Sovereign software in the cloud? Many projects are taking care of that. FOSS services running on servers? Lots of excellent choice.
But what about your office, the place where you work? Is your local network just invisible infrastructure at the mercy of whatever vendor you picked?

This talk will show you how we built and operate the "Flurfunk" network prototype at BSI (German Federal Office for Information Security). Flurfunk is a Proof of Concept wireless and wired network with a sizable number of human users with purely FOSS infrastructure: Routers, Switches, WiFi Access Points and a Certificate Authority, all of them running FOSS firmware, operating systems and services. This whole infrastructure is centrally orchestrated and requires almost zero maintenance.

The magic lies in OpenWrt https://openwrt.org/ (for the network components) and Smallstep step-ca https://smallstep.com/open-source/ combined with OpenSSL https://www.openssl.org/ (for the CA), as well as Debian https://www.debian.org/ , Das U-Boot https://u-boot.org/ and coreboot https://www.coreboot.org/ (behind the scenes).

Yes, the network supports the latest and greatest in authentication standards (WPA3 Enterprise), but it also offers user-friendly setup for users and admins. This includes automated certificate rollout to all centrally managed laptops and smartphones for WLAN access via WPA3 Enterprise. Yes, Flurfunk aims to be CRA compliant ahead of time.

Yes, all components are current off-the-shelf hardware and yes, installing OpenWrt on them is easy (no tools needed).

No, Flurfunk is not a production network nor does it come with support, it's a PoC.

Do you want to stand on the shoulders of giants as we do, and replicate the setup for your own network? Of course the configuration files for all components as well as links to the relevant firmware/OS images will be provided for download. Where applicable, existing tutorials/wikis have been improved.