Re: do you use SPF TXT RRs? (RFC4408)

2010-10-05 Thread Owen DeLong
On Oct 4, 2010, at 1:59 PM, valdis.kletni...@vt.edu wrote: On Mon, 04 Oct 2010 13:30:55 PDT, Owen DeLong said: Removing a few points probably isn't a bad idea so long as you have a list of domains for which points should be added. 140 million .coms. Throw-away domains. I do believe that

Re: RIP Justification

2010-10-05 Thread Owen DeLong
The knowhow for BGP in that environment is all of about 30 minutes worth of training. They should find a way to get it, IMHO. Owen On Oct 4, 2010, at 10:56 PM, Jonathon Exley wrote: It also scales better from the SP point of view. If you have 1000 L3VPN services on your PE node using OSPF to

Re: [ncc-services-wg] RPKI Resource Certification: building features

2010-10-05 Thread Alex Band
On 4 Oct 2010, at 23:18, Randy Bush wrote: 1) We have not implemented support for this yet. We plan to go live with the fully hosted version first and extend it with support for non-hosted systems around Q2/Q3 2011. this is a significant slip from the 1q11 we were told in prague. care to

Re: A New TransAtlantic Cable System

2010-10-05 Thread Nick Hilliard
On 04/10/2010 18:24, Heath Jones wrote: I'm not clever enough to know of some way that you could do optical regeneration without converting the signal to electrical and retransmitting back as optical.. How is that done? Wikipedia has a useful article on this: http://en.wikipedia.org/wiki/EDFA

Re: [ncc-services-wg] RPKI Resource Certification: building features

2010-10-05 Thread Randy Bush
alex, i am not gonna argue with you. 96% of your users will be happy for you to do everything for them, despite the fact that the wrong holder has the keys (and, as john says, the liability). but 96% of your address space, i.e. the large holders, will want to hold their own keys and talk

Re: A New TransAtlantic Cable System

2010-10-05 Thread Joe Loiacono
Dorn Hetzel dhet...@gmail.com wrote on 10/04/2010 06:22:58 PM: With regards to the Wired Article, I still have my copy of that issue and would consider that article perhaps my favorite magazine article of all time. Same here. A classic.

Re: A New TransAtlantic Cable System

2010-10-05 Thread Heath Jones
What's that quote again...? Oh, that's it: The more you know, the more you know you don't. It feels very appropriate now :) I was wondering for quite some time if there was a scientific term for that effect, since many of us seem to run into the opposite quite often. It turns out that it's

Anyone can share the Network card experience

2010-10-05 Thread Deric Kwok
Hi Anyone can share the Network card experience ls onborad PCI Expresscard better or Plug in slot PCI Express card good? How are their performance in Gig transfer rate? Thank you so much

Re: A New TransAtlantic Cable System

2010-10-05 Thread Chris Tracy
Heath, By the way, my recollection is the undersea regenerators do purely optical regeneration. There is no O-E conversions undersea, only at the landing stations and terrestrial components. I'm not clever enough to know of some way that you could do optical regeneration without

re: Anyone can share the Network card experience

2010-10-05 Thread Nick Olsen
IMHO, Nothing beats a good intel NIC. I'm a big fan of the intel pro/1000GT. In terms of performance, I think it is more determined by the card chipset. Nick Olsen Network Operations (877) 804-3001 x106 From: Deric Kwok deric.kwok2...@gmail.com Sent:

Re: Anyone can share the Network card experience

2010-10-05 Thread Heath Jones
It depends on the speed of the PCI slot. In saying that, you are only trying to transfer 1Gb/s. http://en.wikipedia.org/wiki/PCI_Express Note the thoughts on there about full duplex.. PCI Express 1.0a In 2003, PCI-SIG introduced PCIe 1.0a, with a data rate of 250 MB/s and a transfer rate of 2.5

Rough cost for monitoring

2010-10-05 Thread Eric Gauthier
Heya, I'm trying to quickly pull together some very rough budget numbers for purchasing a full monitoring system (network, server, security, facilities). Is there a source for rough unit costs? If not, does anyone have recent RFI pricing that they'd be willing to share? Eric :0

Re: Rough cost for monitoring

2010-10-05 Thread Greg Whynott
get a VAR involved, it'll be more efficient and accurate than asking here. things change weekly. -g On Oct 5, 2010, at 10:25 AM, Eric Gauthier wrote: Heya, I'm trying to quickly pull together some very rough budget numbers for purchasing a full monitoring system (network, server,

Re: do you use SPF TXT RRs? (RFC4408)

2010-10-05 Thread Douglas Otis
On 10/4/10 6:55 PM, Kevin Stange wrote: The most common situation where another host sends on your domain's behalf is a forwarding MTA, such as NANOG's mailing list. A lot of MTAs will only trust that the final MTA handling the message is a source host. In the case of a mailing list, that's

Re: Anyone can share the Network card experience

2010-10-05 Thread Greg Whynott
the question of which is better, onboard vrs plug in would in part be determined by the type (make/model) of motherboard you are speaking of. How they have IRQs allocated (which is something you may be able to adjust), where it is attached to the bus etc… Also, what comes with the main

Re: Anyone can share the Network card experience

2010-10-05 Thread Heath Jones
For 10Gbit we use Intel cards for production service machines,  and ConnextX/Intel in the HPC cluster. Greg - I've not been exposed to 10G on the server side.. Does the server handle the traffic load well (even with offloading) - that's a LOT of web requests / app queries per second! Or are

Re: Rough cost for monitoring

2010-10-05 Thread Charles n wyble
One would need to know a lot more about the specifics of your requirements. My suggestion would be to invest money in qualified people to watch over something like opennms or (my favorite) a combination of alienvault and opsview. Eric Gauthier e...@roxanne.org wrote: Heya, I'm trying to

Re: Anyone can share the Network card experience

2010-10-05 Thread Chris Tracy
Anyone can share the Network card experience ls onborad PCI Expresscard better or Plug in slot PCI Express card good? How are their performance in Gig transfer rate? IMHO, Nothing beats a good intel NIC. I'm a big fan of the intel pro/1000GT. In terms of performance, I think it is more

Re: Anyone can share the Network card experience

2010-10-05 Thread Greg Whynott
Hi, most of our traffic is heading directly into memory, not hitting the local disks, on the HPC end of things. Our file servers are feeding the network with around 24 x 10Gibit (active/active clusters), and regularly run at over 80 percent on all ports during runs.. this is all HPC /

Re: A New TransAtlantic Cable System

2010-10-05 Thread Heath Jones
Erbium Doped Fiber Amplifiers (EDFAs) do not re-shape or re-time the signals (the last 2 R's in 3R -- re-amplification, re-shaping, and re-timing) Thanks Chris - even more reading to do :) It's interesting stuff that's for sure. This is also pretty cool:

ILNP and DNS (from 2010.10.04 NANOG50 day 1 morning notes)

2010-10-05 Thread Michael Sinatra
Michael Sinatra, UCB; what are thoughts around best practices for auth DNS server in ILNP world, and how do you handle updates for locator values to the auth servers when a link changes? A: you need DNSsec to be running, you make updates, you check authenticity of the update, etc. How will

Re: ILNP and DNS (from 2010.10.04 NANOG50 day 1 morning notes)

2010-10-05 Thread Tony Finch
On Tue, 5 Oct 2010, Michael Sinatra wrote: Hence the question: How should I provision authoritative DNS servers, given that the prefix information is provided via DNS--including the prefix information for the DNS servers themselves--leading to a chicken-and-egg problem. In addition, I would

Level3 filter updates

2010-10-05 Thread Florin Veres
Hey guys, Anyone knows how often does Level3 update their filters? I have a prefix in Europe which has a route-obj from Sunday, it's accepted in Level3 Europe from Monday, but in the US it's still not accepted. Thanks, Florin

RE: Level3 filter updates

2010-10-05 Thread Paul Stewart
Normally it's done every night (overnight)... that's been our experience... Paul -Original Message- From: Florin Veres [mailto:flo...@futurefreedom.ro] Sent: Tuesday, October 05, 2010 12:42 PM To: nanog@nanog.org Subject: Level3 filter updates Hey guys, Anyone knows how often does

Re: ILNP and DNS (from 2010.10.04 NANOG50 day 1 morning notes)

2010-10-05 Thread Christopher Morrow
On Tue, Oct 5, 2010 at 12:18 PM, Tony Finch d...@dotat.at wrote: On Tue, 5 Oct 2010, Michael Sinatra wrote: Hence the question: How should I provision authoritative DNS servers, given that the prefix information is provided via DNS--including the prefix information for the DNS servers

Re: Level3 filter updates

2010-10-05 Thread Bret Clark
I was told every 48 hours when I recently dealt with Level3 on a similar thing about a month ago. On 10/05/2010 12:50 PM, Paul Stewart wrote: Normally it's done every night (overnight)... that's been our experience... Paul -Original Message- From: Florin Veres

Re: A New TransAtlantic Cable System

2010-10-05 Thread Chris Tracy
Heath, I just had a thought about EFDA - please forgive my lack of terminology though, i'll try to explain: Say you have signal coming in to EFDA, the signal is just amplified (as you said, also noise - the whole source signal). Would it be possible to extract via PLL or similar the source

2010.10.05 NANOG50 Tuesday morning notes

2010-10-05 Thread Matthew Petach
Notes from NANOG50 day 2 (Tuesday) morning session are now posted at http://kestrel3.netflight.com/2010.10.05-NANOG50-morning-notes.txt Again, apologies for misspelled names, typos, etc. I'm dashing to lunch now, but can fix things when I get back. ^_^;; Matt

Re: A New TransAtlantic Cable System

2010-10-05 Thread Heath Jones
Would it be possible to extract via PLL or similar the source clock and use that to modulate the amplifier power? Although you can amplify just a single wavelength with an EDFA (has to be in the 1550nm range, not 1310nm), most deployments are using EDFAs in a DWDM environment.  The C-band

RE: Level3 filter updates

2010-10-05 Thread powerzo...@gmail.com
Level 3 updates their filters every night. I used to work @ level3

Re: ILNP and DNS (from 2010.10.04 NANOG50 day 1 morning notes)

2010-10-05 Thread Michael Sinatra
On 10/5/10 9:18 AM, Tony Finch wrote: On Tue, 5 Oct 2010, Michael Sinatra wrote: Hence the question: How should I provision authoritative DNS servers, given that the prefix information is provided via DNS--including the prefix information for the DNS servers themselves--leading to a

Re: ILNP and DNS (from 2010.10.04 NANOG50 day 1 morning notes)

2010-10-05 Thread Tony Finch
On Tue, 5 Oct 2010, Michael Sinatra wrote: Which then implies that parent zones must use DDNS, and must enable secure updates from the child (from wherever the child's DDNS updates are sourced). Yes, well if the authentication can be sorted out this would be much better than having to mess

Re: ILNP and DNS (from 2010.10.04 NANOG50 day 1 morning notes)

2010-10-05 Thread Jack Bates
On 10/5/2010 2:03 PM, Michael Sinatra wrote: The issue is how should I deal with the situation that you need to know the correct L64 record to get to my network (without waiting for a timeout if you try the broken prefix first) and the way to know what the correct prefixes are is to query a

2010.10.05 NANOG50 Tuesday afternoon notes

2010-10-05 Thread Matthew Petach
I've posted the Tuesday afternoon notes at http://kestrel3.netflight.com/2010.10.05-NANOG50-afternoon-notes.txt and now I'm dashing to the social, because they're turning out the lights on me in the hall here. ^_^;; Matt

Re: 2010.10.05 NANOG50 Tuesday afternoon notes

2010-10-05 Thread kris foster
On Oct 5, 2010, at 4:15 PM, Matthew Petach wrote: I've posted the Tuesday afternoon notes at http://kestrel3.netflight.com/2010.10.05-NANOG50-afternoon-notes.txt and now I'm dashing to the social, because they're turning out the lights on me in the hall here. ^_^;; Thanks Matt, your notes

Facebook down!! Alert!

2010-10-05 Thread James Smith
At 1:20am here in Canada, NB our networks are showing that facebook is down. Please confirm in the USA. ~SmithwaySecurity Sent from my iPhone

Re: Facebook down!! Alert!

2010-10-05 Thread Mike Lyon
Same here in SF Bay Area On Tue, Oct 5, 2010 at 9:44 PM, James Smith ja...@smithwaysecurity.comwrote: At 1:20am here in Canada, NB our networks are showing that facebook is down. Please confirm in the USA. ~SmithwaySecurity Sent from my iPhone

Re: Facebook down!! Alert!

2010-10-05 Thread Quinn Kuzmich
Down here in Denver CO On Tue, Oct 5, 2010 at 10:44 PM, James Smith ja...@smithwaysecurity.comwrote: At 1:20am here in Canada, NB our networks are showing that facebook is down. Please confirm in the USA. ~SmithwaySecurity Sent from my iPhone

Re: Facebook down!! Alert!

2010-10-05 Thread Michiel Muhlenbaumer
Hi James, On 6 okt 2010, at 06:44, James Smith wrote: At 1:20am here in Canada, NB our networks are showing that facebook is down. Please confirm in the USA. No reason to panic over here (.nl) --- Michiel Muhlenbaumer Atrato IP Networks

Re: Facebook down!! Alert!

2010-10-05 Thread Patrick Muldoon
On Oct 6, 2010, at 12:44 AM, James Smith wrote: At 1:20am here in Canada, NB our networks are showing that facebook is down. Please confirm in the USA. http://downforeveryoneorjustme.com/facebook.com looks like it isn't just you .. Down from here as well. Looks like a productive night of

Re: Facebook down!! Alert!

2010-10-05 Thread Mark Hofman
Ditto In AU and from other reports US. Guess productivity will go up ;-) On 06/10/2010, at 15:46, James Smith ja...@smithwaysecurity.com wrote: At 1:20am here in Canada, NB our networks are showing that facebook is down. Please confirm in the USA. ~SmithwaySecurity Sent from my

Re: Facebook down!! Alert!

2010-10-05 Thread Joly MacFie
Down , down, down in NYC. On Wed, Oct 6, 2010 at 12:46 AM, Mike Lyon mike.l...@gmail.com wrote: Same here in SF Bay Area On Tue, Oct 5, 2010 at 9:44 PM, James Smith ja...@smithwaysecurity.com wrote: At 1:20am here in Canada, NB our networks are showing that facebook is down.

Re: Facebook down!! Alert!

2010-10-05 Thread Mikhail Strizhov
Works fine here, Northern Colorado. -- Sincerely, Mikhail Strizhov mailto:striz...@cs.colostate.edu On 10/05/2010 10:47 PM, Patrick Muldoon wrote: On Oct 6, 2010, at 12:44 AM, James Smith wrote: At 1:20am here in Canada, NB our networks are showing that facebook is down. Please confirm

Re: Facebook down!! Alert!

2010-10-05 Thread Zaid Ali
I think the Outages mailing list is more appropriate for this. On 10/5/10 9:46 PM, Mike Lyon mike.l...@gmail.com wrote: Same here in SF Bay Area On Tue, Oct 5, 2010 at 9:44 PM, James Smith ja...@smithwaysecurity.comwrote: At 1:20am here in Canada, NB our networks are showing that

Re: Facebook down!! Alert!

2010-10-05 Thread James Smith
Seems to be working just fine here in Toronto. On Wed, Oct 6, 2010 at 12:49 AM, Mark Hofman mhof...@shearwater.com.auwrote: Ditto In AU and from other reports US. Guess productivity will go up ;-) On 06/10/2010, at 15:46, James Smith ja...@smithwaysecurity.com wrote: At 1:20am here in

Re: Facebook down!! Alert!

2010-10-05 Thread Mark
It's back up. There goes that short burst of productivity. On Oct 6, 2010, at 12:49 PM, Mark Hofman wrote: Ditto In AU and from other reports US. Guess productivity will go up ;-) On 06/10/2010, at 15:46, James Smith ja...@smithwaysecurity.com wrote: At 1:20am here in Canada, NB our

Re: Facebook down!! Alert!

2010-10-05 Thread Larry Brower
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 James Smith wrote: At 1:20am here in Canada, NB our networks are showing that facebook is down. Please confirm in the USA. ~SmithwaySecurity Sent from my iPhone We need Alert and ! in the subject? seriously? Sorry, but I don't see a

Re: Facebook down!! Alert!

2010-10-05 Thread Matthew Dodd
Still up here in Massachusetts over v4 and v6. Since 11:45am (that is PST, I believe) there is still an ongoing issue with real-time updates according to the Live Status page. http://developers.facebook.com/live_status Visiting that page just now, the latest API response time graphs are

Re: Facebook down!! Alert!

2010-10-05 Thread Joly MacFie
Yeah it's back. On Wed, Oct 6, 2010 at 12:56 AM, Mikhail Strizhov striz...@cs.colostate.edu wrote: Works fine here, Northern Colorado. -- Sincerely, Mikhail Strizhov mailto:striz...@cs.colostate.edu On 10/05/2010 10:47 PM, Patrick Muldoon wrote: On Oct 6, 2010, at 12:44 AM, James

Re: [Nanog-futures] Memberships, Bylaws and other election matters

2010-10-05 Thread Sylvie LaPerriere
I am joining my voice to Steve's. I view this discussion on membership as very healthy and it should continue until the community reaches a strong consensus. I think voting 'yes' is the way forward and I also pledge to do what I can with my Board vote to keep from creating any categories of

Re: [Nanog-futures] Memberships, Bylaws and other election matters

2010-10-05 Thread Joe Provo
An interesting exercise might be to compare the cost of a vote (thus far the only membership benefit) today and as proposed. -Today Students: Max 60/yr (20 per meeting) at $50 per (minimum $100 / 2 years) Standard: $225 (minimum 1 meeting at $450 / 2 years) Freebies: SC-approved

Re: [Nanog-futures] Memberships, Bylaws and other election matters

2010-10-05 Thread Kevin Oberman
Yes, I think 'yes' is the right vote. I do have one major concern, but I will vote 'yes' on both issues, regardless. I really worry about the voter base becoming disjoint from the attendee base. I think meeting attendees should get a vote as a part of attendance. How this is handled is not