BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//events.eurobsdcon.org//2026//speaker//8L8MFV
BEGIN:VTIMEZONE
TZID:CET
BEGIN:STANDARD
DTSTART:20001029T040000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-2026-TUT8LU@events.eurobsdcon.org
DTSTART;TZID=CET:20260912T140000
DTEND;TZID=CET:20260912T144500
DESCRIPTION:A challenge when setting up VPNs is the proper modification of 
 the routing table.  This is needed\, so that all traffic goes through the 
 VPN interface and is encrypted\, except the encrypted traffic generated by
  the VPN interface.  Even so\, this approach has its pitfalls\, which can 
 cause leaking unencrypted traffic[[1]].\n\nNetwork namespaces offer a way 
 to categorically solve this problem.  Network namespaces partition the net
 work interfaces present in a host.  A process running in a given network n
 amespace only sees the interfaces present within that network namespace.  
 If only the VPN interface is present\, traffic will have to go through thi
 s interface\, making it impossible to send traffic through another interfa
 ce by accident.\n\nOn OpenBSD network namespaces are called routing domain
 s.  Combine routing domains with Wireguard\, which is routing domains awar
 e out of the box\, offer safer VPNs\, while also simplifying configuration
 .  A similar effect can be achieved for other VPNs by using virtual machin
 es.\n\nIn this talk we go over the problems when just modifying the routin
 g table\, how routing domains work and can be used.\n\n[1]: https://www.us
 enix.org/conference/usenixsecurity23/presentation/xue
DTSTAMP:20260715T120313Z
LOCATION:D.0.03
SUMMARY:Reducing the headache of VPNs with routing domains - Martin Vahlens
 ieck
URL:https://events.eurobsdcon.org/2026/talk/TUT8LU/
END:VEVENT
BEGIN:VEVENT
UID:pretalx-2026-FMAKRV@events.eurobsdcon.org
DTSTART;TZID=CET:20260913T171500
DTEND;TZID=CET:20260913T180000
DESCRIPTION:Have you ever come across a piece of software and wanted to try
  it out immediately? But the installation instructions are curl|sh which\,
  besides security and safety concerns\, only work on Linux and you happen 
 to use FreeBSD? And building it from source code would require installing 
 a bunch of dependencies?\n\nWell\, there is an obvious solution to all the
 se problems: Use a VM! But how quickly can you get a VM up and running? Wi
 th SSH properly configured. And the network. And a port exposed to the out
 side? This talk introduces a tool that does exactly that: create and confi
 gure temporary VMs in a low friction way.\n\nFeatures include:\n- Create t
 emporary VMs running in-memory from templates.\n- Automatic configuration 
 of pf(4) for NAT\, port forwarding\, and strict filtering of outbound conn
 ections.\n- Automatic setup of SSH (including proper configuration of the 
 host keys): Just do "ssh tmp0" and you're connected!\n\nThis talk will als
 o give insights into various challenges in the design process such as:\n- 
 How to coordinate between multiple instances without using a daemon?\n- Ho
 w to keep state to a minimum?
DTSTAMP:20260715T120313Z
LOCATION:D.0.03
SUMMARY:Low friction temporary VMs on FreeBSD - Martin Vahlensieck
URL:https://events.eurobsdcon.org/2026/talk/FMAKRV/
END:VEVENT
END:VCALENDAR