Re: Certificates for DoT and DoH?

2022-02-28 Thread Bjørn Mork
John Todd writes: > To validate that the addresses were “ours” or at least under our > control, there were still some hoops to jump through other than the > standard validation of registry data. For example, we had to activate > web servers and objects on our anycast network to answer specific >

Re: Starlink terminals deployed in Ukraine

2022-02-28 Thread Ong Beng Hui
Curious, will that be with starlink ASN then ? That throw geo detection via IP out right away. On 3/1/2022 6:55 AM, Jay Hennigan wrote: https://www.cnbc.com/2022/02/28/ukraine-updates-starlink-satellite-dishes.html

Re: Certificates for DoT and DoH?

2022-02-28 Thread John Todd
On 28 Feb 2022, at 7:11, Bill Woodcock wrote: >> On Feb 28, 2022, at 3:29 PM, Bjørn Mork wrote: >> Any recommendations for a CA with a published policy allowing an IP >> address SAN (Subject Alternative Name)? >> Both Quad9 got their certificate from DigiCert: >> >>Issuer: C = US, O = Dig

Re: Starlink terminals deployed in Ukraine

2022-02-28 Thread Eric Kuhnke
As of right now >90% of the starlink satellites in orbit function in what we would call a bent pipe topology, where a moving LEO satellite at any given moment in time needs to be simultaneously in view of a starlink-run earth station and the CPE. They have been launching satellites with sat-to-sat

Re: Starlink terminals deployed in Ukraine

2022-02-28 Thread Michael Thomas
On 2/28/22 4:29 PM, Karl Auer wrote: On Mon, 2022-02-28 at 16:17 -0800, Michael Thomas wrote: As a practical matter how does this help? You need to have base stations/dishes, right? Anyone with a dish and power can connect to the Internet. That's it. If a dish owner chooses to allow too many

Re: Starlink terminals deployed in Ukraine

2022-02-28 Thread Jay Hennigan
On 2/28/22 16:17, Michael Thomas wrote: As a practical matter how does this help? You need to have base stations/dishes, right? Can they be beefy ones that can pump out gigabytes that would be capable of backfilling the load? Or would it need to be multiple in parallel? Wouldn't that bandwidth

Re: Starlink terminals deployed in Ukraine

2022-02-28 Thread Karl Auer
On Mon, 2022-02-28 at 16:17 -0800, Michael Thomas wrote: > As a practical matter how does this help? You need to have base > stations/dishes, right? Anyone with a dish and power can connect to the Internet. That's it. If a dish owner chooses to allow too many people to share their uplink, then t

Re: Starlink terminals deployed in Ukraine

2022-02-28 Thread Michael Thomas
On 2/28/22 2:55 PM, Jay Hennigan wrote: https://www.cnbc.com/2022/02/28/ukraine-updates-starlink-satellite-dishes.html As a practical matter how does this help? You need to have base stations/dishes, right? Can they be beefy ones that can pump out gigabytes that would be capable of backf

Re: New minimum speed for US broadband connections

2022-02-28 Thread Brian Johnson
> On Feb 28, 2022, at 4:44 PM, Josh Luthman wrote: > > That is North Dakota, not population centers. Click the link. > > You're basing fiber availability everywhere on living? That's a poor excuse > for data. I did. The numbers are related to population, not area. If you move outside of

Starlink terminals deployed in Ukraine

2022-02-28 Thread Jay Hennigan
https://www.cnbc.com/2022/02/28/ukraine-updates-starlink-satellite-dishes.html -- Jay Hennigan - j...@west.net Network Engineering - CCIE #7880 503 897-8550 - WB6RDV

Re: New minimum speed for US broadband connections

2022-02-28 Thread Josh Luthman
That is North Dakota, not population centers. Click the link. You're basing fiber availability everywhere on living? That's a poor excuse for data. >These numbers are crap and nobody should believe them. Lol ok but we should believe nearly 100% from you because you lived in a couple places? >

Re: EPL to Bangalore

2022-02-28 Thread Mehmet Akcin
Airtel or Tata, both can provide this. On Mon, Feb 28, 2022 at 17:15 Mark Robinson wrote: > Hunting for E-Line;/EPL provider from Los Angeles to Bangalore India. > Anyone have recommendations? > > > Thanks, > > Mark > -- Mehmet +1-424-298-1903

EPL to Bangalore

2022-02-28 Thread Mark Robinson
Hunting for E-Line;/EPL provider from Los Angeles to Bangalore India. Anyone have recommendations? Thanks, Mark

Re: New minimum speed for US broadband connections

2022-02-28 Thread Brian Johnson
I said North Dakota, not population centers (they are where the legacy LECs operate). I have lived and worked there for telecommunications Coops which device the land mass of the state. They had no issues providing the most cutting edge service to extremely rural areas. What is the excuse of the

Re: New minimum speed for US broadband connections

2022-02-28 Thread Josh Luthman
According to the 477 data it's less than 50% (updated 11/1/2021 and I think the public 477 is 2 years? behind) What makes you believe it's nearly 100%? https://broadbandnow.com/North-Dakota On Mon, Feb 28, 2022 at 4:22 PM Brian Johnson wrote: > Given this premise (that it is too expensive to p

Re: New minimum speed for US broadband connections

2022-02-28 Thread Brian Johnson
Given this premise (that it is too expensive to provide access to rural areas), can you explain why nearly 100% of North Dakota is serviced by FTTH solutions. The exceptions being the areas still run by the traditional LECs? I’m not to sure this should be an urban/rural debate. > On Feb 28, 20

Re: New minimum speed for US broadband connections

2022-02-28 Thread Josh Luthman
Ryan, This discussion was in regards to urban areas. Regarding your example, though, I expect you're in a hard to reach rural area based on your description. It looks like there are absolutely a massive amount of trees, making it hard for fixed wireless. Since it sounds like your only option, w

Re: Certificates for DoT and DoH?

2022-02-28 Thread Bjørn Mork
Bill Woodcock writes: >> Does this mean that DigiCert is the only alternative? > > I assume not, but we’d already used them for other things, and they > didn’t have a problem doing it, so we didn’t shop any further. Makes sense. That's how I started as well. But we are using Buypass, and for s

Re: Certificates for DoT and DoH?

2022-02-28 Thread Bjørn Mork
David Guo writes: > You don't need a certificate for your IP address if your DoT and DoH > use domains. Sorry if I'm slow, but isn't that a chicken-and-egg problem? We're going to provide this as an add-on to our standard ISP resolver service. Most clients will pick up the addresses from DHCP/

Re: Russian aligned ASNs?

2022-02-28 Thread richey goldberg
They have the skills and the ability to stop it but the people who report the traffic represent 0% of their revenue so they could care less.It’s the same actors every single day. Microsoft, Amazon, Google, Phychz Networks, Digital Ocean, etc. that spew garbage from their networks. For a

RE: Certificates for DoT and DoH?

2022-02-28 Thread David Guo via NANOG
Hi Mork, You don't need a certificate for your IP address if your DoT and DoH use domains. For certificates with IPv4 address, we use ZeroSSL / GoGetSSL, both are SubCA with Sectigo, which works fine. For IPv6 address, we used Digicert but it's too expensive, so we give up ☹ Our DoT/DoH servi

Re: Russian aligned ASNs?

2022-02-28 Thread Mike Hammett
So the providers most likely to have the skills and capabilities to automate abuse mitigation are the least likely to do anything about it, even when asked? - Mike Hammett Intelligent Computing Solutions Midwest Internet Exchange The Brothers WISP - Original Message -

Re: Russian aligned ASNs?

2022-02-28 Thread Mike Hammett
*nods* Not only cleaning up the infections, but also implementing BCP 38 and 84 to keep things you miss from leaking. - Mike Hammett Intelligent Computing Solutions Midwest Internet Exchange The Brothers WISP - Original Message - From: "Seth David Schoen" To: "Joe Greco

Re: Get in touch with Cloudflare

2022-02-28 Thread J. Hellenthal via NANOG
There are a couple to a few that lurk here. Give it a few hours. This list is a lot less volume than they have on the interim communications. -- J. Hellenthal The fact that there's a highway to Hell but only a stairway to Heaven says a lot about anticipated traffic volume. > On Feb 28,

Get in touch with Cloudflare

2022-02-28 Thread Oskar Borgqvist via NANOG
Hi We have tried to get hold of cloudflare because we have migrated from one ASN to another. We have tried with the contact information that is public (peeringdb). We have been waiting for several weeks without a response. Would have appreciated if anyone here could have helped us with this.

Re: Certificates for DoT and DoH?

2022-02-28 Thread Bill Woodcock
> On Feb 28, 2022, at 3:29 PM, Bjørn Mork wrote: > Any recommendations for a CA with a published policy allowing an IP > address SAN (Subject Alternative Name)? > Both Quad9 got their certificate from DigiCert: > >Issuer: C = US, O = DigiCert Inc, CN = DigiCert TLS Hybrid ECC SHA384 >

Certificates for DoT and DoH?

2022-02-28 Thread Bjørn Mork
Any recommendations for a CA with a published policy allowing an IP address SAN (Subject Alternative Name)? Preferably someone using ACME with a simple RFC 8738 reference. Let's Encrypt had this in their TODO list for a while, but it was removed and the project was put on hold: https://github.com/

Re: Russian aligned ASNs?

2022-02-28 Thread Denys Fedoryshchenko
AFAIK they don't do that just because they are not being droned. When they were killed, just because cell towers was used by coordinators and as a source of information. Which once again reminds that if telecom doesnt stay neutral as much as possible, or worse, they side with one of conflicting p