Re: Regarding BGP offloading

more details on the particular implementation https://www.cs.princeton.edu/courses/archive/fall17/cos561/papers/espresso17.pdf On Wed, Mar 16, 2022 at 6:14 PM Anurag Bhatia wrote: > > Hello NANOG! > > > I have seen limited talks about offloading of BGP as a whole into > containers/VMs etc. Take

Re: Regarding BGP offloading

One way to do it https://inog.net/files/iNOG14v_oliver_sourcerouting.pdf On Wed, Mar 16, 2022 at 6:14 PM Anurag Bhatia wrote: > > Hello NANOG! > > > I have seen limited talks about offloading of BGP as a whole into > containers/VMs etc. Take e.g this old Google blog post from 2017. Quoting >

Re: Do you care about "gray" failures? Can we (network academics) help? A 10-min survey

On Thu, Jul 8, 2021 at 4:03 PM William Herrin wrote: > > On Thu, Jul 8, 2021 at 5:31 AM Saku Ytti wrote: > > Network experiences gray failures all the time, and I almost never > > care, unless a customer does. > > I would suggest that your customer does care, but as there is no > simple test to

Re: BGP Graceful Restart

On Fri, Apr 16, 2021 at 11:09 AM Graham Johnston wrote: > Largely, I suspect that his point was that if you otherwise do the > right things during maintenance that graceful-restart has the > potential of being really problematic if things go wrong, and thus he > was discouraging the use of it. Is

Re: Texas ERCOT power shortages (again) April 13

On Tue, Apr 13, 2021 at 8:51 PM Sean Donelan wrote: > > > ERCOT ISO Texas has announced the end of today's emergency energy > conservation appeal due to a shortage of generation capacity and higher > than forecasted demand caused by a cold front. > > No this is not an old message. Yep, Texas is

Re: Perhaps it's time to think about enhancements to the NANOG list...?

> On 21/03/2021 16:00, nanog-requ...@nanog.org wrote: > > Message: 13 > > Date: Sat, 20 Mar 2021 12:46:57 -0600 > > From: David Siegel > >[...] > > The board has been thinking about enhancements to the NANOG list for a > > couple of years now, with the goal of creating a modern interface that the

Re: Texas internet connectivity declining due to blackouts

On Wed, Feb 17, 2021 at 10:46 AM John Sage wrote: > This article is an interest description of Texas electricity pricing for > one provider and for the market in general: >

Re: Texas internet connectivity declining due to blackouts

On Tue, Feb 16, 2021 at 6:11 AM Rod Beck wrote: > Anyone wants to provide some details on where the system has faltered? It > is transmission? Or generation? Or just everything in general?  > You can find ERCOT Operations Messageshttp:// www.ercot.com/services/comm/mkt_notices/opsmessages

Re: Texas internet connectivity declining due to blackouts

On Mon, Feb 15, 2021 at 10:49 PM Sean Donelan wrote: > Strange the massive shortages and failures are only in one state. sounds familiar, even connected to a much bigger grid http://www.caiso.com/Documents/Final-Root-Cause-Analysis-Mid-August-2020-Extreme-Heat-Wave.pdf

handling DDoS to hosted CDN cache

How often does your hosted CDN cache get DDoS'ed? I am curious how these get handled (especially when it would cause upstream/backbone congestion). Is this treated differently than DDoS to customers? Any experience to share on working with CDNs to solve these issues? Any CDN that provides good

Re: how would draft-ymbk-opsawg-finding-geofeeds work in noam

> > Why not publish RFC8805 Geofeed directly in inetnum remarks section? > > for some flat fan out last kilometer providers that could be the > inetnum: object from hell. there are global providers which segment > large prefixes over diverse areas. etc. > > i doubt the rpsl providers would like

Re: how would draft-ymbk-opsawg-finding-geofeeds work in noam

On Fri, Sep 11, 2020 at 1:48 PM Randy Bush wrote: > > would folk familiar with the north american RIR and IRR registries be > kind enough to suggest how this might adapt? thanks. > Hi Randy, Why not publish RFC8805 Geofeed directly in inetnum remarks section? Then there is no more need to host

Re: BGP route hijack by AS10990

On Thu, Jul 30, 2020 at 9:37 AM Owen DeLong wrote: > > Looks like the real question here is why doesn’t 7219 do a better job of > filtering what they accept. > > Has anyone reached out to them? You mean 1299? 7219 and 10990 are the same entity.

Re: Is there any data on packet duplication?

On Mon, Jun 22, 2020 at 5:30 PM Hal Murray wrote: > > > How often do packets magically get duplicated within the network so that the > target receives 2 copies? That seems like something somebody at NANOG might > have studied and given a talk on. > > Any suggestions for other places to look?

Re: Network card with relay in case of power failure

something like https://www.chelsio.com/wp-content/uploads/2012/02/B420-021412.pdf ? On Wed, Jun 17, 2020 at 1:16 PM Dovid Bender wrote: > > Hi, > > I am sorry if this is off topic.I was once demoed a network device that had > two interfaces. The traffic would go through the device. If there

Re: Partial vs Full tables

On Fri, Jun 5, 2020 at 10:39 AM William Herrin wrote: > Speak of which, did anyone ever implement FIB compression? I seem to > remember the calculations looked really favorable for the leaf node > use case (like James') where the router sits at the edge with a small > number of more or less

Re: How to manage Static IPs to customers

On Fri, May 8, 2020 at 8:56 AM Michael Crapse wrote: > > On our network(which isn't docsis, granted) we use PPPoE for all static IP > addresses, because it allows /32 ip address allocations for all home CPE > routers, upstream, the routers handle routing via ospf to change the path of > where

Re: WIKI documentation Software?

On Sat, Mar 14, 2020 at 7:07 AM Brielle wrote: > > I personally like Dokuwiki a lot. > > From a usability standpoint, once you spend a few learning the interface, > it’s very simplistic and not overwhelming in features. You can always add > extensions for stuff you need that isn’t there out of

Re: sflow -> aggregated aspath visualization?

On Sat, Mar 14, 2020 at 12:33 PM Adam Thompson wrote: > I’m looking for product recommendations: > > > > We’ve noticed that about 20% of our traffic here lately has decamped from > the

Re: NANOG 78 Webcasts

On Sat, Feb 15, 2020 at 3:04 PM Grant Taylor via NANOG wrote: > Live streams through YouTube are quite different than videos uploaded to > YouTube. > > YouTube doesn't store the live stream for later playback. A separate > copy of the video must be uploaded. youtube live stream can be played

Re: NANOG 78 Webcasts

On Sat, Feb 15, 2020 at 12:32 PM Chriztoffer Hansen wrote: > Wish they would keep the Day 1, Day 2, Day 3 videos online until the > edited talks have been published. > > https://www.youtube.com/playlist?list=PLO8DR5ZGla8jSzWlrWt_cz13LLAz44rHY I asked NANOG several times to keep YouTube stream

Re: Wikipedia drops support for old Android smartphones; mandates TLSv1.2 to read

On Tue, Dec 31, 2019 at 4:17 AM Keith Medcalf wrote: > I am curious -- what exactly are those "obvious reasons"? (And for the > record HTTP *IS* being used, it is just being tunneled inside a TLS > connection). For a popular site, it would be doing a disservice to its customers by not using

Re: Akamai/HollisterCo

On Wed, Dec 18, 2019 at 1:57 PM Jared Mauch wrote: > I’ll give you these links: > > https://community.akamai.com/customers/s/article/Why-is-Akamai-Blocking-Me-Part-3-Partners-Performing-Web-Scraping-Activity?language=en_US > https://www.akamai.com/us/en/clientrep-lookup/ Thanks Jared. Would be

Re: Comcast storing WiFi passwords in cleartext?

On Tue, Apr 23, 2019 at 4:48 PM Töma Gavrichenkov wrote: > Apparently there's a concern with customers that their seemingly > private passphrases, entered in their own boxes, are being shared with > the upstream ISP without an explicit customer consent, and are kept in > the ISP database for an

Re: Sflow billing or usage calculation software

>On Tue, Apr 16, 2019 at 2:14 AM Nick Morrison wrote: > > Actually the sflow standard is flexible, and there are many fields widely > available, including input interface and output interface, vlan/vxlan/mpls > headers, etc. The sending device just needs to support the fields. Vendor support

Re: Announcing: "dumpsterfire", the mailing list for IoT security/privacy issues

On Thu, Jan 10, 2019 at 8:23 AM Rich Kulawiec wrote: > > The "dumpsterfire" mailing list is for the discussion of security and > privacy issues related to the IoT (Internet of Things). Arguably, > the entire IoT *is* a security and privacy issue, but we'll get to that > in good time. > > If you

Re: CenturyLink

On Fri, Dec 28, 2018 at 12:05 AM Stephane Bortzmeyer wrote: > Is this problem also responsible for the 911 outage? If so, the > post-mortem analysis is not useful only for CenturyLink customers but > for everyone on the west coast. Looks like most time.nist.gov servers (3 x NIST sites on AS49)

Re: historic SWIP (or rwhois) data?

APNIC has whowas also https://www.apnic.net/static/whowas-ui/ For RWhois, check with the organization operating rwhoisd? They might have the information beyond RWhois. Yang On Mon, Dec 18, 2017 at 9:11 AM, Benoit Panizzon wrote: > Well @ RIPE ist is quite simple to

Re: Qrator Radar - Peerings

Have you received a response from qrator? My guess is that they dropped a BGP collector session that was advertising garbage (modifying AS path to make non-connected ASNs appear connected). >most ASNs left permanently on at 2017-03-11 21:00:00 were never connected

Re: Multicom Hijacks: Do you peer with these turkeys (AS35916)?

Also AS57166 (single upstream AS29632 NetAssist) is likely hijacking 10 ASNs, and AS43659 (currently inactive). Both with mnt-by: D2INVEST-MNT. http://bgp.he.net/AS57166#_peers DATASTAR-MNT created 14 autnum and 31 route dummy objects in RIPE, on resources that looks abandoned (2 of them

Re: Re: Autunomous system filtering?

On Fri, Nov 18, 2016 at 1:39 PM, wrote: > Consider that when we were announcing the whole /22 everything was working > correctly, then suddenly some ASs stopped to accept our prefixes. That's why > we decided to split the network and announce prefixes with different AS. >

Re: How to find all of an ISP's ASNs

as-set if they keep their routing registry updated? something like this http://bgp.he.net/irr/as-set/AS-RR-Res Normally I use IRR Explorer, but somehow the return is empty http://irrexplorer.nlnog.net/search/AS-RR-Res Yang On Tue, Oct 25, 2016 at 12:41 PM, Gary Baribault

Re: Dyn DDoS this AM?

On Fri, Oct 21, 2016 at 11:45 AM, Patrick W. Gilmore wrote: > My guess is you should track anything to as33517. And AS15135?

Re: Use of unique local IPv6 addressing rfc4193

On Thu, Sep 8, 2016 at 7:17 PM, Ca By wrote: > NAT is bad https://www.youtube.com/watch?v=v26BAlfWBm8

Akamai IPv6 contact needed

Some servers are not serving content over IPv6 HTTPS. It fails in such a way that most applications can't fall back to IPv4. tcp/443 is open but RST as soon as client sends TLS 1.2 client hello. It has been this way for 24+ hours. >>> $ telnet 2600:1404:18::17d7:fbc 443 Trying

Re: Mobile providers in the US for backup access

On Wed, Apr 20, 2016 at 1:49 PM, Dovid Bender wrote: > Thank you everyone for your feedback. I also wanted to know if any > providers offered unlimited 2g since in some cases they want to stream back > some audio as well. 4gantennashop has T-Mobile business with LTE data and

Re: Facebook & Traceroute

On Thu, Mar 10, 2016 at 9:35 AM, Christopher Morrow wrote: > unclear, that traceroute was from someplace I don't own the network for... > from another place I do though... > > 5 ae0.dr07.ash2.tfbnw.net (31.13.26.233) 4 ms > ae0.dr05.ash3.tfbnw.net (31.13.29.21) 4 ms

Re: Southwest Airlines captive portal

On Sat, Feb 27, 2016 at 5:40 PM, Rubens Kuhl wrote: > Since many commonly used web properties are moving to HSTS + HPKP + CT it > will become increasingly difficult to balance performance and security in > high latency connections, but when it comes to a payment gateway, that

Sprint Wireless DNS server not resolving ietf.org

ietf.org and its subdomains such as tools.ietf.org are not accessible on Sprint 3G/LTE (DNS timeout). From what I gathered this is affecting Sprint wireless customers nationwide. I created a DNS measurement on ripe atlas and no signs of other carriers experiencing the same issue. Emailed Sprint

Re: Softlayer / Blocking Cuba IP's ?

On Fri, Feb 19, 2016 at 9:18 PM, Tony Wicks wrote: > I had a couple of VM's (personal mail/web hosting) with a provider who used > Softlayer for transit. About a month ago Softlayer (without any notice or > warning) blocked all outgoing port 25 at multipole datacentres for

Re: Equipment Supporting 2.5gbps and 5gbps

On Thu, Jan 28, 2016 at 10:10 AM, Brandon Butterworth wrote: > With 10G it's been the opposite, nobody was using copper so SFP+ is > cheap. Only recently has copper 10G started to become common, a bit too > late to be worth bothering with now and as there are no copper SFP+

Re: Cisco CMTS SNMP OID's

On Sun, Jan 24, 2016 at 1:06 PM, Lorell Hathcock wrote: > Signal to Noise per upstream channel CISCO-CABLE-SPECTRUM-MIB::ccsUpSpecMgmtSNR http://tools.cisco.com/Support/SNMP/do/BrowseOID.do?local=en=Translate=ccsUpSpecMgmtSNR > Cable Modem counts of all

Re: Looking for VPS providers with BGP session

On Tue, Dec 8, 2015 at 8:52 PM, Yucong Sun wrote: > I recommend http://www.quadranet.com/ ! I have been a happy customer > for almost two years, > > I have a single dedicated server over there, running full BGP feed > with them, It's a fairly extensive setup with multiple

Time Waner Cable IPv6 help needed

Last month after a service upgrade/reprovisioning I am no longer getting an IPv6 prefix. Now all I see are RAs and never a response to DHCPv6 solicit. I have tried different support channels but no luck getting an answer. >From what I gathered IPv6 is available in my market and no known outages.

Re: Route leaks from AS9498 (BHARTI Airtel)?

On Fri, Nov 6, 2015 at 9:38 AM, Andrew Duey wrote: > Is anyone else seeing their routes leaked from AS9498 (BHARTI Airtel) in > India? > > According to bgpmon.net they started leaking our Level 3 provided IP space > at 2015-11-06 05:52 UTC. Oddly, they're not

Re: M$ no v6 or just me?

On Wed, Jul 15, 2015 at 4:33 AM, Nicholas Warren nwar...@barryelectric.com wrote: Surely Microsoft has IPv6 connectivity? Is there a problem with my dns, or is Microsoft not available over v6? Thanks, Nich probably not Google DNS filtering test point 1 $ dig e10088.dspb.akamaiedge.net

Re: Level3 routing issue US west coast?

On Mon, Jul 13, 2015 at 4:14 AM, Jürgen Jaritsch j...@anexia.at wrote: One the DDoS targets was PCCW and their ports were congested ... this was the official explanation we got. Lots of discussion starts from here Can it be somehow related to the DDoS on Telegram (AS62041, AS59930)?

AS3549 Level3/GBLX carrying routing for 10.0.0.0/8

It appears AS3549 is announcing 10.0.0.0/8. I noticed it from an AS3549 customer. From GBLX looking glass, ATL1 traceroute Protocol [ip]: ip Target IP address: 10.0.0.1 Source address: Numeric display [n]: n Timeout in seconds [3]: 1 Probe count [3]: 2 Minimum Time to Live [1]: 1 Maximum Time to

Re: Network Engineering Stack Exchange site in Area51 (fwd)

, May 7, 2013 at 4:44 PM, Yang Yu yang.yu.l...@gmail.com wrote: Network Engineering QA site - Area 51 - Stack Exchange just started private beta. http://networkengineering.stackexchange.com/ If anyone needs a private beta invitation, feel free to email me offlist. Thanks. On Tue, Apr 30, 2013

Re: Network Engineering Stack Exchange site in Area51 (fwd)

Network Engineering QA site - Area 51 - Stack Exchange just started private beta. http://networkengineering.stackexchange.com/ If anyone needs a private beta invitation, feel free to email me offlist. Thanks. On Tue, Apr 30, 2013 at 7:40 PM, Simon Lyall si...@darkmere.gen.nz wrote: The

Re: Google Public DNS Problems?

It is very courteous to reply a SERVFAIL for requests being rate limited. On Wed, May 1, 2013 at 1:17 PM, Andrew Fried andrew.fr...@gmail.com wrote: Your IPs may have been rate limited... Andy Andrew Fried andrew.fr...@gmail.com On 5/1/13 12:38 PM, Blair Trosper wrote: That's all well

Re: IPv6 and HTTPS

If the hosting provider can still charge for IPv4 addresses, why would they support SNI or IPv6 SSL ;) I have seen a CDN using certificates with tons of domain names in subject alternative name. Old Symbian phones don't support SAN.. On Thu, Apr 25, 2013 at 10:32 PM, Jay Ashworth

AboveNet Atlanta to DC route

From 21:15 EDT the RTT from ATL to IAD jumped from 15ms to 80ms. Is there any maintenance going on? 6 xe-1-0-0.mpr3.atl6.us.above.net (64.125.31.45) 22.813 ms 16.716 ms 16.679 ms 7 xe-2-1-0.cr2.iah1.us.above.net (64.125.31.50) 91.618 ms 66.028 ms 66.042 ms 8

Re: Google incorrect IPv6 GeoIP

Still getting redirected Resolving www.google.com... 2607:f8b0:400c:c04::69, 74.125.26.104, 74.125.26.99, ... Connecting to www.google.com|2607:f8b0:400c:c04::69|:443... connected. HTTP request sent, awaiting response... 302 Found Location:

Re: Google incorrect IPv6 GeoIP

DNS is actually working correctly I think. 1) The outputs are from Dreamhost Ashburn, but I saw the same result over IPv6 at Dreamhost LAX. Different DNS servers. 2) ping and ping6 times are pretty much the same. I suppose they are served by the same Google cluster/CDN. 3) No redirect over IPv4

Google incorrect IPv6 GeoIP

For some reason Google redirects requests from Dreamhost's IPv6 block 2607:f298::/32 to google.com.hk $ wget http://www.google.com --2013-04-11 16:06:45-- http://www.google.com/ Resolving www.google.com... 2607:f8b0:400c:c01::93, 173.194.75.99, 173.194.75.147, ... Connecting to

Re: route for linx.net in Level3?

I noticed it too this morning from a AS3549 customer. Level 3 LG shows no route for 195.66.232.0/22 on North American sites. On Wed, Apr 3, 2013 at 6:52 PM, John Kemp k...@network-services.uoregon.edu wrote: Having trouble reaching route-views.linx.routeviews.org from AS3582. I'm assuming

Re: Mikrotik visibility

I am using Plixer Scrutinizer Flow Analyzer with RouterOS. It does have cool looking web panel. But some interfaces (instance 0, instance 1 etc.) reported doesn't exactly match up with interfaces in RouterOS. I haven't figured out what exactly those are. Yang

Re: Time Warner Cable YouTube throttling

Also if your upstream has Google Global Cache (or whatever it's called), the results can be very different I suppose. Does Google use different naming structure for IPv6 CDN? Maybe this particular cache does not offer IPv6. ;; QUESTION SECTION: ;r3---sn-n2uxaxjvh-j5xe.c.youtube.com. IN A ;;

Re: Microsoft Product Activation server reachability

communication prohibited by filter is just an ICMP response code, sadly Windows does not under it.. Type 3 (Destination unreachable) Code 13 (Communication Administratively Prohibited - generated if a router cannot forward a packet due to administrative filtering;) ICMP echo request for this

Re: facebook down

I noticed Google Public DNS was returning ServerFail for www.facebook.com A earlier around 6pm EST ; , NS records were fine. Now DNS problem is solved but web still does not work. On Mon, Dec 10, 2012 at 6:06 PM, Joly MacFie j...@punkcast.com wrote: I know there's an outages list, but

Re: is CERNET part of the Internet?

Most networks have some sort of firewall (hopefully...) Isn't CERNET kind of similar to Internet2/NLR? Members own their network Free to join Serve educationresearch community Members encourage their users to use the free network instead of public network when possible Please correct me if I am