Liberouter / Cesnet TMC group | Programmable hardware

Hardware Acceleration

Our technologies make use of programmable hardware (FPGA) which allows us to keep pace with the ever-increasing speeds of networks. We focus at 40G, 100G and 400G Ethernet, all as running prototypes, not just powerpoint presentations. High-speed packet processing algorithms and architectures are one of our main research topics. We have experience in designing acceleration cards. For 400GE, we have designed with...

Flow Monitoring

Network traffic monitoring is an essential component of every modern network infrastructure. For the large ones, it is currently the best practice to use technology based on IP flows, which is exactly the scope of interest in our R&D activities. Since we are responsible for traffic monitoring of the national research and education network perimeter , we have to deal with state-of-the-art high bandwidth data...

Security

Supporting network security management is one of the main goals of our technologies. We have created an open-source framework for real-time analysis of the monitored flow data (NEMEA) and developed a number of methods for detection of various types of malicious network traffic. Many of these detection methods are based on modern machine learning techniques. We also undertake research and development in the area of...

Machine Learning

We are heavily using modern machine learning (ML) methods in the areas of network traffic analysis and security. We have successfully applied ML for classification of encrypted traffic, detection of different types of attacks, prediction of future attacks, or detection of coordinated behavior of malicious IP addresses. We are continuously exploring the potential of ML techniques in other use...

Configuration via NETCONF

Our devices and applications take into account the need of remote configuration. We implement NETCONF protocol for this purpose. We publicly provide libnetconf, the general implementation of the NETCONF protocol communication and NETCONF datastores management. Furthermore, we develop Netopeer system providing NETCONF client and mainly NETCONF server application for any device or...

Home

The Liberouter project is a joint research activity of several Czech universities and the CESNET association in the field of monitoring, security and network infrastructure configuration. We develop new innovative technologies and applications for telecommunications and corporate networks. We focus on

tools for monitoring and detecting security threats,

acceleration for network traffic processing,

protection against DDoS attacks,

analysis and sharing of security incidents and events,
configuration tools using the Netconf protocol.

Our research and development activities resulted in several successful tools and in establishing several spin-off companies during the more than 15 years of the project. We have created one of the first 100Gb accelerator cards with FPGA technology and a compiler of P4 language enabling programming of the accelerator cards. Both results have been successfully commercialized by Netcope Technologies. We have developed one of the first 100 Gb probes to collect network traffic statistics, which has been commercialized by Flowmon Networks. We have supported the IETF standardization effort by developing open-source tools around NetCONF protocol. The tools have been adopted by big telco operators. We have developed protection against DDoS attacks which is deployed in the CESNET2 network backbone infrastructure as well as in the largest neutral peering node in the Czech Republic (NIX.CZ). Our further achievements are summarized on a page with Success stories while our technology is explained on Technology page.

Our future research and development activities are driven by new emerging opportunities and arising challenges that we want to address. We see a great potential of machine learning technology in dealing with the analysis of encrypted network traffic, but also in deriving relevant information about network entities. There is also a need to reduce latency for real-time network applications that come with the advent of 5G networks. Last but not least, as the number of devices on the network increases, so does the need for easy and uniform configuration and this opens up space for NetCONF-based tools. If you want to address these new challenges with us, contact us. We will be happy to welcome new members to our team, and we will be happy to work with new academic as well as commercial partners.

Liberouter – innovative technology for network infrastructure

Tweets by liberouter