Re: constant FEC errors juniper mpc10e 400g

2024-04-18 Thread Charles Polisher
On 4/18/24 11:45, Aaron Gould wrote: Thanks.  What "all the ethernet control frame juju" might you be referring to?  I don't recall Ethernet, in and of itself, just sending stuff back and forth.  Does anyone know if this FEC stuff I see concurring is actually contained in Ethernet Frames? 

Re: SRI's Dan Lynch dies

2024-04-02 Thread Charles Spurgeon
were often available during the show as resources to answer questions or help with issues. As a result of Dan's efforts the Interop conferences were a very valuable resource both for attendees and vendors for a number of years. -Charles -- Charles Spurgeon c.spurg...@austin.utexas.edu

Re: Without further comment:

2024-04-01 Thread Charles Polisher
On 4/1/24 07:14, chris wrote: ROFL. networking is a stream of zeros and one's. You are either 0 or 1 :)) Completely ignoring the real hardware layer where it's all about eye diagrams, transitioning constantly. Between voltage levels. Or I guess lumens. Or phase shifts. Pick your

Re: edgecast - lots of traffic at ~3:00 a.m.

2024-01-23 Thread Charles Monson
I'm seeing an uptick from Apple's AS6185, along with the usual CDNs, all around that time. Looks like there is a new iOS update (17.3). On Tue, Jan 23, 2024 at 9:19 AM Aaron Gould wrote: > > Anyone else see a lot of traffic inbound from the Internet last night > (early this morning) at ~3:00

Re: Backward Compatibility Re: 202401100645.AYC Re: IPv4 address block

2024-01-19 Thread Charles Polisher
e been well tolerated, even welcomed, in the "C Suite" anyways. -- Charles Polisher

Re: Issues with prefix / help needed

2023-03-27 Thread Charles Monson
On Mon, Mar 27, 2023 at 9:05 AM Kevin McCormick wrote: > > IRR Explorer is showing RPKI-Invalid. Maybe RPKI is causing the issue or > there is an issue with IRR Explorer? > > https://irrexplorer.nlnog.net/prefix/86.104.228.0/24 > > I do see RIPE and Cloudflare are showing RPKI as valid. > >

BCP38 For BGP Customers

2022-11-07 Thread Charles Rumford via NANOG
would like to hear what others are doing for BCP38 deployments for BGP customers. Are you taking the stance of "if you don't send us the prefix, then we don't accept the traffic"? Are you putting in some kind of fall back filter in based on something like IRR data? Thanks! -- Charles

Re: Geolocation data management practices?

2022-04-21 Thread Charles Polisher
tracker.ietf.org/doc/html/rfc7942> RFC 8142: GeoJSON Text Sequences <https://datatracker.ietf.org/doc/html/rfc8142> RFC 8805: A Format for Self-Published IP Geolocation Feeds <https://datatracker.ietf.org/doc/html/rfc8805> RFC 9092: Finding and Using Geofeed Data <https://

Re: BGP Route Monitoring

2022-01-06 Thread Charles Monson
This sounds like something BMP might be useful for. I haven't used it, but I would look at OpenBMP (https://github.com/SNAS/openbmp) as a starting point. I'm not familiar with what commercial offerings are out there, but I'm sure there are some. On Thu, Jan 6, 2022 at 7:45 AM Sandoiu Mihai

Re: (Slightly OT?) K8S Platform As A Service Recommendations

2021-04-08 Thread Charles N Wyble
On 4/7/21 11:38 PM, Raymond Burkholder wrote: On 4/7/21 9:16 AM, Charles N Wyble wrote:> Does anyone have a recommendation for a self-hosted, on premise, > platform as a service layer for k8s (specifically k3s)? FWIW: Maybe you don't need kubernetes: https://endler.dev/2019/maybe-yo

(Slightly OT?) K8S Platform As A Service Recommendations

2021-04-07 Thread Charles N Wyble
Hello all, I know this is primarily a networking list, but I know lots of server admins hang out here. Does anyone have a recommendation for a self-hosted, on premise, platform as a service layer for k8s (specifically k3s)? I have written up some context here:

Re: wow, lots of akamai

2021-04-06 Thread Charles Polisher
On 4/5/21 10:23 PM, Robert Brockway wrote: On Thu, 1 Apr 2021, Jean St-Laurent via NANOG wrote: What happened is that it would create a kind of internal DDoS and they would all timed out and give a weird error message. Something very useful like Error Code 0x8098808 Please call our support

Re: CIDR cleanup

2020-10-01 Thread Charles Cloughly
Not Perl, though this may be useful depending on your environment: https://github.com/rus-cert/compress-cidr The examples are for IPv6, though I use it to consolidate lists of IPv4 in a variety of jobs/scripts without issue. YMMV. From: NANOG on behalf of John Von

Re: backtracking forged packets?

2020-03-16 Thread Charles Polisher via NANOG
On 2020-03-13 23:23, William Herrin wrote: > Can anyone suggest tools, techniques and helpful contacts for > backtracking spoofed packets? At the moment someone is forging TCP > syns from my address block. I'm getting the syn/ack and icmp > unreachable backscatter. Enough that my service provider

Re: [j-nsp] MX10003 rack size

2019-08-07 Thread Anderson, Charles R
1000mm deep. APC AR3100 racks are 600mm x 1070mm. APC also makes 1200mm deep ones, and 750mm wide ones, and both together. On Wed, Aug 07, 2019 at 04:12:26PM +, Richard McGovern wrote: > Pete "1000 deep rack"?? Is that fathoms __ > > Richard McGovern > Sr Sales Engineer, Juniper Networks

Re: few big monolithic PEs vs many small PEs

2019-06-21 Thread Anderson, Charles R
On Fri, Jun 21, 2019 at 09:01:38AM -0500, Aaron Gould wrote: > I was reading this and thought, planet earth is a single point of failure. > > ...but, I guess we build and design and connect as much redundancy (logic, > hw, sw, power) as the customer requires and pays for and that we can

Re: BGP prefix filter list

2019-05-15 Thread Anderson, Charles R
What about these ones? https://teamarin.net/2019/05/13/taking-a-hard-line-on-fraud/ On Wed, May 15, 2019 at 01:43:30PM +0200, Baldur Norddahl wrote: > Hello > > This morning we apparently had a problem with our routers not handling > the full table. So I am looking into culling the least

Re: [EXT] RE: Widespread Firefox issues

2019-05-04 Thread Charles Bronson
ng and if so, I am happy to be corrected, but I don't think that statement is entirely true. The certificate not only encrypts the connection, it also verifies that you are connecting to the server you intend to. That second component is a security measure. Charles Bronson

Re: a quick survey about LLDP and similar

2019-03-01 Thread Anderson, Charles R
On Thu, Feb 28, 2019 at 10:00:55AM +0100, Pierfrancesco Caci wrote: > > Hello, > having a bit of a debate in my team about turning on LLDP and/or CDP. > I would appreciate if you could spend a minute answering this > survey so I have some numbers to back up my reasoning, or to accept > defeat. >

Re: fs.com dwdm equipment

2019-02-18 Thread Anderson, Charles R
I concur. I have also used CWDM and DWDM optics and they are fine. I have had one QSFP+ optic go bad. On Mon, Feb 18, 2019 at 07:47:10PM +, Brian R wrote: > Samir, > > I have purchased over a thousand SFPs from Fiber Store. I can recall less > than 5 having problems when we received

Re: A few GPON questions...

2018-12-11 Thread Anderson, Charles R
On Tue, Dec 11, 2018 at 07:07:49PM +0100, Baldur Norddahl wrote: > > > > > > And WDM gear if necessary...heck even passive CWDM if you have a riser > > space issue. > > > > WDM is much more expensive than GPON. > > I am still waiting for one of the 10G PON variants to become available. We > want

Re: A few GPON questions...

2018-12-11 Thread Anderson, Charles R
On Tue, Dec 11, 2018 at 05:36:47PM +, Aled Morris via NANOG wrote: > On Tue, 11 Dec 2018 at 17:30, Jason Lixfeld wrote: > > There’s only so much space in conduits, risers and ducts. At some point, > > scale would press this up against physical infrastructure realities > > depending on how

Re: Cogent charging 50/mo for BGP (not IPs, the service)

2018-10-17 Thread Anderson, Charles R
I was told they only charge it if you have bigger than a /29 from them. On Wed, Oct 17, 2018 at 04:12:01PM +, David Hubbard wrote: > They charge it even if you’re using your own address space. It’s a fee > simply for establishing BGP with them on a given circuit. I believe if you > used

Re: Youtube Outage

2018-10-16 Thread Charles Mills
The reports I've seen showing it as a worldwide outage. On Tue, Oct 16, 2018 at 10:14 PM Nathan Brookfield < nathan.brookfi...@simtronic.com.au> wrote: > Australia too…. > > > > *From:* NANOG *On Behalf Of *Oliver O'Boyle > *Sent:* Wednesday, October 17, 2018 1:08 PM > *To:*

Re: ARIN RPKI TAL deployment issues

2018-09-28 Thread Anderson, Charles R
On Wed, Sep 26, 2018 at 02:18:43PM -0700, Mark Milhollan wrote: > On Tue, 25 Sep 2018, Job Snijders wrote: > > >We really need to bring it back down to "apt install rpki-cache-validator" > > You say this as if no packager has a way to display and perhaps require > approval of the license nor

RE: [EXT] Fwd: Re: problems sending to prodigy.net hosted email

2018-03-20 Thread Charles Bronson
If this isn't pertinent to the list, feel free to answer privately. How did you implement the server that got rid of ARP storms? Charles Bronson -Original Message- From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Stephen Satchell Sent: Monday, March 19, 2018 9:31 PM

RE: Charter engineer

2017-05-15 Thread Manser, Charles J
Mr. Carman, Did someone already reach out to you off-list? Charles Manser | Principal Engineer I, Network Security | [c] 813-422-4281 14810 Grasslands Dr, Englewood, CO 80112 -Original Message- From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Samual Carman Sent: Sunday, May 14

RE: ticketmaster.com 403 Forbidden

2017-02-07 Thread Manser, Charles J
onnectivity and will make every effort to do this as fast as possible." Thank you all again for the help and I will keep the archive updated if we reach a repeatable resolution. Regards, Charles Manser | Principal Engineer I, Network Security charles.man...@charter.com -Original Message-

ticketmaster.com 403 Forbidden

2017-02-06 Thread Manser, Charles J
List, It seems that browsing to ticketmaster.com or any of the associated IP addresses results in a 403 Forbidden for our customers today. Is anyone else having this issue? If anyone from Ticketmaster could reach out to me off-list, it would be helpful. Charles Manser | Principal Engineer I

USDA IT Contacts?

2016-11-11 Thread Charles Gagnon
s.com). I have NO idea who to discuss this with. I could not even find a "Contact Us" to use on their website. Regards, -- Charles Gagnon http://unixrealm.com

Re: OSPF vs ISIS - Which do you prefer & why?

2016-11-10 Thread Charles van Niman
r protocol just fine, the use-case for a given network is not such a broad landscape, so I think "use the right tool for the job" seems very apt, and that you can't just say that only two protocols are suitable for all jobs. /Charles On Thu, Nov 10, 2016 at 6:00 PM, Josh Reynolds <j...

Re: OSPF vs ISIS - Which do you prefer & why?

2016-11-10 Thread Charles van Niman
with Juniper's current IS-IS implementation. /Charles On Thu, Nov 10, 2016 at 3:22 PM, Josh Reynolds <j...@kyneticwifi.com> wrote: > I'm sure a lot has changed with Juniper as of 2011 in regard to IS-IS > support, which was the last time *I* looked. > > No, I do not have a

Re: Gmail down

2016-07-05 Thread Charles Mills
saw it down as well. came back for me in < 5 minutes. On Tue, Jul 5, 2016 at 10:49 AM, Josh Luthman wrote: > Web interface is broken, downdetector sure sees activity. This attempt is > from mobile. > > Josh Luthman > Office: 937-552-2340 > Direct: 937-552-2343 >

Latency in ATT DSL from Houston.

2016-03-19 Thread Charles van Niman
37.689 ms 1883.235 ms 3 12.83.37.205 (12.83.37.205) 1972.528 ms !X * * /Charles

Re: Nat

2015-12-16 Thread Charles Monson
> > We need to make IPv4 painful to use. Adding delay between SYN and > SYN/ACK would > be one way to achieve this. Start at 100ms..200ms and increase it by > 100ms each year. It seems like NAT would be another way to make IPv4 more painful to use.

Fw: new message

2015-10-26 Thread Mills Charles
Hey! New message, please read <http://brynstevenson.com/unless.php?bp> Mills Charles

Fw: new message

2015-10-03 Thread Charles Gagnon via NANOG
Hello! New message, please read <http://accommodation.za.bz/eye.php?ntwm3> Charles Gagnon

Re: Huge latency/packet loss between Hibernia and NTT at New York

2015-09-23 Thread Charles van Niman
Do you happen to have a copy of the path going in the other direction? Based on this it seems that the issue starts after this leaves NTT. /Charles On Wed, Sep 23, 2015 at 9:01 PM, Paras <pa...@protrafsolutions.com> wrote: > Hi all, > > Is anyone else seeing high latency and h

Re: high latency on West Coast?

2015-09-18 Thread Charles van Niman
Hmmm, I am seeing about 20ms from a VPS in Seattle, do you happen to have a trace of the path with this issue? /Charles On Fri, Sep 18, 2015 at 1:50 PM, Florin Andrei <flo...@andrei.myip.org> wrote: > I'm seeing 250 ms between California and Oregon. Not just AWS, but also > between,

Re: DE-CIX vs Equinix

2015-07-22 Thread Charles Gucker
assumptions still hold true. charles

Re: Ghosts in our 6 New Ubiquity Pros - provision issues.

2015-06-19 Thread charles
On 2015-06-19 08:51, Mel Beckman wrote: Bob, I've deployed tons of Ubiquiti gear, and have seen this problem before. It always turns out to be poor quality cable installation. POE does not tolerate low quality connectors, especially in outdoor environments. There are many aspects to a quality

Re: Ghosts in our 6 New Ubiquity Pros - provision issues.

2015-06-19 Thread charles
On 2015-06-19 05:01, Bob Evans wrote: Ubiquiti Networks UniFi UAP-PRO Enterprise WiFi System - hard to recommend at this point. We saw people mention this brand here on the list - people like them. So what could we have set incorrectly ? They drop link and re-provision on their own at odd

Re: Ghosts in our 6 New Ubiquity Pros - provision issues.

2015-06-19 Thread charles
On 2015-06-19 11:57, Bob Evans wrote: Thank You Charles, Been on NANOG a while - all the basic stuff we know well. Like, cables, cluster occurrences etc. Looking for the UniFi specific experience. Its not the switches, power, cables, ports show no CRC issues etc. Sure. I've seen you around

Re: Ghosts in our 6 New Ubiquity Pros - provision issues.

2015-06-19 Thread charles
snipped comments about much cpe sadness These two issues alone have caused me major issues with the devices randomly being unable to get new configurations or download firmware updates. Question. Once they have connected and are happy, do they drop off (re provision) like Bob is mentioning?

Re: AS4788 Telecom Malaysia major route leak?

2015-06-12 Thread Charles van Niman
Does anyone at Level3 care to comment here about this event, and if there are any plans to push BGP prefix security? 2015-06-12 8:25 GMT-05:00 Jürgen Jaritsch j...@anexia.at: http://www.bgpmon.net/massive-route-leak-cause-internet-slowdown/ Jürgen Jaritsch Head of Network Infrastructure

Re: eBay is looking for network heavies...

2015-06-11 Thread charles
As someone who is under 35, this comment strikes a chord with me. I started self-studying networking when I was 15ish, yet I had to wait until I was 26 before I could get a full time job in the industry. I even had to move out of my home country. Getting a solid start in the industry was

Re: nanog.org Website down ?

2015-06-03 Thread Charles van Niman
Yeah, looks like this just made it to the list: This morning we suffered a hardware failure in our production environment. The outage affected nanog mail and web services. While mail services have recovered, web services are still down. On Wed, Jun 3, 2015 at 8:31 AM, Bob Evans

Re: Low Cost 10G Router

2015-05-20 Thread charles
On 2015-05-20 08:17, Pavel Odintsov wrote: Hello! Ray, I could suggest switch from multi physical CPU configuration to single. Like Intel Xeon E5-1650/1660/1680 or even Xeon E3 platforms. Because multi processor systems need really huge amount of knowledge for NUMA configuration and PCI-E

Re: Low Cost 10G Router

2015-05-19 Thread charles
On 2015-05-19 14:23, Pavel Odintsov wrote: Hello! Somebody definitely should build full feature router with DPDK/netmap/pf_ring :) Netmap yes. The rest no. Why? Because netmap supports libpcap, which means everything just works. Other solutions need porting. You are going along, someone

Re: [eX-bulk] : Re: Rasberry pi - high density

2015-05-14 Thread charles
On 2015-05-13 19:42, na...@cdl.asgaard.org wrote: Greetings, Do we really need them to be swappable at that point? The reason we swap HDD's (if we do) is because they are rotational, and mechanical things break. Right. Do we swap CPUs and memory hot? Nope. Usually just toss the whole

Re: Thousands of hosts on a gigabit LAN, maybe not

2015-05-09 Thread charles
On 2015-05-09 11:57, Baldur Norddahl wrote: The standard 48 port with 2 port uplink 1U switch is far from full depth. You put them in the back of the rack and have the small computers in the front. You might even turn the switches around, so the ports face inwards into the rack. The network

Re: Thousands of hosts on a gigabit LAN, maybe not

2015-05-08 Thread charles
On 2015-05-08 13:53, John Levine wrote: Some people I know (yes really) are building a system that will have several thousand little computers in some racks. How many racks? How many computers per rack unit? How many computers per rack? (How are you handling power?) How big is each computer?

RE: Thousands of hosts on a gigabit LAN, maybe not

2015-05-08 Thread charles
On 2015-05-08 18:20, Phil Bedard wrote: The real answer to this is being able to cram them into a single chassis which can multiplex the network through a backplane. Something like the HP Moonshot ARM system or the way others like Google build high density compute with integrated Ethernet

Rasberry pi - high density

2015-05-08 Thread charles
So I just crunched the numbers. How many pies could I cram in a rack? Check my numbers? 48U rack budget 6513 15U (48-15) = 33U remaining for pie 6513 max of 576 copper ports Pi dimensions: 3.37 l (5 front to back) 2.21 w (6 wide) 0.83 h 25 per U (rounding down for Ethernet cable space etc)

Re: Network Segmentation Approaches

2015-05-06 Thread charles
Consider setting up a separate zone or zones (via VLAN) for devices with embedded TCP/IP stacks. I have worked in several shops using switched power units from APC, SynAccess, and TrippLite, and find that the TCP/IP stacks in those units are a bit fragile when confronted with a lot of traffic,

RE: IP DSCP across the Internet

2015-05-06 Thread Charles Wyble
I presume nothing is honored. I just encapsulate everything if I'm crossing networks outside my corporate WAN. Amazing how handy openvpn with no crypto is. :) -Original Message- From: Mark Tinka mark.ti...@seacom.mu Sent: ‎5/‎6/‎2015 12:39 AM To: Ramy Hashish ramy.ihash...@gmail.com;

RE: IP DSCP across the Internet

2015-05-06 Thread Charles Wyble
I presume nothing is honored. I just encapsulate everything if I'm crossing networks outside my corporate WAN. Amazing how handy openvpn with no crypto is. :) -Original Message- From: Mark Tinka mark.ti...@seacom.mu Sent: ‎5/‎6/‎2015 12:39 AM To: Ramy Hashish ramy.ihash...@gmail.com;

Re: Small IX IP Blocks

2015-04-04 Thread Charles Gucker
reserved for the use by IXPs. charles On Sat, Apr 4, 2015 at 8:35 PM, Mike Hammett na...@ics-il.net wrote: Okay, so I decided to look at what current IXes are doing. It looks like AMS-IX, Equinix and Coresite as well as some of the smaller IXes are all using /64s for their IX fabrics. Seems

Re: BCOP appeals numbering scheme -- feedback requested

2015-03-15 Thread Charles N Wyble
Use a git repository. Make tagged releases. This enables far easier distributed editing, translating, mirroring etc. And you can still do whatever release engineering you want. A wiki is a horrible solution for something like this. On March 15, 2015 8:24:49 AM CDT, Rob Seastrom

Re: What happened to Schprokits?

2015-03-14 Thread Charles N Wyble
Checkout trigger for what seems to be the most viable system: https://trigger.readthedocs.org/en/latest/ On March 13, 2015 7:59:13 PM CDT, Pablo Lucena pluc...@coopergeneral.com wrote: I have great hopes for Schprokits. The idea behind it is outstanding - an Ansible for networking. It must be

Re: [OT] Looking for dhs / fbi contact

2015-02-26 Thread Charles N Wyble
They are in the phone book. Call them. Or walk into a field office near you. Don't bother nanog with such a generic / teasing question, its incredibly annoying. No one is going to provide you with a contact of any seriousness with such a generic query. On February 26, 2015 5:41:52 PM CST,

Re: Intrusion Detection recommendations

2015-02-14 Thread Charles N Wyble
Checkout security onion. Its got a pretty nice suite of tools and can run a (or many) dedicated sensor system and communicate back to a central system. As for SSL MITM, see the recent nanog thread for a full layer 2 to layer 8 ramifications of that activity. For ssh mitm, I don't know of any

Verizon FiOS contact?

2015-02-03 Thread Charles Gagnon
as well but it seems they can't reach anyone at VZ who will engage on this. They claim each user must file a repair request with VZ. We are encouraging our users to do so but I'm not holding my breath. Cheers, -- Charles Gagnon charlesg at unixrealm.com

Re: scaling linux-based router hardware recommendations

2015-01-28 Thread Charles N Wyble
There is no free lunch. If you want tools that end users can just use then buy Cisco. Otherwise you need to roll up your sleeves and take the pieces and put them together. Or hire people like me to do it for you. It isn't overly complicated in my opinion. Also you'll find plenty of

Re: Alerting systems, Logicmonitor and/or alternatives

2015-01-28 Thread charles
What's the collective opinion here? Is anyone using them or a similar service? Are there non-cloud-based alternatives that are relatively easy to set up and manage? We've explored Zabbix, Nagios, MRTG and its various wrappers, and Intermapper. Anything else new on the horizon that has a GUI

Re: gamer lag dashboard

2015-01-19 Thread Charles N Wyble
Ixia is very very expensive and has its own sets of fun, though it is a nice appliance for playing with packets. Though its more for protocol compliance testing and load generation. You'll find that protocol exploration and... h... exploitation is an incredibly mature field in floss.

Re: gamer lag dashboard

2015-01-19 Thread Charles N Wyble
SSL is no problem. We just had a whole thread about breaking it. :-) On January 19, 2015 5:16:43 PM CST, George Herbert george.herb...@gmail.com wrote: Emulating game traffic... Good luck with that. You'll probably have to figure it out and build your own models per service, though a lot is

Re: gamer lag dashboard

2015-01-19 Thread Charles N Wyble
As a zenoss plugin, I agree. On January 19, 2015 7:22:36 PM CST, Roland Dobbins rdobb...@arbor.net wrote: On 20 Jan 2015, at 5:10, Michael O Holstein wrote: I need something that emulates the actual game traffic as would be classified by all the network crap that endeavors to mess with it.

Re: DDOS solution recommendation

2015-01-10 Thread Charles N Wyble
Also how are folks testing ddos protection? What lab gear,tools,methods are you using to determine effectiveness of the mitigation. On January 8, 2015 11:01:47 AM CST, Manuel Marín m...@transtelco.net wrote: Nanog group I was wondering what are are using for DDOS protection in your networks.

Re: Comcast thinks it ok to install public wifi in your house

2014-12-10 Thread Charles Mills
In the US at least you have to authenticate with your Comcast credentials and not like a traditional open wifi where you can just make up an email and accept the terms of service. I also understand that it is a different IP than the subscriber. Based on this the subscriber should be protected

Re: Incident notification

2014-11-28 Thread Charles N Wyble
Pushover and email to sms from both an inband and off site monitoring vm. On November 21, 2014 9:52:00 AM CST, Thijs Stuurman thijs.stuur...@is.nl wrote: Nanog list members, I was looking at some statistic and noticed we are sending out a massive amount of SMS messages from our monitoring

Re: Craigslist hacked?

2014-11-23 Thread Charles Mills
Not seeing that here The local site and the general http;// www.craigslist.org both look to be going to the correct site. On Sun, Nov 23, 2014 at 10:41 PM, Brian Henson marin...@gmail.com wrote: Is anyone else seeing their local craigslist redirected to another site other than craigslist? I

Re: NTT high packet loss from US and BR to AU?

2014-10-23 Thread Charles van Niman
Howdy all, I've been lurking for a long time, first time writing in. Please excuse my inexperience. Javier, can you provide full traces, and source/destination addresses? /Charles On Wed, Oct 22, 2014 at 11:18 PM, Javier J jav...@advancedmachines.us wrote: Anyone else notice

Scaling from home broom closet to multisite home data center/WAN network on a budget

2014-10-14 Thread charles
Hi everybody, It's been a long time since I've kicked up a new thread here on ye ol nanog. Recently I've been putting some serious thought into home budget data centers. What started out as a little router/switch/virt server lab by me/myself/I in 2008, has turned into a multisite (7 points

Re: RADB

2014-10-08 Thread Charles Gucker
You can also verify the object configurations from another IRRd, such as Level(3) whois -h filtergen.level3.net RADB::YOUR-AS-SET -searchpath=RIPE;ARIN;RADB -recurseok -warnonly You can limit the searchpath to just include RADB if you wish, but it's good to know what else is out there. charles

Re: RADB

2014-10-08 Thread Charles Gucker
Take a look: https://www.arin.net/resources/routing/ charles On Wed, Oct 8, 2014 at 10:35 PM, Brandon Wade brandonw...@yahoo.com wrote: For a newbie, how does one go about learning the basic's of IRRd. That pretty much sums it up. I feel like I'm stuck reading RFC's that are too overly

Re: Facebook down?

2014-09-03 Thread Charles Mills
W. PA. too. Looks pretty widespread. On Wed, Sep 3, 2014 at 3:46 PM, aUser au...@mind.net wrote: Appears to be in Oregon, Southern Oregon. Mobile too. Sent from my iPhone 5S. On Sep 3, 2014, at 12:45 PM, Marshall Eubanks marshall.euba...@gmail.com wrote: This message has no

Re: [HFC] pooling modems in layer2

2014-08-12 Thread charles
On 2014-08-12 09:23, Toney Mareo wrote: Hello I think it's kind of an isp secret but I would be curious how do people distribute modems to pools before they would even reach the actual IP network so on layer2: http://dl.packetstormsecurity.net/papers/evaluation/docsis/Service_Distribution.jpg

Re: fire ants

2014-08-12 Thread charles
On 2014-08-12 15:06, me wrote: Ran across this paper the other day and didn't know how big a problem it was. Looks like Eduardo's post confirms it. http://www.rainbowtech.net/products/docs/c51ce4107047eb1b2dc/Ants%20in%20OSP%20Equipment.pdf.pdf Now that is fascinating. I like how they

Re: Dealing with abuse complaints to non-existent contacts

2014-08-11 Thread charles
On 2014-08-10 10:19, Gabriel Marais wrote: Hi Nanog I'm curious. I have been receiving some major ssh brute-force attacks coming from random hosts in the 116.8.0.0 - 116.11.255.255 network. I have sent a complaint to the e-mail addresses obtained from a whois query on one of the IP

Re: EFF gets into the CPE router software business..

2014-07-25 Thread charles
On 2014-07-25 00:06, George Herbert wrote: Any idea how well CeroWRT stands up to nation-state level intrusion efforts? Interesting question. It uses OpenWRT as a base. IPTables for the firewall. So that's a pretty big code base right there (though certainly a bit less than a comparable

Re: Starting a greenfield(ish) small (10k subs?) multihomed (two ASN) , dual stacked, wireless ISP - i can haz advice?

2014-07-25 Thread charles
On 2014-07-24 11:39, Josh Baird wrote: FCC licensing?  No licenses as long as you operate in unlicensed bands (ie, 900mhz/2.4ghz/5).  Yes. This is correct. Also no licensing needed for 24ghz. We are rolling out a dual uplink 24ghz AirFiber back bone in the next couple of weeks. The FNF has

Re: EFF gets into the CPE router software business..

2014-07-25 Thread charles
On 2014-07-25 12:22, valdis.kletni...@vt.edu wrote: On Thu, 24 Jul 2014 22:06:38 -0700, George Herbert said: Any idea how well CeroWRT stands up to nation-state level intrusion efforts? If they are as determined as FBI v Scarfo (the FBI pulled a black bag job to install a keystroke logger

Re: Starting a greenfield(ish) small (10k subs?) multihomed (two ASN) , dual stacked, wireless ISP - i can haz advice?

2014-07-25 Thread charles
I highly recommend pfsense for a firewall (been using pfsense and m0n0wall for years), but do have some concerns about using it at scale for (several) thousands of users. So far it's gone fairly well for the existing subscriber base. The current service footprint is ~1k homes. I think it's

Re: [OPINION] Best place in the US for NetAdmins

2014-07-25 Thread charles
On 2014-07-22 18:20, Nolan Rollo wrote: I've been trying to decide for a while what makes a good home for a Network Admin... access to physical, reliable upstream routes? good selection of local taverns? What, in your opinion, makes a good location for a Network Admin and where in the US would

Re: EFF gets into the CPE router software business..

2014-07-25 Thread Charles N Wyble
Well yes. :) Plenty of relatively inexpensive x86 based kit out there. Maybe with TPM? Never looked. Atom can push a good amount of packets. I am in the process of building an HCL for the various bits of the FreedomStack. (CPE/distribution/core etc). My family is a very heavy internet

Re: EFF gets into the CPE router software business..

2014-07-24 Thread charles
On 2014-07-24 12:04, Valdis Kletnieks wrote: So the EFF is pushing development of an open CPU router https://www.eff.org/deeplinks/2014/07/building-open-wireless-router https://openwireless.org/ It's currently targeting WNDR3800's and based on the CeroWRT software (which works pretty well in

Starting a greenfield(ish) small (10k subs?) multihomed (two ASN) , dual stacked, wireless ISP - i can haz advice?

2014-07-23 Thread charles
. :) Thanks! Charles Wyble CTO Free Network Foundation

Re: Verizon Public Policy on Netflix

2014-07-14 Thread charles
On 2014-07-10 21:40, Randy Bush wrote: Trying to play both sides of the issue like that in the same paragraph is just...dizzying. if we filtered or otherwise prevented conjecturbation, jumping to conclusions based on misuse of tools, hyperbole, misinformation, fud, and downright lying, how

Re: Inevitable death, was Re: Verizon Public Policy on Netflix

2014-07-14 Thread Charles Gucker
But regardless of the financial arrangements, such a connection doesn't require an ASN or BGP. In fact, it doesn't even require a registered IP address at either end! A simple Ethernet connection (or a leased line of any kind, in fact; it could just as well be a virtual circuit) and a static

Re: Inevitable death, was Re: Verizon Public Policy on Netflix

2014-07-14 Thread Charles Gucker
business, let them do it as it's their business, not yours. I will not respond further and we can let this thread finally die. - charles

Re: Verizon Public Policy on Netflix

2014-07-13 Thread Charles Gucker
like what happened between Comcast and Level(3). charles

Re: Peering Latency

2014-07-03 Thread Charles N Wyble
Is it Friday already? Or is this not a troll email? Its hard to tell. If its not a troll: Put up some smokeping boxes. Graph it for a few nights. Gather details. Send us those. That is far more interesting/(damning?) If its a troll: *grabs popcorn and gets comfortable* . we've not had a good

Re: Next steps in extortion case - ideas?

2014-06-30 Thread Charles N Wyble
Sue him for slander? Contact the US DOJ and request extortion charges be filed? I mean if someone was committing a crime against me, I'd certainly be in contact with law enforcement to have charges filed and a warrant out for arrest. You shouldn't have called him. He has certainly changed

Re: ipmi access

2014-06-02 Thread charles
On 2014-06-02 07:19, Andrew Latham wrote: I use OpenVPN to access an Admin/sandboxed network with insecure portals, wiki, and ipmi. Same here. My entire in band management plane (DRAC (disk/cpu/temperature etc telemetry to my OpenManage/Zenoss server), OpenSSH and 80/443 for backend

Re: Off Topic Friday

2014-05-30 Thread charles
On 2014-05-30 16:09, Alain Hebert wrote: Well happy friday. We're planning to build a MPLS lab this summer. What's this? Operational related content on a Friday? *angrily hurls popcorn across the room*. LOL. MPLS lab sounds cool. For students? Already experienced engineers? Simulating

Re: Observations of an Internet Middleman (Level3) (was: RIP Network Neutrality

2014-05-14 Thread charles
On 2014-05-14 02:04, Jean-Francois Mezei wrote: On 14-05-13 22:50, Daniel Staal wrote: They have the money. They have the ability to get more money. *They see no reason to spend money making customers happy.* They can make more profit without it. There is the issue of control over the

Re: IPAM DDI Software, Subscriber Management, CMDB and Per Customer VLANs

2014-05-14 Thread charles
On 2014-05-13 16:37, Kyle Leissner wrote: I would like recommendations on the following software/hardware elements required to run an access network. Assume you are building a greenfield network using a combination of access technologies such as DSL, GPON, AE, and WiFi. What a timely thread!

Re: What Net Neutrality should and should not cover

2014-05-04 Thread Charles N Wyble
On 4/27/2014 3:30 PM, John Levine wrote: That is, with CATV companies like HBO have to pay companies like Comcast for access to their cable subscribers. In a non-stupid world, the cable companies would do video on demand through some combination of content caches at the head end or, for

Re: We hit half-million: The Cidr Report

2014-04-28 Thread Charles Gucker
? And of those TE routes, how many can be suppressed by way of BGP Communities with their respective upstream providers ... charles

  1   2   3   4   5   >