- LISA '12 Home
- Registration Information
- Registration Discounts
- Organizers
- At a Glance
- Calendar
- Conference Themes
- Training Program
- Technical Sessions
- Workshops
- Data Storage Day
- ION San Diego
- Posters
- Birds-of-a-Feather Sessions
- Exhibition
- Sponsors
- Activities
- Why Attend?
- Hotel and Travel Information
- Services
- Students and Grants
- Questions?
- Help Promote
- Flyer PDF
- Brochure PDF
- For Participants
- Call for Participation
- Past Proceedings
sponsors
usenix conference policies
Real-World Insights on How to Secure and Route Your Linux Network
Nautilus 2
We will be talking about how to configure IP addresses and static routes using iptables for security and convenience, the iproute2 utilities for advanced routing and IP configurations, and some "gotchas" that can happen with Linux networks. You'll learn why you should throw away ifconfig on Linux in favor of ip, and how to create and optimize iptables rule sets.
You will leave this class with enough IPv6 knowledge to kick-start your transitions or understand your preexisting IPv6 network. We'll also discuss how the loss of NAT doesn't mean your network can't be secure.
Novice and intermediate Linux system and network administrators, or anyone who wants to understand the ins and outs of networking on Linux. A basic understanding of the OSI model and Linux utilities is recommended but not required. This class is especially well suited for administrators making the leap from Windows to Linux.
Ways to expertly secure and route your Linux servers on an IP network.
- Basics
- Networking review
- Basic network configuration: Sysconfig-based configuration, ifconfig/route, iproute2
- Other useful network troubleshooting tools: ethtool, sysctl -a, ip route get (ip address)
- Firewalls
- High-level firewall architecture
- ip[6]tables: differences between iptables and ip6tables, common use cases, how traffic flows through iptables, targets and matches you never knew existed
- Advanced topics
- Optimization
- Complex rulesets
- Custom chains
- Other interesting things
- Multiple routing tables
- IPv6 tunneling
- Balancing among multiple ISPs
- Network tuning using sysactls
connect with us