Re: [AFMUG] IPv4 exhaust again

2018-01-15 Thread Mike Hammett
2018 12:45:46 PM Subject: Re: [AFMUG] IPv4 exhaust again does CG-NAT work with the Xbox people? On Mon, Jan 15, 2018 at 1:39 PM, Chuck McCown < ch...@wbmfg.com > wrote: I need to have about /19 worth of customers natted to as few V4s as is needed to make it work properly. We

Re: [AFMUG] IPv4 exhaust again

2018-01-15 Thread Dennis Burgess
@linktechs.net> From: Af [mailto:af-boun...@afmug.com] On Behalf Of Chuck McCown Sent: Monday, January 15, 2018 3:48 PM To: af@afmug.com Subject: Re: [AFMUG] IPv4 exhaust again If they are smart enough to reboot a router or just keep trying for a few seconds and then can continue, that

Re: [AFMUG] IPv4 exhaust again

2018-01-15 Thread Chuck McCown
: Re: [AFMUG] IPv4 exhaust again That really depends on what you consider “non-service affecting” .. I would argue that as long as customers can get out and customers can get into their public IPs, a 10-30 seconds of them not getting out, is fine. Finding products that store connections etc

Re: [AFMUG] IPv4 exhaust again

2018-01-15 Thread Dennis Burgess
.com] On Behalf Of Chuck McCown Sent: Monday, January 15, 2018 3:38 PM To: af@afmug.com Subject: Re: [AFMUG] IPv4 exhaust again Just need it to be: Totally automatic failover Non service affecting We will soon have either 100 Gig or 40 Gig to the world. So I am thinking whatever we use ne

Re: [AFMUG] IPv4 exhaust again

2018-01-15 Thread Chuck McCown
@afmug.com Subject: Re: [AFMUG] IPv4 exhaust again You can engineer around that as well. There are many things you can do with multiples of those types of units. Simple to do and failover can be easy if setup correctly. Dennis Burgess – Network Solution Engineer – Consultant MikroTik

Re: [AFMUG] IPv4 exhaust again

2018-01-15 Thread Dennis Burgess
g...@linktechs.net<mailto:dmburg...@linktechs.net> From: Af [mailto:af-boun...@afmug.com] On Behalf Of Mathew Howard Sent: Monday, January 15, 2018 3:15 PM To: af <af@afmug.com> Subject: Re: [AFMUG] IPv4 exhaust again Yeah, personally, I'd split it between multiple boxes and do something l

Re: [AFMUG] IPv4 exhaust again

2018-01-15 Thread Dennis Burgess
alf Of Adam Moffett Sent: Monday, January 15, 2018 3:02 PM To: af@afmug.com Subject: Re: [AFMUG] IPv4 exhaust again Thanks for the tip. I don't know why I didn't think to use the filter. I guess 1,000 or so subscribers equals 26,000 or so connections. That's good to know. In this instance I have

Re: [AFMUG] IPv4 exhaust again

2018-01-15 Thread Mathew Howard
Assign a private /21 > to each unit. You could create a LAG for the 4 10G ports to get a 40G > uplink. > > > -- Original Message -- > From: "Steve Jones" <thatoneguyst...@gmail.com> > To: af@afmug.com > Sent: 1/15/2018 3:40:37 PM > Sub

Re: [AFMUG] IPv4 exhaust again

2018-01-15 Thread Chuck McCown
tnx From: Adam Moffett Sent: Monday, January 15, 2018 2:02 PM To: af@afmug.com Subject: Re: [AFMUG] IPv4 exhaust again Thanks for the tip. I don't know why I didn't think to use the filter. I guess 1,000 or so subscribers equals 26,000 or so connections. That's good to know

Re: [AFMUG] IPv4 exhaust again

2018-01-15 Thread Adam Moffett
. -- Original Message -- From: "Steve Jones" <thatoneguyst...@gmail.com> To: af@afmug.com Sent: 1/15/2018 3:40:37 PM Subject: Re: [AFMUG] IPv4 exhaust again filter by reply destination address and then by tcp state established is what i did On Mon, Jan 15, 2018 at 2:35 PM, Adam

Re: [AFMUG] IPv4 exhaust again

2018-01-15 Thread Dave
Howard *Sent:* Monday, January 15, 2018 1:47 PM *To:* af *Subject:* Re: [AFMUG] IPv4 exhaust again I'm pretty sure he did mean 8000 subscribers... I would want one of the i7 x86 boxes for that kind of load, but I'd imagine that would handle it without any problems. On Mon, Jan 15, 2018 at 2:35 PM

Re: [AFMUG] IPv4 exhaust again

2018-01-15 Thread Chuck McCown
Yes, we have 6000 now and are adding about 1000 each year. From: Mathew Howard Sent: Monday, January 15, 2018 1:47 PM To: af Subject: Re: [AFMUG] IPv4 exhaust again I'm pretty sure he did mean 8000 subscribers... I would want one of the i7 x86 boxes for that kind of load, but I'd imagine

Re: [AFMUG] IPv4 exhaust again

2018-01-15 Thread Mathew Howard
uff we're NAT'ing. Some traffic just passes through. > > > -- Original Message -- > From: "Steve Jones" <thatoneguyst...@gmail.com> > To: af@afmug.com > Sent: 1/15/2018 2:21:54 PM > Subject: Re: [AFMUG] IPv4 exhaust again > > srcnat is what we use. 1800

Re: [AFMUG] IPv4 exhaust again

2018-01-15 Thread Steve Jones
ssage -- > From: "Steve Jones" <thatoneguyst...@gmail.com> > To: af@afmug.com > Sent: 1/15/2018 2:21:54 PM > Subject: Re: [AFMUG] IPv4 exhaust again > > srcnat is what we use. 1800 connections right now from one section of the > network > > On Mon, Jan

Re: [AFMUG] IPv4 exhaust again

2018-01-15 Thread Adam Moffett
but that isn't strictly stuff we're NAT'ing. Some traffic just passes through. -- Original Message -- From: "Steve Jones" <thatoneguyst...@gmail.com> To: af@afmug.com Sent: 1/15/2018 2:21:54 PM Subject: Re: [AFMUG] IPv4 exhaust again srcnat is what we use. 1800 connections ri

Re: [AFMUG] IPv4 exhaust again

2018-01-15 Thread Steve Jones
f [mailto:af-boun...@afmug.com] *On Behalf Of *Chuck McCown > *Sent:* Monday, January 15, 2018 1:34 PM > *To:* af@afmug.com > *Subject:* Re: [AFMUG] IPv4 exhaust again > > > > Too bad. I am kind of scared to not have some kind of hot standby or load > sharing that will fai

Re: [AFMUG] IPv4 exhaust again

2018-01-15 Thread Dennis Burgess
.net<mailto:dmburg...@linktechs.net> From: Af [mailto:af-boun...@afmug.com] On Behalf Of Chuck McCown Sent: Monday, January 15, 2018 1:34 PM To: af@afmug.com Subject: Re: [AFMUG] IPv4 exhaust again Too bad. I am kind of scared to not have some kind of hot standby or load sharing that will fail in

Re: [AFMUG] IPv4 exhaust again

2018-01-15 Thread Chuck McCown
Too bad. I am kind of scared to not have some kind of hot standby or load sharing that will fail in a graceful manner. From: Dennis Burgess Sent: Monday, January 15, 2018 12:28 PM To: af@afmug.com Subject: Re: [AFMUG] IPv4 exhaust again MT does not do stateful failover L sorry

Re: [AFMUG] IPv4 exhaust again

2018-01-15 Thread Steve Jones
ore would send everything else to the >> edge. >> >> Details details, I let the router experts sweat that stuff. >> >> *From:* Adam Moffett >> *Sent:* Monday, January 15, 2018 12:17 PM >> *To:* af@afmug.com ; af@afmug.com >> *Subject:* Re: [AFMUG] IPv4 exh

Re: [AFMUG] IPv4 exhaust again

2018-01-15 Thread Dennis Burgess
January 15, 2018 1:24 PM To: af@afmug.com Subject: Re: [AFMUG] IPv4 exhaust again I wonder if it would handle two boxes, sync them and have a nice stateful failover mechanism? From: Steve Jones Sent: Monday, January 15, 2018 12:21 PM To: af@afmug.com<mailto:af@afmug.com> Subject: Re: [AFM

Re: [AFMUG] IPv4 exhaust again

2018-01-15 Thread Dennis Burgess
15, 2018 1:10 PM To: af@afmug.com Subject: Re: [AFMUG] IPv4 exhaust again What flavor of NAT does mikrotik implement? From: Chuck McCown Sent: Monday, January 15, 2018 12:07 PM To: af@afmug.com<mailto:af@afmug.com> Subject: Re: [AFMUG] IPv4 exhaust again Wonder how heavy we can load that... I woul

Re: [AFMUG] IPv4 exhaust again

2018-01-15 Thread Mathew Howard
I let the router experts sweat that stuff. > > *From:* Adam Moffett > *Sent:* Monday, January 15, 2018 12:17 PM > *To:* af@afmug.com ; af@afmug.com > *Subject:* Re: [AFMUG] IPv4 exhaust again > > the 1072 has 72 cores. We have a 1036 (36 core) doing NAT for over a &g

Re: [AFMUG] IPv4 exhaust again

2018-01-15 Thread Chuck McCown
I wonder if it would handle two boxes, sync them and have a nice stateful failover mechanism? From: Steve Jones Sent: Monday, January 15, 2018 12:21 PM To: af@afmug.com Subject: Re: [AFMUG] IPv4 exhaust again srcnat is what we use. 1800 connections right now from one section of the network

Re: [AFMUG] IPv4 exhaust again

2018-01-15 Thread Steve Jones
t; *To:* af@afmug.com > *Subject:* Re: [AFMUG] IPv4 exhaust again > > Wonder how heavy we can load that... I would want it to be able to handle > 8000 connections. > > *From:* Steve Jones > *Sent:* Monday, January 15, 2018 12:05 PM > *To:* af@afmug.com > *Subject:* Re: [AFMUG] I

Re: [AFMUG] IPv4 exhaust again

2018-01-15 Thread Chuck McCown
experts sweat that stuff. From: Adam Moffett Sent: Monday, January 15, 2018 12:17 PM To: af@afmug.com ; af@afmug.com Subject: Re: [AFMUG] IPv4 exhaust again the 1072 has 72 cores. We have a 1036 (36 core) doing NAT for over a thousand LTE+Wimax customers. CPU usage is like 30%. The "fir

Re: [AFMUG] IPv4 exhaust again

2018-01-15 Thread Adam Moffett
age.just a guess obviously. There's nothing to say it would scale linearly. -- Original Message -- From: "Chuck McCown" <ch...@wbmfg.com> To: af@afmug.com Sent: 1/15/2018 2:07:39 PM Subject: Re: [AFMUG] IPv4 exhaust again Wonder how heavy we can load that... I woul

Re: [AFMUG] IPv4 exhaust again

2018-01-15 Thread Chuck McCown
What flavor of NAT does mikrotik implement? From: Chuck McCown Sent: Monday, January 15, 2018 12:07 PM To: af@afmug.com Subject: Re: [AFMUG] IPv4 exhaust again Wonder how heavy we can load that... I would want it to be able to handle 8000 connections. From: Steve Jones Sent: Monday

Re: [AFMUG] IPv4 exhaust again

2018-01-15 Thread Chuck McCown
Wonder how heavy we can load that... I would want it to be able to handle 8000 connections. From: Steve Jones Sent: Monday, January 15, 2018 12:05 PM To: af@afmug.com Subject: Re: [AFMUG] IPv4 exhaust again ccr1072 On Mon, Jan 15, 2018 at 12:59 PM, Chuck McCown <ch...@wbmfg.com>

Re: [AFMUG] IPv4 exhaust again

2018-01-15 Thread Steve Jones
ccr1072 On Mon, Jan 15, 2018 at 12:59 PM, Chuck McCown <ch...@wbmfg.com> wrote: > What are you using? Router NAT or a server or ? > > *From:* Steve Jones > *Sent:* Monday, January 15, 2018 11:48 AM > *To:* af@afmug.com > *Subject:* Re: [AFMUG] IPv4 exhaust again >

Re: [AFMUG] IPv4 exhaust again

2018-01-15 Thread Chuck McCown
What are you using? Router NAT or a server or ? From: Steve Jones Sent: Monday, January 15, 2018 11:48 AM To: af@afmug.com Subject: Re: [AFMUG] IPv4 exhaust again Im not going to lie, we are natting at 1:300 across a handful of publics and have little to no issue, though we really should

Re: [AFMUG] IPv4 exhaust again

2018-01-15 Thread Mathew Howard
I think. Don’t want to have to buy a >> fourth. >> >> *From:* Dennis Burgess >> *Sent:* Monday, January 15, 2018 11:34 AM >> *To:* af@afmug.com >> *Subject:* Re: [AFMUG] IPv4 exhaust again >> >> >> Mikrotik can do that, I have a router with 20k

Re: [AFMUG] IPv4 exhaust again

2018-01-15 Thread Steve Jones
rs natted to as few V4s as is > needed to make it work properly. > > We currently have about 3 /21s I think. Don’t want to have to buy a > fourth. > > *From:* Dennis Burgess > *Sent:* Monday, January 15, 2018 11:34 AM > *To:* af@afmug.com > *Subject:* Re: [AFMUG] IPv4 exhaust

Re: [AFMUG] IPv4 exhaust again

2018-01-15 Thread Kurt Fankhauser
ant to have to buy a > fourth. > > *From:* Dennis Burgess > *Sent:* Monday, January 15, 2018 11:34 AM > *To:* af@afmug.com > *Subject:* Re: [AFMUG] IPv4 exhaust again > > > Mikrotik can do that, I have a router with 20k NAT rules natting two /21s > to less than 254 ips .:) &g

Re: [AFMUG] IPv4 exhaust again

2018-01-15 Thread Chuck McCown
www.linktechs.net Radio Frequency Coverages: www.towercoverage.com Office: 314-735-0270 E-Mail: dmburg...@linktechs.net From: Af [mailto:af-boun...@afmug.com] On Behalf Of George Skorup Sent: Monday, January 15, 2018 12:28 PM To: af@afmug.com Subject: Re: [AFMUG] IPv4 exhaust again Dual-stack

Re: [AFMUG] IPv4 exhaust again

2018-01-15 Thread Dennis Burgess
...@afmug.com] On Behalf Of George Skorup Sent: Monday, January 15, 2018 12:28 PM To: af@afmug.com Subject: Re: [AFMUG] IPv4 exhaust again Dual-stack and CGN? You can get 8:1, 16:1 or even 32:1 out of a single public IPv4 address. Give 8 customers 8k ports each, or 16 customer 4k ports each, 32

Re: [AFMUG] IPv4 exhaust again

2018-01-15 Thread George Skorup
Dual-stack and CGN? You can get 8:1, 16:1 or even 32:1 out of a single public IPv4 address. Give 8 customers 8k ports each, or 16 customer 4k ports each, 32 customers 2k ports each. That's *source* ports, so they're not limited to 8k, 4k or 2k connections total. You have to look at in both

[AFMUG] IPv4 exhaust again

2018-01-15 Thread Chuck McCown
Planning to buy another /21 or some such thing again .. So going to attempt to NAT the whole frigging company. Seems like I am going in reverse here. If we can make NAT work for most customers, then that will buy us time to build our magic V4 translator gateway box for a V6 only