Re: "Hypothetical" Datacenter Overheating

2024-01-17 Thread Izaac
On Wed, Jan 17, 2024 at 12:07:42AM -0500, Glenn McGurrin via NANOG wrote: > Free air cooling loops maybe? (Not direct free air cooling with air > exchange, the version with something much like an air handler outside with a > coil and an fan running cold outside air over the coil with the

Re: "Hypothetical" Datacenter Overheating

2024-01-16 Thread Izaac
On Tue, Jan 16, 2024 at 08:37:09AM -0800, Warren Kumari wrote: > ISP/Colo provider The good ole days. When one stacked modems with two pencils in between them and box fans blew through the gaps. -- . ___ ___ . . ___ . \/ |\ |\ \ . _\_ /__ |-\ |-\ \__

Re: "Hypothetical" Datacenter Overheating

2024-01-16 Thread Izaac
On Mon, Jan 15, 2024 at 10:14:49AM -0500, sro...@ronan-online.com wrote: > I’m more interested in how you lose six chillers all at once. Because you're probably mistaking an air handling unit for a chiller. I usually point people at this to get us on the same page:

Re: New addresses for b.root-servers.net

2023-06-07 Thread Izaac
On Wed, Jun 07, 2023 at 02:45:05PM -0700, William Herrin wrote: > [more stuff] I've unpacked what a vulnerability is and is not for you. I've unpacked how you can't be violating confidentiality in a protocol which doesn't guarantee confidentiality for you. I've unpacked how abusing the

Re: New addresses for b.root-servers.net

2023-06-07 Thread Izaac
On Wed, Jun 07, 2023 at 01:52:45PM -0700, William Herrin wrote: > [stuff] Put it in your CVE. -- . ___ ___ . . ___ . \/ |\ |\ \ . _\_ /__ |-\ |-\ \__

Re: New addresses for b.root-servers.net

2023-06-07 Thread Izaac
On Wed, Jun 07, 2023 at 03:46:39PM -0400, Michael Butler wrote: > > No. I will not indulge your invention of terms. "Hard-coded" means you > > need to recompile to change it. This is a default value. A > > configuration option takes precedence. > > BIND-9.18.14 requires recompilation to

Re: New addresses for b.root-servers.net

2023-06-07 Thread Izaac
On Wed, Jun 07, 2023 at 09:30:36AM -0700, William Herrin wrote: > Data embedded in the binary is hard-coded. That's what hard-coded > means. If it makes you happier I'll qualify it as a "hard-coded > default," to differentiate it from settings the operator can't > override with configuration. No.

Re: New addresses for b.root-servers.net

2023-06-07 Thread Izaac
On Sun, Jun 04, 2023 at 01:19:18PM -0700, William Herrin wrote: > Perhaps you missed my subsequent message where I pointed out that the I did not. > IP address is hard-coded in Bind which will use it by default unless > configured not to. It is not "hard coded." It is a default configuration.

Re: New addresses for b.root-servers.net

2023-06-04 Thread Izaac
On Sat, Jun 03, 2023 at 04:17:41PM -0700, William Herrin wrote: > It *is* a security update. That's a really great point that I > completely missed. After some period of time, the folks running > b.root-servers.net should file a CVE against implementations still > using the deprecated IP address.

Re: Routed optical networks

2023-05-02 Thread Izaac
On Mon, May 01, 2023 at 02:56:47PM -0600, Matt Erculiani wrote: > In short, the idea is that optical networks are wasteful and routers do a > better job making more use of a network's capacity than ROADMs. Take the > extra router hop (or 3 or 8) versus short-cutting it with an optical > network

Re: Submitting Fake Geolocation for blocks to Data Brokers and RIRs

2021-04-22 Thread Izaac
On Wed, Apr 21, 2021 at 12:21:26PM -0700, William Herrin wrote: > a legal requirement that it be located in [Atlantis] A legal requirement of whom? Undoubtedly the requirement is made of provider of this theoretical service doing the restricting. Is that "legal requirement" satisfied by asking

Re: Texas ERCOT power shortages (again) April 13

2021-04-14 Thread Izaac
On Wed, Apr 14, 2021 at 06:54:55AM +0200, Mark Tinka wrote: > So looks like ERCOT have 32,000MW of capacity offline for maintenance and > repairs, which they claim is not unusual for this time of the year as they > gear up for the summer. So generation capacity was only 50,000MW, while > demand

Re: DoD IP Space

2021-02-11 Thread Izaac
On Thu, Feb 11, 2021 at 09:53:56AM -0800, William Herrin wrote: > In other words, it proves the exact opposite of your assertion. Golly. Do you want to tell the 1M+ AWS customers that the services they paid ~$280B for last year don't work, or should I? -- . ___ ___ . . ___ . \/ |\

Re: DoD IP Space

2021-02-11 Thread Izaac
On Thu, Feb 11, 2021 at 06:29:42AM -0800, Owen DeLong wrote: > Ridiculous… TCP/IP was designed to be a peer to peer system where each > endpoint was uniquely > addressable whether reachable by policy or not. I think that is a dramatic over-simplification of the IP design criteria -- as it was

Re: DoD IP Space

2021-02-11 Thread Izaac
On Wed, Feb 10, 2021 at 10:38:00AM -0800, William Herrin wrote: > None whatsoever. You just have to be really big. Hi Beel, Thanks for backing me up with an example of an organization with competent network engineering. Their ability to almost infinitely leverage the existing rfc1918 address

Re: DoD IP Space

2021-02-11 Thread Izaac
On Wed, Feb 10, 2021 at 04:04:43AM -0800, Owen DeLong wrote: > without creating partitioned networks. Ridiculous. Why would you establish such a criteria? The defining characteristic of rfc1918 networks is that they are partitioned. The ability to recognize and exploit partitions within a

Re: DoD IP Space

2021-02-09 Thread Izaac
On Fri, Feb 05, 2021 at 02:36:57PM -0800, Owen DeLong wrote: > it is definitely possible to run out of RFC-1918 space with scale and no > incompetence. No, it isn't. It's the year 2021. Stop making excuses. -- . ___ ___ . . ___ . \/ |\ |\ \ . _\_ /__ |-\ |-\ \__

Re: DoD IP Space

2021-01-23 Thread Izaac
On Sat, Jan 23, 2021 at 11:20:47AM -0800, Sabri Berisha wrote: > You don't need to patronize me. I'm merely explaining the real life realities > of > working in a large enterprise. Patronize you? Ohh, heavens no! I fully intend to use your replies as educational material. Why, I've passed

Re: DoD IP Space

2021-01-22 Thread Izaac
On Fri, Jan 22, 2021 at 03:43:43PM -0800, Sabri Berisha wrote: > No, but the NOC that sits in between does need to access both. Sure, you can A single NOC sitting in the middle of a single address space. I believe I'm detecting an architectural paradigm on the order of "bouncy castle." Tell me,

Re: DoD IP Space

2021-01-22 Thread Izaac
An embarrassing mistake. I'm not a computer and don't count from zero. It is, of course, at 172.18.7.12:2239 and not 11. Jan 22, 2021 18:01:15 Izaac : > We can SSH to the 39th host at: 172.18.7.11:2239

Re: DoD IP Space

2021-01-22 Thread Izaac
On Fri, Jan 22, 2021 at 01:03:15PM -0800, Sabri Berisha wrote: > TL;DR: a combination of scale and incompetence means you can run out of 10/8 > really quick. Indeed. Thank you for providing a demonstration of my point. I'd question the importance of having an console on target in Singapore be

Re: DoD IP Space

2021-01-22 Thread Izaac
On Fri, Jan 22, 2021 at 03:44:34PM -0500, Clayton Zekelman wrote: > You mean like Rogers? Smashing example. They've got fewer than 4 million subscribers (only about a million of them being Internet), and yet they have somehow gone through over 17 million addresses? "Ohh no! Quick! Let's

Re: DoD IP Space

2021-01-22 Thread Izaac
On Wed, Jan 20, 2021 at 02:47:32PM +0100, Cynthia Revström via NANOG wrote: > certain large corporations that have run out of RFC1918, etc. space At what level of incompetence must an organization operate to squander roughly 70,000 /24 networks? Or to do so and then decide, "You know what we

Re: Parler

2021-01-10 Thread Izaac
On Sun, Jan 10, 2021 at 10:56:10AM -0500, Mark Seiden wrote: > at the risk of providing more heat than light, trump violated the > Presidential Records Act repeatedly by later taking down (aka destroying) > his own unwise tweets. this repeated violation of law using twitter itself > would have

Re: Parler

2021-01-10 Thread Izaac
On Sun, Jan 10, 2021 at 03:36:18PM -0800, Michael Thomas wrote: > > On Sun, Jan 10, 2021 at 12:01:46PM -0800, Michael Thomas wrote: > > > Considering that it seems that there continues to be talk/planning of > > > armed > > > insurrection, I think we can forgive them for violating professional >

Re: Parler

2021-01-10 Thread Izaac
On Sun, Jan 10, 2021 at 11:58:14AM -0500, Rich Kulawiec wrote: > Given that people on Parler are currently discussing/planning attacks > against Amazon/Google/Apple/etc.'s facilities and personnel, this seems wise. Got links? -- . ___ ___ . . ___ . \/ |\ |\ \ . _\_ /__ |-\ |-\ \__

Re: Parler

2021-01-10 Thread Izaac
On Sun, Jan 10, 2021 at 12:01:46PM -0800, Michael Thomas wrote: > Considering that it seems that there continues to be talk/planning of armed > insurrection, I think we can forgive them for violating professional > courtesy. Got links? -- . ___ ___ . . ___ . \/ |\ |\ \ . _\_ /__ |-\

Salesmen: ARIN Records are NOT Leads

2018-12-19 Thread Izaac
Just a reminder. Grrr. -- . ___ ___ . . ___ . \/ |\ |\ \ . _\_ /__ |-\ |-\ \__

Re: Yet another Quadruple DNS?

2018-03-29 Thread Izaac
On Thu, Mar 29, 2018 at 07:01:59AM -0700, Brian Kantor wrote: > do not trust the ones provided by their ISPs. Ohhh! Is that a thing? Network operators doing crazy shit like throwing A records to local machines instead of NXDOMAIN in order to splash advertising at users? Imagine users getting

Re: Yet another Quadruple DNS?

2018-03-29 Thread Izaac
On Thu, Mar 29, 2018 at 01:07:58PM +, Chip Marshall wrote: > I think the real question is "when are we going to get some memorable > IPv6 public recursive DNS servers?" No, the real question is: why do you find it desirable to centralize a distributed service? -- . ___ ___ . . ___ . \

Re: Yet another Quadruple DNS?

2018-03-28 Thread Izaac
On March 28, 2018 6:14:26 PM UTC, Payam Poursaied <m...@payam124.com> wrote: >dig google.com @1.1.1.1 Cute. I'm sure this engineering effort to centralize a distributed service will also go a long way to spur IPv6 adoption. -- Izaac

Re: 60 Hudson Woes

2018-02-20 Thread Izaac
On Fri, Feb 16, 2018 at 01:02:44PM -0500, Dovid Bender wrote: > 111 8th This is a non-option. Google has been aggressive in removing non-Google tenants -- both telecom and office. -- . ___ ___ . . ___ . \/ |\ |\ \ . _\_ /__ |-\ |-\ \__

Re: Leasing /22 blocks

2017-06-01 Thread Izaac
On Fri, May 26, 2017 at 04:44:52PM +, Security Admin (NetSec) wrote: > Recently had someone offer to lease some IPv4 address space from me. > Have never done that before. > > I thought I would ask the group what a reasonable monthly rate for a > /22 in the United States might be. Let me

Re: Production-scale NAT64

2015-08-26 Thread Izaac
On Thu, Aug 20, 2015 at 07:44:10AM -0600, Jawaid Shell2 wrote: Who out there is using production-scale NAT64? What solution are you using? Yes, I'm curious about this too. I'd like a solid list of providers to avoid. -- . ___ ___ . . ___ . \/ |\ |\ \ . _\_ /__ |-\ |-\ \__

Re: cheap laptop with 32G or 64G recommendations

2014-11-11 Thread Izaac
to be expected to provide or bear the cost of providing those resources. I have no idea what citizenship in British Columbia -- urban or otherwise -- has to do with anything. Izaac, spend a year getting shot at in Surrey, then get back to us. Pardon, sir, you seem to have a chip on your shoulder which

Re: cheap laptop with 32G or 64G recommendations

2014-11-10 Thread Izaac
to it. That's how you save money. If you're stuck working in a completely isolated environment, then work it into the contract. That's the cost of being on an island. -- Izaac

Re: IPv4 address length technical design

2012-10-03 Thread Izaac
On Wed, Oct 03, 2012 at 06:52:57PM +0200, Seth Mos wrote: Pick a number between this and that. It's the 80's and you can still count the computers in the world. :) And yet, almost concurrently, IEEE 802 went with forty-eight bits. Go figure. I'm pretty sure the explanation you're looking for

Re: The End-To-End Internet (was Re: Blocking MX query)

2012-09-05 Thread Izaac
On Wed, Sep 05, 2012 at 07:50:12AM -0700, Henry Stryker wrote: Not only that, but a majority of spam I receive lately has a valid DKIM signature. They are adaptive, like cockroaches. This is why tcp port 25 filtering is totally effective and will remain so forever. Definitely worth breaking

Re: The End-To-End Internet (was Re: Blocking MX query)

2012-09-05 Thread Izaac
On Wed, Sep 05, 2012 at 11:46:34AM -0400, Greg Ihnen wrote: On Wed, Sep 5, 2012 at 11:11 AM, Izaac iz...@setec.org wrote: On Wed, Sep 05, 2012 at 07:50:12AM -0700, Henry Stryker wrote: signature. They are adaptive, like cockroaches. This is why tcp port 25 filtering is totally effective

Re: The End-To-End Internet (was Re: Blocking MX query)

2012-09-05 Thread Izaac
On Tue, Sep 04, 2012 at 03:45:32PM -0400, William Herrin wrote: That's what firewalls *are for* Jay. They intentionally break end-to-end for communications classified by the network owner as undesirable. Whether a particular firewall employs NAT or not is largely beside the point here. Either

Re: Current IPv6 state of US Mobile Phone Carriers

2012-05-31 Thread Izaac
On Tue, May 22, 2012 at 04:00:21PM -0700, Paul Porter wrote: 1. How much of the carrier core and edge for ATT, Verizon. T-Mobile, and Sprint are on IPv6 now? http://mailman.nanog.org/pipermail/nanog/2010-February/018940.html Still doesn't work. Gave up doing solicitations for native

6to4 on Sprint Wireless Broadband

2010-02-27 Thread Izaac
A few months ago, is appears that Sprint started dropping 6to4 encapsulated packets. Egress is fine. Ingress silently drops. Anyone see anything similar? Or am I the only guy crazy enough to be doing this sort of thing in the first place? -- . ___ ___ . . ___ . \/ |\ |\ \ . _\_

Re: [OT] Re: Fiber cut in SF area

2009-04-13 Thread Izaac
On Sun, Apr 12, 2009 at 03:37:00AM +, Paul Vixie wrote: as long as the west's ideological opponents want terror rather than panic, and also to inflict long term losses rather than short term losses, that's true. in this light you can hopefully understand why bollards to protect internet

Re: interger to I P address

2008-08-27 Thread Izaac
On Wed, Aug 27, 2008 at 05:50:44PM +0200, Andree Toonk wrote: The Perl way: sub ntoa_in_one_line { join(., unpack(, pack(N, $_[0]))); } print ntoa_in_one_line(1089055123) . \n; dec2ip awk '{ print int($1 / 16777216) . int($1 % 16777216 / 65536) . int($1 % 65536 / 256) . int($1 % 256) }'