{"$schema": "https://c3voc.de/schedule/schema.json", "generator": {"name": "pretalx", "version": "2025.1.0"}, "schedule": {"url": "https://pretalx.balticnog.org/bnog-2026/schedule/", "version": "0.11", "base_url": "https://pretalx.balticnog.org", "conference": {"acronym": "bnog-2026", "title": "BalticNOG 2026", "start": "2026-09-23", "end": "2026-09-24", "daysCount": 2, "timeslot_duration": "00:05", "time_zone_name": "Europe/Riga", "colors": {"primary": "#ba0a2f"}, "rooms": [{"name": "ROOM ALFA", "slug": "1-room-alfa", "guid": "adbbf364-b02f-556a-9e37-d3b9dcf870e6", "description": null, "capacity": 300}, {"name": "ROOM BETA", "slug": "2-room-beta", "guid": "cdeb2c64-6e74-59ea-84c4-f31135e659ad", "description": null, "capacity": 200}], "tracks": [], "days": [{"index": 1, "date": "2026-09-23", "day_start": "2026-09-23T04:00:00+03:00", "day_end": "2026-09-24T03:59:00+03:00", "rooms": {"ROOM ALFA": [{"guid": "40dae62f-461c-53a1-a022-6abe60687eea", "code": "3UGERE", "id": 41, "logo": null, "date": "2026-09-23T10:00:00+03:00", "start": "10:00", "duration": "00:15", "room": "ROOM ALFA", "slug": "bnog-2026-41-opening-speech", "url": "https://pretalx.balticnog.org/bnog-2026/talk/3UGERE/", "title": "Opening Speech", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "Opening remarks for BalticNOG 2026 in Riga. A short welcome covering this year's program, the four featured speakers, and the two hosts, followed by a look at who's in the room. Then two ways to take part over the next two days: the community wall and the social run. The talk closes on the people who made it happen and on how to join them.", "description": "", "recording_license": "", "do_not_record": false, "persons": [{"code": "QWZT78", "name": "Vincentas Grinius", "avatar": "https://pretalx.balticnog.org/media/avatars/QWZT78_b8QwiG0.jpg", "biography": "Vincentas Grinius is the Co-founder of IPXO and President of BalticNOG. With more than 15 years of experience in internet infrastructure, he has built a reputation as a leader in IP address management, network operations, and digital sustainability. Previously the CEO of Heficed, Vincentas now focuses on scaling IPXO\u2019s platform and driving innovation in IP monetization and compliance. As President of BalticNOG, he is dedicated to strengthening the internet community in the Baltic region through collaboration, knowledge sharing, and industry best practices.", "public_name": "Vincentas Grinius", "guid": "dba551ed-88d4-5535-9481-dad353988be5", "url": "https://pretalx.balticnog.org/bnog-2026/speaker/QWZT78/"}], "links": [], "feedback_url": "https://pretalx.balticnog.org/bnog-2026/talk/3UGERE/feedback/", "origin_url": "https://pretalx.balticnog.org/bnog-2026/talk/3UGERE/", "attachments": [{"title": "Opening slides in pdf", "url": "/media/bnog-2026/submissions/3UGERE/resources/BalticNOG_2026_opening_6J0enlG.pdf", "type": "related"}, {"title": "Opening slides in pptx", "url": "/media/bnog-2026/submissions/3UGERE/resources/BalticNOG_2026_opening_VnWBTDs.pptx", "type": "related"}]}, {"guid": "b166f086-aa70-5c05-8c16-d30a902b6532", "code": "VE9TUR", "id": 38, "logo": null, "date": "2026-09-23T10:15:00+03:00", "start": "10:15", "duration": "00:55", "room": "ROOM ALFA", "slug": "bnog-2026-38-next-generation-optics-for-scale-up-scale-out-and-scale-across", "url": "https://pretalx.balticnog.org/bnog-2026/talk/VE9TUR/", "title": "Next generation optics for Scale-Up, Scale-Out and Scale-Across", "subtitle": "", "track": null, "type": "Keynote", "language": "en", "abstract": "The extreme bandwidth demands of AI data centers are accelerating the development of new optics that are denser, more reliable, and more power efficient than the previous optics roadmap.  This talk will cover the AI optics roadmaps across the scale-up, scale-out and scale-across spectrum, and the implications for next generation switches, routers and optical line systems.", "description": "", "recording_license": "", "do_not_record": false, "persons": [{"code": "VGKATT", "name": "Andreas Bechtolsheim", "avatar": "https://pretalx.balticnog.org/media/avatars/VGKATT_U7wEQ9C.jpg", "biography": "Andreas \u201cAndy\u201d Bechtolsheim is Co-Founder and Chief Architect of Arista Networks. He is responsible for advanced AI, silicon and optics initiatives. Previously Andy was a Co-Founder and Chief System Architect at Sun Microsystems, responsible for next generation server, storage, and network architectures. He has been a founding member of the Open Compute Project (OCP) Board of Directors since 2011.\r\n\r\nAndy received a M.S. in Computer Engineering from Carnegie Mellon University in 1976 and was a doctoral student in Computer Engineering at Stanford University from 1977 to 1982. He has been honored with a Fulbright scholarship, the Stanford Entrepreneur Company of the year award, the Smithsonian Leadership Award for Innovation, the EY 2015 US Entrepreneur of the Year Award (together with Jayshree Ullal) and is a member of the National Academy of Engineering.", "public_name": "Andreas Bechtolsheim", "guid": "81afc43b-0a79-57d0-95e2-820a1ec74ad9", "url": "https://pretalx.balticnog.org/bnog-2026/speaker/VGKATT/"}], "links": [], "feedback_url": "https://pretalx.balticnog.org/bnog-2026/talk/VE9TUR/feedback/", "origin_url": "https://pretalx.balticnog.org/bnog-2026/talk/VE9TUR/", "attachments": []}, {"guid": "b57814ae-d9f9-5819-befe-003514e73db4", "code": "L73BSR", "id": 29, "logo": null, "date": "2026-09-23T11:45:00+03:00", "start": "11:45", "duration": "00:55", "room": "ROOM ALFA", "slug": "bnog-2026-29-project-jake", "url": "https://pretalx.balticnog.org/bnog-2026/talk/L73BSR/", "title": "Project Jake", "subtitle": "", "track": null, "type": "Keynote", "language": "en", "abstract": "Project Jake is a fresh approach to collection and disclosure of registration data.  It provides support for a wide variety of policies, distributed operation, and modern authentication and authorization processes.  It uses RDAP and RFC 9560 protocols with substantial extensions.", "description": "", "recording_license": "", "do_not_record": false, "persons": [{"code": "ECK38G", "name": "Steve Crocker", "avatar": "https://pretalx.balticnog.org/media/avatars/ECK38G_hyZZNix.jpg", "biography": "Steve Crocker is CEO and President of Edgemoor Research Institute (ERI). ERI facilitates the development and analyses of proposed and existing policies regarding the collection and access to registration data, including personally identifiable information. ERI serves the public interest by creating and promulgating concepts and urgently needed tools that provide precise specifications of data collection, labeling, and access. ERI\u2019s flagship Project Jake is a practical framework for Internet Domain Name registration data disclosure.\r\n\r\nSteve Crocker is an Internet pioneer and computer scientist with experience in academia, government, and industry. He earned his B.A. in mathematics and Ph.D. in computer science from UCLA. He managed research at DARPA in the early 1970s, founded the computer science research laboratory at The Aerospace Corporation in 1981, and co-founded CyberCash, Inc.  He is an ACM Fellow, and his honors include the 2002 IEEE Internet Award, an honorary doctorate from the University of San Mart\u00edn des Porres in Lima, Per\u00fa, the 2018 Strowger Award, J. Warren McClure School, Ohio University, founding membership in the Internet Hall of Fame Pioneers, and both the Jonathan B. Postel Award and Lifetime Achievement Award from the Internet Society.  \r\nDr. Crocker has been involved in the Internet since its inception. In the late 1960s and early 1970s, while he was a graduate student at UCLA, he was part of the team that developed the protocols for the ARPANET and laid the foundation for today\u2019s Internet. He organized the Network Working Group, which was the forerunner of the modern Internet Engineering Task Force (IETF) and initiated the Request for Comment (RFC) series of notes through which protocol designs are documented and shared. \r\n\r\nSteve Crocker held leadership positions in ICANN starting 2002, first as founding chair of ICANN\u2019s Security and Stability Committee (SSAC).  He served on the ICANN Board from 2003 to 2017, first as a liaison from SSAC and then nine years as a director. For the last six-and-a-half of those years, he chaired the board, overseeing the recruiting of two CEOs and the transition in 2016 to independence from the NTIA agreement.", "public_name": "Steve Crocker", "guid": "e0cafa4b-3492-573d-9512-7e8ffcd412f4", "url": "https://pretalx.balticnog.org/bnog-2026/speaker/ECK38G/"}], "links": [], "feedback_url": "https://pretalx.balticnog.org/bnog-2026/talk/L73BSR/feedback/", "origin_url": "https://pretalx.balticnog.org/bnog-2026/talk/L73BSR/", "attachments": [{"title": "Project Jake Keynote presentation", "url": "/media/bnog-2026/submissions/L73BSR/resources/Project_Jake_2026-09-13_zg7djTC.pdf", "type": "related"}]}, {"guid": "9dcd5b95-e1a2-5b8a-9957-a28c25bc2fac", "code": "P9DYEB", "id": 19, "logo": null, "date": "2026-09-23T14:00:00+03:00", "start": "14:00", "duration": "00:25", "room": "ROOM ALFA", "slug": "bnog-2026-19-keeping-the-network-honest-design-models-drift-and-reconciliation", "url": "https://pretalx.balticnog.org/bnog-2026/talk/P9DYEB/", "title": "Keeping the Network Honest: Design Models, Drift, and Reconciliation", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "Design-driven automation treats the design of a network \u2014 its topology, roles, relationships, and constraints \u2014 as an explicit model that exists independently of any device's running configuration. That model becomes the thing you reason about: the source of intent that configuration, validation, and change all refer back to.\r\n\r\nThis talk looks at what that means once you're operating a real network, not sketching one. We'll walk through the lifecycle: expressing intent as a design, turning it into configuration, and (the hard part) keeping the two in agreement as the network drifts, as tickets land, and as people make changes out-of-band. We'll dig into how drift is detected and interpreted, why reconciliation is harder than pushing config, and how a design model changes the way operators handle refactoring and unplanned change.\r\n\r\nThe same property that makes this work for humans, an explicit statement of intent to check reality against, is also what keeps the next wave of automation honest, whether that's a script or something smarter. We'll touch on that, but the focus stays on the mechanics operators live with today.\r\n\r\nThroughout, we'll ground the concepts in real declarative provisioning systems, including open-source NetBox, using them as concrete examples of the patterns and trade-offs: where design-driven approaches pay off, and where they still struggle in production.\r\n\r\nYou'll leave with a clear mental model of design-driven automation, a realistic view of the reconciliation problem, and a sharper sense of where these approaches earn their place in day-to-day operations.", "description": "Intended for network engineers and operators, not just automation specialists. No prior familiarity with any specific tooling is assumed. Examples are drawn from open-source NetBox, but the talk is about the pattern: modelling intent, detecting drift, and reconciling the two, rather than any one product. The final section is a practical framing of how AI-assisted change can be introduced safely on top of a design model.", "recording_license": "", "do_not_record": false, "persons": [{"code": "ZDLWV7", "name": "Mark Robert Coleman", "avatar": "https://pretalx.balticnog.org/media/avatars/ZDLWV7_frf70kM.jpeg", "biography": "Mark Coleman is co-founder and Chief Product Officer of NetBox Labs, the company behind NetBox, the widely used open-source network source of truth. He works across product strategy and technical architecture, focused on how operators model their networks and turn that model into reliable, automated change. He has spoken on various automation topics across the world.", "public_name": "Mark Robert Coleman", "guid": "a88d81b1-bc52-55fd-8db4-81db9ac1b8d9", "url": "https://pretalx.balticnog.org/bnog-2026/speaker/ZDLWV7/"}], "links": [], "feedback_url": "https://pretalx.balticnog.org/bnog-2026/talk/P9DYEB/feedback/", "origin_url": "https://pretalx.balticnog.org/bnog-2026/talk/P9DYEB/", "attachments": [{"title": "Slides V1 (expect edits over the weekend)", "url": "/media/bnog-2026/submissions/P9DYEB/resources/Keeping_the_Network_Hones_2D8ajKM.pdf", "type": "related"}]}, {"guid": "b2345002-6034-54b3-9440-7d3b4dae0b08", "code": "AW7ZSZ", "id": 20, "logo": null, "date": "2026-09-23T14:30:00+03:00", "start": "14:30", "duration": "00:55", "room": "ROOM ALFA", "slug": "bnog-2026-20-ai-and-operators-tool-traffic-or-threat", "url": "https://pretalx.balticnog.org/bnog-2026/talk/AW7ZSZ/", "title": "AI and Operators: Tool, Traffic or Threat?", "subtitle": "", "track": null, "type": "Panel", "language": "en", "abstract": "AI is already changing how networks are operated, how traffic is generated and where infrastructure is built. But for network operators, the real question is not whether AI matters. It is where the value will move. This panel looks at AI from three angles: as an operational tool, as a new driver of traffic and infrastructure, and as a potential threat to the traditional role of the operator.", "description": "AI is entering the operator industry from several directions at once.\r\nIt can assist engineers, troubleshoot networks and increasingly take operational actions. At the same time, AI workloads are reshaping compute, interconnection and traffic demand. Beyond the technical impact lies a larger question: does AI strengthen the position of network operators, or make connectivity an even more invisible commodity?\r\nThe discussion brings together three different perspectives: Andrian Visnevschi on AI and network operations, Alissa S\u00f5tsjova of Tele2 Eesti on connectivity and interconnection, and Zac Smith on infrastructure built for an increasingly AI-driven Internet.", "recording_license": "", "do_not_record": false, "persons": [{"code": "9WZZQV", "name": "Alfredo Giordano", "avatar": "https://pretalx.balticnog.org/media/avatars/9WZZQV_YaKLPxW.png", "biography": "Alfredo Giordano is founder and CEO of Warian, an European managed infrastructure provider working across networks, cloud and AI. An engineer by training, he has more than twenty years of international experience in network design, operations and the development of Internet service providers. He is Vice President of OpenAccess Italia and a board member of NaMeX. His current work focuses on carrier-grade infrastructure, interconnection, digital sovereignty and the practical adoption of AI by network operators. Active in the European networking community, he contributes to industry discussions on resilience, regulation and the evolution of operators beyond connectivity. In 2026, he was awarded with the America's Innovation prize from the Italy-USA cooperation Foundation.", "public_name": "Alfredo Giordano", "guid": "f803fd2e-a882-53dd-a8b9-2c75cb0273be", "url": "https://pretalx.balticnog.org/bnog-2026/speaker/9WZZQV/"}, {"code": "ZAT9KM", "name": "Andrian Visnevschi", "avatar": "https://pretalx.balticnog.org/media/avatars/ZAT9KM_ScgIkEI.jpg", "biography": "Andrian Visnevschi is the founder, CEO and CTO of ITcare, a managed NOC and network engineering company working with ISPs, data center operators and hosting providers across North America and Europe. He holds JNCIE-SP #2975 and has spent more than 15 years in service provider networking, starting in hands-on routing and switching operations and moving through architecture and integration work on IP/MPLS backbones, EVPN-VXLAN fabrics, multicast VPN deployments and network automation.\r\n\r\nFor the past few years his team has been building and running an AI NetOps assistant inside ITcare's own NOC, which is the subject of this talk. He is a co-founder of MDNOG, the Moldova Network Operators Group.", "public_name": "Andrian Visnevschi", "guid": "9622ebbb-5bdb-5f58-a056-7ddbbb40a5f5", "url": "https://pretalx.balticnog.org/bnog-2026/speaker/ZAT9KM/"}, {"code": "HTHFQB", "name": "Zachary Smith", "avatar": "https://pretalx.balticnog.org/media/avatars/HTHFQB_xZ9v0mk.jpg", "biography": "Zachary Smith is the CEO of Datum, where he focuses on building the open, interconnected infrastructure powering the next generation of cloud and AI platforms. A veteran of the internet infrastructure industry, Zachary has spent over two decades building Internet infrastructure and the software that powers it. Prior to leading Datum, he co-founded Packet (acquired by Equinix) and was an early leader of Linux hosting innovator, Voxel dot Net.\r\n\r\nZachary serves on the Board of Directors of Nexcess, Wasabi Technologies, 1NCE and the Danish 1st Division soccer club, Akademisk Boldklub.", "public_name": "Zachary Smith", "guid": "3b7ae0a2-5eb0-5409-8f15-001125b42424", "url": "https://pretalx.balticnog.org/bnog-2026/speaker/HTHFQB/"}, {"code": "YA7W9B", "name": "Alissa S\u00f5tsjova", "avatar": "https://pretalx.balticnog.org/media/avatars/YA7W9B_R892YSX.jpg", "biography": "Alissa is an Enterprise Sales Manager at Tele2 Eesti, managing telecom projects and connectivity solutions including Mobile and Internet Communication, IP transit, Ethernet, and other transport services. She focuses on identifying new business opportunities and bridging commercial strategy with technical network Delivery.", "public_name": "Alissa S\u00f5tsjova", "guid": "c17b1074-1365-55b8-9bdd-43c017558400", "url": "https://pretalx.balticnog.org/bnog-2026/speaker/YA7W9B/"}], "links": [], "feedback_url": "https://pretalx.balticnog.org/bnog-2026/talk/AW7ZSZ/feedback/", "origin_url": "https://pretalx.balticnog.org/bnog-2026/talk/AW7ZSZ/", "attachments": []}, {"guid": "249be45e-6c31-5224-92a9-40cd0f1a027b", "code": "ENWYQA", "id": 22, "logo": null, "date": "2026-09-23T16:00:00+03:00", "start": "16:00", "duration": "00:25", "room": "ROOM ALFA", "slug": "bnog-2026-22-getting-1-tbps-from-an-x86-server", "url": "https://pretalx.balticnog.org/bnog-2026/talk/ENWYQA/", "title": "Getting 1+ Tbps from an x86 server", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "This presentation describes the journey of achieving more than 1 Tbps throughput on a single x86 server by evolving a virtualized Broadband Network Gateway (vBNG). It walks through practical lessons learned while scaling from early multi-VM designs to a high-performance, single virtual machine capable of high packet rates. The talk covers the role of SR-IOV and Intel DPDK, extensive hardware tuning, deep code-level optimizations, and major redesigns driven by CPU cache behavior and PCIe bottlenecks. Real-world performance results highlight how systematic optimization, modern hardware, and iterative engineering can unlock massive throughput gains on commodity servers.", "description": "", "recording_license": "", "do_not_record": false, "persons": [{"code": "JJTA7B", "name": "Branimir Rajtar", "avatar": "https://pretalx.balticnog.org/media/avatars/JJTA7B_CQ1r8iU.jpg", "biography": "Branimir Rajtar is the CTO and co-founder of 5\u00d79 Networks, where he focuses on the design and development of software-based broadband networking platforms. He has worked on virtualized BNG solutions and network automation for more than a decade, with a particular interest in high-performance packet processing and scalable network architectures. Branimir is also active in the network operator community as the chair of NOG.HR, the Croatian Network Operator Group, helping organize technical events and knowledge sharing among network engineers.", "public_name": "Branimir Rajtar", "guid": "f8ff8df3-d5a3-5127-850c-940a484fb00c", "url": "https://pretalx.balticnog.org/bnog-2026/speaker/JJTA7B/"}], "links": [], "feedback_url": "https://pretalx.balticnog.org/bnog-2026/talk/ENWYQA/feedback/", "origin_url": "https://pretalx.balticnog.org/bnog-2026/talk/ENWYQA/", "attachments": [{"title": "Slides for my talk", "url": "/media/bnog-2026/submissions/ENWYQA/resources/BalticNOG_1Tbps_BranimirR_QkkATgZ.pdf", "type": "related"}]}, {"guid": "285c5aaf-6e21-56d6-a5a4-23ddeaff429e", "code": "MQNBVF", "id": 18, "logo": null, "date": "2026-09-23T16:30:00+03:00", "start": "16:30", "duration": "00:25", "room": "ROOM ALFA", "slug": "bnog-2026-18-how-ietf-and-swisscom-transforms-network-operation-in-the-age-of-ai", "url": "https://pretalx.balticnog.org/bnog-2026/talk/MQNBVF/", "title": "How IETF and Swisscom transforms Network Operation in the age of AI", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "Today's networks are highly virtualized large distributed systems. With network observability we monitor holistically by incorporating all 3 network planes and their dependencies. For AIOps we require network data done right. Data taxonomy, schema and semantics being preserved and ready in real-time at the Data Mesh.\r\n\r\nIn this session I describe the relevance and differences between IPFIX, BMP and YANG-Push and its integration into Message Brokers for next generation Network Analytics applications and the differences between Data Lake and Data Mesh.\r\n\r\nI demonstrate with a real-life Network Incident Postmortem how Network Anomaly Detection is applied at Swisscom and show how symptom ontology is derived, where Knowledge Graphs will help us to obtain a statistical view, and why we intend to automate the incident and problem process by leveraging AI capabilities.\r\n\r\nFurther, I will venture into the importance of network vendor, operator and academia collaboration in innovation and standards, and outline current innovation activities at the IETF NMOP working group.", "description": "Thomas Graf, Distinguished Network Engineer and Network Analytics Architect at Swisscom. Stuck with service providers since 1997. Rediscovered networks in 2015 with Network Analytics. The backseat driver of the Swisscom Daisy team with network, software and data engineering enthusiasts recently expressed themselves to feel like belonging to a startup. Authoring next generation data collection protocols in NMOP, GROW, OPSAWG and NETCONF working groups at IETF. Chairing IPPM (IP Performance measurement) working group and IP Performance Directorate at IETF.\r\n\r\nhttps://datatracker.ietf.org/person/thomas.graf@swisscom.com\r\nhttps://www.linkedin.com/in/networkanalytics-thomasgraf/", "recording_license": "", "do_not_record": false, "persons": [{"code": "9XKADA", "name": "Thomas Graf", "avatar": "https://pretalx.balticnog.org/media/avatars/9XKADA_JH6WWXI.jpg", "biography": "Thomas Graf, Distinguished Network Engineer and Network Analytics Architect at Swisscom. Stuck with service providers since 1997. Rediscovered networks in 2015 with Network Analytics. The backseat driver of the Swisscom Daisy team with network, software and data engineering enthusiasts recently expressed themselves to feel like belonging to a startup. Authoring next generation data collection protocols in NMOP, GROW, OPSAWG and NETCONF working groups at IETF. Chairing IPPM  (IP Performance measurement) working group and IP Performance Directorate at IETF.\r\n\r\nhttps://datatracker.ietf.org/person/thomas.graf@swisscom.com\r\nhttps://www.linkedin.com/in/networkanalytics-thomasgraf/", "public_name": "Thomas Graf", "guid": "5cd6ddfc-2c1d-5064-b0c7-753667e0ecfd", "url": "https://pretalx.balticnog.org/bnog-2026/speaker/9XKADA/"}], "links": [], "feedback_url": "https://pretalx.balticnog.org/bnog-2026/talk/MQNBVF/feedback/", "origin_url": "https://pretalx.balticnog.org/bnog-2026/talk/MQNBVF/", "attachments": [{"title": "How IETF and Swisscom transforms Network Operation in the age of AI", "url": "/media/bnog-2026/submissions/MQNBVF/resources/How_IETF_and_Swisscom_tra_EWPn9fz.pdf", "type": "related"}]}, {"guid": "16d02622-291d-5fec-a628-32ead9e88efc", "code": "X7ZZUS", "id": 36, "logo": null, "date": "2026-09-23T17:00:00+03:00", "start": "17:00", "duration": "00:25", "room": "ROOM ALFA", "slug": "bnog-2026-36-expanding-routing-visibility-at-ixps-with-bmp", "url": "https://pretalx.balticnog.org/bnog-2026/talk/X7ZZUS/", "title": "Expanding Routing Visibility at IXPs with BMP", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "Route-server looking glasses already provide valuable visibility into routing at Internet Exchange Points (IXPs). They typically collect data either by querying route-server software directly, as Alice Looking Glass does, or through dedicated BGP monitoring sessions. These tools help operators and participants inspect advertised prefixes, troubleshoot connectivity, and better understand route-server behavior.\r\n\r\nIn this presentation, we explore BMP as a complementary approach to monitoring BGP at IXPs. BMP can expose routes before and after policy application, including routes that are filtered or not selected as best paths, while also reporting peer and session state. BIRD and FRRouting can export BMP data when operating as route servers, although their current implementations have limitations and do not expose every standardized BMP view.\r\n\r\nWe then present the new bgproutes.io IXP Explorer. By combining BMP data from route servers with routing data contributed by IXP participants, it provides near-real-time and historical visibility into routes learned over both route-server and bilateral BGP sessions. The platform enriches these data with RPKI route-origin validation (ROV) and ASPA validation results. The data are openly accessible through the IXP Explorer dashboard and the bgproutes.io public API, enabling both interactive exploration and programmatic analysis.", "description": "", "recording_license": "", "do_not_record": false, "persons": [{"code": "BLSQYR", "name": "Thomas Holterbach", "avatar": "https://pretalx.balticnog.org/media/avatars/BLSQYR_RQdK5UX.jpeg", "biography": "Thomas Holterbach is a computer networks researcher who is currently building bgproutes.io, a platform for collecting, monitoring, and analysing BGP routing data. He received his PhD from ETH Zurich in 2021 and subsequently worked as a postdoctoral researcher at the University of Strasbourg and Georgia Tech. His research focuses on Internet routing, BGP monitoring, network measurement, and routing security. In 2024, he received the ACM SIGCOMM Best Paper Award. He was also a 2023 MANRS Ambassador.", "public_name": "Thomas Holterbach", "guid": "896d7c1c-fee3-5338-8dcd-6d7065390d05", "url": "https://pretalx.balticnog.org/bnog-2026/speaker/BLSQYR/"}], "links": [], "feedback_url": "https://pretalx.balticnog.org/bnog-2026/talk/X7ZZUS/feedback/", "origin_url": "https://pretalx.balticnog.org/bnog-2026/talk/X7ZZUS/", "attachments": [{"title": "Final slide deck", "url": "/media/bnog-2026/submissions/X7ZZUS/resources/BalticNOG_2026_VjJJgdl.pdf", "type": "related"}]}], "ROOM BETA": [{"guid": "51a7e03a-fc4e-53ee-abab-7e25f809d6a3", "code": "ETQ7T7", "id": 33, "logo": null, "date": "2026-09-23T14:00:00+03:00", "start": "14:00", "duration": "00:25", "room": "ROOM BETA", "slug": "bnog-2026-33-overdependence-on-ai-what-could-go-wrong", "url": "https://pretalx.balticnog.org/bnog-2026/talk/ETQ7T7/", "title": "Overdependence on AI: What could go wrong?", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "Overdependence on AI: What could go wrong?", "description": "Overdependence on AI: What could go wrong?", "recording_license": "", "do_not_record": false, "persons": [{"code": "DF8KUF", "name": "Kirils Solovjovs", "avatar": "https://pretalx.balticnog.org/media/avatars/DF8KUF_9Yhnb5q.jpg", "biography": "Kirils Solovjovs is a privacy activist and Latvia's leading white-hat hacker. He began programming at age 7, and by grade 9 was already writing machine code directly in a hex editor during lunch breaks. His hobby is asking \"what are you gonna do with that piece of information about me?\" everywhere every time.\r\nHe is the author of the jailbreak tool for MikroTik RouterOS and played a pivotal role in developing e-Saeima, the world's first fully remote legislative system used by the Latvian Parliament. Today, Kirils serves as lead researcher at Possible Security.", "public_name": "Kirils Solovjovs", "guid": "807004de-f993-5247-936f-cfa9313b0198", "url": "https://pretalx.balticnog.org/bnog-2026/speaker/DF8KUF/"}], "links": [], "feedback_url": "https://pretalx.balticnog.org/bnog-2026/talk/ETQ7T7/feedback/", "origin_url": "https://pretalx.balticnog.org/bnog-2026/talk/ETQ7T7/", "attachments": [{"title": "\u201cOverdependence on AI: What could go wrong?\u201d \u2013 Kirils Solovjovs", "url": "/media/bnog-2026/submissions/ETQ7T7/resources/bn26-sep_PonUCZp.pdf", "type": "related"}]}, {"guid": "e916c571-b48a-52a9-866a-e60fb449b5c7", "code": "BPWJNX", "id": 13, "logo": null, "date": "2026-09-23T16:00:00+03:00", "start": "16:00", "duration": "00:25", "room": "ROOM BETA", "slug": "bnog-2026-13-the-infinite-ledger-tracking-the-evolution-politics-and-future-of-internet-number-resources", "url": "https://pretalx.balticnog.org/bnog-2026/talk/BPWJNX/", "title": "The Infinite Ledger: Tracking the Evolution, Politics, and Future of Internet Number Resources", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "Every connection, routing decision, and network boundary relies on a finite set of identifiers: IPv4, IPv6, and ASNs. But how did a research experiment\u2019s addressing scheme scale to support billions of global users? This presentation will show the remarkable journey of Internet Number Resources from the early, informal days over the creation of the Regional Internet Registry (RIR) system until recent commercial developments. We will explore the critical milestones that shaped internet governance, including the exhaustion of IPv4 space, the market-driven rise of IP transfers and leasing, and the ongoing transition to IPv6. Finally, we will look ahead at the modern challenges facing the registry ecosystem, focusing on data accuracy, transparency, and the evolving geopolitical pressures on internet infrastructure.", "description": "I plan to cover\r\n- The origins of the IANA function, early block allocations, and the transition from a single ledger to the distributed RIR framework.\r\n- The reality of IPv4 depletion, the emergence of secondary transfer markets, and the administrative shifts required to document legacy space and leasing practices.\r\n- The current situation of IPv4 and IPv6 deployment, the critical push for registry data quality, and how transparency safeguards the Internet ecosystem", "recording_license": "", "do_not_record": false, "persons": [{"code": "K98L8P", "name": "Marco Schmidt", "avatar": "https://pretalx.balticnog.org/media/avatars/K98L8P_6ajlInA.jpg", "biography": "Marco Schmidt is the Manager of Registration Services at the RIPE NCC. He is responsible for overseeing the registration and maintenance of Internet number resources in the RIPE NCC's service region. He also manages the implementation of accepted policies in RIPE NCC procedures and operations.\r\n\r\nMarco first joined the RIPE NCC as an IP Resource Analyst (IPRA) in the Registry Services department, where he worked for five years. In that role, he gained valuable experience in evaluating IPv4, IPv6 and Autonomous System Number requests while providing support to the RIPE NCC membership. Later, he became the RIPE NCC's Policy Development Officer. In this position, he supported and drove the RIPE community's Policy Development Processes (PDP) both externally and internally.", "public_name": "Marco Schmidt", "guid": "b2cc6df8-fe6c-5a6d-bfff-89ef7059cb66", "url": "https://pretalx.balticnog.org/bnog-2026/speaker/K98L8P/"}], "links": [], "feedback_url": "https://pretalx.balticnog.org/bnog-2026/talk/BPWJNX/feedback/", "origin_url": "https://pretalx.balticnog.org/bnog-2026/talk/BPWJNX/", "attachments": [{"title": "Tracking the Evolution, Politics, and Future of Internet Number Resources", "url": "/media/bnog-2026/submissions/BPWJNX/resources/The_Infinite_Ledger_1_eCkgwKn.pdf", "type": "related"}]}, {"guid": "ded72dc6-35bd-5ee4-beb2-987021b5da05", "code": "GRYMVJ", "id": 6, "logo": null, "date": "2026-09-23T16:30:00+03:00", "start": "16:30", "duration": "00:25", "room": "ROOM BETA", "slug": "bnog-2026-6-fortinet-secure-sd-wan-with-advpn-2-0-dynamic-and-scalable-deployments", "url": "https://pretalx.balticnog.org/bnog-2026/talk/GRYMVJ/", "title": "Fortinet Secure SD-WAN with ADVPN 2.0: dynamic and scalable deployments", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "Fortinet Secure SD-WAN combined with ADVPN enables dynamic, scalable, and secure connectivity across distributed environments, including branch offices, data centers, and cloud. By leveraging on-demand shortcut tunnels and intelligent path selection, organizations can optimize traffic flows regardless of underlay transport.\r\n \r\nThis session demonstrates how template-based deployment and automation allow rapid rollout of hundreds of sites within hours rather than months, while maintaining consistent security and performance.", "description": "", "recording_license": "", "do_not_record": false, "persons": [{"code": "TNGXA3", "name": "Braijens Staskevics", "avatar": "https://pretalx.balticnog.org/media/avatars/TNGXA3_mgmiuRG.jpeg", "biography": "Systems Engineer with hands-on experience in designing and deploying scalable, secure SD-WAN solutions. Skilled in network security and infrastructure optimization, with a strong focus on delivering reliable and efficient architectures. Passionate about using technology to improve everyday life and drive practical innovation.", "public_name": "Braijens Staskevics", "guid": "bcebc7a7-6cbe-554c-b0fa-c9b411996d7a", "url": "https://pretalx.balticnog.org/bnog-2026/speaker/TNGXA3/"}], "links": [], "feedback_url": "https://pretalx.balticnog.org/bnog-2026/talk/GRYMVJ/feedback/", "origin_url": "https://pretalx.balticnog.org/bnog-2026/talk/GRYMVJ/", "attachments": [{"title": "Fortinet SD-WAN", "url": "/media/bnog-2026/submissions/GRYMVJ/resources/Fortinet-SD-WAN_YXb0gUL.pdf", "type": "related"}]}, {"guid": "a0f6abf6-56ff-5b0d-ad57-dc0f261bba7f", "code": "JQJS8N", "id": 31, "logo": null, "date": "2026-09-23T17:00:00+03:00", "start": "17:00", "duration": "00:25", "room": "ROOM BETA", "slug": "bnog-2026-31-optical-foundations-for-ip-engineers-from-fiber-basics-to-cwdm-dwdm-and-link-budgeting", "url": "https://pretalx.balticnog.org/bnog-2026/talk/JQJS8N/", "title": "Optical Foundations for IP Engineers: From Fiber Basics to CWDM/DWDM and Link Budgeting", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "IP engineers still view transceivers as plug & forget - something that just converts electrical to optical signal and vice versa. This talk provides a concise introduction to essential optical fundamentals for IP networking professionals, covering topics such as single-mode and multi-mode fiber and their structural and operational differences, common connector types and their usage, and a practical look at optical losses. In particular, it explains how attenuation accumulates across fibers, connectors, and splices, and how to perform optical link calculations and budgeting to ensure sufficient transmission margins. The talk also introduces wavelength-division multiplexing technologies, CWDM and DWDM, explaining their characteristics, channel spacing, use cases, and relevance in modern packet-optical networks. Each topic is illustrated with typical failure cases from transceiver support, such as single-mode optics on multi-mode fiber, contaminated MPO connectors, mismatched UPC and APC polish, and CWDM links limited by dispersion rather than attenuation.", "description": "", "recording_license": "", "do_not_record": false, "persons": [{"code": "PFE98N", "name": "Andreas Glatz", "avatar": "https://pretalx.balticnog.org/media/avatars/PFE98N_ne4Bp1H.jpg", "biography": "Andreas Glatz has been working in optical networking since 2022. He started out in pre-sales engineering for DWDM transport systems, spending around two years working with customers on optical transport designs and solution scoping. He then moved into transceiver support and has been a Technical Support Specialist for about a year, today at FLEXOPTIX in Darmstadt. His work covers customer support for transceivers and fiber optics, compatibility testing of optical modules against different network devices, and technical documentation.", "public_name": "Andreas Glatz", "guid": "8f281e67-98ff-500b-88b8-2ee2a9ddfdea", "url": "https://pretalx.balticnog.org/bnog-2026/speaker/PFE98N/"}], "links": [], "feedback_url": "https://pretalx.balticnog.org/bnog-2026/talk/JQJS8N/feedback/", "origin_url": "https://pretalx.balticnog.org/bnog-2026/talk/JQJS8N/", "attachments": [{"title": "BalticNOG_2026_Optical Foundations for IP Engineers_Andreas_Glatz_final", "url": "/media/bnog-2026/submissions/JQJS8N/resources/BalticNOG_2026_Optical_Fo_HBFucQX.pdf", "type": "related"}]}]}}, {"index": 2, "date": "2026-09-24", "day_start": "2026-09-24T04:00:00+03:00", "day_end": "2026-09-25T03:59:00+03:00", "rooms": {"ROOM ALFA": [{"guid": "5bb78119-b590-582e-be03-78c29a55e102", "code": "G7UCNM", "id": 15, "logo": null, "date": "2026-09-24T09:30:00+03:00", "start": "09:30", "duration": "00:55", "room": "ROOM ALFA", "slug": "bnog-2026-15-polar-connect-opportunities-with-the-new-arctic-connectivity-corridor", "url": "https://pretalx.balticnog.org/bnog-2026/talk/G7UCNM/", "title": "Polar Connect: Opportunities with the New Arctic Connectivity Corridor", "subtitle": "", "track": null, "type": "Keynote", "language": "en", "abstract": "Europe\u2019s digital infrastructure evolves to meet growing demands for resilience and digital sovereignty, to ensure resources for AI, cloud computing, research, and secure international connectivity, the importance of geographically diverse network routes has never been more important. The Polar Connect Initiative is aiming to establish a resilient, high-capacity digital backbone through the Central Arctic Ocean, providing secure and sovereign connectivity between Europe, North America and East Asia, along the shortest viable route. \r\nThe Arctic may seem geographically distant from the Baltic region, however the Polar Connect submarine fibre cable route presents significant benefits for Northern Europe backbone network development. This new connectivity through the Arctic region positions the Nordic and Baltic countries as an international digital gateway between Europe and East Asia, creating additional opportunities for traffic exchange and interconnection, increase resilience for existing backbone networks, and support future growth opportunities for data centres, cloud services, and research infrastructure.\r\nThis presentation will provide an update on the latest progress of the Polar Connect Initiative, including pre-marine surveys from the latest mission of summer 2026, technical feasibility studies, and the level of international collaboration required to achieve this one-of-a kind project. The talk will also map how the initiative fits within the broader European strategy for digital resilience, the Cable Projects of European Interest (CPEI), and the Digital Global Gateway.\r\nRather than viewing Polar Connect as yet another submarine fibre cable, the presentation will focus on the opportunities for a new strategic layer of European digital infrastructure and what this means for operators, carriers, and infrastructure providers across the Baltic and Nordic region.", "description": "This Polar Connect Initiative presentation will provide an update on the latest progress, including pre-marine surveys in the Central Arctic Ocean, technical feasibility studies, stakeholder engagement, including building strong international collaboration.\r\nSpecial attention will be given to the opportunities and benefits for network operators, including:\r\n- strengthening resilience at the northern edge of European networks;\r\n- opportunities for new backbone and backhaul infrastructure in Northern Europe;\r\n- the role of carrier-neutral interconnection and open access infrastructure;\r\n- evolving traffic patterns driven by AI, hyperscalers, and high-performance computing;\r\n- research and education requirements alongside commercial connectivity;\r\n- Arctic infrastructure as an enabler both of new route, and future scientific sensing and environmental monitoring.\r\nThe presentation invites for discussion on how the Baltic and Nordic networking community can help in developing the next generation of resilient, trusted, and globally connected infrastructure for Northern Europe.", "recording_license": "", "do_not_record": false, "persons": [{"code": "R8DAXZ", "name": "Ieva Mura\u0161kien\u0117", "avatar": "https://pretalx.balticnog.org/media/avatars/R8DAXZ_T4tbTnf.png", "biography": "Ieva is Strategy and Policy Officer at NORDUnet and a member of the Polar Connect Executive Team, contributing to one of Europe\u2019s most ambitious digital connectivity initiatives. She plays a key leadership role in advancing Polar Connect\u2019s mission. Ieva oversees cross-disciplinary project activities, working with experts on Arctic navigation, fibre-sensing technologies, and engagement with Arctic research communities. Her career in research and education networks spans more than 15 years, beginning at Lithuania\u2019s NREN LITNET and later progressing into international coordination roles within G\u00c9ANT projects, including the Baltic Sea Regional Study and the EaPConnect project. This year Ieva joined the G\u00c9ANT Network Infrastructure Advisory Committee as a chair, together with other members advising on the development of the G\u00c9ANT pan-European backbone network. Since joining NORDUnet in 2022, Ieva has been contributing to NORDUnet\u2019s strategic mission with the Polar Connect initiative at the forefront of her work.", "public_name": "Ieva Mura\u0161kien\u0117", "guid": "1e9154f4-736c-514f-8553-de76afd934a2", "url": "https://pretalx.balticnog.org/bnog-2026/speaker/R8DAXZ/"}], "links": [{"title": "Slides", "url": "https://nordunet.box.com/s/c5c4f6z5unafqah174nc7ccfepcv11k5", "type": "related"}], "feedback_url": "https://pretalx.balticnog.org/bnog-2026/talk/G7UCNM/feedback/", "origin_url": "https://pretalx.balticnog.org/bnog-2026/talk/G7UCNM/", "attachments": []}, {"guid": "2873fef4-d1f5-54e1-9afe-664f459c7e1d", "code": "RXBWZU", "id": 11, "logo": null, "date": "2026-09-24T11:00:00+03:00", "start": "11:00", "duration": "00:25", "room": "ROOM ALFA", "slug": "bnog-2026-11-the-splinternet-ecosystems-sovereignty-and-the-internet-in-the-age-of-ai", "url": "https://pretalx.balticnog.org/bnog-2026/talk/RXBWZU/", "title": "The Splinternet: Ecosystems, Sovereignty, and the Internet in the Age of AI", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "As AI platforms reshape global data, upend economies, disrupt workforces and challenges decades of the neutral, open Internet, a critical tension has emerged between the borderless nature of modern technology and the rising need for regional and sovereign data control.  The Internet is dead!  Long live the Internet!", "description": "As AI platforms reshape global data, upend economies, disrupt workforces and challenges decades of the neutral, open Internet, a critical tension has emerged between the borderless nature of modern technology and the rising need for regional and sovereign data control. \r\n\r\nIn this session, Zachary Smith, CEO of Datum, explores the role of open-source ecosystems and community-driven interoperability and how they remain critical to infrastructure resilience even while the commercial systems, governments and regulatory frameworks are shifting all around us.  \r\n\r\nWe will explore what the Splinternet could and should look like and find out what it means for networks, service providers, builders and technology consumers of all sizes.", "recording_license": "", "do_not_record": false, "persons": [{"code": "HTHFQB", "name": "Zachary Smith", "avatar": "https://pretalx.balticnog.org/media/avatars/HTHFQB_xZ9v0mk.jpg", "biography": "Zachary Smith is the CEO of Datum, where he focuses on building the open, interconnected infrastructure powering the next generation of cloud and AI platforms. A veteran of the internet infrastructure industry, Zachary has spent over two decades building Internet infrastructure and the software that powers it. Prior to leading Datum, he co-founded Packet (acquired by Equinix) and was an early leader of Linux hosting innovator, Voxel dot Net.\r\n\r\nZachary serves on the Board of Directors of Nexcess, Wasabi Technologies, 1NCE and the Danish 1st Division soccer club, Akademisk Boldklub.", "public_name": "Zachary Smith", "guid": "3b7ae0a2-5eb0-5409-8f15-001125b42424", "url": "https://pretalx.balticnog.org/bnog-2026/speaker/HTHFQB/"}], "links": [], "feedback_url": "https://pretalx.balticnog.org/bnog-2026/talk/RXBWZU/feedback/", "origin_url": "https://pretalx.balticnog.org/bnog-2026/talk/RXBWZU/", "attachments": []}, {"guid": "5705a481-6371-5d0e-aa8b-c5bb156369f5", "code": "LCKLX8", "id": 3, "logo": null, "date": "2026-09-24T11:30:00+03:00", "start": "11:30", "duration": "00:25", "room": "ROOM ALFA", "slug": "bnog-2026-3-is-my-data-center-infrastructure-ready-for-ai-workloads", "url": "https://pretalx.balticnog.org/bnog-2026/talk/LCKLX8/", "title": "Is My Data Center Infrastructure Ready for AI Workloads", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "This is a continued presentation around Artificial Intelligence (AI) from the BalticNOG 2025 where I covered the fundamental difference between AI for Networks and AI Networks - the intent of this talk is to cover more details around the challenges posed by AI workloads in data center infrastructure for TRAINING and INFERENCE, as these workloads pose some challenges around the data center infrastructure. This talk will cover fundamentals around how data is collected and structured/cleaned up for training usage as well as once the training is done how the model will be used for inference. It will look at data center design including AI Fabrics, scale-up vs. scale-out designs, challenges, and protocols used and provide some future guidelines around enhancements to such challenges under works within the UEC (Ultra Ethernet Consortium). UEC\u00a0goal is to deliver a complete architecture that\u00a0optimizes\u00a0Ethernet for high performance AI and HPC networking, exceeding the performance of today\u2019s specialized technologies.\u202f UEC\u00a0specifically focuses on functionality, performance, TCO, and developer and end-user friendliness, while minimizing changes to only those\u00a0required\u00a0and\u00a0maintaining\u00a0Ethernet interoperability", "description": "", "recording_license": "", "do_not_record": false, "persons": [{"code": "SZRSDH", "name": "Mikael Holmberg", "avatar": "https://pretalx.balticnog.org/media/avatars/SZRSDH_1M16BnF.png", "biography": "Mikael is an experienced networking professional working for Extreme Networks as one of the few Distinguished Engineers. He is also a member of the office of the CTO at Extreme Networks. Mikael is an SME with expert level of knowledge in networking architectures and technologies including AI and cloud. He has been working in the networking industry for over 30 years with international experience across the globe and he is a member of various industry committees.", "public_name": "Mikael Holmberg", "guid": "a7150090-b39f-58d2-a0a9-deefa060d3c7", "url": "https://pretalx.balticnog.org/bnog-2026/speaker/SZRSDH/"}], "links": [], "feedback_url": "https://pretalx.balticnog.org/bnog-2026/talk/LCKLX8/feedback/", "origin_url": "https://pretalx.balticnog.org/bnog-2026/talk/LCKLX8/", "attachments": [{"title": "\u201cIs My Data Center Infrastructure Ready for AI Workloads\u201d", "url": "/media/bnog-2026/submissions/LCKLX8/resources/BalticNOGMH-_Is_My_Dat_CXdsmzt.pptx", "type": "related"}]}, {"guid": "4b5db8fe-bc0d-54cf-ab55-9f731384b12e", "code": "KLRJXV", "id": 21, "logo": null, "date": "2026-09-24T12:00:00+03:00", "start": "12:00", "duration": "00:25", "room": "ROOM ALFA", "slug": "bnog-2026-21-beyond-the-gpu-cluster-building-networks-for-distributed-ai-inference", "url": "https://pretalx.balticnog.org/bnog-2026/talk/KLRJXV/", "title": "Beyond the GPU Cluster: Building Networks for Distributed AI Inference", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "AI networking discussions often stop at the GPU cluster. But a single inference task may increasingly cross devices, agents, models, tools, data sources, networks and providers\u2014turning one user interaction into a dynamic distributed execution graph.\r\n\r\nThis talk explores what that could mean for network architecture and interconnection. It examines how latency, compute availability, policy and state may influence where parts of a task execute, and why explaining performance becomes difficult across organisational boundaries.\r\n\r\nIt maps existing observability building blocks and introduces FOX, a deliberately exploratory model for exchanging selected, policy-controlled evidence. The talk concludes by connecting observability with security and resilience, including agentic amplification, inference exhaustion, hidden dependencies and stateful failover.", "description": "Most discussions about AI infrastructure focus on what happens inside the GPU cluster. This talk moves the discussion beyond the data centre and asks what happens when inference becomes distributed across devices, agents, models, tools, data sources, neoclouds and multiple network domains.\r\n\r\nThe central proposition is that an AI task may increasingly resemble a dynamic distributed execution graph rather than a simple request to a single model endpoint. Different parts of that graph may execute at different distances, while model, provider and location choices change during the task. Latency, reachability, compute queues, policy, privacy and existing state may therefore become part of the placement decision\u2014making the network an input to execution rather than passive transport.\r\n\r\nUsing an illustrative five-second AI task, the talk then examines why attributing delay or failure becomes difficult when every participant sees only one part of the transaction. Existing technologies\u2014including OpenTelemetry, W3C Trace Context, inference-server metrics, gNMI/OpenConfig, IPFIX, BMP, STAMP/TWAMP and IOAM\u2014already provide many of the required signals. The unresolved problem is correlating selected evidence across organisational and trust boundaries.\r\n\r\nThe talk introduces FOX, a Federated Observability Exchange, as a deliberately exploratory concept for policy-controlled exchange of such evidence. FOX is not presented as a finished architecture, standard or product, but as a way to stimulate discussion about whether neutral interconnection could help provide cross-domain observability.\r\n\r\nFinally, the talk connects observability to security and resilience: agentic amplification, inference exhaustion, hidden shared dependencies, stateful failover and the need for local fallback. The objective is not to predict one future, but to give the networking community a practical vocabulary for discussing the architectures now beginning to emerge.", "recording_license": "", "do_not_record": false, "persons": [{"code": "FZBZYY", "name": "Kaj Kjellgren", "avatar": "https://pretalx.balticnog.org/media/avatars/FZBZYY_igWpDvH.png", "biography": "Kaj Kjellgren is a Senior Peering Consultant at DE-CIX, focusing on global peering and interconnection, particularly in the Nordic market.\r\nHe has more than 25 years of experience in Internet infrastructure, network architecture and interconnection. Before joining DE-CIX, Kaj spent more than two decades at Netnod, most recently as Technical Ambassador, and previously served as Technical Director for Sweden and Denmark at KPNQwest.\r\nKaj is a frequent speaker, moderator and panellist within the international peering community. His work focuses on how interconnection, network architecture and resilience must evolve to support new technologies and changing traffic patterns.", "public_name": "Kaj Kjellgren", "guid": "b6b1b4f4-72c2-5ed1-bd43-7d0471aacba3", "url": "https://pretalx.balticnog.org/bnog-2026/speaker/FZBZYY/"}], "links": [], "feedback_url": "https://pretalx.balticnog.org/bnog-2026/talk/KLRJXV/feedback/", "origin_url": "https://pretalx.balticnog.org/bnog-2026/talk/KLRJXV/", "attachments": [{"title": "First release-version of Beyond the GPU Cluster", "url": "/media/bnog-2026/submissions/KLRJXV/resources/Beyond_the_GPU_Cluster_B_EnVFvbA.pptx", "type": "related"}]}, {"guid": "982657ea-471a-5b80-8e91-817d20d6a722", "code": "THLKBE", "id": 28, "logo": null, "date": "2026-09-24T12:30:00+03:00", "start": "12:30", "duration": "00:25", "room": "ROOM ALFA", "slug": "bnog-2026-28-two-years-with-an-ai-engineer-on-shift", "url": "https://pretalx.balticnog.org/bnog-2026/talk/THLKBE/", "title": "Two years with an AI engineer on shift", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "**2 years with an AI engineer on shift: what it fixed, what it almost broke, and the rules we wrote afterwards**\r\n\r\nWe run a managed NOC for ISPs, data center operators and hosting providers worldwide. About two years ago we noticed that our engineers were doing the same investigation on every shift and on every customer network, regardless of vendor or topology: interface state, optics, neighbor tables, routing adjacencies, prefix reachability, logs, then a manual correlation across four or five terminals before anyone could say what broke and who was affected. So we built an internal AI NetOps assistant that uses the same tools our engineers already use, runs them in parallel across the stack, correlates the output and hands the on-call engineer a root cause hypothesis with the evidence attached, together with an assessment of which services are affected.\r\n\r\nThis talk is the operational report after two years of running it inside a real NOC, not a product pitch and not a lab demo.\r\n\r\nWe will cover the trust ladder we enforced and why each step existed. The agent started with no CLI access at all, reading only from monitoring, logs, flow data, BGP telemetry and the source of truth. It was then allowed a whitelist of operational show commands. Only later, and only for a narrow set of actions, was it permitted to propose changes, each gated by explicit human approval and a recorded audit trail. We will be honest about where that ladder stalled and which rungs we deliberately never climbed.\r\nWe will then walk through the kind of production alerts every NOC sees in its NMS and show how the agent actually behaves on them: a BGP session that will not establish, an IGP topology change, an OSPF adjacency dropping, a Layer 2 circuit going down. These are real cases from networks we operate, with the agent's investigation shown step by step: which data it pulled, how it correlated it, what root cause it proposed, and how it assessed impact at the same time. Among the cases we have already presented: a BGP failure the agent traced to a malformed attribute list while confirming in parallel that redundant paths carried the traffic; an IGP link failure it reasoned about from BGP-LS data without polling a single router; an OSPF adjacency loss that came down to mismatched BFD timers; a PE-CE link failure where the system separated a transceiver fault from a fiber cut and mapped the affected services within minutes. The NOC keeps running, so the final selection will favor the most interesting cases we see between now and the conference. Across these workflows, median time from alert to identified root cause dropped from 22 minutes to under 4.\r\n\r\nWe will also cover the cases where it was wrong. Some of them are the kind of mistake any engineer would catch instantly and the model did not, and those are the most instructive, because each one turned into a rule, a data fix or a guardrail. We will close with the numbers across [N] production infrastructures of different types: [X] alerts processed, [Y] percent resolved without escalation, plus screenshots of real investigations so the audience can judge the output for themselves.", "description": "This session tells the full story of how we built a AI NetOps agent, in the order it actually happened. \r\n\r\nThe early phases were shaped by two hard constraints. Cost, because running large models against every alert on every network gets expensive fast. And speed, because a root cause hypothesis that arrives after the engineer has already found the answer is worthless.\r\n\r\nThose constraints pushed us to test small models first, and we will show what they could and could not do. From there the system grew in stages: from a read-only helper, to a chat bot engineers could question, to an agent that queries monitoring, logs, flow data, BGP telemetry and the source of truth in parallel, correlates the output and proposes a fix for human approval.\r\n\r\nWe will also cover how we evaluated it along the way: the test cases we built from real incidents, how we ran them against different LLM models, and how those results decided what the agent was allowed to do next. We will close with where the system stands today and the numbers it produces in production.", "recording_license": "", "do_not_record": false, "persons": [{"code": "ZAT9KM", "name": "Andrian Visnevschi", "avatar": "https://pretalx.balticnog.org/media/avatars/ZAT9KM_ScgIkEI.jpg", "biography": "Andrian Visnevschi is the founder, CEO and CTO of ITcare, a managed NOC and network engineering company working with ISPs, data center operators and hosting providers across North America and Europe. He holds JNCIE-SP #2975 and has spent more than 15 years in service provider networking, starting in hands-on routing and switching operations and moving through architecture and integration work on IP/MPLS backbones, EVPN-VXLAN fabrics, multicast VPN deployments and network automation.\r\n\r\nFor the past few years his team has been building and running an AI NetOps assistant inside ITcare's own NOC, which is the subject of this talk. He is a co-founder of MDNOG, the Moldova Network Operators Group.", "public_name": "Andrian Visnevschi", "guid": "9622ebbb-5bdb-5f58-a056-7ddbbb40a5f5", "url": "https://pretalx.balticnog.org/bnog-2026/speaker/ZAT9KM/"}, {"code": "YKERGJ", "name": "Nicolai Moraru", "avatar": "https://pretalx.balticnog.org/media/avatars/YKERGJ_yHwylh7.jpeg", "biography": "Director of Software Engineering, ITcare\r\n\r\nNicolai Moraru bridges the gap between advanced software architecture and network infrastructure. As Director of Software Engineering at ITcare, he leads the development of HORA, an AI-powered network troubleshooting system that integrates BGP monitoring, flow collectors, and log aggregators.", "public_name": "Nicolai Moraru", "guid": "4db8747f-38bd-54d1-a6f2-0d8e48544cc2", "url": "https://pretalx.balticnog.org/bnog-2026/speaker/YKERGJ/"}], "links": [], "feedback_url": "https://pretalx.balticnog.org/bnog-2026/talk/THLKBE/feedback/", "origin_url": "https://pretalx.balticnog.org/bnog-2026/talk/THLKBE/", "attachments": [{"title": "BalticNOG-2026_Two Years of AI Agent on Shift", "url": "/media/bnog-2026/submissions/THLKBE/resources/BalticNOG-2026_Two_Years__39z2eV5.pdf", "type": "related"}]}, {"guid": "bbf785f3-0038-55f9-b82c-56bb50153fa1", "code": "XGGPP9", "id": 30, "logo": null, "date": "2026-09-24T14:00:00+03:00", "start": "14:00", "duration": "00:25", "room": "ROOM ALFA", "slug": "bnog-2026-30-transit-free-tier-ones-and-the-hopefuls", "url": "https://pretalx.balticnog.org/bnog-2026/talk/XGGPP9/", "title": "Transit Free, Tier ones, and the hopefuls", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "Inside the very \"center\" of the internet is a set of networks run by companies who have a special arrangement with each other that the rest of us do not have, These are sometimes called the \"tier ones\" or \"transit free networks\"\r\n\r\nHowever,  are all of these \"transit free networks\" actually free of transit, and what does that actually mean?\r\n\r\nIn this talk will go over some of the bgp.tools data that I have been analysing that will show have some of the T1 peering issues, where gaps exist, and how certain networks are getting closer to becoming a them, and what are the problems they will probably face, and finally does a network even want to be in this situation", "description": "In this talk will go over some of the bgp.tools data that I have been analysing that will show have some of the T1 peering issues, where gaps exist, and how certain networks are getting closer to becoming a them, and what are the problems they will probably face, and finally does a network even want to be in this situation", "recording_license": "", "do_not_record": false, "persons": [{"code": "G8XCRD", "name": "Ben Cartwright-Cox", "avatar": "https://pretalx.balticnog.org/media/avatars/G8XCRD_jLmtEPd.jpg", "biography": "Ben Cartwright-Cox is a Systems Engineer in the day and bad-ideas-blogger on the side.\r\n\r\nAfter building a WAF, helping operate a large CDN, and rejigging a Bank\u2019s payment gateways, Ben is currently focused on making day-to-day BGP operations less awful with bgp.tools.", "public_name": "Ben Cartwright-Cox", "guid": "5081a923-bda5-5779-84b8-b0e90efcf08e", "url": "https://pretalx.balticnog.org/bnog-2026/speaker/G8XCRD/"}], "links": [], "feedback_url": "https://pretalx.balticnog.org/bnog-2026/talk/XGGPP9/feedback/", "origin_url": "https://pretalx.balticnog.org/bnog-2026/talk/XGGPP9/", "attachments": [{"title": "First Revision, do not present this", "url": "/media/bnog-2026/submissions/XGGPP9/resources/Transit_Free_Tier_ones__VMJ3p1t.pdf", "type": "related"}]}, {"guid": "3d6abd3a-d004-5275-b6e2-96ede59c21ae", "code": "HYD8KL", "id": 39, "logo": null, "date": "2026-09-24T14:30:00+03:00", "start": "14:30", "duration": "00:55", "room": "ROOM ALFA", "slug": "bnog-2026-39-building-resilient-networks-in-an-unstable-world", "url": "https://pretalx.balticnog.org/bnog-2026/talk/HYD8KL/", "title": "Building Resilient Networks in an Unstable World", "subtitle": "", "track": null, "type": "Panel", "language": "en", "abstract": "Geopolitical events are already shaping how operators buy, build, and run networks \u2014 including how much they can still rely on subsea cables between the Nordics and Central Europe. This panel looks at where that pressure hits Nordic and Baltic digital infrastructure hardest, how operators mitigate it, and what role Internet Exchanges play when the political map is moving. Moderated by Theo Voss, it brings together K\u0101rlis Svilans (CERT.LV), Kamil Szczepa\u0144ski (Orange Polska), Aleksi Suhonen (TREX), Kaj Kjellgren (DE-CIX), and Fredrik Korsback (Meta). The conversation will stay practical: operational resilience, interconnection, and what the community should prepare for next.", "description": "", "recording_license": "", "do_not_record": false, "persons": [{"code": "LQC7KA", "name": "Theo Voss", "avatar": "https://pretalx.balticnog.org/media/avatars/LQC7KA_wOfZzIk.jpg", "biography": "Theo Voss has been active in the Internet Community for over 10 years, co-founding \u201cCommunity-IX\u201d, a non-profit supporting Internet initiatives, and presenting at several industry conferences. As the CEO and Co-Founder of Inter.link, he focus on providing sustainable and innovative connectivity, pushing our community towards unchartered waters. He\u2019d like to keep contributing to BalticNOG by supporting its events and programs with his experience and dedication to the community.", "public_name": "Theo Voss", "guid": "c3ed4d9d-c550-520f-8b15-f6c7b8315958", "url": "https://pretalx.balticnog.org/bnog-2026/speaker/LQC7KA/"}, {"code": "FZBZYY", "name": "Kaj Kjellgren", "avatar": "https://pretalx.balticnog.org/media/avatars/FZBZYY_igWpDvH.png", "biography": "Kaj Kjellgren is a Senior Peering Consultant at DE-CIX, focusing on global peering and interconnection, particularly in the Nordic market.\r\nHe has more than 25 years of experience in Internet infrastructure, network architecture and interconnection. Before joining DE-CIX, Kaj spent more than two decades at Netnod, most recently as Technical Ambassador, and previously served as Technical Director for Sweden and Denmark at KPNQwest.\r\nKaj is a frequent speaker, moderator and panellist within the international peering community. His work focuses on how interconnection, network architecture and resilience must evolve to support new technologies and changing traffic patterns.", "public_name": "Kaj Kjellgren", "guid": "b6b1b4f4-72c2-5ed1-bd43-7d0471aacba3", "url": "https://pretalx.balticnog.org/bnog-2026/speaker/FZBZYY/"}, {"code": "K8ZXST", "name": "Kamil Szczepa\u0144ski", "avatar": "https://pretalx.balticnog.org/media/avatars/K8ZXST_dIfTOKV.jpg", "biography": "Kamil Szczepa\u0144ski leads international wholesale business at Orange Polska S.A. A growth-driven telecom leader with two decades of experience, he combines commercial, operational, and technical expertise across wholesale connectivity, infrastructure, interconnection, and digital services. He actively engages in industry forums focused on automation, APIs, peering, IXPs, network evolution, and fostering collaboration across the global telecom ecosystem.", "public_name": "Kamil Szczepa\u0144ski", "guid": "7f8181fd-7c4e-5325-ad5f-18638268dbbf", "url": "https://pretalx.balticnog.org/bnog-2026/speaker/K8ZXST/"}, {"code": "UK7TTV", "name": "Aleksi Suhonen", "avatar": "https://pretalx.balticnog.org/media/avatars/UK7TTV_OlO2tCr.jpg", "biography": "Aleksi Suhonen first got on the Internet in 1987. He started working with ISPs and IXPs in 1997 and founded TREX in 2002.\r\n\r\nAleksi started his university studies on Computer Engineering and Software Engineering at the Tampere University of Technology in 1994, but he got swept up by work the next year. He worked on network maintenance and security at the University and later at Nokia Mobile Phones. By 1997 he had moved to SciFi Communications International, which later became better known as Saunalahti and Jippii. While there he spearheaded the international network expansion of AS6667, including connecting it to half a dozen IXPs in Europe and the United States.", "public_name": "Aleksi Suhonen", "guid": "62c07659-a4de-5e61-a831-5c952753329b", "url": "https://pretalx.balticnog.org/bnog-2026/speaker/UK7TTV/"}, {"code": "FPUL7Q", "name": "K\u0101rlis Svilans", "avatar": "https://pretalx.balticnog.org/media/avatars/FPUL7Q_UN25Pio.jpeg", "biography": "K\u0101rlis Svilans joined the CERT.LV team in 2020. An Australia born Latvian, he is a senior expert at the incident response team and the cyber threat intelligence lead. He has extensive experience in analyzing cyber incidents of various scales, participating in threat hunting operations, and proactive work on the prevention of potential cyber incidents. Involved in international events \u2013 he has spoken at several conferences and represented CERT.LV at the NATO CCDCoE-organized \u201cCrossed Swords 2022,\u201d as well as at NATO\u2019s largest cyber defense exercise \u201cLocked Shields 2024,\u201d among others.", "public_name": "K\u0101rlis Svilans", "guid": "9e606945-bbc9-564b-98c8-dc76727748e1", "url": "https://pretalx.balticnog.org/bnog-2026/speaker/FPUL7Q/"}, {"code": "VX33EL", "name": "Fredrik Korsb\u00e4ck", "avatar": "https://pretalx.balticnog.org/media/avatars/VX33EL_XyoYvT7.jpg", "biography": "Fredrik Korsb\u00e4ck is an Principal Network Strategy Manager currently working for Meta, overseeing all of Metas network infrastructure in EMEA. Fredrik has been involved in the industry for over 20 years and have always been working with focus large networks and long-term network strategy.  \r\n\r\nFredriks main interests and responsibilities are Internet edge, Peering, BGP, Edge-deployments, Interconnet deployments and how the all of these ecosystems works together to form what we today call \"The Internet\".   \r\n\r\nPreviously Fredrik held leadership positions at Amazon Web Services, NORDUnet and Tele2", "public_name": "Fredrik Korsb\u00e4ck", "guid": "4ee45310-21bb-5478-9664-d51fc29d43a0", "url": "https://pretalx.balticnog.org/bnog-2026/speaker/VX33EL/"}], "links": [], "feedback_url": "https://pretalx.balticnog.org/bnog-2026/talk/HYD8KL/feedback/", "origin_url": "https://pretalx.balticnog.org/bnog-2026/talk/HYD8KL/", "attachments": []}, {"guid": "2e288be3-7620-55b8-9b3c-bdb41e370303", "code": "JDYQ9N", "id": 35, "logo": null, "date": "2026-09-24T16:00:00+03:00", "start": "16:00", "duration": "00:25", "room": "ROOM ALFA", "slug": "bnog-2026-35-is-the-biggest-attack-always-the-most-dangerous-one", "url": "https://pretalx.balticnog.org/bnog-2026/talk/JDYQ9N/", "title": "Is the biggest attack always the most dangerous one?", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "For network operators, ISPs and Telcos in the Baltics, DDoS risk is changing - and the biggest attack is not necessarily the most dangerous one.\r\nDrawing on 12 months of DDoS data observed across RETN\u2019s network, this presentation challenges the industry\u2019s continued focus on peak attack size as the primary measure of threat. A 24.9 Tbps attack observed in November 2025 was almost nine times larger than any other monthly peak in the dataset - yet its size alone tells us little about the potential impact on a network or its customers.\r\nThis talk touches on how smaller, distributed and deliberately low-volume attacks can be more disruptive than record-breaking floods. Carpet-bombing, precision attacks and evolving attack techniques can target multiple prefixes, place pressure on network infrastructure or evade traditional detection thresholds without producing headline-grabbing traffic volumes.\r\nFor Baltic operators, the challenge is knowing what to look for and how to prepare. Andrejs will examine how the threat is evolving around the region, including risks from compromised network equipment and distributed attack sources, and why operators need to look beyond bandwidth - measuring detection speed, affected targets, root-cause clarity and the time it takes to understand and contain an attack.", "description": "", "recording_license": "", "do_not_record": false, "persons": [{"code": "QUTSLW", "name": "Andrejs Tihanovs", "avatar": "https://pretalx.balticnog.org/media/avatars/QUTSLW_nyJMqEy.png", "biography": "Technical Product Manager at RETN in Riga, joined RETN 4 years ago as network engineer, shifted to Product manager role a year ago. Previously worked for various Latvian ISPs and hosting providers as network administrator for 15 years.", "public_name": "Andrejs Tihanovs", "guid": "fbf6e114-82dc-517b-8809-aecdea1fc27e", "url": "https://pretalx.balticnog.org/bnog-2026/speaker/QUTSLW/"}], "links": [], "feedback_url": "https://pretalx.balticnog.org/bnog-2026/talk/JDYQ9N/feedback/", "origin_url": "https://pretalx.balticnog.org/bnog-2026/talk/JDYQ9N/", "attachments": [{"title": "Slides for presentation", "url": "/media/bnog-2026/submissions/JDYQ9N/resources/balticnog_2026_RETN_OZSZRgn.pptx", "type": "related"}]}, {"guid": "ea139dc8-6124-5e6a-b79e-c491d5c8c75f", "code": "SEWBLF", "id": 27, "logo": null, "date": "2026-09-24T16:30:00+03:00", "start": "16:30", "duration": "00:25", "room": "ROOM ALFA", "slug": "bnog-2026-27-practical-volumetric-ddos-mitigation-with-linux-and-open-source", "url": "https://pretalx.balticnog.org/bnog-2026/talk/SEWBLF/", "title": "Practical Volumetric DDoS Mitigation with Linux and Open Source", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "Volumetric DDoS protection can run on a host that terminates TCP connections, on a router protecting downstream networks, or on a scrubbing node receiving redirected traffic.\r\n\r\nThese deployments differ in traffic visibility: a router-based filter may see mostly attack traffic or only client-to-server traffic. There are always-on, on-demand, and hybrid deployment models, and modern \u201chit-and-run\u201d attacks challenge these architectures.\r\n\r\nDespite the differences in network architecture, these volumetric DDoS filtering approaches share a lot of functionality, which can be implemented in Linux eBPF.\r\n\r\neBPF programs run at commodity Linux systems with capable yet standard network adapters. These programs run close to the network adapter driver and process traffic at 100+ Gbps on commodity servers.\r\n\r\nIn this talk, we:\r\n\r\n1. consider open-source eBPF implementations of filters for TCP SYN, ACK and RST floods, DNS reflection and random UDP floods, ICMP floods\r\n\r\n2. discuss how to mitigate attacks with spoofed source addresses\r\n\r\n3. cover deployment safety and monitoring\r\n\r\n4. evaluate performance of filtering eBPF programs running on an x86-64 server with 200Gps NIC.", "description": "", "recording_license": "", "do_not_record": false, "persons": [{"code": "7FGWST", "name": "Alexander Krizhanovsky", "avatar": "https://pretalx.balticnog.org/media/avatars/7FGWST_LR0cjXV.jpg", "biography": "Alexander Krizhanovsky is the CEO of Tempesta Technologies and the architect of Tempesta\u2019s open-source full-stack DDoS protection and bot management platform, including Tempesta xFW for high-performance L3/L4 DDoS mitigation, Tempesta FW for L7 DDoS protection and web security, and WebShield for advanced bot management.\r\n\r\nAlexander has designed and led the development of high-performance network traffic processing systems, including a Web Application Firewall mentioned in the Gartner Magic Quadrant, as well as highly scalable S3 and NFS servers with a focus on network I/O, multicore scalability, and efficient data processing.\r\n\r\nHe has given talks at CppCon, Netdev, SCALE, Linux Conf Australia, All Things Open, FOSDEM, SeaGL, Percona Live, IBM CASCON, and many other conferences. Alexander is also the author of a high-performance lock-free MPMC ring buffer queue published by Linux Journal.", "public_name": "Alexander Krizhanovsky", "guid": "5a0bfc80-a14f-504a-a516-5bd8b193288b", "url": "https://pretalx.balticnog.org/bnog-2026/speaker/7FGWST/"}], "links": [], "feedback_url": "https://pretalx.balticnog.org/bnog-2026/talk/SEWBLF/feedback/", "origin_url": "https://pretalx.balticnog.org/bnog-2026/talk/SEWBLF/", "attachments": [{"title": "Talk slides", "url": "/media/bnog-2026/submissions/SEWBLF/resources/slides_K6DSCKZ.pdf", "type": "related"}]}, {"guid": "647215d2-5d8f-5152-87db-86fb715f8fe3", "code": "YZ97TP", "id": 12, "logo": null, "date": "2026-09-24T17:00:00+03:00", "start": "17:00", "duration": "00:25", "room": "ROOM ALFA", "slug": "bnog-2026-12-massive-ddos-attacks-on-isps-a-look-into-kimwolf-and-aisuru", "url": "https://pretalx.balticnog.org/bnog-2026/talk/YZ97TP/", "title": "Massive DDOS attacks on ISPs \u2013 A look into Kimwolf and Aisuru", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "Modern DDoS botnets have evolved far beyond the original Mirai model. Kimwolf and Aisuru leverage large populations of compromised IoT devices and residential connectivity to generate attacks reaching approximately 30 Tbps and billions of packets per second, often sending traffic directly from infected devices without relying on traditional amplification.\r\n\r\nThis presentation examines how these botnets evolved, how their command-and-control infrastructure operates, and the impact their attacks have not only on the targeted network, but also on every ASN carrying the traffic along the path. We will look at real-world mitigation approaches, including what failed, what helped, and why simply adding bandwidth or deploying traditional DDoS mitigation may not be enough at this scale. The presentation concludes with practical lessons from operators, including C2 disruption, trusted cross-network collaboration, and the role infrastructure takedowns and law-enforcement action can play in stopping attacks at their source.", "description": "Massive DDoS Attacks on ISPs: A Look into Kimwolf and Aisuru examines the newest generation of Mirai-descended botnets and the challenges they create for network operators.\r\n\r\nUsing Kimwolf and Aisuru as case studies, the session explores how enormous attacks originating directly from compromised devices can overwhelm not only their intended target but also upstream and peering networks. It covers the evolution and operation of these botnets, their impact on ISP infrastructure, where traditional mitigation techniques break down, and the approaches that have proven most useful\u2014from blocking and null-routing C2 infrastructure to close collaboration between trusted network operators. Ultimately, the presentation asks a larger question: when attacks reach tens of terabits per second, what actually stops them?", "recording_license": "", "do_not_record": false, "persons": [{"code": "PKSECJ", "name": "Scott Fisher", "avatar": "https://pretalx.balticnog.org/media/avatars/PKSECJ_SBb91IW.jpg", "biography": "Scott Fisher is a Senior Principal Engineer at Team Cymru, where he focuses on threat intelligence, DDoS activity, botnets, and abuse of Internet infrastructure. His work looks at how attackers use compromised devices, residential networks, and proxy infrastructure to launch or support attacks. He is especially interested in the practical, operational details of how these attacks behave on real networks and what defenders can learn from that activity.", "public_name": "Scott Fisher", "guid": "20a85609-0fc5-5ba9-86d7-4e5ae29de9ac", "url": "https://pretalx.balticnog.org/bnog-2026/speaker/PKSECJ/"}], "links": [], "feedback_url": "https://pretalx.balticnog.org/bnog-2026/talk/YZ97TP/feedback/", "origin_url": "https://pretalx.balticnog.org/bnog-2026/talk/YZ97TP/", "attachments": [{"title": "Final Deck", "url": "/media/bnog-2026/submissions/YZ97TP/resources/Kimwolf_-_BalticNOG_-_FI_yXGc7yu.pptx", "type": "related"}]}, {"guid": "d95ca03e-d756-5c33-adff-495d97b49849", "code": "W8DXBW", "id": 42, "logo": null, "date": "2026-09-24T17:30:00+03:00", "start": "17:30", "duration": "00:15", "room": "ROOM ALFA", "slug": "bnog-2026-42-closing-speech", "url": "https://pretalx.balticnog.org/bnog-2026/talk/W8DXBW/", "title": "Closing Speech", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "TBU", "description": "", "recording_license": "", "do_not_record": false, "persons": [{"code": "JXWMZ7", "name": "Paulius Judickas", "avatar": "https://pretalx.balticnog.org/media/avatars/JXWMZ7_tFGNwk7.jpg", "biography": "Paulius Judickas is the Vice President of Strategic Alliances at IPXO and Chairman of the Board at BalticNOG. He leads global growth initiatives and oversees strategic partnerships for IPXO\u2019s innovative IP address solutions. With deep expertise in market development and relationship management, he plays a key role in expanding the company\u2019s reach and strengthening its network of alliances. Paulius is particularly focused on promoting responsible IP resource management and contributing to Internet governance discussions at both regional and global levels.", "public_name": "Paulius Judickas", "guid": "ffe3f1e8-da2d-593b-a681-b93d384830f5", "url": "https://pretalx.balticnog.org/bnog-2026/speaker/JXWMZ7/"}], "links": [], "feedback_url": "https://pretalx.balticnog.org/bnog-2026/talk/W8DXBW/feedback/", "origin_url": "https://pretalx.balticnog.org/bnog-2026/talk/W8DXBW/", "attachments": []}], "ROOM BETA": [{"guid": "5cf577bb-66e5-5a50-b945-80a0aec1f510", "code": "LAULQN", "id": 10, "logo": null, "date": "2026-09-24T11:00:00+03:00", "start": "11:00", "duration": "00:25", "room": "ROOM BETA", "slug": "bnog-2026-10-auto-bandwidth-for-segment-routing", "url": "https://pretalx.balticnog.org/bnog-2026/talk/LAULQN/", "title": "Auto-bandwidth for Segment Routing", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "Many ISP use MPLS-TE auto-bandwidth to balance traffic in their network.\r\n\r\nWith transition to Segment Routing, there is a challenge of implementing a similar solution due to the stateless nature of SR.\r\n\r\nThe presentation describes challenges of auto-bandwidth implementation for SR and demonstrates a working prototype.", "description": "", "recording_license": "", "do_not_record": false, "persons": [{"code": "YHRNYJ", "name": "Dmytro Shypovalov", "avatar": "https://pretalx.balticnog.org/media/avatars/YHRNYJ_dwl8d2k.jpg", "biography": "Network Engineer, founder of Vegvisir Systems (vegvisir.ie), developer of a multi-vendor SR-TE controller Traffic Dictator", "public_name": "Dmytro Shypovalov", "guid": "5530c0d4-720d-5de8-802e-2c7aa03e47e8", "url": "https://pretalx.balticnog.org/bnog-2026/speaker/YHRNYJ/"}], "links": [], "feedback_url": "https://pretalx.balticnog.org/bnog-2026/talk/LAULQN/feedback/", "origin_url": "https://pretalx.balticnog.org/bnog-2026/talk/LAULQN/", "attachments": [{"title": "Slides", "url": "/media/bnog-2026/submissions/LAULQN/resources/Auto-bandwidth_for_Segme_A20ejzM.pptx", "type": "related"}]}, {"guid": "489d4964-3a98-5235-bad9-fcf1e0f84151", "code": "8PGEKK", "id": 17, "logo": null, "date": "2026-09-24T11:30:00+03:00", "start": "11:30", "duration": "00:25", "room": "ROOM BETA", "slug": "bnog-2026-17-mission-critical-addressing-the-talent-black-hole-in-network-engineering", "url": "https://pretalx.balticnog.org/bnog-2026/talk/8PGEKK/", "title": "Mission Critical: Addressing the Talent Black Hole in Network Engineering", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "The network engineering and interconnection industry is facing a critical challenge: the decline of experienced engineers and a growing shortage of new talent. In this presentation, I will share our project aimed at making it easier for new entrants to find the right resources and streamline their career paths in interconnection and peering. Recognizing that we cannot tackle this alone, we are partnering with universities and industry experts to build a more accessible, structured, and collaborative learning ecosystem. Together, we can ensure that the next generation of engineers is equipped to carry forward the essential work of interconnection and peering.", "description": "", "recording_license": "", "do_not_record": false, "persons": [{"code": "PAZXHS", "name": "Yolandi Cloete", "avatar": "https://pretalx.balticnog.org/media/avatars/PAZXHS_7gJV187.jpg", "biography": "Yolandi Cloete is the Interconnection Community and Academy Manager at DE-CIX, a leading global Internet Exchange operator. Drawing on over a decade of experience in Africa\u2019s peering ecosystem, she leads international initiatives that expand access to interconnection and peering knowledge, encourage collaboration, and support community growth worldwide. A committed connector and educator, Yolandi actively contributes to industry forums and works to strengthen the foundations of a more connected digital future.", "public_name": "Yolandi Cloete", "guid": "a87058aa-c18b-5493-bf6c-c5f36d4cdc4e", "url": "https://pretalx.balticnog.org/bnog-2026/speaker/PAZXHS/"}], "links": [], "feedback_url": "https://pretalx.balticnog.org/bnog-2026/talk/8PGEKK/feedback/", "origin_url": "https://pretalx.balticnog.org/bnog-2026/talk/8PGEKK/", "attachments": [{"title": "v1", "url": "/media/bnog-2026/submissions/8PGEKK/resources/Mission_Critical_v1_Y_Cl_rCeul58.pdf", "type": "related"}, {"title": "Final Presentation", "url": "/media/bnog-2026/submissions/8PGEKK/resources/Mission_Critical-Address_NQO0NHu.pptx", "type": "related"}]}, {"guid": "ff7ce894-e24c-5d87-b608-7d94b0ef4ceb", "code": "X8EQJD", "id": 26, "logo": null, "date": "2026-09-24T12:00:00+03:00", "start": "12:00", "duration": "00:25", "room": "ROOM BETA", "slug": "bnog-2026-26-anatomy-of-a-bgp-spoofing-attack-bgp-filtering-a-quick-overview", "url": "https://pretalx.balticnog.org/bnog-2026/talk/X8EQJD/", "title": "Anatomy of a BGP spoofing attack + BGP Filtering - a quick overview", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "A random friday evening during July. - A BGP update with our customer prefix, and a correct AS-path. But it's not coming from our network. - Then a few minutes later, it's gone. \r\n\r\n40 minutes later, there it was again - only to quickly disappear.\r\nOver and over again.", "description": "A quick look at the details of a BGP spoofing attack on a customer in Lithuania.\r\nWe take a look at the specifics, try to guess how this might have happened and what could be done to mitigate it.", "recording_license": "", "do_not_record": false, "persons": [{"code": "FGVPHQ", "name": "Lasse Jarlskov", "avatar": "https://pretalx.balticnog.org/media/avatars/FGVPHQ_5PaFRFF.jpg", "biography": "Peering manager at Telia Company.\r\nLong-time expert on peering and interconnection.\r\nAdvocate for BGP routing security.", "public_name": "Lasse Jarlskov", "guid": "93e87d0d-05bb-550a-ae4f-4568b2c7e7f1", "url": "https://pretalx.balticnog.org/bnog-2026/speaker/FGVPHQ/"}], "links": [], "feedback_url": "https://pretalx.balticnog.org/bnog-2026/talk/X8EQJD/feedback/", "origin_url": "https://pretalx.balticnog.org/bnog-2026/talk/X8EQJD/", "attachments": []}, {"guid": "fdf16f14-cd55-50e4-b19f-4b8134a5bf98", "code": "WCGBKA", "id": 14, "logo": null, "date": "2026-09-24T12:30:00+03:00", "start": "12:30", "duration": "00:25", "room": "ROOM BETA", "slug": "bnog-2026-14-automating-dns-secondaries-with-catalog-zones", "url": "https://pretalx.balticnog.org/bnog-2026/talk/WCGBKA/", "title": "Automating DNS Secondaries with Catalog Zones", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "Running diversely connected DNS servers requires that the list of zones and zone contents are synchronized on all servers. There are many approaches to handle this challenge, and many of them use mechanisms outside DNS. Catalog Zones are a newish mechanism that aims to do it all in-band in DNS.", "description": "", "recording_license": "", "do_not_record": false, "persons": [{"code": "UK7TTV", "name": "Aleksi Suhonen", "avatar": "https://pretalx.balticnog.org/media/avatars/UK7TTV_OlO2tCr.jpg", "biography": "Aleksi Suhonen first got on the Internet in 1987. He started working with ISPs and IXPs in 1997 and founded TREX in 2002.\r\n\r\nAleksi started his university studies on Computer Engineering and Software Engineering at the Tampere University of Technology in 1994, but he got swept up by work the next year. He worked on network maintenance and security at the University and later at Nokia Mobile Phones. By 1997 he had moved to SciFi Communications International, which later became better known as Saunalahti and Jippii. While there he spearheaded the international network expansion of AS6667, including connecting it to half a dozen IXPs in Europe and the United States.", "public_name": "Aleksi Suhonen", "guid": "62c07659-a4de-5e61-a831-5c952753329b", "url": "https://pretalx.balticnog.org/bnog-2026/speaker/UK7TTV/"}], "links": [], "feedback_url": "https://pretalx.balticnog.org/bnog-2026/talk/WCGBKA/feedback/", "origin_url": "https://pretalx.balticnog.org/bnog-2026/talk/WCGBKA/", "attachments": [{"title": "catz presentation for balticnog2026", "url": "/media/bnog-2026/submissions/WCGBKA/resources/balticnog2026-catz_jj8UFgr.pdf", "type": "related"}]}, {"guid": "5bd9c2a2-664e-5ca5-94ac-111678d602c1", "code": "APGWW8", "id": 43, "logo": null, "date": "2026-09-24T14:00:00+03:00", "start": "14:00", "duration": "00:25", "room": "ROOM BETA", "slug": "bnog-2026-43-global-nog-alliance-update", "url": "https://pretalx.balticnog.org/bnog-2026/talk/APGWW8/", "title": "Global NOG Alliance update", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "TBU", "description": "", "recording_license": "", "do_not_record": false, "persons": [{"code": "BTNU3V", "name": "Sander Steffann", "avatar": "https://pretalx.balticnog.org/media/avatars/BTNU3V_uAyv6Cg.png", "biography": "Sander has been involved in the Internet since 1995, when he helped a friend start a small ISP. He was a founding board member of the Netherlands IPv6 Foundation, NLNOG and the Global NOG Alliance.\r\n\r\nSander has been an involved member of the RIPE community since RIPE 49 in Manchester (2004). Sander was one of the RIPE Address Policy Working Group Co-chairs from RIPE 54 in Tallinn (2007) to RIPE 76 in Marseille (2018). He was also part of the RIPE NCC Arbiters Panel.\r\n\r\nSander's background is in Computer Science with a Master\u2019s Degree from the University of Twente. He focussed on communication related topics such as Protocol Design, Implementation and Validation, as well as some Graph Theory.\r\n\r\nSince 2010, Sander has been an independent consultant with a focus on advising enterprises and service providers on network architecture and the deployment of IPv6. He has done everything from short training sessions to management training on the importance of IPv6, to designing and implementing a network automation workflow for an ISP.\r\n\r\nIn the summer of 2025, Sander started working part-time for Hilco as part of the ProVision team that provides DDI software, anycast DNS and professional services for network management.", "public_name": "Sander Steffann", "guid": "4914e627-00fa-57cc-b101-96bbf668d66a", "url": "https://pretalx.balticnog.org/bnog-2026/speaker/BTNU3V/"}], "links": [], "feedback_url": "https://pretalx.balticnog.org/bnog-2026/talk/APGWW8/feedback/", "origin_url": "https://pretalx.balticnog.org/bnog-2026/talk/APGWW8/", "attachments": []}, {"guid": "86e23a8a-23a8-5b00-b053-af9777aded0f", "code": "39XGTR", "id": 32, "logo": null, "date": "2026-09-24T16:00:00+03:00", "start": "16:00", "duration": "00:25", "room": "ROOM BETA", "slug": "bnog-2026-32-when-the-law-reaches-the-dns-operating-regulatory-blocking-at-isp-scale", "url": "https://pretalx.balticnog.org/bnog-2026/talk/39XGTR/", "title": "When the Law Reaches the DNS: Operating Regulatory Blocking at ISP Scale", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "Internet blocking is part of the operational reality of running an ISP in Italy.\r\n\r\nWhat looks like a simple requirement becomes considerably more complex when it reaches the network. Blocking orders come from several authorities, for different purposes and through different procedures, while courts can impose additional restrictions.\r\n\r\nThere is no single system behind them. Yet an ISP has to identify what must be blocked, keep the information up to date and translate it into reliable network behaviour.\r\n\r\nThis talk looks at how we deal with this at Airbeam, where we have built a largely automated DNS-based approach to handle these obligations. I will also share some real cases that show what can happen when regulatory requirements meet day-to-day network operations.", "description": "Last year at BalticNOG, I presented Piracy Shield, Italy's anti-piracy blocking platform.\r\n\r\nThis year, I want to continue that story.\r\n\r\n**Piracy Shield was only the tip of the iceberg.**\r\n\r\nItalian ISPs also receive blocking requirements from ADM, separately for gambling and tobacco, AGCOM, CONSOB, IVASS and CNCPO. On top of these administrative mechanisms, blocking can also result from court orders.\r\n\r\nEach has developed in its own way. Some provide lists, others issue individual orders; publication and notification methods differ, as do update procedures and technical expectations. There is no common interface designed for the operators that ultimately have to implement them.\r\n\r\nI will map this rather peculiar ecosystem and show how Airbeam brings much of it together at DNS level, from collecting and normalizing the sources to applying and removing restrictions.\r\n\r\nThere will also be some real examples. A few of them are good illustrations of how not to design an operational process involving hundreds of network operators.\r\n\r\nThe Italian case will then provide the starting point for a discussion with the BalticNOG community: what happens in other countries, and can we do this better?", "recording_license": "", "do_not_record": false, "persons": [{"code": "SR8JJE", "name": "Livio Morina", "avatar": "https://pretalx.balticnog.org/media/avatars/SR8JJE_uXXpw7N.jpg", "biography": "Livio is an electronic and computer engineer with nearly two decades of experience in the telecommunications sector. Since 2010, he has led Airbeam, a regional Italian operator with a strong international engagement. He serves as President of PeeringDB and sits on the board of AIIP (the Italian Association of Internet Providers), where he actively contributes to regulatory work at both the Italian and European levels, representing the interests of independent network operators in their dialogue with public authorities.\r\n\r\nHe is also active in the public and political sphere as National Head of the Department for Technological Innovation, Networks, and Artificial Intelligence within the Italian civic movement Rivoluzione della Bellezza, where he promotes digital and infrastructure-related policies through cross-sector collaboration.\r\n\r\nLivio works closely with ISPs, IXPs, and community-driven infrastructure initiatives, combining network engineering with experience in Internet governance and regulation. He is a regular speaker at industry events such as Peering Forums and regional NOGs, where he focuses on optical systems, Internet interconnection, network-level regulatory compliance, Internet blocking and its enforcement mechanisms, and the evolving landscape of WISPs and the Italian telecommunications sector.", "public_name": "Livio Morina", "guid": "670d793e-4776-58e0-887f-1f42effeda09", "url": "https://pretalx.balticnog.org/bnog-2026/speaker/SR8JJE/"}], "links": [], "feedback_url": "https://pretalx.balticnog.org/bnog-2026/talk/39XGTR/feedback/", "origin_url": "https://pretalx.balticnog.org/bnog-2026/talk/39XGTR/", "attachments": [{"title": "Draft - to be completed", "url": "/media/bnog-2026/submissions/39XGTR/resources/DRAFT___BalticNOG2-When__x4pEqz3.pptx", "type": "related"}, {"title": "FINAL TO BE PRESENTED ON STAGE", "url": "/media/bnog-2026/submissions/39XGTR/resources/FINAL_STAGE_VERSION_Balt_INqQbrY.pptx", "type": "related"}, {"title": "SHARABLE ON THE CONFERENCE SITE", "url": "/media/bnog-2026/submissions/39XGTR/resources/SHARABLE_BalticNOG2-Livi_7txErqU.pptx", "type": "related"}]}, {"guid": "c95848cd-c7d7-5346-a43d-d3760e2909cb", "code": "TYBQDZ", "id": 7, "logo": null, "date": "2026-09-24T16:30:00+03:00", "start": "16:30", "duration": "00:25", "room": "ROOM BETA", "slug": "bnog-2026-7-poland-as-a-hub-for-eastern-europe-connectivity", "url": "https://pretalx.balticnog.org/bnog-2026/talk/TYBQDZ/", "title": "Poland as a Hub for Eastern Europe Connectivity", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "Poland\u2019s geography and economy\r\nKey IT & Telco companies in Poland\r\nNumber of Poland\u2019s Internet market indicators\r\nM&As important for polish Internet market\r\nInt\u2019l cloud services market in Poland - local zones availability\r\nTOP 3 IXes in Poland\r\nMain service providers in Poland by selected categories - longhaul DF, IPT, internationals, DCs,\r\nISPs & fixed from region telcos present in Poland\r\nKey infrastructural projects in PL\r\nNew data centners planned in Poland", "description": "", "recording_license": "", "do_not_record": false, "persons": [{"code": "K8ZXST", "name": "Kamil Szczepa\u0144ski", "avatar": "https://pretalx.balticnog.org/media/avatars/K8ZXST_dIfTOKV.jpg", "biography": "Kamil Szczepa\u0144ski leads international wholesale business at Orange Polska S.A. A growth-driven telecom leader with two decades of experience, he combines commercial, operational, and technical expertise across wholesale connectivity, infrastructure, interconnection, and digital services. He actively engages in industry forums focused on automation, APIs, peering, IXPs, network evolution, and fostering collaboration across the global telecom ecosystem.", "public_name": "Kamil Szczepa\u0144ski", "guid": "7f8181fd-7c4e-5325-ad5f-18638268dbbf", "url": "https://pretalx.balticnog.org/bnog-2026/speaker/K8ZXST/"}], "links": [], "feedback_url": "https://pretalx.balticnog.org/bnog-2026/talk/TYBQDZ/feedback/", "origin_url": "https://pretalx.balticnog.org/bnog-2026/talk/TYBQDZ/", "attachments": [{"title": "Draft of presentation", "url": "/media/bnog-2026/submissions/TYBQDZ/resources/260820_Poland-as-a-Hub_hclTfXo.pdf", "type": "related"}]}]}}]}}}