RE: L3VPN VPNv4 NLRI - Route Reflector Scaling

2008-04-04 Thread David Freedman
This is made easier by the cisco allowing regular expressions in the extcommunity list, an RT scoping policy can be implemented as a result. David Freedman Group Network Engineering Claranet Limited http://www.clara.net -Original Message

Re: L3VPN VPNv4 NLRI - Route Reflector Scaling

2008-04-04 Thread david . freedman
And apologies for the html of the previous two posts :)

RE: L3VPN VPNv4 NLRI - Route Reflector Scaling

2008-04-04 Thread David Freedman
On Wednesday 02 April 2008, David Freedman wrote: We have dedicated VPNv4 route reflectors, they work well for us. An inevitable end as the number of routes grows. In our case we use the cisco rr-group directive (http://www.cisco.com/en/US/docs/ios/12_3/iproute/command/reference/ip2_a1g.html

Re: L3VPN VPNv4 NLRI - Route Reflector Scaling

2008-04-01 Thread David Freedman
One other option we theorize would be to have dedicated VPNv4 route reflectors (route reflectors that do not reflect other address families, e.g., IPv4, IPv6, e.t.c.). We have dedicated VPNv4 route reflectors, they work well for us. Dave.

RE: Some ideas on how to protect against longer-prefix hijacking

2008-02-24 Thread David Freedman
1: Per my prior message, create a SuperAS that highly trusted entities How do we qualify those, are they linked to the amount of revenue we would lose from customers if they can't reach them? Can I be one of those? :) 2: Have some sort of algorithm that inversely relates AS number to longest

named.root (was: Yay! AAAA records added for root servers)

2008-02-05 Thread David Freedman
Transit 510 580 4100 | | | Hurricane Electric Web Hosting Colocation AS6939 | | | [EMAIL PROTECTED] http://he.net | | +---+ | | - -- David Freedman Group Network

Re: named.root

2008-02-05 Thread David Freedman
) which in turn points to [www|ftp].internic.net Stephane Bortzmeyer wrote: On Tue, Feb 05, 2008 at 12:25:52PM +, David Freedman [EMAIL PROTECTED] wrote a message of 114 lines which said: Shame its not made it to HTTP yet: Nothing to do with the protocol

RE: NetworkSolutions - Was: Re: v6 gluelessness

2008-01-25 Thread David Freedman
Why don't you just put your DNS servers in some other TLD and forget about the problems of adding glue records to .net/.com? The name of your DNS server can't really be that important. Because it would mean changing the nameservers for $stupid amounts of customer domains for which we are

NetworkSolutions - Was: Re: v6 gluelessness

2008-01-23 Thread David Freedman
Will somebody please, please PLEASE let me know what magic process for networksolutions are to get glue added, am on the 72nd hour of the phone game where questions are bouncing between: - What is a glue record? and - What is an record? $ dig +norec @a.gtld-servers.net.

RE: NetworkSolutions - Was: Re: v6 gluelessness

2008-01-23 Thread David Freedman
Jeroen has made a start: http://www.sixxs.net/faq/dns/?faq=ipv6glue David Freedman Group Network Engineering Claranet Limited http://www.clara.net -Original Message- From: Randy Bush [mailto:[EMAIL PROTECTED] Sent: Thu 1/24/2008 00:42

Re: IPv6 firewall support

2007-10-29 Thread David Freedman
Have to say, using screenOS 5.4 on our juniper kit and relatively happy. Elsewhere, if you just want a packet filter, v6 ACLs are fine, depending of course whether they are done in hardware or software and if this is appropriate for your application (i.e , ACL in software path is perfectly

Re: An Internet IPv6 Transition Plan

2007-07-26 Thread David Freedman
James R. Cutler wrote: Cost of operating v4/v6 combined for some time includes, among other things: 1. Help Desk calls resulting from confused customers wanting configuration help. 2. Memory for Routing Information for IPv4 plus IPv6. 3. Help Desk calls resulting from errors by confused

Re: Network Level Content Blocking (UK) for people who cant be bothered to read the article..

2007-06-08 Thread David Freedman
Its too late, you've already admitted that the data exists and can be captured. This is always where it starts... Dave. Leigh Porter wrote: Alexander Harrowell wrote: On 6/7/07, Leigh Porter [EMAIL PROTECTED] wrote: Since only port 80 is passed through the filter then of course

Re: Birmingham UK colocation

2007-02-01 Thread David Freedman
You may want to contact Fibernet (now a Global Crossing company), they have some PoPs there with fiber and general connectivity. We are also present there and can provide connectivity, but not co-location. Dave. Andrew Gristina wrote: I have two racks in London UK. The colocation is

Re: How big a network is routed these days?

2007-01-17 Thread David Freedman
I'm interested as to why RIRs dont set the minimum PI allocatable to /24 in order to fit with the current trend. I mean, I can see the reason for smaller allocations where an LIR routes and aggregates both but these are rare and probably legacy examples. Changing the allocation policy such

Re: i wanna be a kpn peer

2007-01-12 Thread David Freedman
Randy Bush wrote: route-views.oregon-ix.netsh ip bg 203.10.63.0 BGP routing table entry for 0.0.0.0/, version 2 Paths: (1 available, best #1, table Default-IP-Routing-Table) Not advertised to any peer 286 134.222.85.45 from 134.222.85.45 (134.222.85.45) Origin IGP, localpref 100,

Operational contact at SIXAPART / Livejournal

2006-10-06 Thread David Freedman
If you are one or know one, can you please contact me off-list. Muchly Appreciated -- David Freedman Network Engineering Department Claranet UK Limited http://www.clara.net

Re: Operational contact at SIXAPART / Livejournal

2006-10-06 Thread David Freedman
I have now spoken to somebody there, many thanks to all those that replied. Dave. David Freedman wrote: If you are one or know one, can you please contact me off-list. Muchly Appreciated -- David Freedman Network Engineering Department Claranet UK Limited http://www.clara.net

Re: OSPF default-information originate command

2003-07-21 Thread David Freedman
Well, since you are probably doing this either via the default-information originate command, or via the redistribute static command, its always going to be an AS-EXTERNAL route (inter-area), either type 1 or 2 (depending on what you configure as metric-type). -- David Freedman Senior Network