Re: NIST NTP servers

2016-05-28 Thread B F 


All,  
Thanks very much for all the replies. Extremely helpful.
"...ask someone what time it is and they'll tell you how to build a watch."
Luckily I got both.
Ed



 Original message 
From: Lamar Owen  
Date: 5/14/2016  10:27 AM  (GMT-05:00) 
To: NANOG  
Subject: Re: NIST NTP servers 

On 05/13/2016 04:38 PM, Mel Beckman wrote:
> But another key consideration beyond accuracy is the reliability of a 
> server's GPS constellation view. If you can lose GPS sync for an hour or more 
> (not uncommon in terrain-locked locations), the NTP time will go free-running 
> and could drift quite a bit. You need an OCXO to minimize that drift to 
> acceptable levels.
While this is drifting a bit off-topic for NANOG (and drifting into the 
topic range for time-n...@febo.com), I'll just add one more thing to 
this.  The Hold time (when the oscillator is free-running) is a very 
important consideration, especially, as you say, when terrain is an 
issue. For us it is even more important, as the 10MHz output from the 
timing rack is used as a site-wide frequency standard.  Of course, you 
never discipline a cesium PRS, but the rubidium secondary is disciplined 
by circuitry in the SSU2000.

Back in the days of common backbone delivery over SONET discussion of 
cesium standards would have been on-topic, as some SONET gear (Nortel 
Optera for instance) needs a master clock; especially if you were 
delivering channelized circuits or interfacing with customers and telcos 
with DS3 or even DS1 circuits or DS0 fractions within them.  Ethernet is 
far more forgiving.

Re: FlowSpec Support

2016-05-28 Thread Mike Hammett 
I read that discussion (and several others going back about two or three years) 
before I posted this. 

As an occasional OP on here, I've noticed I get a lot of off-list responses so 
I obviously wouldn't have seen any of those from other people's threads. 

I didn't take that observation away from that thread, but maybe I'm dense. ;-) 
I know it was suggested that they wanted to bill for that sued capacity, but 
that was debunked. I know DDoS services were mentioned, but I didn't see a 
clear line drawn to that's why it isn't happening... nor confirmed. 

Also, what's big? Listed on the Baker's Dozen? Wide-spread POPs on six 
continents? Showing up on 50 IXPs? 1k IPv4 adjacencies? 

A medium sized network that does FlowSpec could be vastly more useful to you 
than a large network that doesn't. 





- 
Mike Hammett 
Intelligent Computing Solutions 
http://www.ics-il.com 

Midwest-IX 
http://www.midwest-ix.com 

- Original Message -

From: "Josh Reynolds"  
To: "Mike Hammett"  
Cc: "NANOG"  
Sent: Saturday, May 28, 2016 5:41:38 PM 
Subject: Re: FlowSpec Support 


There was just a recent discussion about this. 
None of the big upstreams support it because they are all too busy selling 
their own DDoS mitigation services :) 
On May 28, 2016 5:38 PM, "Mike Hammett" < na...@ics-il.net > wrote: 


I know support (from customers) is limited among networks. I know it isn't on 
all hardware, but does appear to be on at least a couple platforms from the 
major router vendors. It is supported on an increasing number of DDoS 
appliances and software packages. 

What all networks support receiving BGP FlowSpec information from customers and 
acting upon it? 




- 
Mike Hammett 
Intelligent Computing Solutions 
http://www.ics-il.com 

Midwest-IX 
http://www.midwest-ix.com

Re: FlowSpec Support

2016-05-28 Thread Josh Reynolds 
There was just a recent discussion about this.

None of the big upstreams support it because they are all too busy selling
their own DDoS mitigation services :)
On May 28, 2016 5:38 PM, "Mike Hammett"  wrote:

> I know support (from customers) is limited among networks. I know it isn't
> on all hardware, but does appear to be on at least a couple platforms from
> the major router vendors. It is supported on an increasing number of DDoS
> appliances and software packages.
>
> What all networks support receiving BGP FlowSpec information from
> customers and acting upon it?
>
>
>
>
> -
> Mike Hammett
> Intelligent Computing Solutions
> http://www.ics-il.com
>
> Midwest-IX
> http://www.midwest-ix.com
>
>

FlowSpec Support

2016-05-28 Thread Mike Hammett 
I know support (from customers) is limited among networks. I know it isn't on 
all hardware, but does appear to be on at least a couple platforms from the 
major router vendors. It is supported on an increasing number of DDoS 
appliances and software packages. 

What all networks support receiving BGP FlowSpec information from customers and 
acting upon it? 




- 
Mike Hammett 
Intelligent Computing Solutions 
http://www.ics-il.com 

Midwest-IX 
http://www.midwest-ix.com

Re: Netflix IP Space

2016-05-28 Thread Faisal Imtiaz 
I would suggest that you contact their NOC for the appropriate answer, since 
they don't advertise all of their prefixes out of all locations, plus they also 
use geo coding as well to determine from where they are going to stream the 
customer from.

Regards.

Faisal Imtiaz
Snappy Internet & Telecom


- Original Message -
> From: "Alistair Mackenzie" 
> To: "nanog list" , uk...@lists.uknof.org.uk
> Sent: Saturday, May 28, 2016 8:04:47 AM
> Subject: Netflix IP Space

> Hi All,
> 
> Does anyone on either lists have a list of Netflix's IP space that they are
> using for streams and "unblocker" detection?
> 
> We are doing policy based VPN and Netflix needs to be excluded from this to
> work around their restrictions.
> 
> They are on AWS so not as easy as just finding their ASN...
> 
> Thanks,
> Alistair

Re: Netflix IP Space

2016-05-28 Thread Jared Mauch 
Perhaps just consider all of these:?

% ./bgpq3 as2906
% ./bgpq3 as16509
% ./bgpq3 as14618

Obviously make sure you have it properly in your tools for automation.

- Jared

> On May 28, 2016, at 8:04 AM, Alistair Mackenzie  wrote:
> 
> Hi All,
> 
> Does anyone on either lists have a list of Netflix's IP space that they are
> using for streams and "unblocker" detection?
> 
> We are doing policy based VPN and Netflix needs to be excluded from this to
> work around their restrictions.
> 
> They are on AWS so not as easy as just finding their ASN...
> 
> Thanks,
> Alistair

Netflix IP Space

2016-05-28 Thread Alistair Mackenzie 
Hi All,

Does anyone on either lists have a list of Netflix's IP space that they are
using for streams and "unblocker" detection?

We are doing policy based VPN and Netflix needs to be excluded from this to
work around their restrictions.

They are on AWS so not as easy as just finding their ASN...

Thanks,
Alistair