importance of fiber cleaning

2016-09-20 Thread Mikael Abrahamsson
https://www.sunet.se/blogg/long-read-cleanliness-is-a-virtue/ This is an excellent article regarding fiber cleaning and its importance. Please do share with other people in our business. I'm sure lack of proper fiber cleaning causes a lot of unneccessary outages and operational problems

Re: "Defensive" BGP hijacking?

2016-09-20 Thread Bryant Townsend
Hello, We wanted to clarify that we are not the ones behind these attacks and we were not the ones behind the previous hijackings. We have also been the targets of DDoS attacks reaching up to 200+ Gbps (~20 times a day), every day since Krebs' original article that included our name. We believe

Re: PlayStationNetwork blocking of CGNAT public addresses

2016-09-20 Thread Valdis . Kletnieks
On Wed, 21 Sep 2016 11:29:49 +1000, Mark Andrews said: > What we need is business tech reporters to continually report on > these failures of content providers to deliver their services over > IPv6. 20 years lead time should be enough for any service. Interestingly enough, the Playstation 4 has

Re: "Defensive" BGP hijacking?

2016-09-20 Thread Tom Beecher
Brian Krebs tweeted out that Prolexic reported a 665Gbps attack directed at his site. https://twitter.com/briankrebs/status/778398865619836928 On Tue, Sep 20, 2016 at 11:21 PM, Mel Beckman wrote: > While I was reading the krebsonsecurity.com article cited below, the > site,

Re: "Defensive" BGP hijacking?

2016-09-20 Thread Justin Paine via NANOG
earlier on Twitter Krebs said he was hit by 665Gbps attack (so says Prolexic/Akamai). Could be ongoing/related. Justin Paine Head of Trust & Safety CloudFlare Inc. PGP: BBAA 6BCE 3305 7FD6 6452 7115 57B6 0114 DE0B 314D On Tue, Sep 20, 2016 at 8:21 PM, Mel Beckman

Re: "Defensive" BGP hijacking?

2016-09-20 Thread Mel Beckman
While I was reading the krebsonsecurity.com article cited below, the site, hosted at Akamai address 72.52.7.144, became non responsive and now appears to be offline. Traceroutes stop before the Akamai-SWIPed border within Telia, as if blackholed (but adjacent IPs pass through to Akamai):

Re: "Defensive" BGP hijacking?

2016-09-20 Thread Hugo Slabbert
Lucy, you got some (*serious*) 'splainin to do... http://research.dyn.com/2016/09/backconnects-suspicious-bgp-hijacks/ http://krebsonsecurity.com/2016/09/ddos-mitigation-firm-has-history-of-hijacks/ -- Hugo Slabbert | email, xmpp/jabber: h...@slabnet.com pgp key: B178313E | also on

Re: PlayStationNetwork blocking of CGNAT public addresses

2016-09-20 Thread Mark Andrews
Mark Andrews writes: > > In message <09342130-874f-4fa4-b410-b7b66a75f...@mtin.net>, Justin Wilson wri > te > s: > > PSN is one reason I am not a fan of CGNAT. All they see are tons of > > connections from the same IP. This results in them banning folks. Due > > to them being hacked so many

Re: PlayStationNetwork blocking of CGNAT public addresses

2016-09-20 Thread Mark Andrews
In message <09342130-874f-4fa4-b410-b7b66a75f...@mtin.net>, Justin Wilson write s: > PSN is one reason I am not a fan of CGNAT. All they see are tons of > connections from the same IP. This results in them banning folks. Due > to them being hacked so many times getting them to actually

Re: CDN Overload?

2016-09-20 Thread Florian Weimer
* Jon Lewis: > This is kind of a funny problem though, because CDNs get paid to > deliver data, and they get compared/graded according to who can > deliver the bits the fastest...and here you are complaining that > they're delivering the bits too fast (or at least faster than you'd > like them

Re: CDN Overload?

2016-09-20 Thread Mike Hammett
This is what I'm asking of them: = Have you seen a CDN overloading a customer? Help me gather information on the issue. What CDN? What have you identified the traffic to be? What is the access network? Where is the rate limiting done? How is the rate limiting done (policing vs.

Re: PlayStationNetwork blocking of CGNAT public addresses

2016-09-20 Thread Justin Wilson
PSN is one reason I am not a fan of CGNAT. All they see are tons of connections from the same IP. This results in them banning folks. Due to them being hacked so many times getting them to actually communicate is almost impossible. My .02 is just get the gamers a true public if at all

Re: "Defensive" BGP hijacking?

2016-09-20 Thread John Curran
On Sep 20, 2016, at 10:48 AM, Christopher Morrow > wrote: On Tue, Sep 20, 2016 at 8:05 AM, John Curran > wrote: ... If you want to just use your legacy address block (wth the same services that

Re: "Defensive" BGP hijacking?

2016-09-20 Thread Christopher Morrow
On Tue, Sep 20, 2016 at 8:05 AM, John Curran wrote: > On Sep 19, 2016, at 11:58 PM, Christopher Morrow > wrote: > > > > (caution! I don't really think arin is evil!) > > Nor do I… (but I will remind folks that organizations evolve based on >

Re: Customers announcing communities to SP of SP

2016-09-20 Thread Joe Provo
On Mon, Sep 19, 2016 at 12:00:36PM -0400, Jason Lixfeld wrote: > Hi, > > Consider the following scenario: > > - Customer A is a customer of SP A > - SP A is a customer of SP B > - SP B has a traffic engineering community implementation > > With regards to using BGP communities for TE: > > -

Re: PlayStationNetwork blocking of CGNAT public addresses

2016-09-20 Thread Danijel Starman
Something similar happened to a local FantasyConon I was helping set up, we had only two PS4 machines there and accounts provided by Blizzard for Overwatch. Outside IP of the LAN (as it was NATed) was banned by PSN in about 8h. There was no other traffic other then those two accounts playing

Re: "Defensive" BGP hijacking?

2016-09-20 Thread John Curran
On Sep 19, 2016, at 11:58 PM, Christopher Morrow wrote: > > (caution! I don't really think arin is evil!) Nor do I… (but I will remind folks that organizations evolve based on participation, so ongoing diligence and involvement is definitely warranted.) > On Mon,

Re: CDN Overload?

2016-09-20 Thread Mike Hammett
What do most broadband platforms do for rate limiting? - Mike Hammett Intelligent Computing Solutions Midwest Internet Exchange The Brothers WISP - Original Message - From: "Matthew Walster" To: "George Skorup" Cc: "nanog list"

Re: CDN Overload?

2016-09-20 Thread Matthew Walster
On 20 Sep 2016 9:14 am, "George Skorup" wrote: > > Now lets move the Windows 10 updates. A 'buried in the sticks' customer on Canopy 900 FSK. 1.5Mbps/384k. Multiple streams from Microsoft and LLNW at the same time. LLNW alone had maybe 10 streams going and was sending at over

Re: CDN Overload?

2016-09-20 Thread George Skorup
I have witnessed this issue first hand for several years. Four for sure, maybe five or six. The very first one I remember is a customer doing Usenet downloads and using what he called an "internet download manager" which I assumed was screwing with TCP ACKs. I believe he was a 4Mbps user at