Open Source Summit + Embedded Linux Conference North America 2026

Delivering predictable, high‑quality network services in dense, multi‑access edge environments remains a central challenge for operators pursuing a Network‑as‑a‑Service (NaaS) strategy, where programmable APIs expose network capabilities as on‑demand services. Quality‑on‑Demand (QoD) APIs act as the intent interface in this model, enabling applications to request session‑level performance characteristics. QoD requires sophisticated new network control‑plane orchestration to address heterogeneous enforcement, multi‑access behavior, and session continuity issues across Wi‑Fi, private 5G, and public 5G domains.

QoD refers specifically to the CAMARA Project’s implementation, which provides standardized APIs for dynamic multi‑access orchestration, session‑level QoS enforcement, and integration with 3GPP control‑plane functions, including PCF, SMF, NEF, and NWDAF together with UE‑side ATSSS for traffic steering, switching, and splitting.

In this session, we will overview the strategic importance of QoD APIs, the global scale of the emerging NaaS domain, and detail Open Source technologies that are foundational to the industry.

Cloudflare’s global network relies on Debian Linux machines across 330+ cities. To enhance production security we wanted to ensure that our servers can only run authorized software. For this we leverage Linux Kernel's IMA-Measurement to validate binary signatures before execution. Our system encompasses first-party software, Docker containers, and open-source Debian packages.

This talk illustrates how we successfully injected digital signatures into every Debian package installed on our fleet. This involved deep dives into the Linux Kernel, modifying dpkg, and building a mirroring system that could sign upstream repositories. Learn about our journey enhancing software integrity on a massive scale. This session is ideal for those interested in Linux security, package management, and Internet-scale system administration.