any dangers of filtering every /24 on full internet table to preserve FIB space ?

2022-10-10 Thread Edvinas Kairys
Hello, We're considering to buy some Cisco boxes - NCS-55A1-24H. That box has 24x100G, but only 2.2mln route (FIB) memory entries. In a near future it will be not enough - so we're thinking to deny all /24s to save the memory. What do you think about that approach - I know it could provide some

Asia Apac networks

2022-03-09 Thread Edvinas Kairys
Hello, We've introduced Cogent network in Equinix Honk Kong DC. But seems via that link we're just receiving just only 5% of our traffic, other part of incoming traffic is received via our other ISPs like NTT, Simcentrc, and Equinix IXP. I know it's very naïve to expect the traffic load balance

questions about ARIN ipv6 allocation

2021-12-03 Thread Edvinas Kairys
Hello, We're setting up IPv6 network is USA. Our company has branches and different legal entities in EU and US. We've some ipv6 PI subnets already allocated by RIPE for EU datacenters. I have few questions: 1) Is it possible to reuse some portion of RIPE allocated ipv6 addresses in USA ? Or we

Re: question about enabling RPKI using Hosted mode

2021-10-27 Thread Edvinas Kairys
Thanks, i'm happy that my RIR is RIPE. I hope other RIRs will make auto-renew as well. On Tue, Oct 26, 2021 at 4:30 PM Dale W. Carder wrote: > Thus spake Edvinas Kairys (edvinas.em...@gmail.com) on Tue, Oct 26, 2021 > at 10:11:14AM +0300: > > > > Also, about ROA expirati

Re: question about enabling RPKI using Hosted mode

2021-10-26 Thread Edvinas Kairys
thanks, will keep in mind. Also, about ROA expirations is it possible to configure an automatic ROA extension after it's expires ? On Tue, Oct 26, 2021 at 12:35 AM Job Snijders wrote: > Dear Edvinas, > > On Mon, Oct 25, 2021 at 11:49:09PM +0300, Edvinas Kairys wrote: > >

question about enabling RPKI using Hosted mode

2021-10-25 Thread Edvinas Kairys
Hello, We're thinking of enabling BGP ROA, because more and more ISPs are using strict RPKI mode. Does enabling Hosted Mode (where it doesn't requires any additional configuration on client end) on RPKI could for some reason could cause a traffic loss ? The only disasterious scenario i could

Re: DDoS attack with blackmail

2021-06-09 Thread Edvinas Kairys
Hey, Did you get the attack promised ? after 1 week after notice ? Today we've been warned and got some udp flood for 3 hours. On Tue, May 25, 2021 at 2:14 PM Jean St-Laurent via NANOG wrote: > I don’t believe that these companies are complicit at high level. > > My guess is that there are