Re: GCSC critical infrastructure protection questions: your input needed.

2017-11-14 Thread George William Herbert
That's a good question. Part of the problem is that the line between defense and offense, between intelligence gathering and attacking is more muddy than with "real weapons". Movies aside, you don't do intelligence gathering with guns in peacetime. Bringing guns makes it paramilitary

Re: GCSC critical infrastructure protection questions: your input needed.

2017-11-14 Thread William Herrin
On Wed, Nov 15, 2017 at 12:19 AM, Bill Woodcock wrote: > One of PCH’s long-term efforts has been to encourage governments to > restrict their use of offensive cyber attacks against civilian networks. > As you might imagine, this is a reasonably popular idea everywhere except > the

GCSC critical infrastructure protection questions: your input needed.

2017-11-14 Thread Bill Woodcock
One of PCH’s long-term efforts has been to encourage governments to restrict their use of offensive cyber attacks against civilian networks. As you might imagine, this is a reasonably popular idea everywhere except the US, Russia, and China. We’ve successfully gotten that effort out of the

Re: Issues with 4-octet BGP AS and Akamai?

2017-11-14 Thread james machado
Greg, I don't see a routing database object for your routes pointing too your AS394666 /24's, I only see one for AS12 for the /23 and /24's. It is possible (and probable) you are being filtered due to that. james route: 216.165.124.0/23 descr: NEW YORK UNIVERSITY (added by MAINT-AS6517)

RE: Issues with 4-octet BGP AS and Akamai?

2017-11-14 Thread Aaron Gould
About who to speak with at Akamai... please forgive me if any of this contact info is out-of-date, as I'm pulling from my notes from an old network diagram... Akamai Customer Care - 877-425-2832 Akamai NOCC - 877-625-2624 - 877-6-akamai (same as above) - 617-444-3007 - nocc-sh...@akamai.com -

Re: Issues with 4-octet BGP AS and Akamai?

2017-11-14 Thread Jared Mauch
It should be noted that AS_TRANS aka 23456 shouldn’t be visible on the global internet and many people may filter that on AS4_PATH cable devices. The fact that you’re seeing an AS_TRANS path from the Telia LG is likely an indication that route may be not fully internet visible. It’s fairly

Re: Issues with 4-octet BGP AS and Akamai?

2017-11-14 Thread Tyler Conrad
Are you advertising out multiple circuits? Check the pathing both directions if you can. A lot of CDNs enforce uRPF strict. On Tuesday, November 14, 2017, james machado wrote: > Greg, > > I have a 4 byte ASN and have not had any issues with reach ability, > including the

Re: Issues with 4-octet BGP AS and Akamai?

2017-11-14 Thread james machado
Greg, I have a 4 byte ASN and have not had any issues with reach ability, including the 2 websites you have linked. James

Re: Issues with 4-octet BGP AS and Akamai?

2017-11-14 Thread Jared Mauch
Can you share details? Did you contact akamai? Feel free to ping me offline. - Jared > On Nov 13, 2017, at 9:36 PM, Greg Gombas -X (grgombas) > wrote: > > Hello BGP and/or Akamai experts, > > Has anyone come across issues with using the new 4-octet BGP AS number format

Re: Issues with 4-octet BGP AS and Akamai?

2017-11-14 Thread Job Snijders
Hi, What prefix and ASN is this about? Are you sure you are advertising from an AS4 capable router? Do you see the expected 4-byte ASN as origin in a aggregator looking glass like http://lg.ring.nlnog.net/prefix_detail/lg01/ipv4?q=www.nlnog.net ? Kind regards, Job

Re: keeping your cabinet clean (was Re: Looking for help @ 60 Hudson)

2017-11-14 Thread David Hofstee
Care to share some pics? David On 14 November 2017 at 02:04, Ken Chase wrote: > Some tricks I've learned managing multicustomer/shared cabinets over the > last > 20+ years...sorry it's long, but I think there's some good info on keeping > things clean and maintaining sanity.

Issues with 4-octet BGP AS and Akamai?

2017-11-14 Thread Greg Gombas -X (grgombas)
Hello BGP and/or Akamai experts, Has anyone come across issues with using the new 4-octet BGP AS number format and reaching websites hosted by Akamai? One of my customers currently uses the AS number of one of their partner companies, which is in the standard 2-octed AS format. They were