Re: TFTP over anycast

2024-02-27 Thread Javier Gutierrez
Thanks to you all for your answers, it has helped me a lot already.

My design is very simplistic, I have 2 sets of firewalls that I will have 
advertising a /32 unicast to the network at each location and it will have a 
TFTP server behind each firewall.

I have no intention to have this be part of the internet as it will be used to 
serve internal customers devices that require TFTP
For the setup where you are running Anycast on a datacenter, are you running it 
inside the datacenter only or across multiple datacenters? other than having to 
replicate IPs and file services between datacenters have you seen any other 
issues?


Kind regards,



Javier Gutierrez,

Network Architect – AS19016
https://www.peeringdb.com/net/4073

Westman Communications Group

[cid:2db642a4-fcf9-40b4-a719-2afd8097f2e9]1906 Park Ave. • Brandon, MB • R7B 0R9

[cid:8862c057-cdef-45f6-a0e3-497508d0d64a]204.720.1158
[cid:6a35147d-b3b0-44cf-bc96-6822377f5231] 
gutierr...@westmancom.com<mailto:gutierr...@westmancom.com>

[A close up of a sign  Description automatically 
generated]<https://westmancom.com/personal>



[cid:486e0290-5d40-48dd-80eb-3be9a705b1e6]<https://www.facebook.com/WestmanCom>[cid:425d7b57-d7e3-491d-9d22-910d4072b88a]<https://twitter.com/WestmanCom>
  [cid:ee77dd48-8761-498b-b45b-82b00e5bf553] 
<https://www.youtube.com/user/WestmanCom>   
[cid:547ce68d-d61c-40e3-b150-39bff72b8d6b] 
<https://www.instagram.com/westmancom>   
[cid:ba4751b3-edc0-484e-bb40-731ca94e8c84] 
<https://www.linkedin.com/company/westmancom>

This e-mail and any attachments contain confidential and privileged 
information. If you are not the intended recipient, please notify the sender 
immediately by return e-mail, delete this e-mail and destroy any copies. Any 
dissemination or use of this information by a person other than intended 
recipient is unauthorized and may be illegal.




From: NANOG  on behalf of 
Bill Woodcock 
Sent: Saturday, February 24, 2024 1:09 AM
To: Ask Bjørn Hansen 
Cc: nanog@nanog.org 
Subject: Re: TFTP over anycast


CAUTION: This email is from an external source. Do not click links or open 
attachments unless you recognize the sender and know the content is safe.

The system Ask is describing is the traditional method of using anycast to 
geographically load-balance long-lived flows.  The first time I did that was 
with FTP servers in Berkeley and Santa Cruz, in 1989.

I did a bigger system, also load balancing FTP servers for Oracle, their 
public-facing documentation stores, with servers in San Jose and Washington DC, 
a couple of years later.   A couple of years further on and the World Wide Web 
was a thing, and everybody was doing it.

-Bill


On Feb 24, 2024, at 7:38 AM, Ask Bjørn Hansen  wrote:



On Feb 23, 2024, at 20:32, William Herrin  wrote:

The relay server `dhcplb` could, maybe, help in that scenario
(dhcplb runs on the anycast IP, the “real” DHCP servers on
unicast IPs behind dhcplb).

Although they used the word "anycast", they're just load balancing.

The idea is to run the relays on an anycasted IP (so the load balancer / relay 
IP is anycasted).

[….] Relying on ECMP for anycasted DHCP would be a disaster
during any sort of failure. Add or remove a single route from an ECMP
set and the hashed path selection changes for most of the connections.

Consistent hashing (which I thought was widely supported now in ECMP 
implementations) and a bit of automation in how announcements are added can 
greatly mitigate this.



Ask


TFTP over anycast

2024-02-22 Thread Javier Gutierrez
Hi,
I'm working on some DR design and we want to not only have this site as a DR 
but also performing some active/active for some of the services we hosts and I 
was wondering if someone had some experience with using anycast for TFTP or 
DHCP services?
What are some of the pains/challenges you experienced and things we should 
lookout for?

Any input is greatly appreciated.


Kind regards,



Javier Gutierrez



FastNetMon Usage in the wild

2023-10-07 Thread Javier Gutierrez
Hi,
I wanted to drop a quick question as I would like to evaluate the FastNetMon 
solution to do DDoS protection and wanted to see what other companies are using 
it out there so I can have a base of how much should I recommend this.

Thanks in advance for your responses


Kind regards,


Javier Gutierrez,



Using RFC1918 on Global table as Loopbacks

2023-10-05 Thread Javier Gutierrez
Hi,
I have recently encountered some operational differences at my new organization 
that are not what I have been exposed to before, where the loopback of the core 
network devices is being set from RFC1918 while on the global routing table. 
I'm sure this is not a major issue but I have mostly seen that ISPs use global 
IPs for loopbacks on devices that would and hold global routing.
My question is, what is the most used or recommended way to do this, if I 
continue to use RFC1918 I will save some very much desired public address 
space, but would this come back to bite me in the future?



Kind regards,


Javier Gutierrez,




RE: Juniper hardware recommendation

2021-05-07 Thread Javier Gutierrez Guerra
I need to do MPLS (vlls), VXLAN, Multicast, full routing tables, multiple VRFs, 
q-in-q, QoS
Anything with 1Tbs of throughput should be more than enough at this time for me
I also need it to be able to support 100G interfaces, 1G and 10G

Javier Gutierrez Guerra
Network Analyst
CCNA R, JNCIA
Westman Communications Group
Phone: 204-717-2827
Email: guer...@westmancom.com<mailto:guer...@westmancom.com>
[WCG_Corp_Logo_horiz_cFullcolorHR]<http://westmancom.com/personal/>

[cisco-certified-network-associate-routing-and-switching-ccna-routing-and-switching]

From: Ryan Hamel 
Sent: May 7, 2021 4:23 PM
To: Javier Gutierrez Guerra ; nanog@nanog.org
Subject: RE: Juniper hardware recommendation


CAUTION: This email is from an external source. Do not click links or open 
attachments unless you recognize the sender and know the content is safe.
Hello!

We wouldn’t be able to give any sort of answer without knowing your current and 
future requirements. Each model has its own throughput classes, and sometimes a 
full on MX router isn’t required.

From: NANOG 
mailto:nanog-bounces+ryan=rkhtech@nanog.org>>
 On Behalf Of Javier Gutierrez Guerra
Sent: Friday, May 7, 2021 1:55 PM
To: nanog@nanog.org<mailto:nanog@nanog.org>
Subject: Juniper hardware recommendation

Hi,
Just out of curiosity, what would you recommend using for a core router/switch 
from Juniper?
MX208,480,10K
Datasheets show them all as very nice and powerful devices (although they do 
use a lot of rack space and side to side airflow is painful) but I’m just 
wondering here what most people use and how good or bad of an experience you 
have with it 
Thanks,

Javier Gutierrez Guerra
Network Analyst
CCNA R, JNCIA
Westman Communications Group
Phone: 204-717-2827
Email: guer...@westmancom.com<mailto:guer...@westmancom.com>
[WCG_Corp_Logo_horiz_cFullcolorHR]<http://westmancom.com/personal/>

[cisco-certified-network-associate-routing-and-switching-ccna-routing-and-switching]



Juniper hardware recommendation

2021-05-07 Thread Javier Gutierrez Guerra
Hi,
Just out of curiosity, what would you recommend using for a core router/switch 
from Juniper?
MX208,480,10K
Datasheets show them all as very nice and powerful devices (although they do 
use a lot of rack space and side to side airflow is painful) but I’m just 
wondering here what most people use and how good or bad of an experience you 
have with it 
Thanks,

Javier Gutierrez Guerra
Network Analyst
CCNA R, JNCIA
Westman Communications Group
Phone: 204-717-2827
Email: guer...@westmancom.com<mailto:guer...@westmancom.com>
[WCG_Corp_Logo_horiz_cFullcolorHR]<http://westmancom.com/personal/>

[cisco-certified-network-associate-routing-and-switching-ccna-routing-and-switching]



RE: How to manage Static IPs to customers

2020-05-08 Thread Javier Gutierrez Guerra
That's surprising to me, I have no intentions to do routing with our cable 
subscribers, that seems like a headache for both sides
Today we have specific ranges within subnets from where we assign IPs to 
customers, my main problem that I'm trying to get around is having to change a 
customer static IP if their node gets splitter and I have to mode them to a 
different CMTS

Thanks,

Javier Gutierrez Guerra



-Original Message-
From: NANOG  On Behalf Of Bryan Fields
Sent: Thursday, May 7, 2020 5:57 PM
To: nanog@nanog.org
Subject: Re: How to manage Static IPs to customers

CAUTION: This email is from an external source. Do not click links or open 
attachments unless you recognize the sender and know the content is safe.

On 5/7/20 5:54 PM, Brandon Jackson via NANOG wrote:
> I have seen (Charter) and heard quite a few run RIP or some other 
> routing protocol on the CPE.

Yep, it's RIP.  They don't support IPv6 on this either.  I've been asking for
IPv6 since 2006, it's always next year.

--
Bryan Fields

727-409-1194 - Voice
http://bryanfields.net


How to manage Static IPs to customers

2020-05-07 Thread Javier Gutierrez Guerra
Hi there, 
Just wanted to reach out and get an idea how is people managing customers with 
static Ips, more specifically on Docsis networks where the customer could be 
moved between cmts's when a node is split

Thanks in advance for all responses,

Javier Gutierrez Guerra






RE: Arista Switches rebooting

2020-05-04 Thread Javier Gutierrez Guerra
Nope, basically, that this is a bug and developers are working on providing 
more debug data when this happens, for now is just unknown and could be caused 
by that ECC error that brakes the CPU



Javier Gutierrez Guerra

From: Ariel Biener 
Sent: Monday, May 4, 2020 9:31 AM
To: Javier Gutierrez Guerra ; nanog@nanog.org
Subject: Re: Arista Switches rebooting


CAUTION: This email is from an external source. Do not click links or open 
attachments unless you recognize the sender and know the content is safe.
Eos version?



From: NANOG mailto:nanog-boun...@nanog.org>> on behalf 
of Javier Gutierrez Guerra 
mailto:guer...@westmancom.com>>
Sent: Monday, May 4, 2020 5:27 PM
To: nanog@nanog.org<mailto:nanog@nanog.org>
Subject: Arista Switches rebooting

Hi,
Has anyone had issues with Arista switches rebooting out of the blue, when 
there isn't even a sufficient load on them to be a CPU or memory issue?
We have a couple Arista 7280s both SR and CR that have had this behaviour, this 
is the second time we see this issue and just wanted to see if this is 
something anyone else is experiencing with this platfrom
Thanks,

Javier Gutierrez Guerra


RE: Arista Switches rebooting

2020-05-04 Thread Javier Gutierrez Guerra
EOS 4.22.0.1F

But after contacting Support, the issue seems to be related to a ECC issue that 
causes CPU to reset, so a Aboot upgrade is required
Field Notice 0044 - 
Arista<https://www.arista.com/en/support/advisories-notices/fieldnotices/8756-field-notice-44>

Javier Gutierrez Guerra

From: Ariel Biener 
Sent: Monday, May 4, 2020 9:31 AM
To: Javier Gutierrez Guerra ; nanog@nanog.org
Subject: Re: Arista Switches rebooting


CAUTION: This email is from an external source. Do not click links or open 
attachments unless you recognize the sender and know the content is safe.
Eos version?



From: NANOG mailto:nanog-boun...@nanog.org>> on behalf 
of Javier Gutierrez Guerra 
mailto:guer...@westmancom.com>>
Sent: Monday, May 4, 2020 5:27 PM
To: nanog@nanog.org<mailto:nanog@nanog.org>
Subject: Arista Switches rebooting

Hi,
Has anyone had issues with Arista switches rebooting out of the blue, when 
there isn't even a sufficient load on them to be a CPU or memory issue?
We have a couple Arista 7280s both SR and CR that have had this behaviour, this 
is the second time we see this issue and just wanted to see if this is 
something anyone else is experiencing with this platfrom
Thanks,

Javier Gutierrez Guerra


Arista Switches rebooting

2020-05-04 Thread Javier Gutierrez Guerra
Hi, 
Has anyone had issues with Arista switches rebooting out of the blue, when 
there isn't even a sufficient load on them to be a CPU or memory issue?
We have a couple Arista 7280s both SR and CR that have had this behaviour, this 
is the second time we see this issue and just wanted to see if this is 
something anyone else is experiencing with this platfrom 
Thanks,

Javier Gutierrez Guerra