“Nick is a rare breed of engineer. He is a master of the science but just as importantly he has a great social IQ. He has tremendous depth in networking but also is a true generalist when it comes to computing. His community contributions and leadership are quite impressive.”
About
Wanna-be artist, full time kid in a grown up body. I work on big networks, IPv6, internet…
Activity
-
I didn’t start in tech. I started on a farm. I’m a fifth-generation grain farmer in central Illinois, and for most of my life, connectivity wasn’t…
I didn’t start in tech. I started on a farm. I’m a fifth-generation grain farmer in central Illinois, and for most of my life, connectivity wasn’t…
Liked by Nick Buraglio
-
I’ve been selected to serve as Chair of the Internet Architecture Board (IAB), and had the opportunity to step into the role at my first meeting in…
I’ve been selected to serve as Chair of the Internet Architecture Board (IAB), and had the opportunity to step into the role at my first meeting in…
Liked by Nick Buraglio
-
In recent years the network operator community has made important progress in #BGP routing security: ROAs, RPKI ROV, IRR filtering…
In recent years the network operator community has made important progress in #BGP routing security: ROAs, RPKI ROV, IRR filtering…
Liked by Nick Buraglio
Experience
Education
Licenses & Certifications
Volunteer Experience
-
Ad-Hoc Grant Reviewer
National Science Foundation (NSF)
- 3 months
Science and Technology
Review grant proposals on various networking topics
-
Panel Reviewer
US Department of Commerce, NTIA
- 4 months
Science and Technology
Provide expertise and review grant proposals for various broadband funding programs
-
Panel Reviewer
National Science Foundation (NSF)
- 3 years 1 month
Science and Technology
Provide domain expertise, review grant proposals for security and networking solicitations.
-
Consulting IT Architect; Advisory Board Member
New Mexico Internet Exchange (NMIX)
- Present 6 years
Science and Technology
Provide technical and strategic advisement to the New Mexico Internet Exchange (NMIX).
-
Technical advisory board member
IPSpace AG
- Present 9 years 10 months
Science and Technology
-
General help
UIUC College of Vet Med Wildlife Medical Clinic
- 3 years
Animal Welfare
Assist UIUC College of Vet Med Wildlife Medical Clinic with feeding and care of resident and patient animals.
Publications
-
Toward live inter-domain network services on the ExoGENI testbed
IEEE INFOCOM 2018
A key dimension of reproducibility in testbeds is stable performance that scales in regular and predictable ways in accordance with declarative specifications for virtual resources. We contend that reproducibility is crucial for elastic performance control in live experiments, in which testbed tenants (slices) provide services for real user traffic that varies over time. This paper gives an overview of ExoPlex, a framework for deploying network service providers (NSPs) as a basis for live…
A key dimension of reproducibility in testbeds is stable performance that scales in regular and predictable ways in accordance with declarative specifications for virtual resources. We contend that reproducibility is crucial for elastic performance control in live experiments, in which testbed tenants (slices) provide services for real user traffic that varies over time. This paper gives an overview of ExoPlex, a framework for deploying network service providers (NSPs) as a basis for live inter-domain networking experiments on the ExoGENI testbed. As a motivating example, we show how to use ExoPlex to implement a virtual software-defined exchange (vSDX) as a tenant NSP. The vSDX implements security-managed interconnection of customer IP networks that peer with it via direct L2 links stitched dynamically into its slice. An elastic controller outside of the vSDX slice provisions network links and computing capacity for a scalable monitoring fabric within the tenant vSDX slice. The vSDX checks compliance of traffic flows with customer-specified interconnection policies, and blocks traffic from senders that trigger configured rules for intrusion detection in Bro security monitors. We present initial results showing the effect of resource provisioning on Bro performance within the vSDX.
Other authorsSee publication -
CoreFlow: Enriching Bro security events using network traffic monitoring data
INDIS Workshop
Attacks against network infrastructures can be detected by Intrusion Detection Systems (IDS). Still reaction to these events are often limited by the lack of larger contextual information in which they occurred. In this paper we present CoreFlow, a framework for the correlation and enrichment of IDS data with network flow information. CoreFlow ingests data from the Bro IDS and augments this with flow data from the devices in the network. By doing this the network providers are able to…
Attacks against network infrastructures can be detected by Intrusion Detection Systems (IDS). Still reaction to these events are often limited by the lack of larger contextual information in which they occurred. In this paper we present CoreFlow, a framework for the correlation and enrichment of IDS data with network flow information. CoreFlow ingests data from the Bro IDS and augments this with flow data from the devices in the network. By doing this the network providers are able to reconstruct more precisely the route followed by the malicious flows. This enables them to device tailored countermeasures, e.g. blocking close to the source of the attack. We tested the initial CoreFlow prototype in the ESnet network, using inputs from 3 Bro systems and more than 50 routers.
Other authorsSee publication -
NSF CICI Award #1642142 Secure and Resilient Architecture: Creating Dynamic Superfacilities the SAFE Way
National Science Foundation
Operate as a key collaborator on awarded NSF proposal #1642142
The SAFE Superfacilities project brings together researchers and IT support organizations from RENCI/UNC Chapel Hill, Duke University and DOE/ESnet. The goal of this project is to generalize support for stitching dynamic network circuits by providing the authorization and security monitoring necessary to enable general, dynamic, and safe interconnections as a foundational building block for Science DMZ, Software Defined…Operate as a key collaborator on awarded NSF proposal #1642142
The SAFE Superfacilities project brings together researchers and IT support organizations from RENCI/UNC Chapel Hill, Duke University and DOE/ESnet. The goal of this project is to generalize support for stitching dynamic network circuits by providing the authorization and security monitoring necessary to enable general, dynamic, and safe interconnections as a foundational building block for Science DMZ, Software Defined Exchanges (SDX), and superfacilities. One element of the project focuses on using the SAFE logical trust system to authorize dynamic stitching of network links in two systems developed, deployed, and operated by the researchers and their collaborators: the ExoGENI testbed and Duke's Software-Defined Science Network (SDSN) campus network exchange. A second element addresses dynamic out-of-band security monitoring of traffic over these links. The project serves as a model for improving security while maintaining high-performance friction-free network paths between campus scientists and remote facilities.
Other authorsSee publication -
Bro IDS: an intruduction
Enhancing CyberInfrastructure by Training and Education
See publicationHigh level introduction to the Bro Intrusion detection system.
-
Secure Layer 3 SDX Concept (Interdomain SDN)
ChiNOG 05
ChiNOG 05 presentation on Secure interdomain SDN for the SDX/IX and traditional autonomous system.
Other authorsSee publication -
Securing a Science DMZ or open perimeter network
See publicationA framework for securing a network or set of systems when traditional firewalls and security appliances are not an option.
-
BGP still lacks security foundation
Tech Target
See publicationThoughts on the shortcomings and lack of good, functional security in the border gateway protocol (BGP4).
-
OpenFlow as a network control protocol goes deeper than data center
Tech Target
See publicationDiscussion of OpenFlow as a network control protocol that pushes past Layer 2 to transform the WAN and optical transport layer of the network.
-
NSF CC-NIE award 1341025
National Science Foundation
See publicationCo-PI on CC-NIE Network Infrastructure grant award.
Patents
-
Data driven, machine learning augmented dynamic path optimization
Filed 12,457,173 B2
A machine learning application for efficient traffic engineering on large scale networks.
Other inventorsSee patent
Languages
-
English
Native or bilingual proficiency
-
Spanish
Elementary proficiency
-
Italian
Limited working proficiency
Organizations
-
SCinet
Volunteer
-2003, 2005, 2006, 2009, 2011, 2012, 2014 - 2019 Participate in SCinet working group in various roles including wireless, routing, network security and UNIX services. Lead SDN group 2016, 2018. Group lead for experimental networks group, 2019
Recommendations received
6 people have recommended Nick
Join now to viewMore activity by Nick
-
Crazy that the only place we ever met so far is in Prague, when Tom comes to attend MikroTik Professionals Conference, yay! And as always, we covered…
Crazy that the only place we ever met so far is in Prague, when Tom comes to attend MikroTik Professionals Conference, yay! And as always, we covered…
Liked by Nick Buraglio
-
Excited to be part of this amazing challege!
Excited to be part of this amazing challege!
Liked by Nick Buraglio
-
Lately, I’ve realized I spend more time inside Claude Code sessions than in a plain CLI. It felt like a missed opportunity, so I added MCP support to…
Lately, I’ve realized I spend more time inside Claude Code sessions than in a plain CLI. It felt like a missed opportunity, so I added MCP support to…
Liked by Nick Buraglio
-
This week we stood up IPV6 in the lab, and will begin testing NG9-1-1 technology within an IPV6 environment. #NG911
This week we stood up IPV6 in the lab, and will begin testing NG9-1-1 technology within an IPV6 environment. #NG911
Liked by Nick Buraglio
-
Finally migrated a copy of my Multivendor-Lab to IPv6-only on the WAN-Side :) Love to test all of them out and check, which Vendor is truly IPv6…
Finally migrated a copy of my Multivendor-Lab to IPv6-only on the WAN-Side :) Love to test all of them out and check, which Vendor is truly IPv6…
Liked by Nick Buraglio
-
I’m very grateful, and also humbled, taking on the role of Chair of the PACS collaboration. Arctic connectivity is something I’ve been working on…
I’m very grateful, and also humbled, taking on the role of Chair of the PACS collaboration. Arctic connectivity is something I’ve been working on…
Liked by Nick Buraglio
-
David Bowie Labyrinth figure I helped design for Plastic Meatball. I THINK these may drop in 2026.
David Bowie Labyrinth figure I helped design for Plastic Meatball. I THINK these may drop in 2026.
Liked by Nick Buraglio
-
Today’s topic is Multiprotocol Label Switching or MPLS, a foundational technology that powers service provider networks and enterprise WANs all over…
Today’s topic is Multiprotocol Label Switching or MPLS, a foundational technology that powers service provider networks and enterprise WANs all over…
Liked by Nick Buraglio
-
Hi all, I wrapped up at AARNet in December after 15 years with the organisation, the last ten of which as CTO. AARNet is an amazing group of people,…
Hi all, I wrapped up at AARNet in December after 15 years with the organisation, the last ten of which as CTO. AARNet is an amazing group of people,…
Liked by Nick Buraglio
-
Fun fact - I really wanted to start the title of this as "ASPA ASAP", but Mingwei Zhang talked me out of it due to poor readability. Anyway, ASPA…
Fun fact - I really wanted to start the title of this as "ASPA ASAP", but Mingwei Zhang talked me out of it due to poor readability. Anyway, ASPA…
Liked by Nick Buraglio
-
IPv6 Question and Answer Webinar April 9th, 12:00PM Eastern, 45 minutes This virtual online event is a live web seminar where I'll answer your most…
IPv6 Question and Answer Webinar April 9th, 12:00PM Eastern, 45 minutes This virtual online event is a live web seminar where I'll answer your most…
Liked by Nick Buraglio
-
One of the early design principles of the Internet was end-to-end connectivity: that is, every device on the Internet would be publicly addressable…
One of the early design principles of the Internet was end-to-end connectivity: that is, every device on the Internet would be publicly addressable…
Liked by Nick Buraglio
Other similar profiles
Explore top content on LinkedIn
Find curated posts and insights for relevant topics all in one place.
View top content