Re: Cogent-TATA peering dispute?

2024-05-17 Thread jim deleskie
Not even the first time tata and cogent separated. Will avoid public details but I was on the keyboard at 6453 that time. On Fri, May 17, 2024, 6:05 PM William Herrin wrote: > On Fri, May 17, 2024 at 9:55 AM Ben Cartwright-Cox via NANOG > wrote: > > Also poking around on RIPE Atlas suggests

Re: Out of ideas - Comcast issue BGP peering with Tata

2023-11-17 Thread jim deleskie
I many years ago worked at Tata, responsible for their BGP, they are giving you the right answer, Comcast has to be the one contacting them, as then both sides can see what is being sent and received and can resolve this issue. -jim On Fri, Nov 17, 2023 at 10:04 AM Jamie Chetta via NANOG wrote:

Re: TATA Communications

2022-12-12 Thread jim deleskie
Have you tried NOC not sure who from their actively monitors the list anymore? Forwarding to a former colleague. -jim On Mon, Dec 12, 2022 at 2:49 PM Norman Jester wrote: > Contact me off list... seeing major loss at 64.86.252.65 in your path. > > Norman Jester > 619-319-7055 >

Re: Understanding impact of RPKI and ROA on existing advertisements

2022-11-02 Thread jim deleskie
I dont think ive every agreed with Owen this much, maybe this is the first sign the wording is ending further proving his statement :) On Wed, Nov 2, 2022 at 10:30 PM Owen DeLong via NANOG wrote: > Oh, I’m not ignoring it, I’m just rather underwhelmed by it and given how > long it took SIDRWG

Re: AKAMAI Contact

2022-09-28 Thread jim deleskie
Seriously search the list people. Even a little effort on your own. Same question a few days ago. -jim On Wed, Sep 28, 2022, 3:45 PM Joshua Pool via NANOG wrote: > Anyone have a contact for AKAMAI? > > Thanks in advance. > > Josh >

Re: Rogers Outage Canada

2022-07-08 Thread jim deleskie
i cant see BGP taking out SS7. -jim On Fri, Jul 8, 2022 at 2:45 PM Snowmobile2004 wrote: > According to Cloudflare Radar > , Rogers > BGP announcements spiked massively to levels 536,777% higher than normal > (343,601 vs 64

Re: 10 Do's + Don'ts for Visiting Québec + Register Now for N85!

2022-05-08 Thread jim deleskie
Having lived in and continue to spend as much time in Montreal as I can. This list made be laugh, especially for a group where most of us do a lot of travel. Other then no right on red. Montreal like any other city. Don't be an ass and enjoy yourself. On Thu, May 5, 2022, 9:56 AM Nanog News

Re: Opinions on Arista for BGP?

2022-04-01 Thread jim deleskie
I did an eval for some folks last Aug on Arista and 2 other vendors, one of the others decided they didn't want to play the 3rd did. Of the 3 Arista performed better/best. The test plan was shared with all 3 vendors prior to testing and it definitely push all this to and then past their

Re: IPv6 Only - was Re: Let's Focus on Moving Forward Re: V6 still not supported re: 202203261833.AYC

2022-03-29 Thread jim deleskie
If then industry still hasn't adopted v6 full in 25 years maybe it's v6 that should be given up it, that it clearly wasn't what customers wanted. Perhaps we should should have a small group working on the next iteration. -jim On Tue, Mar 29, 2022, 5:54 PM Jacques Latour wrote: > So, in 25, 50

Re: Dropping support for the .ru top level domain

2022-03-14 Thread jim deleskie
Terrible idea on so many levels. -jim On Mon, Mar 14, 2022, 12:30 PM Patrick Bryant wrote: > I don't like the idea of disrupting any Internet service. But the current > situation is unprecedented. > > The Achilles Heel of general public use of Internet services has always > been the

Re: The role of Internet governance in sanctions

2022-03-10 Thread jim deleskie
I respect the people and goals here, but strongly echo Mel's statement. This is a much larger hammer then mail filtering lists. -jim On Thu, Mar 10, 2022, 11:26 AM Mel Beckman wrote: > In my view, there is a core problematic statement in this document: > > “Military and propaganda agencies

Re: Contact request AS 6453

2022-01-15 Thread jim deleskie
Have you found anyone. Not there any more but can probably still find someone for you. -jim On Thu, Jan 13, 2022, 10:11 AM Drew Weaver wrote: > Does anyone have a contact for AS 6453 or are there any AS 6453 folks on > list? > > > > Seeing some routing trouble from their customers to the US.

Re: Redploying most of 127/8 as unicast public

2021-11-18 Thread jim deleskie
This is actually worse than our collective progress on replacing v4 to date. -jim On Wed, Nov 17, 2021 at 7:31 PM Jay R. Ashworth wrote: > This seems like a really bad idea to me; am I really the only one who > noticed? > > https://www.ietf.org/id/draft-schoen-intarea-unicast-127-00.html > >

Re: Disaster Recovery Process

2021-10-05 Thread jim deleskie
I don't see posting in a DR process thead about thinking to use alternative entry methods to locked doors and spreading false information. If do well. Mail filters are simple. -jim On Tue., Oct. 5, 2021, 7:35 p.m. Niels Bakker, wrote: > * deles...@gmail.com (jim deleskie) [Tue 05 Oct 2

Re: Disaster Recovery Process

2021-10-05 Thread jim deleskie
World broke. Crazy $$ per hour down time. Doors open with a fire axe. Glass breaks super easy too and much less expensive then adding 15 min to failure. -jim On Tue., Oct. 5, 2021, 7:05 p.m. Jeff Shultz, wrote: > 7. Make sure any access controlled rooms have physical keys that are >

Re: S.Korea broadband firm sues Netflix after traffic surge

2021-10-01 Thread jim deleskie
Having done peering for many $big_boys_club and $small_isps, it always comes down to politics, $$ and time. The balance may change but end of day its those variables and its a painful game some days. From all sides :( -jim On Fri, Oct 1, 2021 at 1:07 PM Laura Smith via NANOG wrote: > > >

Re: do bgp optimizers think?

2021-09-09 Thread jim deleskie
Suspect for most th answer is poorly. This is a conversation I've had with a few people about how they could be well made -jim On Thu., Sep. 9, 2021, 12:45 p.m. Randy Bush, wrote: > to control inbound traffic, how do bgp optimizers decide how to tune > what they announce? slfow?

Re: netflow in the core used for surveillance

2021-08-25 Thread jim deleskie
Randy, We all know many folks send their *flow to someone or somewhere. In exchange for pretty graphs for intelligence. I suspect in many cases this data is then reused in many cases for many purposes. But let's not overplay the risk here. There would be much easier ways for rogue nations,

Re: Cogent x RPKI

2021-08-09 Thread jim deleskie
It won't get them depeered, nor should it. I don't currently based much value in RPKI for BGP. On Mon., Aug. 9, 2021, 8:43 a.m. Rubens Kuhl, wrote: > From a Cogent support ticket: > "Hello, > > Please see the attached LOA. > > Regarding the RPKI ROA, for now, we don't create ROA for our

Re: Any2 LAX

2021-06-11 Thread jim deleskie
Also saw a major traffic drop. There is a Root Cause to be issued early in the week I'm told. -jim On Fri, Jun 11, 2021 at 2:42 PM Siyuan Miao wrote: > Yea, it was down but both RS are online and feeding us unreachable > nexthops during the outage . > > On Sat, Jun 12, 2021 at 1:27 AM Seth

Re: DDoS attack with blackmail

2021-05-24 Thread jim deleskie
While I have no design to engage in over email argument over how much latency people can actually tolerate, I will simply state that most people have a very poor understanding of it and how much additional latency is really introduced by DDoS mitigation. As for implying that DDoS mitigation

Re: Network / Infrastructure security testing services

2021-03-09 Thread jim deleskie
Your asking if anyone does it or your offering your services? -jim On Tue., Mar. 9, 2021, 3:56 p.m. Nathanael Cariaga, wrote: > Apologies for this shameless plug, but wanted to ask if any folks on this > list who does network/infrastructure security testing? Please to reach back > to me off

Re: "Is BGP safe yet?" test

2020-04-20 Thread jim deleskie
I remember having this discussion more than 20yrs ago, minus the ARIN bit, couldn't get every to agree to it it then either :(. We don't need more rules, we just need to start with basic hygiene. Was a novel idea :) On Mon., Apr. 20, 2020, 2:41 p.m. Christopher Morrow, < morrowc.li...@gmail.com>

Re: Disney+ Geolocation issues

2019-11-13 Thread jim deleskie
Using a TPIA provider here at home in Nova Scotia same issue. -jim On Tue., Nov. 12, 2019, 6:29 p.m. Michael Crapse, wrote: > Myself and a few other ISPs are having our eyeballs complain about > disney+ saying that they're on a VPN. Does anyone have any idea, or who to > contact regarding this

Re: DOs and DONTs for small ISP

2019-06-04 Thread jim deleskie
triggered :) On Tue, Jun 4, 2019 at 11:31 AM Bryan Holloway wrote: > > On 6/4/19 9:20 AM, Mark Tinka wrote: > > > > > > On 3/Jun/19 15:41, Fletcher Kittredge wrote: > >> > >> Here is your checklist in descending order of importance: > >> > >> 1. market opportunity > >> 2. finding the right

Re: modeling residential subscriber bandwidth demand

2019-04-02 Thread jim deleskie
ow for spikes in traffic for various events > throughout the year. > > Louie > Google Fiber > > > On Tue, Apr 2, 2019 at 11:36 AM jim deleskie wrote: > >> +1 on this. its been more than 10 years since I've been responsible for a >> broadband network but have frien

Re: modeling residential subscriber bandwidth demand

2019-04-02 Thread jim deleskie
+1 on this. its been more than 10 years since I've been responsible for a broadband network but have friends that still play in that world and do some very good work on making sure their models are very well managed, with more math than I ever bothered with, That being said, If had used the

Re: Service Provider NetFlow Collectors

2019-01-16 Thread jim deleskie
Erik, Feel free to ping me, I own Mimir Networks, we have a full-service flow collection/DDoS detection and mitigation system that I'd love to show you. We built it having been a long time user of other commercial and open source tools, for very large deployments. Would be happy to give you a

Re: [OT] Internet in China

2018-07-23 Thread jim deleskie
Chinese ISP's typically like to run their links very hot. Don't expect much different if you change providers. -jim On Mon, Jul 23, 2018 at 8:37 AM, Danijel Starman wrote: > Hi, > > Can someone suggest a reliable internet provider in China? Are all > options China Telecom? > > Some current

Re: AS PATH limits

2017-09-30 Thread jim deleskie
Maybe the next best path had, had 562 prepends? :) On Sat, Sep 30, 2017 at 12:09 PM, wrote: > > If you're on cogent, since 22:30 UTC yesterday or so this has been > happening > > (or happened). > > Still happening here. I count 562 prepends (563 * 262197) in the >

Re: AS PATH limits

2017-09-20 Thread jim deleskie
In my MUCH younger days, I may have helped abuse the global table via prepends, but never to that level :) On Wed, Sep 20, 2017 at 4:36 PM, Randy Bush wrote: > > Below is an example showing an excessive amount of prepending for prefix > > 185.135.134.0/23 at 2017-09-18 20:20:05

Re: Bell outage

2017-08-04 Thread jim deleskie
Single fiber cut causes the much impact? -jim On Fri, Aug 4, 2017 at 2:59 PM, J wrote: > https://www.theglobeandmail.com/news/national/much-of- > atlantic-canada-loses-cellphone-service-in-widespread-outage/ > article35881182/ > > > > Apparently some fiber cut. No word on the

Re: Bell outage

2017-08-04 Thread jim deleskie
Cell and the internet all down here from Bell and those sharing their towers, also 911 services. Banking / ATM also impacted, no idea reason though. -jim Mimir Networks www.mimirnetworks.com On Fri, Aug 4, 2017 at 12:14 PM, Krunal Shah wrote: > Does anyone know what is

Re: Long AS Path

2017-06-22 Thread jim deleskie
I see 5+ prepends as maybe not reason to have your "BGP driving license revoked" but if I can continue with the concept that you have your BGP learners permit. If I think back to when I learned to code or when making ACL's, we still used line number and practice would be to give ourselves lots of

Re: Rogers Peering Request

2016-12-15 Thread jim deleskie
Will reach out to some folks I know there. PM me Network, AS etc. On Thu, Dec 15, 2016 at 3:33 PM, Ryan Gard wrote: > Looking for a Rogers contact to get things moving on a peering request. > Been trying to shout into their ear for well over a month, and haven't > heard

Re: Canadian National Railway contact

2016-12-06 Thread jim deleskie
Have a friend that used to work there, will reach out to see if he still does. -jim On Tue, Dec 6, 2016 at 11:48 AM, Andy Ringsmuth wrote: > If there happens to be someone here from the Canadian National Railway, or > if someone knows someone there, could you hit me up

Re: BFD on back-to-back connected BGP-speakers

2016-11-29 Thread jim deleskie
Hugo, I've used this configuration in a past line when I may of had multiple L2 steps between L3 devices. The only concern we had was around load BFD put on _some_ endpoint routers, if was handles on the RouteProcessor vs on line cards. -jim On Tue, Nov 29, 2016 at 2:23 PM, Hugo Slabbert

Re: Spitballing IoT Security

2016-10-26 Thread jim deleskie
So device is certified, bug is found 2 years later. How does this help. The info to date is last week's issue was patched by the vendor in Sept 2015, I believe is what I read. We know bugs will creep in, (source anyone that has worked with code forever) Also certification assuming it would work,

Re: Death of the Internet, Film at 11

2016-10-23 Thread jim deleskie
I've heard this crap for 20+ years now. "attack traffic" is unplanned traffic. Build networks to support "random" bursts of garbage is much more expensive then you will ever get to bill for. You clearly have no understanding of the economics of networks. On Sun, Oct 23, 2016 at 10:39 PM, Keith

Re: Death of the Internet, Film at 11

2016-10-23 Thread jim deleskie
Sure lets sue people because they put too many/bad packets/packets I don't like on the internet. Do you think this will really solve the porblem? Do you think we'll not just all end up with internet prices like US medical care prices? On Sun, Oct 23, 2016 at 4:41 PM, wrote:

Re: Death of the Internet, Film at 11

2016-10-22 Thread jim deleskie
uke > > > *Sent from my iPhone* > > On Oct 22, 2016, at 12:06 PM, jim deleskie <deles...@gmail.com> wrote: > > It is also likely the desired use case. In my office I like to be able to > login when needed when on the road, when the alarm company calls me at 2am > for a

Re: Death of the Internet, Film at 11

2016-10-22 Thread jim deleskie
It is also likely the desired use case. In my office I like to be able to login when needed when on the road, when the alarm company calls me at 2am for a false alarm so I don't have to get someone else out of bed to have them dispatched to check on the site. -jim On Sat, Oct 22, 2016 at 1:42

Re: Legislative proposal sent to my Congressman

2016-10-05 Thread jim deleskie
Can we please not get the government ( who's gov ) involved. I fully agree that it will not only not help, but will make some things worse. This is why we can't have nice things. On Tuesday, October 4, 2016, Anne Mitchell wrote: > (Interesting and inarguably

Re: Krebs on Security booted off Akamai network after DDoS attack proves pricey

2016-09-25 Thread jim deleskie
pricey > From: jim deleskie <deles...@gmail.com> > Sorry but you are mistaken. I've worked at Sr. levels for several LARGE and > medium sized networks.  What does it cost and what do we make doing it, > over rules what is "good for the internet" every time it came

Re: Krebs on Security booted off Akamai network after DDoS attack proves pricey

2016-09-25 Thread jim deleskie
Sorry but you are mistaken. I've worked at Sr. levels for several LARGE and medium sized networks. What does it cost and what do we make doing it, over rules what is "good for the internet" every time it came up. On Sun, Sep 25, 2016 at 2:27 PM, Ca By wrote: > On Sunday,

Re: Krebs on Security booted off Akamai network after DDoS attack proves pricey

2016-09-23 Thread jim deleskie
Not at all. I refered to AUP's as a way people remove you from a service when you use more of it then you are paying for. On Fri, Sep 23, 2016 at 3:58 PM, Marcin Cieslak <sa...@saper.info> wrote: > On Fri, 23 Sep 2016, jim deleskie wrote: > > > They were hosting him for free,

Re: Krebs on Security booted off Akamai network after DDoS attack proves pricey

2016-09-23 Thread jim deleskie
They were hosting him for free, and like insurance, I can assure you if you are consistently using a service, and not covering the costs of that service you won't be a client for long. This is the basis for AUP/client contracts and have been going back to the days when we all offered only dialup

Re: "Defensive" BGP hijacking?

2016-09-13 Thread jim deleskie
Redirecting someone's traffic, with out there permission or a court order, by a court in your jurisdiction, not a lot different then the "bad guys" themselves. On Sun, Sep 11, 2016 at 5:54 PM, Hugo Slabbert wrote: > Hopefully this is operational enough, though obviously

Re: NFV Solution Evaluation Methodology

2016-08-03 Thread jim deleskie
I struggled with this whole SDN/NVF/insert marketing term for a while at first, until I sat down and actually though about. When I strip away all the foo, what I'm left with is breaking things down to pieces and and putting logo blocks together in a way that best suits what I'm doing. It is

Re: cloudflare hosting a ddos service?

2016-07-26 Thread jim deleskie
Back in the day didn't we refer to such hosting as bulletproof hosting? On Tue, Jul 26, 2016 at 11:17 PM, Phil Rosenthal <p...@isprime.com> wrote: > Plus, it’s good for business! > > -Phil > > > On Jul 26, 2016, at 10:14 PM, jim deleskie <deles...@gmail.com> wrote:

Re: cloudflare hosting a ddos service?

2016-07-26 Thread jim deleskie
sigh... On Tue, Jul 26, 2016 at 10:55 PM, Patrick W. Gilmore wrote: > CloudFlare will claim they are not hosting the problem. They are just > hosting the web page that lets you pay for or points at or otherwise > directs you to the problem. > > The actual source of packets is

Re: cross connects and their pound of flesh

2016-06-19 Thread jim deleskie
I don't buy this. They sold you one cable before, they sell you cable now. Little difference then we moved customers from a T1 to T3 back in the 90's. If Colo's can't understand more then 20+ yrs of evolution its hardly right to blame it on the market. -jim Mimir Networks

Re: Netflix VPN detection - actual engineer needed

2016-06-05 Thread jim deleskie
Damian, I HIGHLY doubt regular folks are running into issues with this, I suspect its not even geeks in general having issues, I suspect 80% plus of those having issues spend most of their time complaining about something related to v6 and the rest of the geeks not loving them/it enough. -jim On

Re: Netflix VPN detection - actual engineer needed

2016-06-03 Thread jim deleskie
I don't suspect many folks that are outside of this list would likely have any idea how to set up a v6 tunnel. Those of us on the list, likely have a much greater ability to influence v6 adoption or not via day job deployments then Netflix supporting v6 tunnels or not. On Fri, Jun 3, 2016 at

Re: BGP FlowSpec

2016-05-02 Thread jim deleskie
I was going to avoid this thread because I've never been a huge fan of Flowspec for my own reasons. However having work on /been responsible for several "Tier 1 and 2" networks and DDoS mitigation services over the last 20 years, I can say I, nor any of my peers ( in any sense of that word) that

Re: Cogent <=> Google Peering issue

2016-02-17 Thread jim deleskie
They haven't been since at least the mid 90's :) On Wed, Feb 17, 2016 at 12:50 PM, Nick Hilliard wrote: > Todd Underwood wrote: > > Can you scope "issue" with any facts or data? > > are facts or data strictly necessary on the nanog mailing list? > > Nick > > > T > > On Feb 17,

Re: The IPv6 Travesty that is Cogent's refusal to peer Hurricane Electric - and how to solve it

2016-01-22 Thread jim deleskie
Was part of my first peering spat, probably 95/96‎ since then many more, couple even big enough they made nanog/ industry news, end of day they are all the same. If you need to reach every where have more then one provider, it's good practice anyway, a single cust or even a bunch of cust are NOT

Re: Ear protection

2015-09-23 Thread jim deleskie
Maybe I've always listened to my music to loud and spend the bulk of time via ssh, but I've never felt a need for hearing protection in a DC, is this generally an issue for people? On Wed, Sep 23, 2015 at 8:08 AM, Alex Rubenstein wrote: > Why not just build a Datacenter that

Re: NetFlow - path from Routers to Collector

2015-09-02 Thread jim deleskie
Adding VRFs/VLAN's/anything else to separate the traffic to reduce fate sharing is only adding complexity that will likely result in operator errors. While many of us have clue, even when we don't agree on the solutions, there are many more out there typing at routers at 2am, when even the

Re: NetFlow - path from Routers to Collector

2015-09-01 Thread jim deleskie
I've not read every reply, but let me add my voice as some who has worked on and ran SEVERAL large networks, in no case in the last long number of years have I had access to an OOB network that was sized to carry anything in large volume, and in fact like many others replied on a robust number of

Re: net neutrality peering dispute between CenturyTel/Qwest and Cogent in Dallas

2015-08-15 Thread jim deleskie
Tinka mark.ti...@seacom.mu wrote: On 15/Aug/15 19:32, jim deleskie wrote: In my 20+ yrs now of playing this game, everyone has had a turn thinking their content/eyeballs are special and should get free peering. That's why those tired of playing the game build their own networks to take out

Re: net neutrality peering dispute between CenturyTel/Qwest and Cogent in Dallas

2015-08-15 Thread jim deleskie
In my 20+ yrs now of playing this game, everyone has had a turn thinking their content/eyeballs are special and should get free peering. On Sat, Aug 15, 2015 at 1:59 PM, Mike Hammett na...@ics-il.net wrote: Arrogance is the only reason I can think of why the incumbents think that way. I'd be

Re: DDOS Simulation

2015-07-28 Thread jim deleskie
If anyone offers to test your DDoS devices across a network that you do not 100% own, you are risking legal issues. If they offer to test it across your own network, make sure you have in writing from you upper management that they understand the risk and approve it. If you choose to do it

Re: ARIN just subdivided their last /17, /18, /19, /20, /21 and /22. Down to only /23s and /24s now. : ipv6

2015-06-27 Thread jim deleskie
I'd give it another 20 yrs of v4, v6 addressing and all those letters are to hard for us old folk, we'll find ways to make it make it work :) On Sat, Jun 27, 2015 at 11:54 AM, Mikael Abrahamsson swm...@swm.pp.se wrote: On Sat, 27 Jun 2015, Rafael Possamai wrote: How long do you think it will

Re: World's Fastest Internet™ in Canadaland

2015-06-26 Thread jim deleskie
Its mostly marketing, a number of years ago I worked for a cable co, we knew if we increased BW X we'd see a Y speed increase in usage. We also has done the math on several future generations of upgrades, so we'd know if phone company increases to A we'd move to B. I know the guy that did the

Re: Open letter to Level3 concerning the global routing issues on June 12th

2015-06-12 Thread jim deleskie
People from Big telcom should never reply to mailing lists from work addresses unless specifically allowed, which I suspect TATA doesn't either, based on some direct, buy old knowledge :) Filtering has been a community issue since my days @ MCI being AS3561, often discussed not often enough acted

Re: Open letter to Level3 concerning the global routing issues on June 12th

2015-06-12 Thread jim deleskie
=459 :-) On Fri, Jun 12, 2015 at 11:53 AM, jim deleskie deles...@gmail.com wrote: People from Big telcom should never reply to mailing lists from work addresses unless specifically allowed, which I suspect TATA doesn't either, based on some direct, buy old knowledge :) indeed, people from

Re: eBay is looking for network heavies...

2015-06-11 Thread jim deleskie
There is a good reason there aren't LOTS of good neteng in the 30-35 or under 30 range with lots of experience. Its call the hell we went though for a while after 2000 working in this industry. Many of us lost jobs and couldn't find new ones. I know talented folks that had to go to delivering

Re: eBay is looking for network heavies...

2015-06-06 Thread jim deleskie
I remember you asking me who Jon was :) I have since added to my list of interview questions... sad but the number of people with clue is declining not increasing. On Sat, Jun 6, 2015 at 3:13 AM, Joe Hamelin j...@nethead.com wrote: Back in 2000 at Amazon, HR somehow decided to have me do the

Re: eBay is looking for network heavies...

2015-06-05 Thread jim deleskie
Based on the number of certified people I've interviewed over the last 20yr, my default view lines up with Jared's 100% On Fri, Jun 5, 2015 at 10:38 PM, Mike Hale eyeronic.des...@gmail.com wrote: We need a pool on what percentage of readers just googled traceroute. On Jun 5, 2015 6:28 PM,

Re: [SECURITY] Application layer attacks/DDoS attacks

2015-05-25 Thread jim deleskie
on the trusted networks only will make all interested ISPs be more trusted Ramy On Mon, May 25, 2015 at 5:01 AM, Christopher Morrow morrowc.li...@gmail.com wrote: On Sat, May 23, 2015 at 9:12 PM, jim deleskie deles...@gmail.com wrote: However, the trusted network

Re: [SECURITY] Application layer attacks/DDoS attacks

2015-05-23 Thread jim deleskie
While I don't think any ISP wants DDoS to make $$, I do based on experience believe that business cases have to be made for everything. With the prices pay for BW in most of the world now, ( or the last number of years) its going to be VERY hard to get anyone to allocated time/$$ or energy to do

Re: [SECURITY] Application layer attacks/DDoS attacks

2015-05-23 Thread jim deleskie
To many pieces to answer on a weekend on NANOG, but those of us that work in the DDoS space the last number of years have seen huge growth in the application layer attacks. This does not mean a decrease in volumetric attack, just that now you have to worry about both and lots of each. FW's while

Re: Cisco/Level3 takedown

2015-04-09 Thread jim deleskie
Just to add to the noise I think batman wears a black mask/helmet, but I've never considered it a mask. I didn't look at the details on this, but did L3 sink the routes at their border or did they expressly announce the route to sink it? -jim On Thu, Apr 9, 2015 at 3:35 PM, Randy Bush

Re: Large Ontario DC busted for hosting petabytes of child abuse material

2015-03-02 Thread jim deleskie
Canadian and US laws are similar. But I'll leave it up to the lawyers to figure it all out, happily I'm no where near this, but it being a small industry here, I suspect I have friends that are dealing with some crap right now On Mon, Mar 2, 2015 at 2:03 PM, Mike A mi...@mikea.ath.cx wrote:

Re: Checkpoint IPS

2015-02-05 Thread jim deleskie
mh, you know that forcing traffic to be symmetrical is evil, and while backbone traffic and inspection don't play nice, there are very legit reasons why, in many cases edge traffic must be open for inspection. I'm on my way to the office, feel free to ping me if you want to discuss. Or maybe I

Re: Facebook down?

2014-09-03 Thread jim deleskie
From East coast of Canada down as well. On Wed, Sep 3, 2014 at 4:48 PM, Warren Bailey wbai...@satelliteintelligencegroup.com wrote: I¹m getting a ton done right now too.. Hasn¹t been working since my first attempt about 20 minutes ago. On 9/3/14, 12:45 PM, Marshall Eubanks

Re: [OPINION] Best place in the US for NetAdmins

2014-07-26 Thread jim deleskie
Rich, In principal I agree, and I've said this many times, for years I've telecommuted myself, mostly effectively. I'd work much longer hours, but not always worked as efficiently during all of those hours. When I started my own company, with $$ be in short supply like all start ups I I

Re: Verizon Public Policy on Netflix

2014-07-13 Thread jim deleskie
So it sounds like your customers want to use the service being sold, but you can't afford to service them due to the pricing they are being charged...Sounds like you need to raise prices. While I haven't worked for a rural wireless ISP, I have work for wired ISP's in the days of modems, Large

Re: Canada and IPv6 (was: Ars Technica on IPv4 exhaustion)

2014-06-19 Thread jim deleskie
Those all sounds like legit business questions. -jim On Thu, Jun 19, 2014 at 2:45 PM, William F. Maton Sotomayor wma...@ottix.net wrote: On Wed, 18 Jun 2014, Sadiq Saif wrote: On 6/18/2014 14:25, Lee Howard wrote: Canada is way behind, just 0.4% deployment. Any Canadian ISP folk in

Re: [ PRIVACY Forum ] Critical crypto bug leaves Linux, hundreds of apps open to eavesdropping

2014-03-05 Thread jim deleskie
Doing some serious adjusting of my tinfoil today over his :) -jim On Wed, Mar 5, 2014 at 5:03 PM, Jay Ashworth j...@baylink.com wrote: - Original Message - From: Leo Bicknell bickn...@ufp.org On Mar 4, 2014, at 9:07 PM, Jay Ashworth j...@baylink.com wrote: Is this the *same*

Re: Hackers hijack 300, 000-plus wireless routers, make malicious changes | Ars Technica

2014-03-04 Thread jim deleskie
Why want to swing such a big hammer. Even blocking those 2 IP's will isolate your users, and fill your support queue's. Set up a DNS server locally to reply to those IP's Your customers stay up and running and blissfully unaware. Log the IP's hitting your DNS servers on those IP and have your

Re: NSA able to compromise Cisco, Juniper, Huawei switches

2013-12-30 Thread jim deleskie
There are many ways a backdoor could be used in a properly secured system. To think otherwise is a huge mistake. I can think of several ways, if tasked and given the resources of a large gov't that I would attack this problem. To assume that those tasked and focused only this type of solution

Re: The Making of a Router

2013-12-26 Thread jim deleskie
I've recently pushed a large BSD box to a load of over 300, for more then an hour, while under test, some things slowed a little, but she kept on working! -jim On Thu, Dec 26, 2013 at 1:59 PM, Shawn Wilson ag4ve...@gmail.com wrote: Totally agree that a routing box should be standalone for

Re: Internet Surveillance and Boomerang Routing: A Call for Canadian Network Sovereignty

2013-09-07 Thread jim deleskie
Paul, I agree this is a problem, but its been a problem since at least 1994 ( my first exposure ) and I suspect longer, the issue is east we capacity in Canada is very $$, pushing traffic from Toronto east to points south to get it to Vancouver is much more cost effective. -jim On Sat, Sep

Re: [Paper] B4: Experience with a Globally-Deployed Software Defined

2013-08-17 Thread jim deleskie
At iMCI (pre-Worldcom) we had scripts that would build all our ATM VC's for a 400node mesh, would take all night to run :) -jim On Sat, Aug 17, 2013 at 4:32 PM, Avi Freedman freed...@freedman.net wrote: No, people never use *flow controllers* for anything. People have been doing SDN

Re: Friday Hosing

2013-07-14 Thread jim deleskie
I could support any of these services myself, and have guys that work me that can as well, but none of these are my core business, and my investors REALLY prefer me focusing on my core business, I suspect most of us have shareholders, investors, owners that feel the same way. I struggled with

Re: /25's prefixes announced into global routing table?

2013-06-24 Thread jim deleskie
I'm not going to even ask or look at who is accepting /26's -jim On Mon, Jun 24, 2013 at 2:29 PM, Paul Rolland r...@witbe.net wrote: Hello, On Fri, 21 Jun 2013 13:56:02 -0600 Michael McConnell mich...@winkstreaming.com wrote: As the IPv4 space get smaller and smaller, does anyone think

Re: net neutrality and peering wars continue

2013-06-22 Thread jim deleskie
Botnets to help with peering ratio's could be a new business model? :) On Sat, Jun 22, 2013 at 1:00 PM, Christopher Morrow morrowc.li...@gmail.com wrote: On Sat, Jun 22, 2013 at 9:19 AM, Neil Harris n...@tonal.clara.co.uk wrote: On 22/06/13 13:08, Matthew Petach wrote: That's easily

Re: PRISM: NSA/FBI Internet data mining project

2013-06-06 Thread jim deleskie
Knowing its going on, knowing nothing online is secret != OK with it, it mealy understand the way things are. -jim On Thu, Jun 6, 2013 at 9:16 PM, goe...@anime.net wrote: On Thu, 6 Jun 2013, Matthew Petach wrote: Much less stress in life that way. ^_^ complacency is always the easiest

Re: What hath god wrought?

2013-05-21 Thread jim deleskie
Maybe my tinfoil isn't on tight enough, or maybe I give to much credit to a gov't, or perhaps I'm just feeding the trolls, but I have a very hard time believing that DHS, launched a DoS from their own machines. -jim On Tue, May 21, 2013 at 12:18 PM, David Conrad d...@virtualized.org wrote:

Re: Google Public DNS having issues.

2013-02-07 Thread jim deleskie
reachable from eastern canada On Thu, Feb 7, 2013 at 1:41 PM, Blair Trosper blair.tros...@gmail.com wrote: ...seems to be having trouble as reported by Systems Watch: https://twitter.com/systemswatch/status/299572918936039424 Indeed, it's inaccessible to me from Minneapolis, Tampa, SJC, and

Re: NSA and the exchanges

2012-10-31 Thread jim deleskie
If your talking the NSA I doubt anyone would tell you. That being said: it would mean the US gov't breaking Canadian law I suspect. Now in Canada it is quite possible that the Canadian Fed gov't monitors traffic but I would also say no one would tell you because telling you would also be in

Re: max-prefix and platform tcam limits: they are things

2012-10-05 Thread jim deleskie
I know that I should know better then comment on networks others then my own, ( and I know to never comment on my own publicly :) ) But here goes, 210x the size of normal really? 210% I'd have a hard time believing. Did anyone else anywhere see a route leak equal to larger then the entire

Re: max-prefix and platform tcam limits: they are things

2012-10-05 Thread jim deleskie
2012 21:05:07 -0300, jim deleskie said: But here goes, 210x the size of normal really? 210% I'd have a hard time believing. Did anyone else anywhere see a route leak equal to larger then the entire Internet that day, anywhere else that could of caused this? If the device was only expecting

Re: /. Terabit Ethernet is Dead, for Now

2012-09-27 Thread jim deleskie
That problem IMO will only be worse with a 4x speed multiplier over 100G what premium will anyone be willing to spend to have a single 400G pipe over 4 bonded 100G pipes? -jim On Thu, Sep 27, 2012 at 10:07 AM, Jared Mauch ja...@puck.nether.net wrote: On Sep 27, 2012, at 8:58 AM, Darius

Re: job screening question

2012-07-06 Thread jim deleskie
Pascal's wager.. almost :) On Fri, Jul 6, 2012 at 7:25 PM, valdis.kletni...@vt.edu wrote: On Fri, 06 Jul 2012 15:07:51 -0700, goe...@anime.net said: This is what baffles me. People keep putting stuff on their resume that they simply don't know anything about. TCP/IP expert, yet they don't

Re: very confusing.

2012-06-13 Thread jim deleskie
Accidental, he didn't mean to get caught :) On Wed, Jun 13, 2012 at 7:10 PM, Richard Golodner rgolod...@infratection.com wrote: On Thu, 2012-06-14 at 07:05 +0900, ACCIDENTAL email How can my company get six accidental emails? Not even an idiot sends six emails by mistake. Spammertechnology

Re: Penetration Test Assistance

2012-06-05 Thread jim deleskie
A complete diagram makes their life easier, may make for a more complete test, but they are working for you, so if you don't have it, you don't have. I'm not a big fan of having a single diagram with everything laid out anyway, but I'm from the old shcool. -jim On Tue, Jun 5, 2012 at 11:52 AM,

Re: Industry practice for BGP costs - one time or fixed/monthly?

2012-05-25 Thread jim deleskie
IMHO the only reason(s) would be to discourage people from asking for it, or as a $$ grab. -jim On Fri, May 25, 2012 at 1:01 PM, Anurag Bhatia m...@anuragbhatia.com wrote: Hello everyone I have been aggressively looking for deals in servers in Europe for anycasting. One thing which

  1   2   >