Re: [AusNOG] dark fibre encryption

2020-04-08 Thread Iain Ashley
Hi Alex We do this - happy to contact off list. Norwegian company, solid tech - L1 hitless crypto, upstream vendor agnostic. Regards Iain Ashley CTO Independent Data Solutions Pty. Ltd. +61 406 537 128 +61 2 8205 3139 iain.ash...@ids-g.com www.ids-g.com The information transmitted, including at

[AusNOG] Spoofer Report for AusNOG for Mar 2020

2020-04-08 Thread CAIDA Spoofer Project
In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address.

Re: [AusNOG] dark fibre encryption

2020-04-08 Thread Alex Samad
Hi I do agree with the statement, but I need encryption at the phy layer. A On Wed, 8 Apr 2020 at 19:54, Mark Smith wrote: > On Wed, 8 Apr 2020 at 17:49, Phillip Grasso > wrote: > > > > Cheapest is ipsec and there's plenty of options there. > > End-to-end crypto via IPsec or TLS/HTTPS is real

[AusNOG] Mikrotik CRS VLAN Configuration Assistance

2020-04-08 Thread SIP ISP
Hi AusNog Looking for anyone whom has experience in setting up a Mikrotik CRS with VLANNING Please ping me off list KR Sent from my iPhone___ AusNOG mailing list AusNOG@lists.ausnog.net http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] dark fibre encryption

2020-04-08 Thread Mark Smith
On Wed, 8 Apr 2020 at 17:49, Phillip Grasso wrote: > > Cheapest is ipsec and there's plenty of options there. End-to-end crypto via IPsec or TLS/HTTPS is really the best option, you then don't have to trust the network. Also makes network engineers' lives easier - "I just shift the packets, I do

Re: [AusNOG] dark fibre encryption

2020-04-08 Thread Alex Samad
ta On Wed, 8 Apr 2020 at 17:49, Phillip Grasso wrote: > Cheapest is ipsec and there's plenty of options there. There's cheaper > companies that do macsec support. Arista is the other option on major > vendor options but there's a bunch of yumcha ones you can get if you don't > mind some foreign

Re: [AusNOG] dark fibre encryption

2020-04-08 Thread Phillip Grasso
Cheapest is ipsec and there's plenty of options there. There's cheaper companies that do macsec support. Arista is the other option on major vendor options but there's a bunch of yumcha ones you can get if you don't mind some foreign government's having your keys :-p On Wed, 8 Apr 2020, 5:30 pm Al

Re: [AusNOG] dark fibre encryption

2020-04-08 Thread Alex Samad
Quick check of my network vendor , the equipment that has it is out of price range :( A On Wed, 8 Apr 2020 at 15:43, Phillip Grasso wrote: > macsec is your best bet. Lots of vendors support it and is reasonably > mature. better if you pick one that allows dual keys, no downtime with > rotating