MUM Italy 2017

Today's interactive protocols, like video and audio conferencing, voice over IP and virtual private networking require QoS to ensure that they are handled in a timely manner, reducing the chance of degraded quality. In order to provide QoS features a Packet scheduling algorithm is used. Hierarchical token bucket packet is one of many offered packet scheduling algorithms in Linux kernel which is used on MikroTik devices. We have built a small lab environment suited for testing latest version of the HTB algorithm and MikroTik QoS capabilities. We are going to investigate the accuracy of such QoS structure with the HTB packet scheduler when routing between LAN over a typical WAN link of 10 Mbit/s.

RouterOS firewall is very powerful, but the natural complexity of a firewall can be managed trough a little knowledge of the packet flow, and also trough new features added to the RouterOS software in the 2016. Interface list, address list and raw table are only a part of new features added, with these items and a well done configuration the firewall can be simple powerful and also nice to see. In the presentation we'll show where is firewall in the packet flow, and how to use the new functions, and also how to use the old features too. All the presentation is related to IPv4 and also IPv6.

About the presenter: Massimo Nuvoli is a System Engineer and System Architect, CEO of Progetto Archivio SRL and MikroTik certified trainer (#TR0368) from Turin, Italy.

The traffic generator is a very powerful tool that allows us to test systems(SUT) and devices(DUT).

In this presentation we will see how to use the traffic generator in several scenarios. In the first scenario we will show the basic steps of the traffic generator workflow. A more complex implementation is presented in the second and third scenario with several streams and different headers.

Next we will see how to use the traffic generator to test wireless links, changing some characteristics of the packets. To finish the presentation we will inject a packets capture using the traffic generator.

About the presenter: José Manuel Román is Mikrotik Trainer(#348), CEO at fibercli.com, Security consultant CISSP and CISA certificated, ITIL Expert MALC certificated.

Recently the whole Internet community was surprised by the biggest DDoS attack ever, that caused the outage of several web sites in the US and Europe. Behind the scenes, a new botnet using the the "Things" of what we call the Internet of Things (IoT).

Another recent incidents, has explored the vulnerabilities of customer's CPE, and has involved one big European operator and several small WISPs networks disrupting their customer's connectivity and preventing the access to such equipments. The effects of this infection were too small if we think about what could be done in terms of DDoS with millions of CPEs compromised.

In parallel with this is important to highlight the crescent adoption of IPv6 and end-to-end connections establishing new paradigms for security.

I this presentation we'll show the basic components behind such incidents, other possible threats and the techniques to mitigate them in a RouterOS network, presenting techniques to secure, in a IPv4 + IPv6 world, the "things" under ISPs control and other to provide a security for Customers' "things" preserving net neutrality and privacy.

About the presenter: Wardner Maia is Electronic Engineer, CTO of MDBrasil (Brazil) - a Brazilian ISP company, Mikrotik Trainer (#021) since 2007 and chairman of LACNIC - the regional registry for Latin America and Caribbean.