datacenters we keep the address space • We can multi-home much easier • More possible sponsors • We can join Internet Exchanges! #PeeringFamily • Abuse handling is done by FNMUC e.V.
  • 10. Preparing the new datacenter ● Pre-Installing everything possible ● Switching to Ubuntu 20.04 from Debian (mostly) stretch ● Run an overlay network for easier cross-site communication (Nebula) ● Much SaltStack code: https://github.com/freifunkMUC/ffmuc-salt-public
  • 14. Use more bandwidth! • New DC has a bigger uplink • Users cannot use it, because fastd does not perform very well • L2TP performs very good but has no encryption • We experimented with Wireguard before and were very happy with it
  • 15. Wireguard vs fastD • FastD is a single threaded userspace process • Wireguard runs in kernel space thus has to be multithreaded • Wireguard cannot transport Layer2 Protocols - B.A.T.M.A.N. is one ... • We need another encapsulation which solves this problem => VXLAN WireguardVXLANB.A.T.M.A.N.
  • 16. Gateways • Everything is automated with Saltstack • systemd-networkd takes care of all interfaces • 800 - 1000 Nodes per Gateway are easy • We run whole FFMUC on just two gateways
  • 17. We are pioneering much stuff • There was no systemd-networkd integration for B.A.T.M.A.N. => So we wrote it: https://github.com/systemd/systemd/pull/17252 • There was no firmware integration => So we wrote it: https://github.com/freifunk-gluon/community-packages/pull/6 • There was no daemon to accept wireguard keys => So we wrote it: https://github.com/freifunkMUC/wgkex
  • 18. How does it work? • Wireguard Peers on the gateways are created by wgkex • Allowed IP is derived from the publickey of the node • VXLAN Forwarding database entry are created by wgkex
  • 20. Debugging … Flamegraphs and Bugs • Wireguard performs well but we have too much load on our gateways. Why?
  • 21. Community • Freifunk Darmstadt and Freifunk Regensburg helped a lot during development of wgkex! • B.A.T.M.A.N. developers helped a lot during debugging the performance issue and created many bugfixes • Everything is opensource and available on Github https://github.com/freifunkMUC • More background and all fixes: https://ffmuc.net/freifunkmuc/2020/12/03/wireguard-firmware/
  • 22. So is it faster?
  • 23. Other Services • Chat for our Community (and people interested in Jitsi ;) ) https://chat.ffmuc.net • Public DoH/DoT/DNSCrypt resolver https://doh.ffmuc.net
  • 24. Encrypted DNS • As we appeared in c’t much growth the last month (link in appendix)
  • 27. Feedback, comments Wir freuen uns über jede konstruktive Kritik:
  • 29. We need members and supporters • We have monthly costs for data centers, IP space etc. • We have a association called Freie Netze München e.V. • We only have a few number of admins at the moment • New ideas christmas presents https://ffmuc.net/freifunkmuc/2020/12/12/weihnachtsaktion/ => We need more people! Sign up here: https://ffmuc.net/wiki/doku.php?id=ev:start “Das andere Weihnachts geschenk!”
  • 30. FFMUC at #rC3 • Jitsi/FFMUC Meet Raum 24/7: https://meet.ffmuc.net/ffmuc-rc3 • FFMUC Chat (Mattermost): https://chat.ffmuc.net/ • Wireguard background: https://ffmuc.net/freifunkmuc/2020/12/03/wireguard-firmware/ • FFMUC Wiki Knowledge Base: https://ffmuc.net/wiki/doku.php
  • 31. More links • Freifunk München Map: https://map.ffmuc.net • Freifunk München: https://ffmuc.net • Freifunk: https://freifunk.net • Freifunk Karte: https://freifunk-karte.de • RIPE Anchor: https://atlas.ripe.net/probes/6886/ • RIPE Stats: https://stat.ripe.net/as212567