Re: 10Gb iPerf kit?

2014-12-09 Thread Pete Mundy
On 8/12/2014, at 5:48 AM, Teleric Team teleric-li...@outlook.com wrote: Again, with 64byte packet size? Or are you talking MTU? You have a very good point. My 1gig tests have always been for throughput rather than pps, and therefore was using MTU sized packets and though would be much less

Re: Followup: Survey results for the ARIN RPA

2014-12-09 Thread Alex Band
On 9 Dec 2014, at 00:31, Baldur Norddahl baldur.nordd...@gmail.com wrote: But that is just my ramblings. I am also warning that the RIPE tool already ignores ARIN. Anyone from RIPE will be ignoring you unless they go out of their way to fix it. My bet is therefore that ARIN is being

Re: Followup: Survey results for the ARIN RPA

2014-12-09 Thread John Curran
Alex - Thanks for sharing your observations from RPKI deployment in the RIPE region - it's very helpful for those trying to understand how RPKI might affect their operations. :-) Thanks again! /John On Dec 9, 2014, at 10:23 AM, Alex Band al...@ripe.net wrote: On 9 Dec 2014, at

Cisco AnyConnect speed woes!

2014-12-09 Thread Zachary McGibbon
I'm looking for some input on a situation that has been plaguing our new AnyConnect VPN setup. Any input would be valuable, we are at a loss for what the problem is. We recently upgraded our VPN from our old Cisco 3000 VPN concentrators running PPTP and we are now running a pair of Cisco 5545x

RE: Cisco AnyConnect speed woes!

2014-12-09 Thread Darden, Patrick
MTU should be automatically managed by the AnyConnect client. With that said, have you done PMTUd (e.g. nmap --script path-mtu dest-ip from one endpoint to the next)? I'd do a network map, working with your upstream provider, to identify and isolate variables. E.g. to find media changes

RE: Cisco AnyConnect speed woes!

2014-12-09 Thread Matthew Huff
Are you using SSLVpn or IPSEC with anyconnect? I have had more luck with performance with IPSEC than SSLVpn. Also, just because your ISP is saying that they aren't shaping/filtering, doesn't mean they aren't. We had major issues with users using AnyConnect when it was transversing Cogent. We

Re: Cisco AnyConnect speed woes!

2014-12-09 Thread Roy Hirst
Have you considered user protocol issues, higher up the stack where your NOC investigation can't see them? If TCP is not tuned, and detects TCP packets are dropping due to congestion, it drops (halves?) its transmit rate until all is well again. At a network operator level, you may have the L1

Re: Cisco AnyConnect speed woes!

2014-12-09 Thread Zachary McGibbon
We are trying to use SSLVPN (udp 443) and results are really all over the place. Most of our complaints are users connecting on Teksavvy however we haven't been able to reach anyone in their network team to find out if they are doing any filtering or shaping on their side. We don't have a lot of

Got a call at 4am - RAID Gurus Please Read

2014-12-09 Thread symack
Server down. Got to colo at 4:39 and an old IBM X346 node with Serveraid-7k has failed. Opened it up to find a swollen cache battery that has bent the card in three different axis. Separated the battery. (i) Inspect card and plug back in, (ii) reboot, and got (code 2807) Not functioning

RE: Carrier-grade DDoS Attack mitigation appliance

2014-12-09 Thread Parrish, Luke
Switch to Nemo. -Original Message- From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of J. Tozo Sent: Monday, December 08, 2014 3:26 PM Cc: nanog Subject: Re: Carrier-grade DDoS Attack mitigation appliance We also evaluating another appliance to put in place of Arbor, their

route misorigination of the day

2014-12-09 Thread Randy Bush
http://www.bgpmon.net/bgp-hijack-incident-by-syrian-telecommunications-establishment/ thanks andre randy

Re: Got a call at 4am - RAID Gurus Please Read

2014-12-09 Thread Michael Brown
If the serveraid7k cards are LSI and not Adaptec based (I think they are) you should just be able to plug in a new adapter and import the foreign configuration. You do have a good backup, yes? Switching to write-through has already happened (unless you specified WriteBackModeEvenWithNoBBU -

automatic / intelligent fiber optic patch panel (iow SDN @ layer 0)

2014-12-09 Thread Arnold Nipper
I'm looking for a modular, cost-effective automatic / intelligent fibre optic patch panel. I'm not looking at these photonic x-connects, but really for something which does the patching instead of a technician. TIA Arnold -- Arnold Nipper / nIPper consulting, Sandhausen, Germany email:

Re: automatic / intelligent fiber optic patch panel (iow SDN @ layer 0)

2014-12-09 Thread Andrew Jones
http://www.laser2000.de/out/media/glimmerglass_system_100%281%29.pdf On 10.12.2014 10:21, Arnold Nipper wrote: I'm looking for a modular, cost-effective automatic / intelligent fibre optic patch panel. I'm not looking at these photonic x-connects, but really for something which does the

Re: What can I infer from show ip route and similar BGP commands?

2014-12-09 Thread Hamish McGlinn
Hi there, Perhaps this would be easier and help you out: http://bgp.he.net/AS3701#_graph4 Cheers, Hamish On Tue, Dec 9, 2014 at 12:48 PM, Reza Motamedi motam...@cs.uoregon.edu wrote: Hello NANOG, I’m a researcher and I was trying to understand the data I collected from some BGP Looking

Re: automatic / intelligent fiber optic patch panel (iow SDN @ layer 0)

2014-12-09 Thread Arnold Nipper
Am 2014-12-10 00:36, schrieb Andrew Jones: http://www.laser2000.de/out/media/glimmerglass_system_100%281%29.pdf Thank you, Andrew ... while Glimmerglass is really an exciting and excdellent system, these devices are exactly those photonic cross connects I'm _not_ looking for :9 On

Re: automatic / intelligent fiber optic patch panel (iow SDN @ layer 0)

2014-12-09 Thread Matthew Crocker
Are you looking for a robot to install your fiber jumpers between patch panels? Something like: http://telescent.com/tswitch.php -- Matthew S. Crocker President Crocker Communications, Inc. PO BOX 710 Greenfield, MA 01302-0710 E: matt...@crocker.com P: (413) 746-2760 F: (413) 746-3704 W:

ASN Domain for rDNS

2014-12-09 Thread Keefe John
I've been seeing more and more carriers(and even small ISPs) using as.net as their domain for rDNS on IP space. What are the pros and cons for doing this versus using your primary business domain name? Keefe John

Re: ASN Domain for rDNS

2014-12-09 Thread Fred
I'd say this is mostly for whitelabelling reason rather than a technical one? Keefe John: I've been seeing more and more carriers(and even small ISPs) using as.net as their domain for rDNS on IP space. What are the pros and cons for doing this versus using your primary business domain

Re: Cisco AnyConnect speed woes!

2014-12-09 Thread Zachary McGibbon
Hi Roberto, - We have disabled the DTLS compression feature, this has been verified on the client side that compression says 'None' - We are not using the VPN load balancing feature, the two boxes are running in an active/standby configuration - Yes we are tunnelling all traffic however local lan

Re: ASN Domain for rDNS

2014-12-09 Thread Max Tulyev
We use just .as domain, like our 29632.as ;) On 10.12.14 02:30, Keefe John wrote: I've been seeing more and more carriers(and even small ISPs) using as.net as their domain for rDNS on IP space. What are the pros and cons for doing this versus using your primary business domain name?

Re: Got a call at 4am - RAID Gurus Please Read

2014-12-09 Thread Allen McKinley Kitchen (gmail)
+1 on the most important statement below, from my point of view: RAID 5 and RAID 10 are totally separate animals and while you can set up a separate RAID 10 array and migrate your data to it (as soon as possible!!!) you cannot migrate from 5 to 10 in place absent some utter magic that I am

RE: ASN Domain for rDNS

2014-12-09 Thread Damien Burke
Honestly, it looks pretty and you can see the ASN in the traceroute from windows/linux standard traceroute commands. I don't think it's for white label as most ASN's have a company name in their WHOIS on ARIN/RIPE/ETC. -Original Message- From: NANOG [mailto:nanog-boun...@nanog.org] On

Contact from Sharktech available?

2014-12-09 Thread Duane Toler
Can someone from Sharktech contact me off list to discuss an NTP flood from your co-lo network? One of my customers has a site being hammered by a few subnets of yours. Thanks!! -- Duane Toler deto...@gmail.com

RE: ASN Domain for rDNS

2014-12-09 Thread Kate Gerry
Short answer: I just like doing it. Long answer: It allows me to create as many hosts on a segregated domain instead of making my company DNS zone 3000 records long. -Original Message- From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Fred Sent: Tuesday, December 09, 2014 4:36

Re: automatic / intelligent fiber optic patch panel (iow SDN @ layer 0)

2014-12-09 Thread Arnold Nipper
Am 2014-12-10 00:58, schrieb Matthew Crocker: Are you looking for a robot to install your fiber jumpers between patch panels? Exactly ... Something like: http://telescent.com/tswitch.php ... like this, Matthew. Do you know Telescent systems? On Dec 9, 2014, at 6:51 PM, Arnold

Charging fee for BGP prefix per /24?!

2014-12-09 Thread Yucong Sun
Hi, My recent inquiry to some network provider reveals that they are charging fee for per /24 announced. Obvious that would means they get to charge a lot with little to none efforts on their side. In a world we are charging total bytes transferred instead of bps on uplinks, i can't say I'm