Re: ipv6 address management - documentation

I will second this. Netbox is very rich and we can do and manage multiple other things also in netbox. Like I am managing my complete server infra details and my service connectivity details in netbox. Kudos to the developer and the netbox community. Regards, Gaurav Kansal > On 16-Nov-2023,

Re: Generally accepted BGP acceptance criteria?

Also, you don't want to accept Google prefixes from your customer, even if they are ROV valid. i.e. you want to restrict what you accept to customer and customer's customer prefixes... Frank On 17/11/2023 08:38, Pierfrancesco Caci wrote: If you need to support RTBH you need to check prefix

Re: ipv6 address management - documentation

Christopher, A residential customer would be getting their /56 from the providers pool via RA or DHCPv6. With a /32 aggregate, it can handle 1.6 million /56 delegations, which can cover a few regions. It all depends on the planning going into splitting up the aggregate. A rule of thumb I go

Generally accepted BGP acceptance criteria?

If you need to support RTBH you need to check prefix list (thus IRR) first, then the RTBH , then RPKI. Otherwise blackhole route gets dropped before executing.

RE: [External] announcing IPs by scrubbing service to help with DDoS attacks and ROAs

It has been a few years, but I recall advertising my routes to the scrubbing center via a tunnel and just prepending to my other peers when in mitigation. This was pre-RPKI days, but my ASN was still originating the route. So, I would assume no change in ROA would be needed in that scenario.

Re: Generally accepted BGP acceptance criteria?

> > I imagine there is a some sort of coalescing industry standard out there, > but so far I can’t find it. > There is not, and won't be for a long time, if ever. There isn't a one size fits all solution. On Thu, Nov 16, 2023 at 9:31 PM Tom Samplonius wrote: > > In the world of IRR and

Generally accepted BGP acceptance criteria?

In the world of IRR and RPKI, BGP route acceptance criteria is important to get right. DE-CIX has published a detailed flow chart documenting their acceptance criteria: https://www.de-cix.net/en/locations/frankfurt/route-server-guide But I don’t see a lot of operators publishing their

announcing IPs by scrubbing service to help with DDoS attacks and ROAs

Hi, do people use scrubbing services, when under DDoS attack, by having the scrubbing service announce the attacked IP prefix(es)? If so, and you have a ROA for these prefixes, do you authorize the scrubbing AS (by issuing ROA or otherwise), and if so, do you do it in advance or only when you

Re: ipv6 address management - documentation

One of the first things that comes to mind, is that if you were to breakout a /64 v6 subnet (a standard-issue subnet to a residential customer) in an Excel spreadsheet, the number of columns you would need is 14 digits long. You could breakout the equivalent of a /12 v4 in just one column.

Re: ipv6 address management - documentation

Spreadsheets are terrible for IPAM regardless of address length, but I am curious to know why you think IPv6 would be particularly worse than IPv4 in such a scenario? Owen > On Nov 16, 2023, at 10:02, Aaron Gould wrote: > > For years I've used an MS Excel spreadsheet to manage my IPv4

Re: Your Input Needed: Can ROA Replace LOA? – Short Survey (7 mins)

Hi Christopher and Tom, I'll reply to you together, as they seem to be along the same lines. For the purposes of this survey/research, a reference to an LOA is a reference to an LOA for the advertisement/filtering of IP space. I agree, the acronym LOA has multiple uses in the world of IT for

Fiber/OSP Technician Training and Apprenticeship Programs

Hey all, I've recently been working with our county's broadband task force, investigating the expansion and equity of broadband networks on a local and state level. Through that, it's become clear that there's a painful shortage of fiber / outside plant technicians in the state of Michigan (if

Re: ipv6 address management - documentation

I use my own console/terminal based stuff. Its composed of 2 main scripts called blgrep for searching and bldiff to display differences between revision/files. Backend is SVN to keep stuff in sync and allow multiple people to work on data. Works pretty well for small/medium DC/NOC. I guess it

Re: ipv6 address management - documentation

I second Netbox, which has detailed IPv4/6 IPAM plus many other features: IP Address Management - NetBox Documentation

[NANOG-announce] NANOG 90 Registration is OPEN! + Call for Presentations + More

*NANOG 90 Registration is OPEN!* *Don't Miss Out on Discounted Early Registration* NANOG 90 will take place 12-14 Feb 2024, in Charlotte, NC. Register to attend in-person or virtually now! *REGISTER NOW * *Call for Presentations: NANOG

NANOG 90 Registration is OPEN! + Call for Presentations + More

*NANOG 90 Registration is OPEN!* *Don't Miss Out on Discounted Early Registration* NANOG 90 will take place 12-14 Feb 2024, in Charlotte, NC. Register to attend in-person or virtually now! *REGISTER NOW * *Call for Presentations: NANOG

Re: ipv6 address management - documentation

phpIPAM for the win. NIPAP is effective, if basic. I've heard of lots of people who like Netbox. On 11/16/23 11:12 AM, Niels Bakker wrote: * aar...@gvtc.com (Aaron Gould) [Thu 16 Nov 2023, 19:04 CET]: For years I've used an MS Excel

Re: ipv6 address management - documentation

* aar...@gvtc.com (Aaron Gould) [Thu 16 Nov 2023, 19:04 CET]: For years I've used an MS Excel spreadsheet to manage my IPv4 addresses.  IPv6 is going to be maddening to manage in a spreadsheet.  What does everyone use for their IPv6 address prefix management and documentation?  Are there open

Re: ipv6 address management - documentation

My recommendation: https://github.com/netbox-community On Thu, Nov 16, 2023 at 12:04 PM Aaron Gould wrote: > For years I've used an MS Excel spreadsheet to manage my IPv4 > addresses. IPv6 is going to be maddening to manage in a spreadsheet. > What does everyone use for their IPv6 address

ipv6 address management - documentation

For years I've used an MS Excel spreadsheet to manage my IPv4 addresses.  IPv6 is going to be maddening to manage in a spreadsheet.  What does everyone use for their IPv6 address prefix management and documentation?  Are there open source tools/apps for this? -- -Aaron

Re: Your Input Needed: Can ROA Replace LOA? – Short Survey (7 mins)

On 2023-11-15 21:47, Christopher Hawker wrote: Hello everyone, Aftab Siddiqui is currently exploring the possibility of using Route Object Authorisations (ROAs) as a potential replacement to LOAs. Separate to this (and unknowing of Aftab's research), I had started a discussion on the RPKI

[NANOG-announce] NANOG 90 Meeting Registration Open

Dear NANOG Community, NANOG 90 hybrid meeting will take place February 12-14 2024 in Charlotte, North Carolina. Please note the change in date. 1. Registration Fees + Deadlines 2. Hotel Guest Room Block 3. VISA Requests 1. Registration Fees + Deadlines NANOG

Re: Your Input Needed: Can ROA Replace LOA? – Short Survey (7 mins)

> > > In a decade working on the SP side of the world, I worked with prob 20 different upstream carriers. I can only think of one that required LOA to accept prefixes via BGP. Everyone else was via RIR methods, or nothing. There are of course providers out there that do, but not nearly as many

MCC (Microsoft Connected Cache for ISP)

Is MCC for ISP comparable to other well-known CDN's, like Facebook FNA, Netflix OCA, etc? Anyone have any experience with MCC in an ISP environment, and do you see much bandwidth savings with it? https://learn.microsoft.com/en-us/windows/deployment/do/mcc-isp -- -Aaron

Re: Your Input Needed: Can ROA Replace LOA? – Short Survey (7 mins)

On Thu, Nov 16, 2023 at 10:22 AM Tom Beecher wrote: >> >> In the service provider industry, its primary use is for advertising address >> resources (IPv4/v6 and ASN) > > > Not really. I would think there are a few uses of LOA in the telco/SP world, at least: 1) 'can I make this

Re: Your Input Needed: Can ROA Replace LOA? – Short Survey (7 mins)

> > In the service provider industry, its primary use is for advertising > address resources (IPv4/v6 and ASN) Not really. On Thu, Nov 16, 2023 at 9:19 AM Christopher Hawker wrote: > Hello everyone, > > Aftab Siddiqui is currently exploring the possibility of using Route > Object

Re: Your Input Needed: Can ROA Replace LOA? – Short Survey (7 mins)

On Thu, 16 Nov 2023 03:47:43 + Christopher Hawker wrote: > Aftab Siddiqui is currently exploring the possibility of using Route > Object Authorisations (ROAs) as a potential replacement to LOAs. > Separate to this (and unknowing of Aftab's research), I had started a > discussion on the RPKI

Reminder to Submit Presentations for NANOG 90

NANOG Community, The NANOG Program Committee (PC) would like to remind you that we are accepting proposals for in-person or live remote presentations at all sessions of NANOG 90, taking place in Charlotte, NC on 12-14 Feb 2024. Below is a summary of key details and dates from the Call For

[NANOG-announce] Reminder to Submit Presentations for NANOG 90

NANOG Community, The NANOG Program Committee (PC) would like to remind you that we are accepting proposals for in-person or live remote presentations at all sessions of NANOG 90, taking place in Charlotte, NC on 12-14 Feb 2024. Below is a summary of key details and dates from the Call For

Re: Your Input Needed: Can ROA Replace LOA? – Short Survey (7 mins)

Hi Christopher, No. Why would your survey take an additional 6.5 minutes to fill out? -- Niels. * ch...@thesysadmin.dev (Christopher Hawker) [Thu 16 Nov 2023, 15:20 CET]: Hello everyone, Aftab Siddiqui is currently exploring the possibility of using Route Object Authorisations

Your Input Needed: Can ROA Replace LOA? – Short Survey (7 mins)

Hello everyone, Aftab Siddiqui is currently exploring the possibility of using Route Object Authorisations (ROAs) as a potential replacement to LOAs. Separate to this (and unknowing of Aftab's research), I had started a discussion on the RPKI Community guild on Discord

DDOS scrubbing

Hi! I could not find any recent thread on the list about ddos scrubbing devices. We are looking into some kind of hybrid service with onprem hardware and scrubbing centers. At the moment we are evaluating NSFocus and Riorey, do the list have any experience from them? Johan