Regarding BGP offloading

eading it wrong and it's actually smaller VM/containers will full router functionality and BGP alone is not being offloaded? So the logical L3 endpoint here is VMs? What sort of config the device sitting in frontend would have at the interface level to achieve that? Appreciate your responses! Th

Re: Undersea cable damages in the Atlantic?

ned as in the Atlantic. Does > > anyone know more about this? A news search for "cable cuts" didn't bring > > up anything aside from the Tonga story. > > > > Mukund > -- Anurag Bhatia anuragbhatia.com

Theorical question about cyclic dependency in IRR filtering

uch loop in resolution? Thanks! -- Anurag Bhatia anuragbhatia.com

Re: Paging a TATA person?

> Dan Mahoney > Techie, Sysadmin, WebGeek > Gushi on efnet/undernet IRC > FB: fb.com/DanielMahoneyIV > LI: linkedin.com/in/gushi > Site: http://www.gushi.org > ------- > > -- Anurag Bhatia

Re: Asus wifi AP re-writing DNS packets

rules. Hoping that it doesn't bring any side effects and they eventually put it in their public release after testing. Thanks. On Mon, Nov 2, 2020 at 10:09 PM Anurag Bhatia wrote: > Hi Alarig > > > I tried that but somehow DNS traffic still does not work. I tried adding > rule

Re: Asus wifi AP re-writing DNS packets

d them to make this feature optional so that at least folks like us can disable it. Let's see how that goes. Thanks. On Thu, Oct 29, 2020 at 3:13 PM Alarig Le Lay wrote: > On Thu 29 Oct 2020 02:10:25 GMT, Anurag Bhatia wrote: > > I tried deleting the rule and it drops the traffic com

Re: Asus wifi AP re-writing DNS packets

direct the user to a captive portal "your > internet is down" error page possibly? > > On Wed, Oct 28, 2020 at 1:42 PM Anurag Bhatia wrote: > >> I tried deleting the rule and it drops the traffic completely. So DNS >> resolution stops working and I am unsure why. It's

Re: Asus wifi AP re-writing DNS packets

w why they would add such a thing, and how you got the >> iptables rules from the device. Do these Asus routers provide SSH directly >> into the shell? >> >> Ryan >> On Oct 28 2020, at 11:33 am, Anurag Bhatia wrote: >> >> Hello, >> >> Wondering a

Asus wifi AP re-writing DNS packets

discussions with their support have been going quite slow and would greatly appreciate if someone could connect me to right folks in there so they can release a firmware fix for it. Thanks. -- Anurag Bhatia anuragbhatia.com

Re: Anyone from Airtel or Tata on list? DNS block issue on search engine

t;<- opcode: QUERY, status: NOERROR, id: 36722 > ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 > > ;; OPT PSEUDOSECTION: > ; EDNS: version: 0, flags:; udp: 4000 > ;; QUESTION SECTION: > ;duckduckgo.com.IN A > > ;; ANSWER SECTION: > duckduckgo.com. 10800 IN A 127.0.0.1 -- Anurag Bhatia anuragbhatia.com

Re: BGPmon alerting me about prefixes being withdrawn from Hurricane Electric attached sites

an't traceroute to figure out what their most likely > interconnection point with HE is to look at the appropriate looking glass. > The HE NOC is obviously better positioned to see where our prefixes are or > are not on their network, which is why I contacted them. > > Frank > AS53347 > > -- Anurag Bhatia anuragbhatia.com

Re: WIKI documentation Software?

WIKI software teams are using to save documentation to > / how to's for staff, etc. > > > > pro's > > con's > > > > We have an older wiki bare-metal wiki server, that I want to get replaced > before it kicks the bucket and was looking into various ones. > > > > thanks; > > > > CPV > > > > > > -- Anurag Bhatia anuragbhatia.com

Re: Anyone from Verisign J root on the list?

Note: I heard back from Verisign team. Thanks to everyone for their inputs. On Sat, Mar 7, 2020 at 9:01 PM Anurag Bhatia wrote: > Hello, > > > Was wondering if there's anyone from Verisign managing the J root? Can you > please contact me offlist. > I am facing issue wi

Anyone from Verisign J root on the list?

Hello, Was wondering if there's anyone from Verisign managing the J root? Can you please contact me offlist. I am facing issue with consistent ICMP filtering on "rootns-lcy3" since last couple of weeks. Thanks -- Anurag Bhatia anuragbhatia.com

Re: Dual Homed BGP

his point. > > > > -Aaron > > > > > -- Anurag Bhatia anuragbhatia.com

Re: Anyone have contacts at Bharti Airtel?

ottiger) wrote: > > > Does anyone have any contacts at Bharti Airtel? I either get no response > or > > full inbox for emails in their WHOIS at AS9498 and AS24560. > > Hi, if you get a response, please share...I'm also at a loss there... > > Elmar. > -- Anurag Bhatia anuragbhatia.com

Question about mismatch of origin ASN in parent and more specific route object

allowing 2001:DB8::/32 (upto say /48) and won't really for mismatching route object for 2001:DB8::/48? Thanks. -- Anurag Bhatia anuragbhatia.com

Re: Issue with point to point VPNs behind NAT and asymmetric traffic

ification > net.ipv4.conf.default.rp_filter = 0 > # Do not accept source routing > net.ipv4.conf.default.accept_source_route = 1 > > > > -Original message- > *From:* Anurag Bhatia > *Sent:* Wed 06-12-2019 04:45 pm > *Subject:* Issue with point to point VPNs

Re: Issue with point to point VPNs behind NAT and asymmetric traffic

d be able to test this by doing > pcaps to confirm the traffic is arriving (though I'm not familiar with > WireGuard so maybe not), and you should be able to disable this by setting > a rule or unchecking a box in your firewall. > > On Wed, Jun 12, 2019, 5:47 PM Anurag Bhatia wr

Issue with point to point VPNs behind NAT and asymmetric traffic

econds), the tunnel is always up. Any idea why asymmetric packets are being dropped here? This exact behaviour was in case of earlier OpenVPN + bird + iBGP and is still the same when I moved everything to Wireguard for VPN + FRR for routing + OSPF. Thanks. -- Anurag Bhatia anuragbhatia.com

Re: Amazon Peering

>>>>> http://www.ics-il.com >>>>> >>>>> Midwest-IX >>>>> http://www.midwest-ix.com >>>>> >>>>> -- >>>>> *From: *"Darin Steffl" >>>>> *To: *"North American Network Operators' Group" >>>>> *Sent: *Friday, November 23, 2018 10:21:51 PM >>>>> *Subject: *Amazon Peering >>>>> >>>>> Hey all, >>>>> >>>>> Does anyone have a direct contact to get a peering session established >>>>> with Amazon at an IX? I sent a peering request Dec 2017 and two more times >>>>> this Sept and Nov with no response. >>>>> >>>>> I sent to peer...@amazon.com and received one automated response back >>>>> so I know they received my email but nothing since. >>>>> >>>>> >>>>> >>>>> -- >>>>> Darin Steffl >>>>> Minnesota WiFi >>>>> www.mnwifi.com >>>>> 507-634-WiFi >>>>> <http://www.facebook.com/minnesotawifi> Like us on Facebook >>>>> <http://www.facebook.com/minnesotawifi> >>>>> >>>>> >>> >> -- Anurag Bhatia anuragbhatia.com

Re: Facebook doesn't have a route to my ISP's (Cogeco) IPv6 space?

Hi Brain Let's chat offlist to find why this is happening. The behaviour looks unusual and needs more troubleshooting. Thanks Anurag Bhatia (Hurricane Electric) On Thu, Dec 20, 2018 at 11:06 PM Brian J. Murrell wrote: > I've been trying to figure out why I can reach an IPv6 addr

Re: Amazon now controls 3.0.0.0/8

t Erculiani >>>>>> wrote: >>>>>> >>>>>> So it looks like GE will be solvent for a few more years and 3.3.3.3 >>>>>> DNS is incoming. >>>>>> >>>>>> -Matt >>>>>> >>>>>> On Thu, Nov 8, 2018, 17:54 Eric Kuhnke >>>>> >>>>>>> https://news.ycombinator.com/item?id=18407173 >>>>>>> >>>>>>> Quoting from the post: >>>>>>> >>>>>>> " >>>>>>> >>>>>>> Apparently bought in two chunks: 3.0.0.0/9 and 3.128.0.0/9. >>>>>>> >>>>>>> Previous owner was GE. >>>>>>> >>>>>>> Anecdotal reports across the Internet that AWS EIPs are now being >>>>>>> assigned in that range. >>>>>>> >>>>>>> https://whois.arin.net/rest/net/NET-3-0-0-0-1.html >>>>>>> >>>>>>> https://whois.arin.net/rest/net/NET-3-128-0-0-1.html >>>>>>> " >>>>>>> >>>>>>> >>>>>>> >>>>>>> > -- Anurag Bhatia anuragbhatia.com

Re: Tata Scenic routing in LAX area?

ms >> >> 5 182.79.152.247 (182.79.152.247) 180.164 ms 182.79.152.253 >> (182.79.152.253) 184.816 ms 182.79.152.247 (182.79.152.247) 250.928 ms >> >> 6 unknown.telstraglobal.net (202.127.73.101) [AS 4637] 173.974 ms >> 173.986 ms 173.484 ms >> >> 7 i-93.sgpl-core02.telstraglobal.net (202.84.224.189) [AS 4637] >> 175.094 ms 175.699 ms 174.343 ms >> >> 8 i-10850.eqnx-core02.telstraglobal.net (202.84.140.46) [AS 4637] >> 280.686 ms 288.703 ms 280.836 ms >> >> 9 i-92.eqnx03.telstraglobal.net (202.84.247.17) [AS 4637] 278.021 ms >> 276.637 ms 302.249 ms >> >> 10 equinix-ix.sjc1.us.voxel.net (206.223.116.4) 174.139 ms 174.163 >> ms 174.067 ms >> >> >> >> >> >> Marcus Josephson >> >> IP Operations >> >> >> >> mjoseph...@inap.com >> >> >> >> *This message is intended for the use of the intended recipient(s) and >> may contain confidential and privileged information. * >> >> *Any unauthorized review, use, disclosure or distribution is prohibited. >> If you are not the intended recipient, please contact* *the sender by >> reply email and destroy all copies of the original message.* >> >> >> >> >> >> >> >> >> -- >> >> [stillwa...@gmail.com ~]$ cat .signature >> cat: .signature: No such file or directory >> [stillwa...@gmail.com ~]$ >> >> The contents of this e-mail message and >> any attachments are intended solely for the >> addressee(s) and may contain confidential >> and/or legally privileged information. If you >> are not the intended recipient of this message >> or if this message has been addressed to you >> in error, please immediately alert the sender >> by reply e-mail and then delete this message >> and any attachments. If you are not the >> intended recipient, you are notified that >> any use, dissemination, distribution, copying, >> or storage of this message or any attachment >> is strictly prohibited. >> > -- Anurag Bhatia anuragbhatia.com

Re: Question about bird RS config with BGP Community support

jders wrote: > > > >> On Mon, 23 Jul 2018 at 23:00, Anurag Bhatia > wrote: > >> > >> We are running a small IX fabric (in Mumbai, India) and with multiple > >> route servers based on a bird. There has been a demand of support of BGP > >> communi

Question about bird RS config with BGP Community support

) and behaviour is same. No route announcement to peers. Was wondering if anyone can point to right config to support BGP communities? Thanks! -- Anurag Bhatia anuragbhatia.com

Re: IPv4 and IPv6 hijacking by AS 6

le digit ASNs often fall > victim of other people’s misconfigurations or malicious activities. Hard to > separate the impersonator from the real autonomous system. > > Job > -- Anurag Bhatia anuragbhatia.com

Re: Why doesn't "Cloudflare 1.1.1.1" compress root answers?

t's so special about root? > Except for the obvious :-) > > > > Bjørn > > -- Anurag Bhatia anuragbhatia.com

Re: CDN-provided caching platforms?

:26:24 -, Russell Berg said: > > > I was wondering if there are other CDN caching platforms out there we > > should be researching/deploying? > > Does traffic analysis show any other destinations that have enough traffic > that caching might help? > > > -- Anurag Bhatia anuragbhatia.com

whoami.akamai.net and public DNS node replies

t's going on? -- Anurag Bhatia anuragbhatia.com

Re: What happened to BGP Update Report?

Seems good. Thanks for sharing! On Sat, May 27, 2017 at 12:21 AM, Andrew Latham <lath...@gmail.com> wrote: > Just bookmark http://bgpupdates.potaroo.net/instability/bgpupd.html if you > like the report. > > On Fri, May 26, 2017 at 1:40 PM, Anurag Bhatia <m...@anur

What happened to BGP Update Report?

report with other data. Thanks. -- Anurag Bhatia anuragbhatia.com

Re: IPv6 dumps on Oregon route views

, then you might > want paix, sydney, linx, eqix, saopaulo, sg... instead. > > John Kemp > h...@routeviews.org > > > On 11/24/2016 06:46 AM, Anurag Bhatia wrote: > > Hello everyone > > > > > > > > Was wondering if anyone is aware of mrt

IPv6 dumps on Oregon route views

00 5w1d 33142 2001:918:0:5::1 4 3303 611233849 4662830200 2d10h 32994 and much more. I am trying to look for mrt dump of this specific collector. Thanks. -- Anurag Bhatia anuragbhatia.com

Re: Cisco Nexus vPC-VOIP Issues

> > > We have not seen any issues apart from one of VOIP server connected to > > Switch 1 has lost access to VOIP Server connected Switch 2 and vice > versa. > > > > Where I am able to ping both from Global. Can you please let me know what > > is went wrong here. > > > > > > [image: Inline image 2] > > > > > -- > Try and fail but never fail to try > > -- Anurag Bhatia http://anuragbhatia.com

G root not responding on UDP?

.4#53(192.112.36.4) ;; WHEN: Thu Apr 14 16:59:09 2016 ;; MSG SIZE rcvd: 744 Is UDP blocked recently or it has been like this from long? -- Anurag Bhatia anuragbhatia.com

Re: mrtg alternative

measurements > > PS you can get a free Eval of statseeker. Obnote, don't work for them just > a fairly happy customer > > alan > -- Anurag Bhatia anuragbhatia.com

Re: NTT Charles

-Charles.r05.asbnva02.us.bb.gin.ntt.net > > > > ae-10.happy-trails-Charles.r22.asbnva02.us.bb.gin.ntt.net > > > > ae-5.happy-trails-Charles.r25.nycmny01.us.bb.gin.ntt.net > > > > ae-2.happy-trails-Charles.r08.nycmny01.us.bb.gin.ntt.net > > > > ae-7.happy-trails-Charles.r00.lsanca07.us.bb.gin.ntt.net > > -- Anurag Bhatia anuragbhatia.com

Re: Route leaks from AS9498 (BHARTI Airtel)?

> Andree already did a good write-up: > > http://www.bgpmon.net/large-scale-bgp-hijack-out-of-india/ > > Kind regards, > > Job > -- Anurag Bhatia anuragbhatia.com PGP Key Fingerprint: 3115 677D 2E94 B696 651B 870C C06D D524 245E 58E2

Re: IPv6 and Android auto conf

dhcp. It can be found in the dev section. > > -- Anurag Bhatia anuragbhatia.com PGP Key Fingerprint: 3115 677D 2E94 B696 651B 870C C06D D524 245E 58E2

Re: IPv6 and Android auto conf

and works fine. Thanks. On Thu, Oct 1, 2015 at 9:26 PM, Hugo Slabbert <h...@slabnet.com> wrote: > > On Mon 2015-Sep-28 21:15:02 +0530, Anurag Bhatia <m...@anuragbhatia.com> > wrote: > > Hi Hugo >> >> >> (My reply in line) >> >> On Mon, Sep 28

IPv6 and Android auto conf

e facing similar issue? (Note: No issues on OS X or iOS which are in same LAN) I can try DHCPv6 but I guess most of devices do not support it yet. (I see support for that in routerboard though). Thanks. -- Anurag Bhatia anuragbhatia.com PGP Key Fingerprint: 3115 677D 2E94 B696 651B 870

Re: ATT wireless IPv6

where you can not edit the APN settings (iPhone) you can not use the IPv6 enabled VoLTE APN. I suspect this will be enabled if they launch VoLTE on the iPhone. - Jared -- Anurag Bhatia anuragbhatia.com PGP Key Fingerprint: 3115 677D 2E94 B696 651B 870C C06D D524 245E 58E2

Re: Fwd: [ PRIVACY Forum ] Windows 10 will share your Wi-Fi key with your friends' friends

welcome in enterprise environments? ObNANOG: How does this interact with Comcast/Xfinity's wireless hotspot thing, where it *used* to be that customers could get on anyplace, but now it's customers and anybody they happen to know? -- Anurag Bhatia anuragbhatia.com PGP Key Fingerprint

2.4Ghz 40Mhz 802.11n wifi and Apple Macbook

SSID nearby and I am sitting next to router for testing. This brings me to question - Has anyone successfully used 40Mhz with 2.4Ghz on 802.11n standard with Apple Macbook? I wonder if it's limitation on the chipset or something else. Thanks. -- Anurag Bhatia anuragbhatia.com Linkedin http

Re: Question about EX - SRX redundancy

. -Rob -- Anurag Bhatia anuragbhatia.com Linkedin http://in.linkedin.com/in/anuragbhatia21 | Twitter https://twitter.com/anurag_bhatia Skype: anuragbhatia.com PGP Key Fingerprint: 3115 677D 2E94 B696 651B 870C C06D D524 245E 58E2

Re: Question about EX - SRX redundancy

an AE (which spans both EX VC members), one SRX goes dark since you've killed the AE that's dedicated to it, and the primary will need to flip (either through interface monitoring or manually) in order for the setup to remain online. -- Hugo On Fri 2015-Apr-03 02:41:35 +0530, Anurag Bhatia m

Re: Question about EX - SRX redundancy

:50:46 +0530, Anurag Bhatia m...@anuragbhatia.com wrote: Hi Yes, Since SRX0 connected to EX0 and SRX1 connected to EX1 (only). Thus either pair - 0 will work or pair - 1 will work. I wish if criss crossing worked then failure of one EX would have still made both SRX available

Re: Question about EX - SRX redundancy

and for now, this suits my requirements. Sent from my iPhone On Apr 2, 2015, at 07:12, Anurag Bhatia m...@anuragbhatia.com wrote: Hello everyone! I have got two Juniper EX series switches (on virtual chassis) and two SRX devices on native clustering. I am trying to have

Fwd: Question about EX - SRX redundancy

completely. I was wondering if someone can point me out here. Appreciate your time and help! -- Anurag Bhatia anuragbhatia.com Linkedin http://in.linkedin.com/in/anuragbhatia21 | Twitter https://twitter.com/anurag_bhatia Skype: anuragbhatia.com PGP Key Fingerprint: 3115 677D 2E94 B696

Re: Question about EX - SRX redundancy

. if SRX0 is the chassis cluster primary and EX0 goes down, then you can't use SRX0, but you would like to be able to survive EX0 going down *without* failing over the SRX chassis cluster to SRX1? -- Hugo On Thu 2015-Apr-02 20:47:03 +0530, Anurag Bhatia m...@anuragbhatia.com wrote: Hi

Re: Route Science

..;-) -- Anurag Bhatia http://anuragbhatia.com http://anuragbhatia.com/ signature.asc Description: Message signed with OpenPGP using GPGMail

astraceroute on MAC

Was wondering if anyone got the astraceroute tool working on MAC? http://www.shrubbery.net/astraceroute/ Tried compiling as well as via Mac ports but no success. Does anyone knows any other alternate similar tool? Thanks. -- Anurag Bhatia anuragbhatia.com Linkedin http

Re: astraceroute on MAC

for that tool. Thanks. On Fri, Oct 10, 2014 at 7:21 PM, Niels Bakker niels=na...@bakker.net wrote: * m...@anuragbhatia.com (Anurag Bhatia) [Fri 10 Oct 2014, 14:59 CEST]: Was wondering if anyone got the astraceroute tool working on MAC? [..] Does anyone knows any other alternate similar tool? Why

Per policy session cap on Juniper SRX

with machine having inbound traffic via firewall. They ping and port 80 also worked but SSH just hung up as soon as I started. I see SRX can be used in unidirectional setup but somehow it fails in my case. Any suggestions/advice/ sample configs? Thanks in advance! -- Anurag Bhatia

Re: Prefix hijacking, how to prevent and fix currently

servers at exchange points, so check to see if you need to apply filters on your route server peerings as well. Matt -- Anurag Bhatia anuragbhatia.com Linkedin http://in.linkedin.com/in/anuragbhatia21 | Twitter https://twitter.com/anurag_bhatia Skype: anuragbhatia.com PGP Key Fingerprint

Re: Best practice for BGP session/ full routes for customer

be mistaken for seismic detection machines, or last generation's x86 home desktop running Quagga and grandma's health app :-). Mark. -- Anurag Bhatia anuragbhatia.com Linkedin http://in.linkedin.com/in/anuragbhatia21 | Twitter https://twitter.com/anurag_bhatia Skype: anuragbhatia.com

Best practice for BGP session/ full routes for customer

and another BGP session with access router for receiving routes? (messy!) 2. Injecting full table in just all access routers so that it can be provided whenever needed? 3. Any other? Thanks in advance! -- Anurag Bhatia anuragbhatia.com Linkedin http://in.linkedin.com

Re: Help with route latency between TATA and Comcast

[180.87.98.37] 13 260 ms 258 ms 260 ms 180.87.98.6 14 256 ms 256 ms 258 ms 103.253.144.242 15 262 ms 258 ms 259 ms 128.199.162.241 Trace complete.? -- Anurag Bhatia anuragbhatia.com Linkedin http://in.linkedin.com/in/anuragbhatia21 | Twitter https

Re: All of .mil tld is down

...@nanog.org] On Behalf Of jamie rishaw Sent: Tuesday, 20 May 2014 2:40 p.m. To: NANOG list Subject: All of .mil tld is down At time of post.. .mil. is down. Apparently an Anonymous Operation Payback. .mil nameservers are unresponsive. -- Anurag Bhatia anuragbhatia.com Linkedin http

Re: Odd syslog-ng problem

flooded (like 5 rows per second). Do anyone of you have any idea of what might be the problem? Regards, Peter -- jamie rishaw // .com.arpa@j - reverse it. ish. ...let's consider this world like a family and care about each other... -Malala Yousafzai -- Anurag

Rancid with Maipu devices

around this? If so, it would be helpful if you can share your customized script for Maipu. Thanks. -- Anurag Bhatia anuragbhatia.com Linkedin http://in.linkedin.com/in/anuragbhatia21 | Twitterhttps://twitter.com/anurag_bhatia Skype: anuragbhatia.com PGP Key Fingerprint: 3115 677D 2E94 B696

Global Vs local node data in www.root-servers.org

announced by these nodes are announced to transit links as well to make routes visible globally. Likely that is not case here right? Same seems with L root and few others. Do we have webmaster of the project on mailing list? Thanks. -- Anurag Bhatia anuragbhatia.com Linkedin http

Re: DNS resolver reaction to non-reachable authoritative DNS server

error message in the logs. The fact that this issue has risen to the level of annoyance rather than just oddity as it used to be is actually a good thing. It's a sign that more and more sites are deploying IPv6 for critical infrastructure. Doug -- Anurag Bhatia anuragbhatia.com

DNS resolver reaction to non-reachable authoritative DNS server

but with no failure? Thanks. -- Anurag Bhatia anuragbhatia.com Linkedin http://in.linkedin.com/in/anuragbhatia21 | Twitterhttps://twitter.com/anurag_bhatia Skype: anuragbhatia.com PGP Key Fingerprint: 3115 677D 2E94 B696 651B 870C C06D D524 245E 58E2

Re: random dns queries with random sources

-- Anurag Bhatia anuragbhatia.com Linkedin http://in.linkedin.com/in/anuragbhatia21 | Twitterhttps://twitter.com/anurag_bhatia Skype: anuragbhatia.com PGP Key Fingerprint: 3115 677D 2E94 B696 651B 870C C06D D524 245E 58E2

Re: Blocking of domain strings in iptables

-DMM You can implement this with --hex-string instead of --string but you'll have to convert the entire thing to hex first Regards, Bill Herrin -- Anurag Bhatia anuragbhatia.com Linkedin http://in.linkedin.com/in/anuragbhatia21 | Twitterhttps://twitter.com/anurag_bhatia

Blocking of domain strings in iptables

but here I am not sure how to create such string out and script them for automation. Can someone suggest a way out for this within IPTables or may be some other open source firewall? Thanks. -- Anurag Bhatia anuragbhatia.com Linkedin http://in.linkedin.com/in/anuragbhatia21

Best practice on TCP replies for ANY queries

to say 600-700 bytes or so. I am sure I am not first person experiencing this issue. Curious to hear how you are managing it. Also under what circumstances I can get a legitimate TCP query on port 53 whose reply exceeds a basic limit of less then 1000 bytes? Thanks. -- Anurag Bhatia

Re: Best practice on TCP replies for ANY queries

Hi ML Yeah I can understand. Even DNSSEC will have issues with it which makes me worry about rule even today. On Wed, Dec 11, 2013 at 11:49 PM, ML m...@kenweb.org wrote: On 12/11/2013 1:06 PM, Anurag Bhatia wrote: I am sure I am not first person experiencing this issue. Curious to hear

Re: Best practice on TCP replies for ANY queries

Bhatia wrote: Hello everyone I noticed some issues on one of DNS server I am managing. -- Anurag Bhatia anuragbhatia.com Linkedin http://in.linkedin.com/in/anuragbhatia21 | Twitterhttps://twitter.com/anurag_bhatia Skype: anuragbhatia.com

Re: Question on routing of Tata AS6453 with their other network AS4755

or just intentional filtering of a group of prefixes via a peer group or based on some community tag? Thanks. On Sun, Nov 17, 2013 at 11:16 PM, Michael Smith mksm...@mac.com wrote: On Nov 16, 2013, at 11:49 AM, Anurag Bhatia m...@anuragbhatia.com wrote: Hello everyone I was looking

Question on routing of Tata AS6453 with their other network AS4755

. -- Anurag Bhatia anuragbhatia.com Linkedin http://in.linkedin.com/in/anuragbhatia21 | Twitterhttps://twitter.com/anurag_bhatia Skype: anuragbhatia.com

Re: Recovery mode on Juniper M7i

/85536/securing-freebsd-in-single-user-mode http://www.freebsd.org/cgi/man.cgi?query=bootsektion=8 HTH. On 6 November 2013 21:11, Anurag Bhatia m...@anuragbhatia.com wrote: Hello everyone! Greetings of the day. I am kind of (badly) stuck with multiple routers and not able to recover

www.akamai.net giving NXDOMAIN

$ That's weird! Missing akamai.net entry from the authoritative DNS nodes? I am in Austria right now and so likely my nearby node giving bad replies. -- Anurag Bhatia anuragbhatia.com Linkedin http://in.linkedin.com/in/anuragbhatia21 | Twitterhttps://twitter.com/anurag_bhatia Skype

Re: www.akamai.net giving NXDOMAIN

OK - seems like www.akamai.NET was working earlier but now they just prefer using www.akamai.COM and may be removed .net recently. On Thu, Nov 7, 2013 at 4:54 PM, Anurag Bhatia m...@anuragbhatia.com wrote: Anurags-MacBook-Pro:~ anurag$ dig @8.8.8.8 www.akamai.net. ; DiG 9.8.3-P1 @8.8.8.8

Recovery mode on Juniper M7i

on that page. Thanks. -- Anurag Bhatia anuragbhatia.com Linkedin http://in.linkedin.com/in/anuragbhatia21 | Twitterhttps://twitter.com/anurag_bhatia Skype: anuragbhatia.com

Re: Recovery mode on Juniper M7i

...@gmail.com wrote: Can you paste in the output after 'boot -s' , I came across several issues while recovering Root Password, But never faced this :) On Thu, Nov 7, 2013 at 2:41 AM, Anurag Bhatia m...@anuragbhatia.com wrote: Hello everyone! Greetings of the day. I am kind of (badly) stuck

Re: Fundamental questions of backbone design

Hi Valdis Checkout routing table at NIXI and you will get idea what I am referring to w.r.t. prepended routes. http://www.nixi.in/lookingglass.php Thanks! On Sat, Oct 19, 2013 at 3:16 AM, valdis.kletni...@vt.edu wrote: On Fri, 18 Oct 2013 23:33:16 +0530, Anurag Bhatia said

Re: Fundamental questions of backbone design

Petach mpet...@netflight.comwrote: On Fri, Oct 18, 2013 at 2:46 PM, valdis.kletni...@vt.edu wrote: On Fri, 18 Oct 2013 23:33:16 +0530, Anurag Bhatia said: localpref to customer routes then peering and finally transit. Does this works well or you see issues with people who have 10

Re: abha ahuja

and heart. randy -- Anurag Bhatia anuragbhatia.com Linkedin http://in.linkedin.com/in/anuragbhatia21 | Twitterhttps://twitter.com/anurag_bhatia Skype: anuragbhatia.com

Fundamental questions of backbone design

as compared to slow hold time based iBGP session. Is there's more clear comparison of limitations of both when designing? Appreciate your time help. Thanks. -- Anurag Bhatia anuragbhatia.com Linkedin http://in.linkedin.com/in/anuragbhatia21 | Twitterhttps://twitter.com

Re: Regarding source based outbound routing (with redundancy)

'not you' working on the network) -chris joel On Sat, Oct 5, 2013 at 12:19 PM, Anurag Bhatia m...@anuragbhatia.com wrote: Hello there! I am trying to do a source based outbound routing between multiple upstreams. Usually I picked outbound via localpref but here I wish to use

Regarding source based outbound routing (with redundancy)

if provider 2 fails, I wish to push traffic again via Provider 1. Is this is possible only with VRF or I can push for some specific match rule in route maps? Thanks. -- Anurag Bhatia anuragbhatia.com Linkedin http://in.linkedin.com/in/anuragbhatia21 | Twitterhttps://twitter.com/anurag_bhatia

Re: MTR for Android?

. - jra -- Sent from my Android phone with K-9 Mail. Please excuse my brevity. -- Anurag Bhatia anuragbhatia.com Linkedin http://in.linkedin.com/in/anuragbhatia21 | Twitterhttps://twitter.com/anurag_bhatia Skype: anuragbhatia.com

Re: Caution! Don't attempt the Postini to Google Apps transition

matt...@matthew.at -- Anurag Bhatia anuragbhatia.com Linkedin http://in.linkedin.com/in/anuragbhatia21 | Twitterhttps://twitter.com/anurag_bhatia Skype: anuragbhatia.com

Strange entries from AS1 in global table

(AS3549+AS3356). I am curious to know what could be possible reason for an ASN like AS1 acting in exact mirror of AS52931? Could it be a case of internal use of AS1 (assuming it to be private ASN)? May be it's a case of leaked internal routes? Appreciate your time answer. Thanks. -- Anurag

Re: Line cut in Mediterranean?

a line cut in the Mediterranean that is affecting some Internet traffic. Anyone have any details? -- Anurag Bhatia anuragbhatia.com Linkedin http://in.linkedin.com/in/anuragbhatia21 | Twitterhttps://twitter.com/anurag_bhatia Skype: anuragbhatia.com

AS 58400 announcing 118.0.0.0/8

://bgp.he.net/AS58400 So is AS6762 Telecom Itlia not filtering their Indonesian customer ? -- (Sent from my iPad) Anurag Bhatia http://anuragbhatia.com Twitter: @anurag_bhatia Skype: anuragbhatia.com

Re: Indonesian ISP Moratel announces Google's prefixes

device) Anurag Bhatia http://anuragbhatia.com On Nov 7, 2012 12:22 PM, Patrick W. Gilmore patr...@ianai.net wrote: On Nov 07, 2012, at 01:29 , Anurag Bhatia m...@anuragbhatia.com wrote: Apologize for calling it an prefix hijack. I misunderstood in start. Clearly it was case of prefix leaking

Indonesian ISP Moratel announces Google's prefixes

these issues. Curious to know developments so far. Thanks. -- Anurag Bhatia anuragbhatia.com Linkedin http://in.linkedin.com/in/anuragbhatia21 | Twitterhttps://twitter.com/anurag_bhatia| Google+ https://plus.google.com/118280168625121532854

Re: Indonesian ISP Moratel announces Google's prefixes

Apologize for calling it an prefix hijack. I misunderstood in start. Clearly it was case of prefix leaking. Thanks (Sent from my mobile device) Anurag Bhatia http://anuragbhatia.com On Nov 7, 2012 11:22 AM, joel jaeggli joe...@bogus.com wrote: On 11/7/12 12:13 AM, Patrick W. Gilmore wrote

Re: Belpak / Beltelecom contact to address a BGP hijacking issue?

to get the traffic back! No answer from people listed in the whois, no peeringDB information. Any suggestions? Thanks in advance, -- sarah -- Anurag Bhatia anuragbhatia.com Linkedin http://in.linkedin.com/in/anuragbhatia21 | Twitterhttps://twitter.com/anurag_bhatia| Google+ https

Re: Google PTR?

: 209.85.243.114 for instance? -- Anurag Bhatia anuragbhatia.com Linkedin http://in.linkedin.com/in/anuragbhatia21 | Twitterhttps://twitter.com/anurag_bhatia| Google+ https://plus.google.com/118280168625121532854

Re: 100.100.0.0/24

was assigned by the IETF in the Best Current Practice document, Comment:RFC 6598 which can be found at: Comment:http://tools.ietf.org/html/rfc6598 RegDate:2012-03-13 Updated:2012-04-23 Ref:http://whois.arin.net/rest/net/NET-100-64-0-0-1 - -- Anurag

Softlayer/Network layer partial outage in Asian region?

.dar02.sr03.sng01.networklayer.com (50.97.18.199) 171.207 ms 12 po2.fcr01.sr03.sng01.networklayer.com (174.133.118.133) 180.555 ms * * 13 * * * 14 * * * I wonder what causes such issues? Clearly issue is within Softlayer's AS 36351. So is it like broken OSPF inside or iBGP? -- Anurag

Re: Heads-Up: GoDaddy Broke the Interwebs...

the Interwebs... For the last ~15 minutes I've been receiving complaints about DNS issues. GoDaddy DNS is apparently b0rked. I'm also seeing a lot of tweets about their hosting and VPS being down. I'm unable to access the control panel for one of my customer accounts. -A -- Anurag Bhatia

Re: Regarding smaller prefix for hijack protection

, 2012 at 7:54 AM, Anurag Bhatia m...@anuragbhatia.com wrote: Is using /24 a must to protect (a bit) against route hijacking? Hi Anurag, Not only is it _not_ a must, it doesn't work and it impairs your ability to detect the fault. In a route hijacking scenario, traffic

Re: Finding Name Servers (not NS records) of domain name

-- Anurag Bhatia anuragbhatia.com Linkedin http://in.linkedin.com/in/anuragbhatia21 | Twitterhttps://twitter.com/anurag_bhatia| Google+ https://plus.google.com/118280168625121532854

Regarding smaller prefix for hijack protection

views or any ISP's server? I always /24 when looking for that IP. (in simple words - how bgp.he.net does this magic of popping both prefixes? I failed to do get same result from HE's route server) Thanks! -- Anurag Bhatia anuragbhatia.com Linkedin http://in.linkedin.com/in/anuragbhatia21

  1   2   >