inoc-dba - lacnicslides.lacnic.net/wp-content/themes/slides/docs/lacnic24/jueves... · supported by...

32

Upload: others

Post on 03-Feb-2020

2 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: INOC-DBA - LACNICslides.lacnic.net/wp-content/themes/slides/docs/lacnic24/jueves... · Supported by CGI.br and NIC.br, since ... Voicemail and conference room. URA and queues support
Page 2: INOC-DBA - LACNICslides.lacnic.net/wp-content/themes/slides/docs/lacnic24/jueves... · Supported by CGI.br and NIC.br, since ... Voicemail and conference room. URA and queues support

INOC-DBA

Page 3: INOC-DBA - LACNICslides.lacnic.net/wp-content/themes/slides/docs/lacnic24/jueves... · Supported by CGI.br and NIC.br, since ... Voicemail and conference room. URA and queues support
Page 4: INOC-DBA - LACNICslides.lacnic.net/wp-content/themes/slides/docs/lacnic24/jueves... · Supported by CGI.br and NIC.br, since ... Voicemail and conference room. URA and queues support
Page 5: INOC-DBA - LACNICslides.lacnic.net/wp-content/themes/slides/docs/lacnic24/jueves... · Supported by CGI.br and NIC.br, since ... Voicemail and conference room. URA and queues support
Page 6: INOC-DBA - LACNICslides.lacnic.net/wp-content/themes/slides/docs/lacnic24/jueves... · Supported by CGI.br and NIC.br, since ... Voicemail and conference room. URA and queues support
Page 7: INOC-DBA - LACNICslides.lacnic.net/wp-content/themes/slides/docs/lacnic24/jueves... · Supported by CGI.br and NIC.br, since ... Voicemail and conference room. URA and queues support
Page 8: INOC-DBA - LACNICslides.lacnic.net/wp-content/themes/slides/docs/lacnic24/jueves... · Supported by CGI.br and NIC.br, since ... Voicemail and conference room. URA and queues support
Page 9: INOC-DBA - LACNICslides.lacnic.net/wp-content/themes/slides/docs/lacnic24/jueves... · Supported by CGI.br and NIC.br, since ... Voicemail and conference room. URA and queues support
Page 10: INOC-DBA - LACNICslides.lacnic.net/wp-content/themes/slides/docs/lacnic24/jueves... · Supported by CGI.br and NIC.br, since ... Voicemail and conference room. URA and queues support
Page 11: INOC-DBA - LACNICslides.lacnic.net/wp-content/themes/slides/docs/lacnic24/jueves... · Supported by CGI.br and NIC.br, since ... Voicemail and conference room. URA and queues support
Page 12: INOC-DBA - LACNICslides.lacnic.net/wp-content/themes/slides/docs/lacnic24/jueves... · Supported by CGI.br and NIC.br, since ... Voicemail and conference room. URA and queues support
Page 13: INOC-DBA - LACNICslides.lacnic.net/wp-content/themes/slides/docs/lacnic24/jueves... · Supported by CGI.br and NIC.br, since ... Voicemail and conference room. URA and queues support
Page 14: INOC-DBA - LACNICslides.lacnic.net/wp-content/themes/slides/docs/lacnic24/jueves... · Supported by CGI.br and NIC.br, since ... Voicemail and conference room. URA and queues support
Page 15: INOC-DBA - LACNICslides.lacnic.net/wp-content/themes/slides/docs/lacnic24/jueves... · Supported by CGI.br and NIC.br, since ... Voicemail and conference room. URA and queues support
Page 16: INOC-DBA - LACNICslides.lacnic.net/wp-content/themes/slides/docs/lacnic24/jueves... · Supported by CGI.br and NIC.br, since ... Voicemail and conference room. URA and queues support
Page 17: INOC-DBA - LACNICslides.lacnic.net/wp-content/themes/slides/docs/lacnic24/jueves... · Supported by CGI.br and NIC.br, since ... Voicemail and conference room. URA and queues support

INOC-DBA (Inter-Network Operations Center DialBy ASN) is a hotline phone system created andoperated by Packet Clearing House in 2002.

Inter NOC – Dial by ASN INOC-DBA

Page 18: INOC-DBA - LACNICslides.lacnic.net/wp-content/themes/slides/docs/lacnic24/jueves... · Supported by CGI.br and NIC.br, since ... Voicemail and conference room. URA and queues support

The INOC-DBA provides a direct and private wayof communication between the NetworkOperations Centers and Security IncidentResponse Teams of the Autonomous Systems.

In other words... Is a communication shortcut tothe people who can solve your problem.

Inter NOC – Dial by ASN INOC-DBA

Page 19: INOC-DBA - LACNICslides.lacnic.net/wp-content/themes/slides/docs/lacnic24/jueves... · Supported by CGI.br and NIC.br, since ... Voicemail and conference room. URA and queues support

● The heart of the INOC-DBA is the IETF-standardSIP protocol (RFC 3261), an open VoIP standardthat has broad support.

Inter NOC – Dial by ASN INOC-DBA

Page 20: INOC-DBA - LACNICslides.lacnic.net/wp-content/themes/slides/docs/lacnic24/jueves... · Supported by CGI.br and NIC.br, since ... Voicemail and conference room. URA and queues support

SIP Protocol

● Act over TCP and UDP 5060 ports to negotiatesessions.

● Media exchanged via RTP protocol (RFC 1889) ina pair of UDP ports. In our case, between UDP10000 and UDP 20000.

● Some problems with NAT.

Inter NOC – Dial by ASN INOC-DBA

Page 21: INOC-DBA - LACNICslides.lacnic.net/wp-content/themes/slides/docs/lacnic24/jueves... · Supported by CGI.br and NIC.br, since ... Voicemail and conference room. URA and queues support

HOW IT WORKS

Every INOC phone number is a composition of theAS Number with some choosen extension of threenumber, linked by the asterisk digit.

ASN*Extension

Inter NOC – Dial by ASN INOC-DBA

Page 22: INOC-DBA - LACNICslides.lacnic.net/wp-content/themes/slides/docs/lacnic24/jueves... · Supported by CGI.br and NIC.br, since ... Voicemail and conference room. URA and queues support

HOW IT WORKS

In order to simplify even more the communication,some standard extensions were stablished:

● ASN*100 - NOC

● ASN*800 - CSIRT

Inter NOC – Dial by ASN INOC-DBA

Page 23: INOC-DBA - LACNICslides.lacnic.net/wp-content/themes/slides/docs/lacnic24/jueves... · Supported by CGI.br and NIC.br, since ... Voicemail and conference room. URA and queues support

Supported by CGI.br and NIC.br, since2005:

● independent server in Brazil● Integrated (*) with PCH's INOC-DBAsystem

● NIC.br lended VoIP phones for ASswhen it was necessary.

Inter NOC – Dial by ASN INOC-DBA-BR

Page 24: INOC-DBA - LACNICslides.lacnic.net/wp-content/themes/slides/docs/lacnic24/jueves... · Supported by CGI.br and NIC.br, since ... Voicemail and conference room. URA and queues support

Asterisk (open source software PABX)

● Multi codec and multi VoIP protocolsupport.

● Voicemail and conference room.● URA and queues support.

Inter NOC – Dial by ASN INOC-DBA-BR

Page 25: INOC-DBA - LACNICslides.lacnic.net/wp-content/themes/slides/docs/lacnic24/jueves... · Supported by CGI.br and NIC.br, since ... Voicemail and conference room. URA and queues support

Inter NOC – Dial by ASN INOC-DBA-BR

Page 26: INOC-DBA - LACNICslides.lacnic.net/wp-content/themes/slides/docs/lacnic24/jueves... · Supported by CGI.br and NIC.br, since ... Voicemail and conference room. URA and queues support

Inter NOC – Dial by ASN INOC-DBA-BR

Page 27: INOC-DBA - LACNICslides.lacnic.net/wp-content/themes/slides/docs/lacnic24/jueves... · Supported by CGI.br and NIC.br, since ... Voicemail and conference room. URA and queues support

Inter NOC – Dial by ASN INOC-DBA-BR

1 – Create account in PAS(Autonomous System Portal)

2 – Associate your AS

3 – Create INOC-DBA extension

● Steps 2 and 3 require approval from whois contacts (e-mail)

Page 28: INOC-DBA - LACNICslides.lacnic.net/wp-content/themes/slides/docs/lacnic24/jueves... · Supported by CGI.br and NIC.br, since ... Voicemail and conference room. URA and queues support

Inter NOC – Dial by ASN INOC-DBA-BR

845 users

607 - distinct Autonomous Systems578 - *100 extensions 80 - *800 extensions

Page 29: INOC-DBA - LACNICslides.lacnic.net/wp-content/themes/slides/docs/lacnic24/jueves... · Supported by CGI.br and NIC.br, since ... Voicemail and conference room. URA and queues support

Inter NOC – Dial by ASN INOC-DBA-BR

● 69 calls/day

Page 30: INOC-DBA - LACNICslides.lacnic.net/wp-content/themes/slides/docs/lacnic24/jueves... · Supported by CGI.br and NIC.br, since ... Voicemail and conference room. URA and queues support

Inter NOC – Dial by ASN INOC-DBA-BR

● Problems...

Page 31: INOC-DBA - LACNICslides.lacnic.net/wp-content/themes/slides/docs/lacnic24/jueves... · Supported by CGI.br and NIC.br, since ... Voicemail and conference room. URA and queues support

Inter NOC – Dial by ASN INOC-DBA-BR

Questions…● What do you think? Should we try it in the LAC

region? ● How we solve the problem with whois contacts?● Should we do something else to improve

communication between our NOCs and CSIRTs?Maybe an AS-Whats-App? AS-Telegram?

https://inoc-dba-web.pch.net/inoc-dba/http://inoc.nic.br

Page 32: INOC-DBA - LACNICslides.lacnic.net/wp-content/themes/slides/docs/lacnic24/jueves... · Supported by CGI.br and NIC.br, since ... Voicemail and conference room. URA and queues support

Obrigadowww.ceptro.br

[email protected] @moreiras

01 de novembro de 2015