Re: ASNs decimation in ZW this morning

[Colin Johnston]

> On 18 Jan 2019, at 11:52, Mark Tinka  wrote:
> 
> 
> 
> On 17/Jan/19 16:57, Keith Medcalf wrote:
> 
>> However, like the Internet Off switch installed in the Pentagon after 911 
>> (which shutdown the DNS Severs), you may find that you have to reboot the 
>> Internet so you can upload your Save the World video to Twitter ...
> 
> https://www.youtube.com/watch?v=RYHci_KYIT4
> 
> Mark.


someone needs to tell Zim Gov that BACS-IP payroll needs IP connectivity to 
banks to pay gov employees otherwise

Col

Re: ASNs decimation in ZW this morning

[Mark Tinka]

On 17/Jan/19 16:57, Keith Medcalf wrote:

> However, like the Internet Off switch installed in the Pentagon after 911 
> (which shutdown the DNS Severs), you may find that you have to reboot the 
> Internet so you can upload your Save the World video to Twitter ...

https://www.youtube.com/watch?v=RYHci_KYIT4

Mark.

RE: ASNs decimation in ZW this morning

[Keith Medcalf]

However, like the Internet Off switch installed in the Pentagon after 911 
(which shutdown the DNS Severs), you may find that you have to reboot the 
Internet so you can upload your Save the World video to Twitter ...

---
The fact that there's a Highway to Hell but only a Stairway to Heaven says a 
lot about anticipated traffic volume.


>-Original Message-
>From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Mark Tinka
>Sent: Thursday, 17 January, 2019 02:47
>To: Colin Johnston
>Cc: nanog@nanog.org
>Subject: Re: ASNs decimation in ZW this morning
>
>
>
>On 17/Jan/19 11:29, Colin Johnston wrote:
>
>> Would a service be viewed as the same as (layer2 connectivity to a
>out of country layer3/layer4 endpoint).
>> ie ip source out of country but connectivity layer in country ?
>> satcomms in effect but terrestrial based pvc with leaf router out
>of country.
>
>Logically, Layer 2 services would not apply. But this is because
>gubbermints are clueless about the differences between the various
>layers.
>
>Mark.

Re: ASNs decimation in ZW this morning

[Mark Tinka]

On 17/Jan/19 11:29, Colin Johnston wrote:

> Would a service be viewed as the same as (layer2 connectivity to a out of 
> country layer3/layer4 endpoint).
> ie ip source out of country but connectivity layer in country ?
> satcomms in effect but terrestrial based pvc with leaf router out of country.

Logically, Layer 2 services would not apply. But this is because
gubbermints are clueless about the differences between the various layers.

Mark.

Re: ASNs decimation in ZW this morning

[Colin Johnston]

> On 17 Jan 2019, at 09:07, Mark Tinka  wrote:
> 
> 
> 
> On 16/Jan/19 19:49, John Von Essen wrote:
> 
>> Im confused as to what exactly happened and how it was implemented. I
>> assume the government wanted to restrict access to sites like
>> whatsapp, facebook, twitter, etc.,. So did they tell national
>> ISPs/Mobile (strong-arm) to simply block access to those sites, or
>> they did they tell them to completely shutdown and go dark until the
>> protests were over. Im just curious as to how an ISP/Mobile would
>> selectively block access under government influence, reason being...
>> understanding how can help us think of ways to get around it.
>> 
>> For example, lets say the mobile networks null routed all traffic
>> destined to twitter and facebook networks... not a complete IP
>> shutdown. So a local citizen is using email from a local provider
>> (non-gmail, etc.,.) and still has access to email, Twitter knows they
>> are blocked in ZW, but they still try to email updates to this example
>> citizen. If their networks are being null routed, they can simply
>> deliver the email via an alternate network/platform.
>> 
>> The whole thing is very disturbing, I mean this is 2019 right? Not
>> 1984...
> 
> It's not unusual for networks to be shutdown, particularly during riots
> and/or elections. I'm not saying it's right or wrong, I'm just saying
> it's not unusual.
> 
> This happened during the recent elections in Uganda and Kenya, for example.
> 
> Typically, the operating licenses issued by the gubbermints to operators
> provide for legal avenues by the gubbermint to shutdown services. It is
> not the gubbermint's responsibility as to how this is implemented by the
> operators, just that it be done.
> 
Would a service be viewed as the same as (layer2 connectivity to a out of 
country layer3/layer4 endpoint).
ie ip source out of country but connectivity layer in country ?
satcomms in effect but terrestrial based pvc with leaf router out of country.

Colin


> In recent years, social media resources have been targets, so Facebook,
> WhatsApp, Twitter et al. However, if the gubbermint takes a broader
> approach, it's up to the operator to figure out how to do it. Failure to
> comply can result in arrests, fines, jail or even revocation of the license.
> 
> All mobile operators have terribly advanced DPI infrastructure, so it's
> not difficult to shut services down at a very granular level.
> 
> Operators that deliver services via terrestrial means also employ DPI
> infrastructure, because selling bandwidth access by the Gig-loads is big
> business :-\. So they, too, can implement shutdowns with a reasonable
> degree of granularity.
> 
> Mark.
> 

Re: ASNs decimation in ZW this morning

[Mark Tinka]

On 16/Jan/19 19:49, John Von Essen wrote:

> Im confused as to what exactly happened and how it was implemented. I
> assume the government wanted to restrict access to sites like
> whatsapp, facebook, twitter, etc.,. So did they tell national
> ISPs/Mobile (strong-arm) to simply block access to those sites, or
> they did they tell them to completely shutdown and go dark until the
> protests were over. Im just curious as to how an ISP/Mobile would
> selectively block access under government influence, reason being...
> understanding how can help us think of ways to get around it.
>
> For example, lets say the mobile networks null routed all traffic
> destined to twitter and facebook networks... not a complete IP
> shutdown. So a local citizen is using email from a local provider
> (non-gmail, etc.,.) and still has access to email, Twitter knows they
> are blocked in ZW, but they still try to email updates to this example
> citizen. If their networks are being null routed, they can simply
> deliver the email via an alternate network/platform.
>
> The whole thing is very disturbing, I mean this is 2019 right? Not
> 1984...

It's not unusual for networks to be shutdown, particularly during riots
and/or elections. I'm not saying it's right or wrong, I'm just saying
it's not unusual.

This happened during the recent elections in Uganda and Kenya, for example.

Typically, the operating licenses issued by the gubbermints to operators
provide for legal avenues by the gubbermint to shutdown services. It is
not the gubbermint's responsibility as to how this is implemented by the
operators, just that it be done.

In recent years, social media resources have been targets, so Facebook,
WhatsApp, Twitter et al. However, if the gubbermint takes a broader
approach, it's up to the operator to figure out how to do it. Failure to
comply can result in arrests, fines, jail or even revocation of the license.

All mobile operators have terribly advanced DPI infrastructure, so it's
not difficult to shut services down at a very granular level.

Operators that deliver services via terrestrial means also employ DPI
infrastructure, because selling bandwidth access by the Gig-loads is big
business :-\. So they, too, can implement shutdowns with a reasonable
degree of granularity.

Mark.

Re: ASNs decimation in ZW this morning

[Scott Weeks]

--- col...@gt86car.org.uk wrote:
From: Colin Johnston 

I wonder how they block social media sites/whats up, 
is it null routing on peering cores or filtering since 
did not see filtering in place from ZIM<>UK last month...
-

Regarding the shutdown:

https://allafrica.com/stories/201901160010.html

"As it was a written directive issued in terms of the 
law, non-compliance would result in immediate 
imprisonment of management on the ground."



It's back on.

https://www.newzimbabwe.com/internet-back-on-mnangagwa-says-understands-pain-and-frustration/



Side effects:

https://www.newzimbabwe.com/by-killing-the-internet-zimbabwe-kills-commerce-and-lights/



Folks are just trying to survive.  Fuel is over $13 USD
per gallon (out of reach for ordinary folks), prices are 
crazy high and folks are just trying to survive:

https://www.newzimbabwe.com/civilians-beaten-and-abducted-in-major-zimbabwe-crackdown/



But the gov't still has enough for weapons!

https://www.newzimbabwe.com/moscow-mnangagwa-says-zimbabwe-to-buy-state-of-the-art-russian-arms/


scott

Re: ASNs decimation in ZW this morning

[John Von Essen]

Im confused as to what exactly happened and how it was implemented. I 
assume the government wanted to restrict access to sites like whatsapp, 
facebook, twitter, etc.,. So did they tell national ISPs/Mobile 
(strong-arm) to simply block access to those sites, or they did they 
tell them to completely shutdown and go dark until the protests were 
over. Im just curious as to how an ISP/Mobile would selectively block 
access under government influence, reason being... understanding how can 
help us think of ways to get around it.


For example, lets say the mobile networks null routed all traffic 
destined to twitter and facebook networks... not a complete IP shutdown. 
So a local citizen is using email from a local provider (non-gmail, 
etc.,.) and still has access to email, Twitter knows they are blocked in 
ZW, but they still try to email updates to this example citizen. If 
their networks are being null routed, they can simply deliver the email 
via an alternate network/platform.


The whole thing is very disturbing, I mean this is 2019 right? Not 1984...

-John


On 1/16/19 9:06 AM, Mark Tinka wrote:



On 16/Jan/19 15:54, Colin Johnston wrote:



I wonder how they block social media sites/whats up, is it null
routing on peering cores or filtering since did not see filtering in
place from ZIM<>UK last month...

In Africa, the majority of connectivity happens over mobile networks. So
it's easy to "fix" it, since mobile networks have some of the most
advanced DPI's in any network.

For those not aware, Emmerson Mnangagwa, the Zimbabwean president,
increased fuel prices from US$1.24/litre to US$3.11/litre for diesel,
and US$1.31/litre to US$3.31/litre for petrol. This is what led to
(violent) protests, and as such, networks being asked to shutdown services.

Mark.

Re: ASNs decimation in ZW this morning

[Mark Tinka]

On 16/Jan/19 15:54, Colin Johnston wrote:

>
>
> I wonder how they block social media sites/whats up, is it null
> routing on peering cores or filtering since did not see filtering in
> place from ZIM<>UK last month...

In Africa, the majority of connectivity happens over mobile networks. So
it's easy to "fix" it, since mobile networks have some of the most
advanced DPI's in any network.

For those not aware, Emmerson Mnangagwa, the Zimbabwean president,
increased fuel prices from US$1.24/litre to US$3.11/litre for diesel,
and US$1.31/litre to US$3.31/litre for petrol. This is what led to
(violent) protests, and as such, networks being asked to shutdown services.

Mark.

Re: ASNs decimation in ZW this morning

[Colin Johnston]

> On 15 Jan 2019, at 17:03, C. A. Fillekes  wrote:
> 
> 
> Whole countries falling off the net?  BUT TEH TOP POSTINGS!!!
> 
> I'm a little frustrated with the very existence of that thread.
> 
> Trying to constructively change the topic to something more interesting lol. 
> 
> I guess the concerning thing to me is that the whole point of packet switched 
> networks was to provide resilience in the face of e.g. civil disorder. 
> 
> On Tue, Jan 15, 2019 at 11:50 AM Colin Johnston  > wrote:
> sorry top posting,
> yup whatsup doesnt work in harare.
> phone circuits land ok though and checked ok
> 
> col
> 
> Sent from my iPod
> 
> On 15 Jan 2019, at 15:42, C. A. Fillekes  > wrote:
> 
>> 
>> 
>> On Tue, Jan 15, 2019 at 10:34 AM C. A. Fillekes > > wrote:
>> 
>> So @meileaben on twitter this morning notes:
>> 
>> Many #Zimbabwe  Internet 
>> routes withdrawn around 9:30 UTC amidst civil unrest in the country. 
>> near-realtime on #RIPEstat  
>> here: https://stat.ripe.net/ZW   
>> #OpenNetworkIntelligence 
>>  
>> #ZimbabweShutdown 
>> 
>> https://twitter.com/meileaben/status/1085118237157851136 
>> 
>> 
>> wondering if anyone here has additional info on that.  Looing at 
>> stat.ripe.net/ZW  now it looks as though one (out 
>> of an original 18, current 9) ASN has recovered, but kind of curious as to 
>> what exactly happened there. 
>> 
>> So Bloomberg notes that a number of ISPs were shut down to quell online 
>> protest
>> https://www.bloomberg.com/news/articles/2019-01-15/by-killing-the-internet-zimbabwe-kills-commerce-and-the-lights
>>  
>> 
>>  but are there no work-arounds available, if implemented? 



zimbabwe situation link below re telecom problems
https://www.zimbabwesituation.com/news/zimbabwe-telecoms-jammed-after-violent-protests-report/
 



I was back in Zim myself last month as well to see family children, internet 
was working well then inc whats up, mobile and adsl.

I wonder how they block social media sites/whats up, is it null routing on 
peering cores or filtering since did not see filtering in place from ZIM<>UK 
last month...

Colin

Re: ASNs decimation in ZW this morning

[Colin Johnston]

sorry top posting,
yup whatsup doesnt work in harare.
phone circuits land ok though and checked ok

col

Sent from my iPod

> On 15 Jan 2019, at 15:42, C. A. Fillekes  wrote:
> 
> 
> 
>> On Tue, Jan 15, 2019 at 10:34 AM C. A. Fillekes  wrote:
>> 
>> So @meileaben on twitter this morning notes:
>> 
>> Many #Zimbabwe Internet routes withdrawn around 9:30 UTC amidst civil unrest 
>> in the country. near-realtime on #RIPEstat here: https://stat.ripe.net/ZW  
>> #OpenNetworkIntelligence #ZimbabweShutdown
>> 
>> https://twitter.com/meileaben/status/1085118237157851136
>> 
>> wondering if anyone here has additional info on that.  Looing at 
>> stat.ripe.net/ZW now it looks as though one (out of an original 18, current 
>> 9) ASN has recovered, but kind of curious as to what exactly happened there. 
> 
> So Bloomberg notes that a number of ISPs were shut down to quell online 
> protest
> https://www.bloomberg.com/news/articles/2019-01-15/by-killing-the-internet-zimbabwe-kills-commerce-and-the-lights
>  but are there no work-arounds available, if implemented? 

Re: ASNs decimation in ZW this morning

[C. A. Fillekes]

On Tue, Jan 15, 2019 at 10:34 AM C. A. Fillekes  wrote:

>
> So @meileaben on twitter this morning notes:
>
> Many #*Zimbabwe*  Internet
> routes withdrawn around 9:30 UTC amidst civil unrest in the country.
> near-realtime on #*RIPEstat*
>  here: https://
> stat.ripe.net/ZW   #*OpenNetworkIntelligence*
>  #
> *ZimbabweShutdown* 
>
> https://twitter.com/meileaben/status/1085118237157851136
>
> wondering if anyone here has additional info on that.  Looing at
> stat.ripe.net/ZW now it looks as though one (out of an original 18,
> current 9) ASN has recovered, but kind of curious as to what exactly
> happened there.
>

So Bloomberg notes that a number of ISPs were shut down to quell online
protest
https://www.bloomberg.com/news/articles/2019-01-15/by-killing-the-internet-zimbabwe-kills-commerce-and-the-lights
but are there no work-arounds available, if implemented?

ASNs decimation in ZW this morning

[C. A. Fillekes]

So @meileaben on twitter this morning notes:

Many #*Zimbabwe*  Internet
routes withdrawn around 9:30 UTC amidst civil unrest in the country.
near-realtime on #*RIPEstat* 
here: https://stat.ripe.net/ZW   #
*OpenNetworkIntelligence*
 #
*ZimbabweShutdown* 

https://twitter.com/meileaben/status/1085118237157851136

wondering if anyone here has additional info on that.  Looing at
stat.ripe.net/ZW now it looks as though one (out of an original 18, current
9) ASN has recovered, but kind of curious as to what exactly happened
there.