Skip to content

Topic Ideas

dhellstern edited this page Sep 4, 2021 · 12 revisions

DN42

Topic

This project would focus on connecting to the DN42 distributed VPN, which is a project used to learn advanced networking concepts like you might see at an ISP-level.

Overview

I have spent years learning and experimenting with networking, from basic routing to tunneling IPv6 traffic, and using complex VLAN topologies and software-defined networking to build up single-purpose networks and host services on them. But some concepts have been out of reach in that network, including internetworking. One of the main purposes of DN42, which is already fairly mature including major peers supporting substantial throughput, is to provide a playground to learn and deploy complex interconnected networks using VPNs like Wireguard to simulate physical connections between peers, with BGP and other routing technologies running on top to, among other things, prevent BGP hijacking.

Topic Decomposition

Besides the somewhat complicated administrative overhead of registering for address space and finding willing nearby peers with enough capacity, I would need to deploy a router with VPN capabilities, connect it to said peers, and deploy BGP route sharing, as well as deploy supporting services like an ROA signature validator to prevent BGP hijacking (accidental or otherwise). From there, I could deploy test services (like a BGP looking glass) and end devices to connect to other networks and allow connections to my own.

There is also some potential for this project to be continued by another student, or at least for my documentation to help with another new deployment. While connecting to DN42 has little practical use like hosting production websites, it can continue to be expanded upon with enhancements like automation, high availability, and new and innovative services available to other DN42 members.

Firewall Automation

GNS3 Network Emulation

Clone this wiki locally