Re: CDNs for carriers

2015-06-29 Thread Jared Mauch

 On Jun 29, 2015, at 9:33 AM, Christopher Morrow morrowc.li...@gmail.com 
 wrote:
 
 On Mon, Jun 29, 2015 at 8:53 AM, Ramy Hashish ramy.ihash...@gmail.com wrote:
 do you have any figures about how much this
 recommended CDN save from the Internet BW?
 
 isn't that going to wholey depend on your traffic mix/matrix?
 Wouldn't it be helpful to look at where your users send/receive
 traffic and then figure out the best next addition?
 
 Maybe your best bet isn't another CDN, but better/more/wider peering
 with folk 2+ AS hops out from your current next-hop-as set?

I would say that step 1 is to figure out where your traffic is going.  
Generically saying “CDN” isn’t enough to know what the results are. 

Once you’ve determined where the traffic is going/coming from you can start to 
make educated decisions vs just “CDN” guessing.  An enterprise profile looks 
much different than residential for example.

I recall some companies calling our NOC “under attack” because their software 
update server went down and the machines failed safe and were all fetching 
software updates from “the internet” vs the internal caching proxy.

If you have money to spend, there are a few vendors out there from cheap to 
 that will help you look at the traffic to make these decisions.

If you don’t have money to spend, look at NFSen/pmacct.  You may be able to 
spin up a low-cost VM at your local cloud provider (e.g.: digital ocean).

Remember to export both your v6 and v4 (ip classic) flows as these can widely 
differ.

Look for common ASNs or IP ranges.

I’m sure there’s numerous consultants on the list that would also assist you in 
this process.

Hope this helps.

- jared




Re: ARIN just subdivided their last /17, /18, /19, /20, /21 and /22. Down to only /23s and /24s now. : ipv6

2015-06-29 Thread Javier Henderson
 On Jun 29, 2015, at 8:42 AM, Stephen Satchell l...@satchell.net wrote:
 
 On 06/29/2015 01:16 AM, a.l.m.bu...@lboro.ac.uk wrote:
 Hi,
 
 I knew several people who built their career path on the assumptions of 
 IPX.  Ouch.
 
 or DECnet   ;-)
 
 Or XNS.  On the other hand, people did have a nice career with SNA...but they 
 weren't trying to push packets over the

“LAT”

-jav



Re: How long will it take to completely get rid of IPv4 or will it happen at all?

2015-06-29 Thread Bob Evans
It is true - you I have had to throttle back for years for optimum
transport on many carriers. In fact, if you have an ATT transit in your
mix of BGP you wont get a ping response at 1500 MTU from that ATT router.



On Sun, 28 Jun 2015 08:02:52 -0700, Owen DeLong said:

  On Jun 27, 2015, at 11:48 , manning bmann...@karoshi.com wrote:
 
  Quite a few folks actually.  (the 802.5  802.4 specs)….
  This is kind of like asking when we will stop using ethernet framing
 (ethernet was designed for a 3Mbps transmission rate)
  yet we are deploying 100Gbps networks.  Still stuck on that 1500byte
 limitation.  When can we get rid of that?

 Many networks have… It’s called “Jumbo Frames”

 Unfortunately, enough people do things to break PMTU Discovery that it's
 not
 usually feasible to send jumbograms outside your directly controlled
 networks.
 So you may actually have jumbogram support all the way one end to the
 other,
 but you can't rely on it and have to throttle back to 1500 (or even
 smaller)
 in self-defense





CDNs for carriers

2015-06-29 Thread Ramy Hashish
Hello there,

Does anybody recommend a CDN to work beside GGC and AKAMAI? and if you have
a real life deployment, do you have any figures about how much this
recommended CDN save from the Internet BW? (currently both of GGC and
AKAMAI saves about 40% of our Internet BW)

Thanks,

Ramy


Re: ARIN just subdivided their last /17, /18, /19, /20, /21 and /22. Down to only /23s and /24s now. : ipv6

2015-06-29 Thread Jared Mauch

 On Jun 27, 2015, at 2:45 PM, frnk...@iname.com frnk...@iname.com wrote:
 
 What's the ratio of mobile (cellular) endpoints to non-mobile devices?  And
 we know that mobile continues to grow faster than fixed endpoints -- at what
 point will the scales naturally tip to IPv6?

this is why i’m very curious to see if google follows apple on the ipv6 software
testing side.  While I have some technical nits with the way that apple is
enabling some testing as it impacts DNSSEC/DANE to start naming things, it does
place us on the right trajectory.

My guess is that IPv4 has a long life ahead of itself.

- Jared

Web content categorization

2015-06-29 Thread Ramy Hashish
Good day all,

We are looking forward to filter the broadband traffic based on the
category, anybody has any cost effective solution?

Thanks,

Ramy


Re: CDNs for carriers

2015-06-29 Thread Valdis . Kletnieks
On Mon, 29 Jun 2015 14:53:57 +0200, Ramy Hashish said:

 Does anybody recommend a CDN to work beside GGC and AKAMAI?

I would think that talking to Netflix about hosting one of their
boxes would be the obvious next step?


pgpJmGzrRp4N0.pgp
Description: PGP signature


Re: CDNs for carriers

2015-06-29 Thread Mike Hammett
Simple flows wouldn't necessarily tell you if you're pulling a bunch from a 
Netflix caching box on your upstream somewhere. You'd think you had a huge 
amount going to your current upstream because technically you do, but a local 
cache or peer could alter that significantly. As we've been starting up our IX, 
we're finding that we can send lists of ASNs and prefixes and the various CDNs 
will tell us how much traffic they see going to our customers. Combine that 
with what flows tell you and I think you've got a good approach. 

What are some good approaches to determining traffic levels to not only ASNs, 
but also that ASN's downstream ASNs? You may have ASNs A, B, C, D and E in your 
flows. Say none of them represent more than 5% of your traffic by themselves. 
If B, C, D and E all purchase transit from A and you can reasonably peer with 
A, you actually can move 25% of your traffic over to a peer. Maybe there is no 
good approach at doing that without a bunch of manual work or paying someone 
else to do it. 

Looking at some stats from one of our customers that is also going through 
Equinix Chicago, for their average inbound ~37% of traffic was Netflix, Google 
was 34% and the next highest was Apple at 5%. Note that Akamai had left Chicago 
Equinix by this point, so they wouldn't be reflected in those numbers. Those 
percentages are percent of all traffic they send to Equinix. I believe about 
2/3s of their total transit went to Equinix when that got turned up. Their 
total traffic went up once joining the Equinix IX, presumably because they were 
now bypassing some congestion somewhere. 




- 
Mike Hammett 
Intelligent Computing Solutions 
http://www.ics-il.com 



Midwest Internet Exchange 
http://www.midwest-ix.com 


- Original Message -

From: Jared Mauch ja...@puck.nether.net 
To: Christopher Morrow morrowc.li...@gmail.com 
Cc: nanog list nanog@nanog.org, Ramy Hashish ramy.ihash...@gmail.com 
Sent: Monday, June 29, 2015 8:44:18 AM 
Subject: Re: CDNs for carriers 


 On Jun 29, 2015, at 9:33 AM, Christopher Morrow morrowc.li...@gmail.com 
 wrote: 
 
 On Mon, Jun 29, 2015 at 8:53 AM, Ramy Hashish ramy.ihash...@gmail.com 
 wrote: 
 do you have any figures about how much this 
 recommended CDN save from the Internet BW? 
 
 isn't that going to wholey depend on your traffic mix/matrix? 
 Wouldn't it be helpful to look at where your users send/receive 
 traffic and then figure out the best next addition? 
 
 Maybe your best bet isn't another CDN, but better/more/wider peering 
 with folk 2+ AS hops out from your current next-hop-as set? 

I would say that step 1 is to figure out where your traffic is going. 
Generically saying “CDN” isn’t enough to know what the results are. 

Once you’ve determined where the traffic is going/coming from you can start to 
make educated decisions vs just “CDN” guessing. An enterprise profile looks 
much different than residential for example. 

I recall some companies calling our NOC “under attack” because their software 
update server went down and the machines failed safe and were all fetching 
software updates from “the internet” vs the internal caching proxy. 

If you have money to spend, there are a few vendors out there from cheap to 
 that will help you look at the traffic to make these decisions. 

If you don’t have money to spend, look at NFSen/pmacct. You may be able to spin 
up a low-cost VM at your local cloud provider (e.g.: digital ocean). 

Remember to export both your v6 and v4 (ip classic) flows as these can widely 
differ. 

Look for common ASNs or IP ranges. 

I’m sure there’s numerous consultants on the list that would also assist you in 
this process. 

Hope this helps. 

- jared 





Re: CDNs for carriers

2015-06-29 Thread Christopher Morrow
On Mon, Jun 29, 2015 at 9:59 AM, Mike Hammett na...@ics-il.net wrote:
 Simple flows wouldn't necessarily tell you if you're pulling a bunch from a 
 Netflix caching box on your upstream somewhere. You'd think you had a huge 
 amount going to your current upstream because technically you do, but a local 
 cache or peer could alter that significantly.

probably dns and flow gets you some more traction, right?
meaning: gosh 1.2.3.0/26 is sending us LOTS of traffic... oh:
nslookup 1.2.3.4 == hosta.networkb.netflix.com, ah-ha!

where ptr records are generated I suppose like:
$ host 63.88.73.108
108.73.88.63.in-addr.arpa domain name pointer
108.73.88.63.ashburn.google-ggc.verizon.com.

Also, often just port/protocol are helpful enough... you won't know
without looking (at the OP's traffic I mean), which it sounds like
hasn't really been done yet?


Re: ARIN just subdivided their last /17, /18, /19, /20, /21 and /22. Down to only /23s and /24s now. : ipv6

2015-06-29 Thread Stephen Satchell

On 06/29/2015 01:16 AM, a.l.m.bu...@lboro.ac.uk wrote:

Hi,


I knew several people who built their career path on the assumptions of IPX.  
Ouch.


or DECnet   ;-)


Or XNS.  On the other hand, people did have a nice career with SNA...but 
they weren't trying to push packets over the




Re: CDNs for carriers

2015-06-29 Thread Christopher Morrow
On Mon, Jun 29, 2015 at 8:53 AM, Ramy Hashish ramy.ihash...@gmail.com wrote:
 do you have any figures about how much this
 recommended CDN save from the Internet BW?

isn't that going to wholey depend on your traffic mix/matrix?
Wouldn't it be helpful to look at where your users send/receive
traffic and then figure out the best next addition?

Maybe your best bet isn't another CDN, but better/more/wider peering
with folk 2+ AS hops out from your current next-hop-as set?


Re: CDNs for carriers

2015-06-29 Thread Jared Mauch

 On Jun 29, 2015, at 9:59 AM, Mike Hammett na...@ics-il.net wrote:
 
 Simple flows wouldn't necessarily tell you if you're pulling a bunch from a 
 Netflix caching box on your upstream somewhere. You'd think you had a huge 
 amount going to your current upstream because technically you do, but a local 
 cache or peer could alter that significantly. As we've been starting up our 
 IX, we're finding that we can send lists of ASNs and prefixes and the various 
 CDNs will tell us how much traffic they see going to our customers. Combine 
 that with what flows tell you and I think you've got a good approach. 
 
 What are some good approaches to determining traffic levels to not only ASNs, 
 but also that ASN's downstream ASNs? You may have ASNs A, B, C, D and E in 
 your flows. Say none of them represent more than 5% of your traffic by 
 themselves. If B, C, D and E all purchase transit from A and you can 
 reasonably peer with A, you actually can move 25% of your traffic over to a 
 peer. Maybe there is no good approach at doing that without a bunch of manual 
 work or paying someone else to do it. 
 
 Looking at some stats from one of our customers that is also going through 
 Equinix Chicago, for their average inbound ~37% of traffic was Netflix, 
 Google was 34% and the next highest was Apple at 5%. Note that Akamai had 
 left Chicago Equinix by this point, so they wouldn't be reflected in those 
 numbers. Those percentages are percent of all traffic they send to Equinix. I 
 believe about 2/3s of their total transit went to Equinix when that got 
 turned up. Their total traffic went up once joining the Equinix IX, 
 presumably because they were now bypassing some congestion somewhere. 
 

Sure.  There are a lot of dynamics to consider.  It’s fairly easy to look at 
TCP speeds and retransmissions to determine the link speed involved.  I’ve seen 
many CDNs quickly identify congested or paths without congestion and engage in 
some adaptive behaviors.

This being said, there is not a single solution to everything.  Chris mentioned 
using DNS, which is a nice method assuming you see all the queries within your 
traffic cone.

- Jared

Re: CDNs for carriers

2015-06-29 Thread Patrick W. Gilmore
Netflix:
https://openconnect.netflix.com/

Frankly, those three are roughly the same size, and the only ones anywhere near 
that size.

-- 
TTFN,
patrick

 On Jun 29, 2015, at 08:53 , Ramy Hashish ramy.ihash...@gmail.com wrote:
 
 Hello there,
 
 Does anybody recommend a CDN to work beside GGC and AKAMAI? and if you have
 a real life deployment, do you have any figures about how much this
 recommended CDN save from the Internet BW? (currently both of GGC and
 AKAMAI saves about 40% of our Internet BW)
 
 Thanks,
 
 Ramy



Re: OK, Google. Time to dial back the AI hype.

2015-06-29 Thread Jon Lewis

On Sun, 28 Jun 2015, Mel Beckman wrote:

Google has always played fast and loose with its AI claims, but today t 
has gone too far. In a WSJ story, Google is misleading people into 
thinking it has achieved emotion, if not outright consciousness, in its 
AI programming:


http://slashdot.org/submission/4569873/wsj-jumps-the-shark-with-ai-gets-testy-story

Google claims one of its computer programs using a database of movie 
scripts to answer questions supposedly lashed out at a human 
researcher who was repeatedly asking it to explain morality.


Is the WSJ a wholly owned subsidiary of GOOG?  It looks to me like a WSJ 
journalist said that.


Don't computer scientists have a responsibility to deal forthrightly 
with the public on the real state of research in such fields as AI? When 
an Internet provider like Google makes such outlandish claims, one has 
to wonder what the real agenda is.


I think you're confusing computer scientist integrity with journalism and 
a desire to attract readers.


--
 Jon Lewis, MCP :)   |  I route
 |  therefore you are
_ http://www.lewis.org/~jlewis/pgp for PGP public key_


Re: CDNs for carriers

2015-06-29 Thread Christopher Morrow
On Mon, Jun 29, 2015 at 10:21 AM, Jared Mauch ja...@puck.nether.net wrote:
 This being said, there is not a single solution to everything.  Chris 
 mentioned using DNS, which is a nice method assuming you see all the queries 
 within your traffic cone.


sorry, I meant that you could just look at the reverse dns for some of
the higher traffic sources/destinations... you can ALSO look at your
recursive dns servers to see what folk are looking up 'often'... which
is a third tool to use. (presuming you see all/most/representative-set
of your customers, yes)


Re: CDNs for carriers

2015-06-29 Thread Blake Hudson


Christopher Morrow wrote on 6/29/2015 9:25 AM:

On Mon, Jun 29, 2015 at 10:21 AM, Jared Mauch ja...@puck.nether.net wrote:

This being said, there is not a single solution to everything.  Chris mentioned 
using DNS, which is a nice method assuming you see all the queries within your 
traffic cone.


sorry, I meant that you could just look at the reverse dns for some of
the higher traffic sources/destinations... you can ALSO look at your
recursive dns servers to see what folk are looking up 'often'... which
is a third tool to use. (presuming you see all/most/representative-set
of your customers, yes)


For hosts with no (or meaningless) reverse DNS, I've found that browsing 
to the IP in question via HTTPs will often provide an SSL certificate 
with lots of useful information.


--Blake


Re: ARIN just subdivided their last /17, /18, /19, /20, /21 and /22. Down to only /23s and /24s now. : ipv6

2015-06-29 Thread Larry Sheldon

On 6/29/2015 11:07, Bob Evans wrote:

It would not surprise me to find ARCnet (Datapoint's) still running
in some corner somewhere.


I would not be surprised to learn that the University that fired me for
being too old still has one.


--
sed quis custodiet ipsos custodes? (Juvenal)


Re: ARIN just subdivided their last /17, /18, /19, /20, /21 and /22. Down to only /23s and /24s now. : ipv6

2015-06-29 Thread Gary Buhrmaster
On Mon, Jun 29, 2015 at 4:07 PM, Bob Evans b...@fiberinternetcenter.com wrote:
 It would not surprise me to find ARCnet (Datapoint's) still running in
 some corner somewhere.

Possibly next to the system running Banyan VINES.


Re: ARIN just subdivided their last /17, /18, /19, /20, /21 and /22. Down to only /23s and /24s now. : ipv6

2015-06-29 Thread Bob Evans
It would not surprise me to find ARCnet (Datapoint's) still running in
some corner somewhere.

Thank You
Bob Evans
CTO




 On Jun 29, 2015, at 8:42 AM, Stephen Satchell l...@satchell.net wrote:

 On 06/29/2015 01:16 AM, a.l.m.bu...@lboro.ac.uk wrote:
 Hi,

 I knew several people who built their career path on the assumptions
 of IPX.  Ouch.

 or DECnet   ;-)

 Or XNS.  On the other hand, people did have a nice career with SNA...but
 they weren't trying to push packets over the

 “LAT”

 -jav






[NANOG-announce] NANOG 65 - Montréal - Call for Presentations is Open!

2015-06-29 Thread Tony Tauber
Hello NANOG Folks,

Thanks to all those who made NANOG 64 in San Francisco our largest meeting
ever (by well over 25% margin)!

Our 65th meeting will be held in Montréal, Quebec on June 5-7th.
Our meeting sits between the DNS-OARC workshop (Sat-Sun) and the ARIN 36
meeting (Thu-Fri) so will be ripe for fruitful interaction among these
various constituencies.

The NANOG Program Committee is now seeking proposals for presentations,
panels, tutorials, tracks sessions, and keynote materials for the NANOG 65
program. We invite presentations highlighting issues relating to technology
already deployed or soon-to-be deployed in the Internet, . Vendors are
encouraged to work with operators to present real-world deployment
experiences with the vendor's products and interoperability.  Key dates to
track if you wish to submit a presentation:

Key Dates For NANOG 65

Event/Deadline

Date

Registration for NANOG 65 Opens

Monday, 6/29/2015

CFP Opens for NANOG 65

Monday, 6/29/2015

CFP Deadline #1: Presentation Abstracts Due

Monday, 7/27/2015

CFP Topic List  and NANOG Highlights Page Posted

Friday, 8/14/2015

CFP Deadline #2: Presentation Slides Due

Monday, 8/31/2015

Meeting Agenda Published

Monday, 9/7/2015

Speaker FINAL presentations to PC Tool https://pc.nanog.org/

Friday, 10/2/2015

On-site Registration

Sunday, 10/4/2015

Lightning Talk Submissions Open (Abstracts Only)

Saturday, 10/3/2015

NANOG 65 submissions are welcome on the Program Committee Site
https://pc.nanog.org/ or email me if you have questions.

See the detailed NANOG65 Call for Presentations
https://www.nanog.org/meetings/nanog65/callforpresentations for more
information.


Thanks,

Tony Tauber
Chair, Program Committee
North American Network Operator Group (NANOG)
___
NANOG-announce mailing list
nanog-annou...@mailman.nanog.org
http://mailman.nanog.org/mailman/listinfo/nanog-announce

Re: [NANOG-announce] NANOG 65 - Montréal - Call for Presentations is Open!

2015-06-29 Thread Tony Tauber
Dang!  Yes, correct.  It's October 5-7th.

Our 65th meeting will be held in Montréal, Quebec on June 5-7th.


Thanks for the eagle eyes out there.


Tony
___
NANOG-announce mailing list
nanog-annou...@mailman.nanog.org
http://mailman.nanog.org/mailman/listinfo/nanog-announce

RE: Data Center Network Monitoring with TAPs

2015-06-29 Thread Jason Sherron
Some colleagues wrote up Microsoft DEMon:

https://sharkfest.wireshark.org/sharkfest.12/presentations/A-4_Leveraging_Openflow_to_create_a_Large_Scale_and_Cost_Effective_Packet_Capture_Network.pdf



-Original Message-
From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Kristian Francisco
Sent: Saturday, June 27, 2015 9:12 PM
To: Rafael Possamai raf...@gav.ufsc.br
Cc: nanog@nanog.org
Subject: Re: Data Center Network Monitoring with TAPs

I'm designing the first phase of a datacenter network monitoring project for my 
company. We are starting with SPAN at access layer and plan to control traffic 
volume using filtering, slicing, de-dupe, etc. There are instances when we need 
to do capacity/delay analysis on L2 traffic and Ixia, APCON, Emulex etc. are 
coming out with flow generators for SPAN/TAP traffic.

We may decide to go with TAP in the future as we found a vendor that was 
willing to implement functionality to allow us to offload flow generation from 
our access/distribution/core devices by creating templates based on the source 
device/interface. In essence, to our monitoring tools, netflow traffic will 
seem as if it is coming from the real device.

Best Regards,

Kristian J. Francisco

On Mon, Jun 22, 2015 at 9:44 AM, Rafael Possamai raf...@gav.ufsc.br wrote:

 Here's a recent forum thread that discussed the same exact topic. You 
 might find some insight:

 http://www.reddit.com/r/networking/comments/3aip3p/data_center_network
 _monitoring/


 On Sat, Jun 20, 2015 at 11:06 AM, Mitch Howards hbf9...@hotmail.com
 wrote:

  Hello All,
 
  Was wondering what folks are using to monitor traffic  on their 
  networks. Looking into Ixia and APCON devices for dedup and other 
  filtering features as well as passive fiber TAPs to capture the 
  traffic.
 
  How are folks handling TAP'ing large data center networks? TAPs at 
  the distribution layer would be the best fit for my network but 
  that would require a ton of passive fiber TAPs for the incoming 
  fibers to the distribution switches. The end goal is to not only 
  capture the north-south traffic on the network but also east-west 
  traffic. It seems more efficient to just use SPANs but there are 
  many limitations using SPANs.
 
  Thanks in advance for any suggestions.
 
  Mitch



microwave comba fos200

2015-06-29 Thread Rodrigo Augusto
Hi folksŠ

Does anyone have a telnet user and password for this radio?

Rodrigo Augusto
Gestor de T.I. Grupo Connectoway
http://www.connectoway.com.br http://www.connectoway.com.br/
http://www.1telecom.com.br http://www.1telecom.com.br/
* rodr...@connectoway.com.br mailto:rodr...@connectoway.com.br
( (81) 3497-6060
( (81) 8184-3646
( INOC-DBA 52965*100




Re: ARIN just subdivided their last /17, /18, /19, /20, /21 and /22. Down to only /23s and /24s now. : ipv6

2015-06-29 Thread Scott Whyte



On 6/29/15 20:17, Johnny Eriksson wrote:

Javier Henderson jav...@kjsl.org wrote:


Or XNS.  On the other hand, people did have a nice career with

SNA...but they weren't trying to push packets over the

LAT


.daytime
Monday 29-Jun-2015 20:10:46

.pjob
Job 3 at ODEN   User BYGG   [10,335]   TTY4

.where tty4
LAT PC78(LATD for FreeBSD) TTY4

Is there anyting wrong with LAT?


err, its been awhile.  Doesn't LAT have a 1 sec timeout that's not 
configurable?





-jav


--Johnny



Re: ARIN just subdivided their last /17, /18, /19, /20, /21 and /22. Down to only /23s and /24s now. : ipv6

2015-06-29 Thread Johnny Eriksson
Javier Henderson jav...@kjsl.org wrote:

  Or XNS.  On the other hand, people did have a nice career with
 SNA...but they weren't trying to push packets over the
 
 LAT

.daytime
Monday 29-Jun-2015 20:10:46

.pjob
Job 3 at ODEN   User BYGG   [10,335]   TTY4

.where tty4 
LAT PC78(LATD for FreeBSD) TTY4

Is there anyting wrong with LAT?

 -jav

--Johnny


Re: NTT-HE earlier today (~10am EDT)

2015-06-29 Thread Mike Leber
NTT's customer Sofia Connect leaked our routes to NTT.  NTT accepted 
these routes instead of properly filtering their customer 
announcements.  As a network of non-trivial size, announcing over 75,000 
customer routes which is nearly 15% of the IPv4 routing table, we'd 
expect the common courtesy of having our ASN included in their customer 
facing AS-PATH filters, as we extend this same courtesy to other 
networks of this size (such as AS2914).


Mike.

On 6/29/15 2:04 PM, Jim Popovitch wrote:

Hello,

I haven't seen anything to explain this, so I'm asking a larger
audience.  Did anyone notice any unusual NTT or HE routing this AM?

Here's what I saw:


   2.|-- xe-0-1-0-17.r04.atlnga05.us.bb.gin.ntt.net  0.0%200.8
0.7   0.6   0.9   0.1
   3.|-- ae-2.r20.atlnga05.us.bb.gin.ntt.net 0.0%204.6
6.2   0.5  13.6   4.8
   4.|-- ae-4.r22.asbnva02.us.bb.gin.ntt.net 0.0%20   15.3
15.0 13.9 15.8 0.7
   5.|-- ae-4.r20.frnkge04.de.bb.gin.ntt.net 0.0%20  127.3
106.7  98.5 127.3  11.1
   6.|-- ae-2.r02.frnkge04.de.bb.gin.ntt.net 0.0%20  126.8
126.0 125.7 126.8   0.2
   7.|-- ae-1.r00.sofibu01.bg.bb.gin.ntt.net 0.0%20  131.1
130.0 128.7 131.4   1.2
   8.|-- 83.217.227.42  80.0%20  148.5
146.0 144.2 148.5   2.0
   9.|-- ip-48-93.sofia-connect.net 90.0%20  184.5
163.8 143.1 184.5  29.3
  10.|-- ???100.0200.0
0.0   0.0   0.0   0.0
  11.|-- 10ge5-4.core1.vie1.he.net  75.0%20  160.7
150.4 143.9 160.7   6.3
  12.|-- 10ge1-4.core1.prg1.he.net  80.0%20  158.4
159.5 157.9 161.1   1.6
  13.|-- 10ge10-12.core1.fra1.he.net75.0%20  154.5
159.2 145.9 174.4  10.7
  14.|-- 100ge5-2.core1.par2.he.net 75.0%20  187.9
172.9 157.1 187.9  11.1
  15.|-- 100ge7-1.core1.nyc4.he.net 78.9%19  147.2
146.2 144.6 147.5   1.4
  16.|-- 100ge7-2.core1.chi1.he.net 78.9%19  165.6
172.1 165.6 183.5   8.0
  17.|-- 10ge15-2.core1.den1.he.net 89.5%19  201.3
204.7 201.3 208.1   4.8


-Jim P.




NTT-HE earlier today (~10am EDT)

2015-06-29 Thread Jim Popovitch
Hello,

I haven't seen anything to explain this, so I'm asking a larger
audience.  Did anyone notice any unusual NTT or HE routing this AM?

Here's what I saw:


  2.|-- xe-0-1-0-17.r04.atlnga05.us.bb.gin.ntt.net  0.0%200.8
0.7   0.6   0.9   0.1
  3.|-- ae-2.r20.atlnga05.us.bb.gin.ntt.net 0.0%204.6
6.2   0.5  13.6   4.8
  4.|-- ae-4.r22.asbnva02.us.bb.gin.ntt.net 0.0%20   15.3
15.0 13.9 15.8 0.7
  5.|-- ae-4.r20.frnkge04.de.bb.gin.ntt.net 0.0%20  127.3
106.7  98.5 127.3  11.1
  6.|-- ae-2.r02.frnkge04.de.bb.gin.ntt.net 0.0%20  126.8
126.0 125.7 126.8   0.2
  7.|-- ae-1.r00.sofibu01.bg.bb.gin.ntt.net 0.0%20  131.1
130.0 128.7 131.4   1.2
  8.|-- 83.217.227.42  80.0%20  148.5
146.0 144.2 148.5   2.0
  9.|-- ip-48-93.sofia-connect.net 90.0%20  184.5
163.8 143.1 184.5  29.3
 10.|-- ???100.0200.0
0.0   0.0   0.0   0.0
 11.|-- 10ge5-4.core1.vie1.he.net  75.0%20  160.7
150.4 143.9 160.7   6.3
 12.|-- 10ge1-4.core1.prg1.he.net  80.0%20  158.4
159.5 157.9 161.1   1.6
 13.|-- 10ge10-12.core1.fra1.he.net75.0%20  154.5
159.2 145.9 174.4  10.7
 14.|-- 100ge5-2.core1.par2.he.net 75.0%20  187.9
172.9 157.1 187.9  11.1
 15.|-- 100ge7-1.core1.nyc4.he.net 78.9%19  147.2
146.2 144.6 147.5   1.4
 16.|-- 100ge7-2.core1.chi1.he.net 78.9%19  165.6
172.1 165.6 183.5   8.0
 17.|-- 10ge15-2.core1.den1.he.net 89.5%19  201.3
204.7 201.3 208.1   4.8


-Jim P.


Charter and IPV6?

2015-06-29 Thread Roy


Has Charter rolled out IPV6 yet?  I have both fiber and cable 
connections to Charter but I stopped asking them months ago.


Roy


RE: Any Verizon datacenter techs about?

2015-06-29 Thread Curtis L. Parish
If the building is over 30 years old I can guarantee you it is at least  75% 
empty now. 


P.S. If there was any way to get a tour inside of there at least I'd totally 
sign a NDA for that. :) Never been inside, let alone near, a CO before.


-- John Musbach


RE: Charter and IPV6?

2015-06-29 Thread Robert Glover
As of 3mos ago, no :(



 Original message 
From: Roy r.engehau...@gmail.com 
Date: 06/29/2015  2:15 PM  (GMT-08:00) 
To: nanog nanog@nanog.org 
Subject: Charter and IPV6? 


Has Charter rolled out IPV6 yet?  I have both fiber and cable 
connections to Charter but I stopped asking them months ago.

Roy
​​​

Re: NTT-HE earlier today (~10am EDT)

2015-06-29 Thread Jared Mauch
Greetings,

We are aware of this issue and as is usual we filter customers based on their 
registered routes.  This creates some unique challenges that we have been 
speaking about publicly and privately with various groups.

I have started the process (yay telco-speak) to fix this.

It would be helpful if networks would take a look at what routes they have 
registered in the various IRRs as well as if their AS-SETs expand out to 
something quite large.  We have seen many customers import objects that then 
import their other upstream networks.

We have found the IRR Explorer tool helpful to look at who has registered our 
IP space and to police these registrations with the various IRRs out there.  
http://irrexplorer.nlnog.net/

http://irrexplorer.nlnog.net/prefix/184.105.213.86

The stability of the routing ecosystem is something that I personally care a 
lot about and have privately given Mike and others my cell number to allow them 
to follow-up.  As is often operators end up chasing problems after the fact, 
and this appears to be no exception.  *sigh*

- Jared

 On Jun 29, 2015, at 5:18 PM, Mike Leber mle...@he.net wrote:
 
 NTT's customer Sofia Connect leaked our routes to NTT.  NTT accepted these 
 routes instead of properly filtering their customer announcements.  As a 
 network of non-trivial size, announcing over 75,000 customer routes which is 
 nearly 15% of the IPv4 routing table, we'd expect the common courtesy of 
 having our ASN included in their customer facing AS-PATH filters, as we 
 extend this same courtesy to other networks of this size (such as AS2914).
 
 Mike.
 
 On 6/29/15 2:04 PM, Jim Popovitch wrote:
 Hello,
 
 I haven't seen anything to explain this, so I'm asking a larger
 audience.  Did anyone notice any unusual NTT or HE routing this AM?
 
 Here's what I saw:
 
 
   2.|-- xe-0-1-0-17.r04.atlnga05.us.bb.gin.ntt.net  0.0%200.8
 0.7   0.6   0.9   0.1
   3.|-- ae-2.r20.atlnga05.us.bb.gin.ntt.net 0.0%204.6
 6.2   0.5  13.6   4.8
   4.|-- ae-4.r22.asbnva02.us.bb.gin.ntt.net 0.0%20   15.3
 15.0 13.9 15.8 0.7
   5.|-- ae-4.r20.frnkge04.de.bb.gin.ntt.net 0.0%20  127.3
 106.7  98.5 127.3  11.1
   6.|-- ae-2.r02.frnkge04.de.bb.gin.ntt.net 0.0%20  126.8
 126.0 125.7 126.8   0.2
   7.|-- ae-1.r00.sofibu01.bg.bb.gin.ntt.net 0.0%20  131.1
 130.0 128.7 131.4   1.2
   8.|-- 83.217.227.42  80.0%20  148.5
 146.0 144.2 148.5   2.0
   9.|-- ip-48-93.sofia-connect.net 90.0%20  184.5
 163.8 143.1 184.5  29.3
  10.|-- ???100.0200.0
 0.0   0.0   0.0   0.0
  11.|-- 10ge5-4.core1.vie1.he.net  75.0%20  160.7
 150.4 143.9 160.7   6.3
  12.|-- 10ge1-4.core1.prg1.he.net  80.0%20  158.4
 159.5 157.9 161.1   1.6
  13.|-- 10ge10-12.core1.fra1.he.net75.0%20  154.5
 159.2 145.9 174.4  10.7
  14.|-- 100ge5-2.core1.par2.he.net 75.0%20  187.9
 172.9 157.1 187.9  11.1
  15.|-- 100ge7-1.core1.nyc4.he.net 78.9%19  147.2
 146.2 144.6 147.5   1.4
  16.|-- 100ge7-2.core1.chi1.he.net 78.9%19  165.6
 172.1 165.6 183.5   8.0
  17.|-- 10ge15-2.core1.den1.he.net 89.5%19  201.3
 204.7 201.3 208.1   4.8
 
 
 -Jim P.



Re: Trusted Networks Initiative: DDoS fallback set of AS'es

2015-06-29 Thread manning
is this any different than the architecture Rodney Joffe built 20 years ago?

manning
bmann...@karoshi.com
PO Box 12317
Marina del Rey, CA 90295
310.322.8102



On 1May2015Friday, at 15:41, Jac Kloots jac.klo...@surfnet.nl wrote:

 
 Randy,
 
 On Thu, 30 Apr 2015, Randy Bush wrote:
 
 in any case the idea still seems silly.
 not if you need to appear to be DOING SOMETHING!!!
 Of course there is that. But in order to be appear to be doing something
 one has to pledge to do BCP38 and various other things I would consider
 BCP. All little bits help.
 
 except the big logo marketing has the implication that all the rest of
 us unwashed networks are untrustable.  this is not the cooperative
 internet.
 
 You can apply to become a member in the initiative.
 
 Jac
 
 -- 
 Jac Kloots
 Network Services
 SURFnet bv



Re: Charter and IPV6?

2015-06-29 Thread Andrew Latham
Google says
https://www.myaccount.charter.com/customers/Support.aspx?SupportArticleID=2665
and I use the 6rd. It works.

On Mon, Jun 29, 2015 at 4:15 PM, Roy r.engehau...@gmail.com wrote:


 Has Charter rolled out IPV6 yet?  I have both fiber and cable connections
 to Charter but I stopped asking them months ago.

 Roy




-- 
~ Andrew lathama Latham lath...@gmail.com http://lathama.net ~


Re: Charter and IPV6?

2015-06-29 Thread Matt Love
I just asked for it about a month ago in my area, they said the beta is
just about to be over.

On Mon, Jun 29, 2015 at 5:23 PM, Robert Glover robe...@garlic.com wrote:

 As of 3mos ago, no :(



  Original message 
 From: Roy r.engehau...@gmail.com
 Date: 06/29/2015  2:15 PM  (GMT-08:00)
 To: nanog nanog@nanog.org
 Subject: Charter and IPV6?


 Has Charter rolled out IPV6 yet?  I have both fiber and cable
 connections to Charter but I stopped asking them months ago.

 Roy
 ​​​


Re: OK, Google. Time to dial back the AI hype.

2015-06-29 Thread Randy Bush
 Because Google is an ISP, it seems to me a legitimate discussion
 point. Given Google's penchant for crafty customer surveillance, this
 technology seems like one that Google might try to leverage into a
 snoopy product. .

if we wasted this list discussing things which *might* be leveraged into
a snoopy product we would be overwhelmed and the folk who actually
manage networks would go elsewhere.

try some other list, please.  we're just trying to move packets.

randy


Re: ARIN just subdivided their last /17, /18, /19, /20, /21 and /22. Down to only /23s and /24s now. : ipv6

2015-06-29 Thread A . L . M . Buxey
Hi,

I knew several people who built their career path on the assumptions of IPX.  
Ouch.

or DECnet   ;-)


alan


Re: How long will it take to completely get rid of IPv4 or will it happen at all?

2015-06-29 Thread A . L . M . Buxey
Hi,

 I just ran a tcpdump looking for NTP packets going to 128.173.14.71.  In 90
 minutes, I got hits from 330 unique IP addresses, including some that were
 chatty enough to indicate there were dozens of hosts behind a NAT.

ah yes. the joy of the usual 2 scenarios


1) your IP got used in some random equipment config/firmware

2) your IP got used in some documentation rather than using one the official 
IPv4 documentation
address space


the last scenario is the IP address was used in some long ago post or blog that 
google helps
unearth whenever anyone asks for NTP.

we had the same for DNS.learnt that lesson  :/


without bothering to sanity check if a clock is still usable

THAT is the scary part.they're not even checking its working
(at least their kit wont crash and burn at the leap second if it hasnt got 
working NTP ;-)  !)

alan


Re: Thoughts On Cheap Chinese xDSL Testers

2015-06-29 Thread Faisal Imtiaz
We have some sunrise telecom test set's which we don't use any more.
Will be willing the sell them, let me know off list.

Regards.

Faisal Imtiaz
Snappy Internet  Telecom
7266 SW 48 Street
Miami, FL 33155
Tel: 305 663 5518 x 232

Help-desk: (305)663-5518 Option 2 or Email: supp...@snappytelecom.net 

- Original Message -
 From: Lyndon Nerenberg lyn...@orthanc.ca
 To: North American Network Operators' Group nanog@nanog.org
 Sent: Monday, June 29, 2015 8:50:43 PM
 Subject: Thoughts On Cheap Chinese xDSL Testers
 
 I've been poking around looking for an inexpensive xDSL circuit tester to do
 some measurements on my home DSL line, in opposition to the telco. $2K+ is
 not in the budget, so I'm curious about the accuracy of the $300 Chinese
 units kicking around eBay (e.g. the ST332B).  Anyone out there have
 experience with them?  Are they even remotely close to accurate?
 
 --lyndon
 
 


Re: ARIN just subdivided their last /17, /18, /19, /20, /21 and /22. Down to only /23s and /24s now. : ipv6

2015-06-29 Thread Rob Seastrom

Guarantee there's no BLISS-32 on Johnny's machine.  The source to the
LAT software he's talking to *may* be in BLISS-36.  It's more likely in
MACRO-10.

-r (does this gray hair make me look old?)

George Michaelson g...@algebras.org writes:

 Dec gave you the source on Microfiche. If you want to change LAT just read,
 and find your Bliss32 compiler.

 On Mon, Jun 29, 2015 at 9:04 PM, Scott Whyte swh...@gmail.com wrote:



 On 6/29/15 20:17, Johnny Eriksson wrote:

 Javier Henderson jav...@kjsl.org wrote:

  Or XNS.  On the other hand, people did have a nice career with

 SNA...but they weren't trying to push packets over the

 LAT


 .daytime
 Monday 29-Jun-2015 20:10:46

 .pjob
 Job 3 at ODEN   User BYGG   [10,335]   TTY4

 .where tty4
 LAT PC78(LATD for FreeBSD) TTY4

 Is there anyting wrong with LAT?


 err, its been awhile.  Doesn't LAT have a 1 sec timeout that's not
 configurable?


  -jav


 --Johnny




Re: Trusted Networks Initiative: DDoS fallback set of AS'es

2015-06-29 Thread Randy Bush
 as the recent L(3)/TM global disaster made quite clear, it is not
 architecture; it's marketing literature.

and let's give a shoutout to jared and mike

randy


Re: Thoughts On Cheap Chinese xDSL Testers

2015-06-29 Thread Joe Hamelin
The Westel A90-750045-07 Frontier branded DSL router has some amazing DSL
status screens if you dig in the menu deep enough.  I always kept one in
the truck when I was doing some service work.  Check the local
Goodwill/Value Village.

--
Joe Hamelin, W7COM, Tulalip, WA, 360-474-7474

On Mon, Jun 29, 2015 at 6:23 PM, Robert Glover robe...@garlic.com wrote:

 The local ILEC (Verizon) use Colt 250+.  They are pretty cool.  They do
 not do layer 3 like the meter you referenced.
 I'm actually looking for a cost-effective meter that does ADSL+ / VDSL2 /
 e.SHDSL.  it's easy to find one that does the first two, but not all three.

  Original message 
 From: Lyndon Nerenberg lyn...@orthanc.ca
 Date: 06/29/2015  5:50 PM  (GMT-08:00)
 To: North American Network Operators' Group nanog@nanog.org
 Subject: Thoughts On Cheap Chinese xDSL Testers

 I've been poking around looking for an inexpensive xDSL circuit tester to
 do some measurements on my home DSL line, in opposition to the telco. $2K+
 is not in the budget, so I'm curious about the accuracy of the $300 Chinese
 units kicking around eBay (e.g. the ST332B).  Anyone out there have
 experience with them?  Are they even remotely close to accurate?

 --lyndon

 ​



Thoughts On Cheap Chinese xDSL Testers

2015-06-29 Thread Lyndon Nerenberg
I've been poking around looking for an inexpensive xDSL circuit tester to do 
some measurements on my home DSL line, in opposition to the telco. $2K+ is not 
in the budget, so I'm curious about the accuracy of the $300 Chinese units 
kicking around eBay (e.g. the ST332B).  Anyone out there have experience with 
them?  Are they even remotely close to accurate?

--lyndon



signature.asc
Description: Message signed with OpenPGP using GPGMail


RE: Charter and IPV6?

2015-06-29 Thread Damien Burke
Looks like charter just got a /28 of IPv6

http://whois.arin.net/rest/net/NET6-2600-2300-1/pft

-Original Message-
From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Matt Love
Sent: Monday, June 29, 2015 2:39 PM
To: Robert Glover
Cc: nanog
Subject: Re: Charter and IPV6?

I just asked for it about a month ago in my area, they said the beta is just 
about to be over.

On Mon, Jun 29, 2015 at 5:23 PM, Robert Glover robe...@garlic.com wrote:

 As of 3mos ago, no :(



  Original message 
 From: Roy r.engehau...@gmail.com
 Date: 06/29/2015  2:15 PM  (GMT-08:00)
 To: nanog nanog@nanog.org
 Subject: Charter and IPV6?


 Has Charter rolled out IPV6 yet?  I have both fiber and cable 
 connections to Charter but I stopped asking them months ago.

 Roy
 ​​​


Re: NTT-HE earlier today (~10am EDT)

2015-06-29 Thread Faisal Imtiaz
Hi Jared,

This is neat !, for someone who recently started working the IRR's, I can tell 
you that it has been very difficult finding all info in one location. 

What you shared is pretty neat !, and I would like to clean up the records 
associated with our prefixes.

Can you suggest some practical tips on getting older 'stale' records cleaned up 
from the different registries ?
(i.e. records created for us by others, in a former time-frame).

Regards

Faisal Imtiaz
Snappy Internet  Telecom

- Original Message -
 From: Jared Mauch ja...@puck.nether.net
 To: Mike Leber mle...@he.net
 Cc: nanog@nanog.org
 Sent: Monday, June 29, 2015 5:51:18 PM
 Subject: Re: NTT-HE earlier today (~10am EDT)
 
 Greetings,
 
 We are aware of this issue and as is usual we filter customers based on their
 registered routes.  This creates some unique challenges that we have been
 speaking about publicly and privately with various groups.
 
 I have started the process (yay telco-speak) to fix this.
 
 It would be helpful if networks would take a look at what routes they have
 registered in the various IRRs as well as if their AS-SETs expand out to
 something quite large.  We have seen many customers import objects that then
 import their other upstream networks.
 
 We have found the IRR Explorer tool helpful to look at who has registered our
 IP space and to police these registrations with the various IRRs out there.
 http://irrexplorer.nlnog.net/
 
 http://irrexplorer.nlnog.net/prefix/184.105.213.86
 
 The stability of the routing ecosystem is something that I personally care a
 lot about and have privately given Mike and others my cell number to allow
 them to follow-up.  As is often operators end up chasing problems after the
 fact, and this appears to be no exception.  *sigh*
 
 - Jared
 
  On Jun 29, 2015, at 5:18 PM, Mike Leber mle...@he.net wrote:
  
  NTT's customer Sofia Connect leaked our routes to NTT.  NTT accepted these
  routes instead of properly filtering their customer announcements.  As a
  network of non-trivial size, announcing over 75,000 customer routes which
  is nearly 15% of the IPv4 routing table, we'd expect the common courtesy
  of having our ASN included in their customer facing AS-PATH filters, as we
  extend this same courtesy to other networks of this size (such as AS2914).
  
  Mike.
  
  On 6/29/15 2:04 PM, Jim Popovitch wrote:
  Hello,
  
  I haven't seen anything to explain this, so I'm asking a larger
  audience.  Did anyone notice any unusual NTT or HE routing this AM?
  
  Here's what I saw:
  
  
2.|-- xe-0-1-0-17.r04.atlnga05.us.bb.gin.ntt.net  0.0%200.8
  0.7   0.6   0.9   0.1
3.|-- ae-2.r20.atlnga05.us.bb.gin.ntt.net 0.0%204.6
  6.2   0.5  13.6   4.8
4.|-- ae-4.r22.asbnva02.us.bb.gin.ntt.net 0.0%20   15.3
  15.0 13.9 15.8 0.7
5.|-- ae-4.r20.frnkge04.de.bb.gin.ntt.net 0.0%20  127.3
  106.7  98.5 127.3  11.1
6.|-- ae-2.r02.frnkge04.de.bb.gin.ntt.net 0.0%20  126.8
  126.0 125.7 126.8   0.2
7.|-- ae-1.r00.sofibu01.bg.bb.gin.ntt.net 0.0%20  131.1
  130.0 128.7 131.4   1.2
8.|-- 83.217.227.42  80.0%20  148.5
  146.0 144.2 148.5   2.0
9.|-- ip-48-93.sofia-connect.net 90.0%20  184.5
  163.8 143.1 184.5  29.3
   10.|-- ???100.0200.0
  0.0   0.0   0.0   0.0
   11.|-- 10ge5-4.core1.vie1.he.net  75.0%20  160.7
  150.4 143.9 160.7   6.3
   12.|-- 10ge1-4.core1.prg1.he.net  80.0%20  158.4
  159.5 157.9 161.1   1.6
   13.|-- 10ge10-12.core1.fra1.he.net75.0%20  154.5
  159.2 145.9 174.4  10.7
   14.|-- 100ge5-2.core1.par2.he.net 75.0%20  187.9
  172.9 157.1 187.9  11.1
   15.|-- 100ge7-1.core1.nyc4.he.net 78.9%19  147.2
  146.2 144.6 147.5   1.4
   16.|-- 100ge7-2.core1.chi1.he.net 78.9%19  165.6
  172.1 165.6 183.5   8.0
   17.|-- 10ge15-2.core1.den1.he.net 89.5%19  201.3
  204.7 201.3 208.1   4.8
  
  
  -Jim P.
 
 


Re: ARIN just subdivided their last /17, /18, /19, /20, /21 and /22. Down to only /23s and /24s now. : ipv6

2015-06-29 Thread Ricky Beam

On Fri, 26 Jun 2015 23:58:27 -0400, William Astle l...@l-w.ca wrote:

Like certain data centers attached to AS701 in Canada.


Or their end customers all over the world. Of course, they're no different  
than most other carriers. At the time we moved into this office, TWC  
wasn't available [TWCBC] (but they at least understood IPv6; metro-e has  
since been installed here), TWTC craftily avoided answering the question  
(the answer was no), ATT gave a similar we can't be bothered answer  
(supported, but we aren't big enough to be connected to that gear),  
Earthlink (ITC Deltacom) had no idea what it was (I'm sure engineers did,  
but sales and support didn't.)


Not that the company cares. Last reading of the checkpoint config, there  
wasn't any v6 in it anywhere. Which is a bit surprising as one of those  
fw's is in Hong Kong!


** TWC (residential) DOES support IPv6 now. I'm an Earthlink subscriber so  
I get none of that; they've not provided any prefixes.


Re: Trusted Networks Initiative: DDoS fallback set of AS'es

2015-06-29 Thread Bill Woodcock

 On Apr 16, 2015, at 3:58 AM, David Hofstee da...@mailplus.nl wrote:
 
 Hi,
 
 I saw the following and thought it would be interesting to share. In case of 
 a persistent DDoS an ASy can fallback to a small set of (more trustable) 
 AS'es for their routing:
 http://www.trustednetworksinitiative.nl/

It is indeed an interesting proposal, though not one that’s perhaps fully 
informed of the intricacies of commercial routing economics.

Two things worthy of note for this audience, I think:

First, I don’t know that anyone is expecting networks that do not consider 
themselves to be principally Dutch in nationality to participate.

Second, this is a proposal of the Hague Security Delta, which is, in essence, a 
group of think-tanks.  It is not a proposal of the Dutch government, nor of the 
Dutch Internet Service Providers.  That is not intended to speak to the merit 
of the proposal, which has both good and bad points.  Just to indicate that it 
is neither a home-grown ISP thing, nor something the Dutch government is 
mandating or advocating.

-Bill






signature.asc
Description: Message signed with OpenPGP using GPGMail


Re: Trusted Networks Initiative: DDoS fallback set of AS'es

2015-06-29 Thread Randy Bush
hi lazarus,

 in any case the idea still seems silly.
 not if you need to appear to be DOING SOMETHING!!!
 Of course there is that. But in order to be appear to be doing
 something one has to pledge to do BCP38 and various other things I
 would consider BCP. All little bits help.
 except the big logo marketing has the implication that all the rest
 of us unwashed networks are untrustable.  this is not the
 cooperative internet.
 You can apply to become a member in the initiative.
 is this any different than the architecture Rodney Joffe built 20
 years ago?

as the recent L(3)/TM global disaster made quite clear, it is not
architecture; it's marketing literature.  we can get that stuff printed
at a local copy shop.

randy


Re: How long will it take to completely get rid of IPv4 or will it happen at all?

2015-06-29 Thread manning
actually, 1500 byte frames require a very different buffering technique, since 
you have so many in flight at a given time.
if your old enough, this equates to the 53byte ATM cells when the data rates 
were in the Megabit range.


manning
bmann...@karoshi.com
PO Box 12317
Marina del Rey, CA 90295
310.322.8102



On 27June2015Saturday, at 15:58, Stephen Satchell l...@satchell.net wrote:

 On 06/27/2015 11:48 AM, manning wrote:
 This is kind of like asking when we will stop using ethernet framing
 (ethernet was designed for a 3Mbps transmission rate) yet we are
 deploying 100Gbps networks.  Still stuck on that 1500byte limitation.
 When can we get rid of that?
 
 Speed has nothing to do with frame size.  The 1500 byte limitation is more a 
 function of the CRC algorithm.  (Oh, the initial frame size was selected for 
 3-mbit Ethernet so that collision mitigation was reasonable.)
 
 Think about jumbo frames (9000 bytes) and their robust error detection.  
 Research is being done in even larger frames, because the rule is that as 
 your transmission rate increases, you should increase the frame size and use 
 a FRC algorithm that detects all one-bit errors and most two-bit errors, at 
 least.



RE: Thoughts On Cheap Chinese xDSL Testers

2015-06-29 Thread Robert Glover
The local ILEC (Verizon) use Colt 250+.  They are pretty cool.  They do not do 
layer 3 like the meter you referenced.
I'm actually looking for a cost-effective meter that does ADSL+ / VDSL2 / 
e.SHDSL.  it's easy to find one that does the first two, but not all three.

 Original message 
From: Lyndon Nerenberg lyn...@orthanc.ca 
Date: 06/29/2015  5:50 PM  (GMT-08:00) 
To: North American Network Operators' Group nanog@nanog.org 
Subject: Thoughts On Cheap Chinese xDSL Testers 

I've been poking around looking for an inexpensive xDSL circuit tester to do 
some measurements on my home DSL line, in opposition to the telco. $2K+ is not 
in the budget, so I'm curious about the accuracy of the $300 Chinese units 
kicking around eBay (e.g. the ST332B).  Anyone out there have experience with 
them?  Are they even remotely close to accurate?

--lyndon

​

Re: ARIN just subdivided their last /17, /18, /19, /20, /21 and /22. Down to only /23s and /24s now. : ipv6

2015-06-29 Thread Ricky Beam
On Sat, 27 Jun 2015 08:35:34 -0400, Rafael Possamai raf...@gav.ufsc.br  
wrote:
How long do you think it will take to completely get rid of IPv4? Or is  
it even going to happen at all?


Things like IPX and token-ring are still around. IPv4 isn't going anywhere  
for decades. (if ever) Mostly because there are things that will *never*  
run IPv6 that aren't going to get replaced just because of IPv6. (it's a  
given most of those things don't live on the internet.)


Re: ARIN just subdivided their last /17, /18, /19, /20, /21 and /22. Down to only /23s and /24s now. : ipv6

2015-06-29 Thread Ricky Beam
On Sat, 27 Jun 2015 13:23:27 -0400, Lyndon Nerenberg lyn...@orthanc.ca  
wrote:
IPX ruled the roost, very popularly, for a little while.  How long did  
it take to die?


It isn't dead yet, but it's certainly on the endangered list.


Why did it die?


The death of Novell NetWare (and their transitioned to IP) killed it the  
enterprise. Games adopting IP for network play killed it in the home.


Ultimately, it sucks as a WAN protocol, so the internet was built using  
this new fangled IP thing.


Re: How long will it take to completely get rid of IPv4 or will it happen at all?

2015-06-29 Thread Ricky Beam
On Sat, 27 Jun 2015 13:58:24 -0400, Alexander Maassen  
outsi...@scarynet.org wrote:

Before that will happen. Isp's will first try cgnat and the alikes.


They already are. And, depending on the network, have for eons. Have you  
checked the IP used by your cellphone? (the last few times I bothered to  
look... somewhere in 29/8. I thought that was really funny.)



Why?


Simple: Money. It's cheaper to install a $100k NAT appliance (or several)  
than it is to replace 16mil CPE devices, plus all the engineering,  
testing, and customer support training (read: BS scripts to follow.)  
AND, your customers aren't having any trouble getting where they need to  
go. Sure, there will be the forward thinkers pushing for IPv6, but not  
because there's some IPv6 only place they need to go (or be.)


Re: NTT-HE earlier today (~10am EDT)

2015-06-29 Thread Hank Nussbacher
Kudos Mike for saying it very clearly!

Hank

On Jun 30, 2015 12:18 AM, Mike Leber mle...@he.net wrote:

 NTT's customer Sofia Connect leaked our routes to NTT.  NTT accepted 
 these routes instead of properly filtering their customer 
 announcements.  As a network of non-trivial size, announcing over 75,000 
 customer routes which is nearly 15% of the IPv4 routing table, we'd 
 expect the common courtesy of having our ASN included in their customer 
 facing AS-PATH filters, as we extend this same courtesy to other 
 networks of this size (such as AS2914). 

 Mike. 

 On 6/29/15 2:04 PM, Jim Popovitch wrote: 
  Hello, 
  
  I haven't seen anything to explain this, so I'm asking a larger 
  audience.  Did anyone notice any unusual NTT or HE routing this AM? 
  
  Here's what I saw: 
  
  
     2.|-- xe-0-1-0-17.r04.atlnga05.us.bb.gin.ntt.net  0.0%    20    0.8 
  0.7   0.6   0.9   0.1 
     3.|-- ae-2.r20.atlnga05.us.bb.gin.ntt.net 0.0%    20    4.6 
  6.2   0.5  13.6   4.8 
     4.|-- ae-4.r22.asbnva02.us.bb.gin.ntt.net 0.0%    20   15.3 
  15.0 13.9 15.8 0.7 
     5.|-- ae-4.r20.frnkge04.de.bb.gin.ntt.net 0.0%    20  127.3 
  106.7  98.5 127.3  11.1 
     6.|-- ae-2.r02.frnkge04.de.bb.gin.ntt.net 0.0%    20  126.8 
  126.0 125.7 126.8   0.2 
     7.|-- ae-1.r00.sofibu01.bg.bb.gin.ntt.net 0.0%    20  131.1 
  130.0 128.7 131.4   1.2 
     8.|-- 83.217.227.42  80.0%    20  148.5 
  146.0 144.2 148.5   2.0 
     9.|-- ip-48-93.sofia-connect.net 90.0%    20  184.5 
  163.8 143.1 184.5  29.3 
    10.|-- ???    100.0    20    0.0 
  0.0   0.0   0.0   0.0 
    11.|-- 10ge5-4.core1.vie1.he.net  75.0%    20  160.7 
  150.4 143.9 160.7   6.3 
    12.|-- 10ge1-4.core1.prg1.he.net  80.0%    20  158.4 
  159.5 157.9 161.1   1.6 
    13.|-- 10ge10-12.core1.fra1.he.net    75.0%    20  154.5 
  159.2 145.9 174.4  10.7 
    14.|-- 100ge5-2.core1.par2.he.net 75.0%    20  187.9 
  172.9 157.1 187.9  11.1 
    15.|-- 100ge7-1.core1.nyc4.he.net 78.9%    19  147.2 
  146.2 144.6 147.5   1.4 
    16.|-- 100ge7-2.core1.chi1.he.net 78.9%    19  165.6 
  172.1 165.6 183.5   8.0 
    17.|-- 10ge15-2.core1.den1.he.net 89.5%    19  201.3 
  204.7 201.3 208.1   4.8 
  
  
  -Jim P. 


Re: NTT-HE earlier today (~10am EDT)

2015-06-29 Thread Hank Nussbacher
Kudos Mike for saying it very clearly!

Hank

On Jun 30, 2015 12:18 AM, Mike Leber mle...@he.net wrote:

 NTT's customer Sofia Connect leaked our routes to NTT.  NTT accepted 
 these routes instead of properly filtering their customer 
 announcements.  As a network of non-trivial size, announcing over 75,000 
 customer routes which is nearly 15% of the IPv4 routing table, we'd 
 expect the common courtesy of having our ASN included in their customer 
 facing AS-PATH filters, as we extend this same courtesy to other 
 networks of this size (such as AS2914). 

 Mike. 

 On 6/29/15 2:04 PM, Jim Popovitch wrote: 
  Hello, 
  
  I haven't seen anything to explain this, so I'm asking a larger 
  audience.  Did anyone notice any unusual NTT or HE routing this AM? 
  
  Here's what I saw: 
  
  
     2.|-- xe-0-1-0-17.r04.atlnga05.us.bb.gin.ntt.net  0.0%    20    0.8 
  0.7   0.6   0.9   0.1 
     3.|-- ae-2.r20.atlnga05.us.bb.gin.ntt.net 0.0%    20    4.6 
  6.2   0.5  13.6   4.8 
     4.|-- ae-4.r22.asbnva02.us.bb.gin.ntt.net 0.0%    20   15.3 
  15.0 13.9 15.8 0.7 
     5.|-- ae-4.r20.frnkge04.de.bb.gin.ntt.net 0.0%    20  127.3 
  106.7  98.5 127.3  11.1 
     6.|-- ae-2.r02.frnkge04.de.bb.gin.ntt.net 0.0%    20  126.8 
  126.0 125.7 126.8   0.2 
     7.|-- ae-1.r00.sofibu01.bg.bb.gin.ntt.net 0.0%    20  131.1 
  130.0 128.7 131.4   1.2 
     8.|-- 83.217.227.42  80.0%    20  148.5 
  146.0 144.2 148.5   2.0 
     9.|-- ip-48-93.sofia-connect.net 90.0%    20  184.5 
  163.8 143.1 184.5  29.3 
    10.|-- ???    100.0    20    0.0 
  0.0   0.0   0.0   0.0 
    11.|-- 10ge5-4.core1.vie1.he.net  75.0%    20  160.7 
  150.4 143.9 160.7   6.3 
    12.|-- 10ge1-4.core1.prg1.he.net  80.0%    20  158.4 
  159.5 157.9 161.1   1.6 
    13.|-- 10ge10-12.core1.fra1.he.net    75.0%    20  154.5 
  159.2 145.9 174.4  10.7 
    14.|-- 100ge5-2.core1.par2.he.net 75.0%    20  187.9 
  172.9 157.1 187.9  11.1 
    15.|-- 100ge7-1.core1.nyc4.he.net 78.9%    19  147.2 
  146.2 144.6 147.5   1.4 
    16.|-- 100ge7-2.core1.chi1.he.net 78.9%    19  165.6 
  172.1 165.6 183.5   8.0 
    17.|-- 10ge15-2.core1.den1.he.net 89.5%    19  201.3 
  204.7 201.3 208.1   4.8 
  
  
  -Jim P. 


Re: ARIN just subdivided their last /17, /18, /19, /20, /21 and /22. Down to only /23s and /24s now. : ipv6

2015-06-29 Thread George Michaelson
Dec gave you the source on Microfiche. If you want to change LAT just read,
and find your Bliss32 compiler.

On Mon, Jun 29, 2015 at 9:04 PM, Scott Whyte swh...@gmail.com wrote:



 On 6/29/15 20:17, Johnny Eriksson wrote:

 Javier Henderson jav...@kjsl.org wrote:

  Or XNS.  On the other hand, people did have a nice career with

 SNA...but they weren't trying to push packets over the

 LAT


 .daytime
 Monday 29-Jun-2015 20:10:46

 .pjob
 Job 3 at ODEN   User BYGG   [10,335]   TTY4

 .where tty4
 LAT PC78(LATD for FreeBSD) TTY4

 Is there anyting wrong with LAT?


 err, its been awhile.  Doesn't LAT have a 1 sec timeout that's not
 configurable?


  -jav


 --Johnny