Cloud Native Computing Switzerland

Agenda:
Would you like to speak at this event? Contact us at https://cnc-meetup.ch! Guidelines:

• All sessions are held in English.
• No product or sales pitches are allowed.
• All projects showcased should be open source.
• We cannot cover travel costs but welcome speakers from other regions.
• We're seeking more diversity among our speakers: underrepresented groups are welcome!

16:30 – Door Opening
17:00 – Welcome, Intro, & Announcements
17:05 – Token Exchange and Kubernetes, Urs Zurbuchen (Airlock)
17:35 – 5 minutes pause
17:40 – Can you go faster? Building a 25Gbps Home Router on Talos OS, Jan Untersander (OST)
18:10 – 5 minutes pause
18:15 – Building Resilient Multi-Cluster DNS: Our Experience with K8gb, Lars Barmettler (Open Systems)
18:45 – Final words, networking & apéro

Token Exchange and Kubernetes
Tokens are everywhere. Many applications and microservices use them for authentication and authorisation. What happens if a Kubernetes pod receives tokens from multiple issuers? How do you achieve zero trust and eliminate the risk of unauthorised token re-use? Learn how Token Exchange elegantly provides a solution, how it works on a technical level, and what changes are required within your Kubernetes cluster.
Urs Zurbuchen is a Senior Security Consultant at Airlock. As an engineer and consultant for the design and implementation of IT security solutions, he is familiar with the requirements for secure digitalisation processes. Urs has more than 20 years of experience in the design and integration of web application security solutions (web application firewall, authentication, single sign-on, access control) as well as in the design and implementation of identity & access management projects (user management, authorisation management, processes, provisioning). He can advise on the conception of non-technical topics such as organisation, guidelines, compliance requirements and regulations, as well as on the implementation of application and system architecture audits.

Can you go faster? Building a 25Gbps Home Router on Talos OS
What if your decade-old gaming rig could become a 25 Gbps router? While few home networks actually need that much bandwidth, the rise of affordable multi-gigabit internet plans and inexpensive high-speed NICs makes it possible to push home networking into enterprise territory. In this talk, I will share my experience of turning an old gaming PC into a high-performance home router using Talos OS. I'll cover why I chose a container-optimized OS like Talos, the hardware requirements, and the challenges I faced during setup. Along the way, we’ll dive into bare metal Kubernetes networking and explore how Talos simplifies cluster management. Whether you’re chasing more bandwidth “just because you can” or looking to better understand high-speed Kubernetes networking on bare metal, you’ll leave with practical insights and a reproducible path to build your own next-gen home router.
Jan Untersander is an educator and system engineer working for the Institute for Network and Security at the Eastern Switzerland University of Applied Sciences (OST). Passionate about open-source software, the cloud-native ecosystem, and networking, he enjoys sharing knowledge through courses that prepare the next generation of cloud and network engineers. In his spare time, he loves experimenting with new technologies and ever improving his home lab setup.

Building Resilient Multi-Cluster DNS: Our Experience with K8gb
How do you handle DNS when services or clusters go down? Manual failover is slow, error-prone, and doesn't scale. This presentation demonstrates how we got high resiliency with K8gb (Kubernetes Global Balancer) to enable intelligent, health-based DNS routing across multiple clusters. Learn from our production experience: implementation strategy, observability tooling, including our DNS error dashboard, and the robustness improvements we achieved. We'll cover the good, the bad, and the lessons learned from running multi-cluster DNS at scale.
Lars Barmettler, Platform Engineer in a team of 5 People responsible for the Cloud platform at Open Systems, a company renowned for deep networking expertise. For our central platform, we chose a multi-cluster setup to increase resilience.

The event will be recorded and made available later on VSHN's YouTube channel: https://vshn.tv – subscribe to be notified of updates!

We expect all participants to abide by VSHN's Conference Code of Conduct: https://www.vshn.ch/en/code-of-conduct/

If you would like to share your cloud-native projects at the CNC Switzerland meetup events or sponsor future events, just send us your talk suggestion here: https://cnc-meetup.ch. We look forward to hearing from you!