Re: Puerto Rico Internet Exchange

2019-07-06 Thread cyrus ramirez via NANOG
I'm interested as well.
Cyrus Ramirez

Sent from Yahoo Mail on Android 
 
  On Sat, Jul 6, 2019 at 6:01 PM, Rubens Kuhl wrote:   
It would be interesting if ICANN, Verisign and Afilias were able to join the IX 
as well making the root and .com/.net/.org/.pr zones available even if the 
island is cut off from the globe. There is so much fixation in bits per second 
while IX'es are resiliency tools, more than bandwidth saving tools. 

Rubens

On Sat, Jul 6, 2019 at 6:19 PM Mehmet Akcin  wrote:

Hey there, just a very brief update
We are in the process of RE-launching Internet Exchange in San Juan, Puerto 
Rico in a few weeks. We've got multiple networks in San Juan agreed to join the 
IX in a common neutral point.  If you are able to help with the project or 
interested in learning more about it, please contact me offlist. (especially if 
you are in Puerto rico)
Once everything is operational and the website is set up, I hope to contact 
back and update once we've got mrtg, etc is operational.
thank you
  


Re: Must have ISP Open Source & tools

2019-07-07 Thread cyrus ramirez via NANOG
I don't know if the areas have been evaluated or not. I would hyperconverge and 
virtualize as much as possible. I would attempt MPLS with a VRF gateway. Money 
will probably be an issue so hosting VoIP and Content services may be good. Are 
you using wireless, cable, satellite as the backhaul? If this is completely 
Greenfield, then evaluating a location, finding relay sites and etc should be 
done 1st.
Cyrus 

Sent from Yahoo Mail on Android 
 
  On Sun, Jul 7, 2019 at 8:08 PM, Mehmet Akcin wrote:   Hey 
there
We are a growing ISP in Colombia and Latin America. I am interested in hearing 
from others regarding tools and software they recommend we must have such as 
LibreNMS, Rancid etc.
It’s greenfieldish now ;-) so feel free to recommend A-Z anything! ;-)
Hope this thread is useful others too!
Mehmet-- 
Mehmet
+1-424-298-1903  


Re: QoS for Office365

2019-07-08 Thread cyrus ramirez via NANOG
Implement Quality of Service in Microsoft Teams  
|  
|   
|   
|   ||

   |

  |
|  
|   |  
Implement Quality of Service in Microsoft Teams
 
Prepare your organization's network for Quality of Service (QoS) in Microsoft 
Teams.
  |   |

  |

  |

  


Sent from Yahoo Mail on Android 
 
  On Mon, Jul 8, 2019 at 12:47 PM, Mark Tinka wrote:   

On 8/Jul/19 18:18, Jared Mauch wrote:

>
> Add bandwidth?
>
> QoS is a great tool when you’re constrained and must classify your critical 
> traffic, but it’s not a substitute of getting enough capacity to offices.
>
> I have only applied QoS to voice traffic to ensure it gets through, the rest 
> you need to budget for the bandwidth needs of the site.  The price of 
> bandwidth likely isn’t insane in your market, but your budget may be.. I’ve 
> found that most places won’t quote you a service for less than $1500 USD MRC. 
>  I know you can get the incumbents to often deliver 1G service for $2k/mo in 
> the US (and possibly cheaper).
>
> I’ve found a lot of people are still stuck in TDM mentality instead of just 
> getting a 1G/10G service.

In some cases, the motivation for these requirements is fueled by trying
to outsmart your competitors.

I just don't know of a reliable, contractual way that you can use QoS to
say your DIA or IP Transit service is better than that of your competitor.

Mark.
  


Re: [nanog] Cisco GLBP/HSRP question -- Has it ever been dis

2019-08-04 Thread cyrus ramirez via NANOG
If you're looking for vendor neutral FHRP, VRRP has RFC documentation. GLBP and 
HSRP are Cisco proprietary protocols and are protected information other than 
the study material and how too out there.
Cyrus

Sent from Yahoo Mail on Android 
 
  On Sat, Aug 3, 2019 at 10:19 AM, Chriztoffer Hansen 
wrote:   
Saku Ytti wrote on 03/08/2019 15:49:
> I don't think any work for GLBP exists in IETF.

A shot in the dark. Correct.

https://www.google.com/#q=%28"GLBP"%7C"Gateway+Load+Balancing"+Protocol%7C"Global+Load+Balancing"+Protocol%29+AND+inurl%3Adatatracker+AND+inurl%3Aietf

(My IETF history is short. =I won't know any older history.)

... I doubt any current or previous Cisco folks on the list would want 
to chirm in about history from inside Cisco on the GLBP topic...(?)

-- 
Best regards,
Chriztoffer
  


Re: Optical training

2019-10-02 Thread cyrus ramirez via NANOG
Hello All:I held an OSP Engineer and Design certificate from the below 
trainers. Excellent training and it's hands on.
Light Brigade Fiber Optic Training  
|  
|   
|   
|   ||

   |

  |
|  
|   |  
Light Brigade Fiber Optic Training
 
Fiber Optic Training - Light Brigade offers fiber optic training, certification 
and online courses.
  |   |

  |

  |

  
Cyrus Ramirez

Sent from Yahoo Mail on Android 
 
  On Tue, Oct 1, 2019 at 4:31 PM, James Chang wrote:   
Sorry... forgot to mention that I'm looking for recommendation of training 
courses in this particular area.
Thanks,James

On Tue, Oct 1, 2019 at 4:21 PM James Chang  wrote:

Hi All,
Hopefully this is the right place to post this question.    I'm a routing guy 
mainly working with ISIS/BGP for my company in our core space.  I have an 
opportunity to get involve with our L2 DWDM network.  We are a Cisco shop using 
NCS2K as DWDM nodes.  But before jump into learning the NCS specific stuff, I 
would like to take a vendor neutral training course in Optical fiber testing 
with OSA/OTDR, OTN, DWDM signaling, OSNR/dispersionetc.  I think this will 
help me understand how to build out a DWDM network from ground up.  I'm hoping 
someone I could get into designing network for my company.
Thanks in advance,James
  


Re: Feedback - SBC Vendors.

2018-08-08 Thread cyrus ramirez via NANOG
Hello:Unfortunately, we use Oracle SBC due to our text requirements.
Cytus Ramirez

Sent from Yahoo Mail on Android 
 
  On Wed, Aug 8, 2018 at 7:57 PM, Ryan Finnesey wrote:   I 
am going to have to install a series of SBCs for a  voice offering connected to 
Microsoft Teams.  We are going to pass the SIP traffic off to a larger number 
of SIP providers.  I would like  to get some feedback from the group on SBC 
vendors.  I have two options for vendors Ribbon or AudioCodes.  I am leaning 
towards a software based SBC over an appliance. 

Would be helpful to get the other members feedback on Ribbon or AudioCodes 
deployments within their networks.

Cheers
Ryan
  


Re: BGP peering question

2017-07-12 Thread cyrus ramirez via NANOG
Is your AS registered with ARIN?2 byte or 4 byte ASN number?How many devices 
are you peering with?Dual homed, multi homed?Bandwidth?Type of traffic?
There are alot more...

Regards,Cyrus Ramirez

 



On Wednesday, July 12, 2017, 3:11:38 PM EDT, David Hofstee 
 wrote:

I would state that peering gives more control over the traffic you handle
(since it is not going over someone else's network). Every hop is a
possible problem to your operations, I guess.


David

On 12 July 2017 at 09:13, Wolfgang Tremmel 
wrote:

>
> > On 11. Jul 2017, at 21:43, Nick Hilliard  wrote:
> >
> > Patrick W. Gilmore wrote:
> >> 1) Are they present an IX where I am present?
> >>
> >> 2) Can they configure BGP correctly?
> >>
> >> 3) … Beer?
> >
> >
> > 1) do they have a pulse?
>
> 4 ) are they in PeeringDB and keep their entry up to date? (especially the
> contact information)
>
> cheers,
> Wolfgang
>
>
> --
> Wolfgang Tremmel
>
> Phone +49 69 1730902 26 | Fax +49 69 4056 2716 | Mobile +49 171 8600 816
> | wolfgang.trem...@de-cix.net
> Geschaeftsfuehrer Harald A. Summa | Registergericht AG Köln HRB 51135
> DE-CIX Management GmbH | Lindleystrasse 12 | 60314 Frankfurt am Main |
> Germany | www.de-cix.net
>
>
>


-- 
--
My opinion is mine.


Re: Puerto Rico Internet Exchange

2017-08-13 Thread cyrus ramirez via NANOG
Hello:Have you looked into WIFI? 
Cyrus

Sent from Yahoo Mail on Android 
 
  On Sat, Aug 12, 2017 at 7:29 AM, Mehmet Akcin wrote:   Hey 
there!

... ok this time I am not going to call it PRIX ;) well name doesn't matter
really. Nearly 13 years ago I have attempted to start Puerto rico Internet
exchange in San Juan. I have lived there over 5 years and i just wanted to
really watch videos faster. The project somewhat died when i moved to LA
but now there are few interested party to start an internet exchange in
Puerto rico. The jsland historically had one of the slowest
broadband/internet services which seemed to have improved in recent years
however as of 2017 there still is not an IX in Puerto rico.

We , 3-4 internet engineers (on island and remote) , want to look into
relaunch of this IX and hopefully find a way to keep local traffic
exchanged at high speeds and low cost. We need expertise, and people who
want to help any way they can.

We are trying to make this IX a not-for-profit one and we are looking at
opeeating models to adapt which has worked incredibly well like Seattle IX.

We are hoping the relaunch to happen sometime in 2018. Thanks in advance
hope to share more info and traffic data sometime , soon. Watch this space!

Mehmet
  


Re: how to deal with port scan and brute force attack from AS 8075 ?

2016-04-03 Thread cyrus ramirez via NANOG
You could use Shields Up to view your vulnerabilities... obvious ones, and 
remedy... Cyrus Ramirez

 

On Thursday, March 31, 2016 10:21 AM, "valdis.kletni...@vt.edu" 
 wrote:
 

 On Thu, 31 Mar 2016 10:02:05 +0200, "marcel.duregards--- via NANOG" said:

> We consider port scan and brute force on ssh port as an attack, and even

So explain to me why you don't have ACLs that silently drop inbound SYN
packets on port 22 from outside your allocated address space?  (And if
you can't do it at your border because you sub-allocate address space
to customers, figure out how to use iptables or similar to block it on
the target hosts, or only apply the ACL for your own subnets).

If you have a *legitimate* business case for needing to SSH in from outside,
there are fine products such as OpenVPN (and not-so-fine like the one we
have in production - although it's mostly usable too, and achieves the goal
of presenting you as being inside our corporate address space)

Also, move your SSH service to some port other than 22, and consider
putting 'Password Authentication no/PubKeyAuthentication yes' in your
sshd_config.

I admit never understanding why people run their systems in a low-hanging
fruit configuration, and then are surprised that miscreants go looking for
low hanging fruit.

(For the record, our border routers drop inbound SYN on port 22 on *both*
ipv4 and ipv6 address spaces.  It's amazing how few brute force
attempts we see on our servers... :)