Re: Quakecon: Network Operations Center tour

2015-08-03 Thread tqr2813d376cjozqap1l
3. Aug 2015 21:38 by b...@debmi.com: The WiFi jammers have an interesting MO. They don't throw up static on the frequency, that would also block their own wifi. They spoof de-authentication packets. I've been looking for a way to detect this kind of jamming because my WiFi sucks and I live

Re: Quakecon: Network Operations Center tour

2015-08-03 Thread Roland Dobbins
On 4 Aug 2015, at 4:38, Mr Bugs wrote: They don't throw up static on the frequency, that would also block their own wifi. They spoof de-authentication packets. Sure - I'm saying, I don't see this anywhere, is it possible most of this activity is on 2.4GHz and not 5GHz?

Re: Quakecon: Network Operations Center tour

2015-08-03 Thread Sam Thomas
faster about problems than any NMS, so you've got to admire the bravery of any NOC in the middle of a gaming convention floor. What Powers Quakecon | Network Operations Center Tour https://www.youtube.com/watch?v=mOv62lBdlXU

Re: Quakecon: Network Operations Center tour

2015-08-03 Thread alvin nanog
hi mr bugs :-) On 08/03/15 at 05:38pm, Mr Bugs wrote: The WiFi jammers have an interesting MO. They don't throw up static on the frequency, that would also block their own wifi. They spoof de-authentication packets. I've been looking for a way to detect this kind of jamming because my WiFi

Re: Quakecon: Network Operations Center tour

2015-08-03 Thread Mr Bugs
The WiFi jammers have an interesting MO. They don't throw up static on the frequency, that would also block their own wifi. They spoof de-authentication packets. I've been looking for a way to detect this kind of jamming because my WiFi sucks and I live next to three hotels, what you get for

Re: Quakecon: Network Operations Center tour

2015-08-03 Thread Harald F. Karlsen
On 02.08.2015 23:36, Josh Hoppes wrote: We haven't tackled IPv6 yet since it adds complexity that our primary focus doesn't significantly benefit from yet since most games just don't support it. Our current table switches don't have an RA guard, and will probably require replacement to get ones

Re: Quakecon: Network Operations Center tour

2015-08-03 Thread Ethan
I help with an event that has a pretty decent sized lan party as well. We're not just focused on the lan party, more of a rock concerts - huge arcade - panels - lan party type event. It was a few years ago that a mincraft griefing team came and attacked the network internally. At the time

Re: Quakecon: Network Operations Center tour

2015-08-03 Thread Roland Dobbins
On 3 Aug 2015, at 21:58, Ethan wrote: In the end, one of the griefers friends went and told on them, and that's how they were discovered. Pretty much how it works on the general Internet, too, it seems. ; --- Roland Dobbins rdobb...@arbor.net

Re: Quakecon: Network Operations Center tour

2015-08-03 Thread Mike Hammett
- Original Message - From: Ethan telmn...@757.org To: nanog@nanog.org Sent: Monday, August 3, 2015 9:58:35 AM Subject: Re: Quakecon: Network Operations Center tour I help with an event that has a pretty decent sized lan party as well. We're not just focused on the lan party, more of a rock

Re: Quakecon: Network Operations Center tour

2015-08-03 Thread alvin nanog
hi ethan On 08/03/15 at 10:58am, Ethan wrote: Getting bandwidth into the events is a pain. Huge venues are meant for large corporate events not lower budget cons and festivals. Venue pricing I believe is 750-1500$ per megabit. 100 megabit = $75,000 for the weekend. One year I rememeber

Re: Quakecon: Network Operations Center tour

2015-08-03 Thread mikea
On Mon, Aug 03, 2015 at 01:52:17PM -0700, alvin nanog wrote: hi ethan On 08/03/15 at 10:58am, Ethan wrote: Getting bandwidth into the events is a pain. Huge venues are meant for large corporate events not lower budget cons and festivals. Venue pricing I believe is 750-1500$ per

Re: Quakecon: Network Operations Center tour

2015-08-03 Thread Roland Dobbins
On 4 Aug 2015, at 4:03, mikea wrote: In the US, the FCC has ruled that wifi jammers violate one or more parts of the FCC Rules and Regs. I travel quite a bit worldwide, and I've never run into this. I run my portable AP on 5GHz, FWIW. --- Roland Dobbins

Re: Quakecon: Network Operations Center tour

2015-08-02 Thread Roland Dobbins
On 3 Aug 2015, at 8:47, Christopher Morrow wrote: oh .. maybe they really are all gone :) People still run things long after EoS, heh. A 6500 *with a Sup2T* is OK at the edge, for now - it has decent ASICs which support critical edge features, unlike its predecessors. Myself, I'd much

Re: Quakecon: Network Operations Center tour

2015-08-02 Thread Sean Donelan
On Sun, 2 Aug 2015, Niels Bakker wrote: Also, 2 Gbps for 4,400 people? Pretty lackluster compared to European events. 30C3 had 100 Gbps to the conference building. And no NAT: every host got real IP addresses (IPv4 + IPv6). Quakecon is essentially a giant LAN party. Bring Your Own

Re: Quakecon: Network Operations Center tour

2015-08-02 Thread Nikolay Shopik
Steam moved to http streaming few years ago for exact that reason On 2 авг. 2015 г., at 4:51, Steven Miano mian...@gmail.com wrote: historically steam/game downloads are not cahce'able

Re: Quakecon: Network Operations Center tour

2015-08-02 Thread Niels Bakker
* mian...@gmail.com (Steven Miano) [Sun 02 Aug 2015, 03:52 CEST]: It would have been more interesting to see: -- a network weather map -- the ELK implementation -- actual cache statistics (historically steam/game downloads are not cahce'able) Not quite true according to

Re: Quakecon: Network Operations Center tour

2015-08-02 Thread Randy Bush
Also, 2 Gbps for 4,400 people? Pretty lackluster compared to European events. 30C3 had 100 Gbps to the conference building. And no NAT: every host got real IP addresses (IPv4 + IPv6). ietf, 1k people, easily fits in 10g, but tries to have two for redundancy. also no nat, no firewall, and

Re: Quakecon: Network Operations Center tour

2015-08-02 Thread Dave Pooser
any security protections so competitors can't kill off their competition?) It would be interesting to learn whether they saw any DDoS attacks or cheating attempts during competitive play, or even casual non-competitive play amongst attendees. I wonder if that would be a reason for the

Re: Quakecon: Network Operations Center tour

2015-08-02 Thread Mike Hammett
rdobb...@arbor.net To: nanog list nanog@nanog.org Sent: Sunday, August 2, 2015 10:50:05 AM Subject: Re: Quakecon: Network Operations Center tour On 2 Aug 2015, at 22:44, Dave Pooser wrote: I wonder if that would be a reason for the relatively anemic 1Gb Internet pipe-- making sure

Re: Quakecon: Network Operations Center tour

2015-08-02 Thread Roland Dobbins
On 2 Aug 2015, at 22:56, Mike Hammett wrote: It's completely reasonable when the world at large is only secondary to the local, on-net operations. It has nothing to do with DDoS. --- Roland Dobbins rdobb...@arbor.net

Re: Quakecon: Network Operations Center tour

2015-08-02 Thread Roland Dobbins
On 2 Aug 2015, at 22:44, Dave Pooser wrote: I wonder if that would be a reason for the relatively anemic 1Gb Internet pipe-- making sure that a DDoS couldn't push enough packets through to inconvenience the LAN party. While increasing bandwidth is not a viable DDoS defense tactic,

Re: Quakecon: Network Operations Center tour

2015-08-02 Thread Mike Hammett
. - Mike Hammett Intelligent Computing Solutions http://www.ics-il.com - Original Message - From: Roland Dobbins rdobb...@arbor.net To: nanog list nanog@nanog.org Sent: Sunday, August 2, 2015 11:23:18 AM Subject: Re: Quakecon: Network Operations Center tour On 2 Aug 2015

Re: Quakecon: Network Operations Center tour

2015-08-02 Thread Alistair Mackenzie
While increasing bandwidth to the endpoint isn't viable wouldn't increasing the edge bandwidth out to the ISP be a start in the right direction? I would assume this would a start to the problem if your attacks were volumetric. Once the bandwidth is there you can look at mitigation before it

Re: Quakecon: Network Operations Center tour

2015-08-02 Thread Roland Dobbins
On 2 Aug 2015, at 22:56, Alistair Mackenzie wrote: I would assume this would a start to the problem if your attacks were volumetric. In a world of 430gb/sec reflection/amplification DDoS attacks, not really. ; Just increasing bandwidth has never been a viable DDoS defense tactic, due to

Re: Quakecon: Network Operations Center tour

2015-08-02 Thread Roland Dobbins
On 2 Aug 2015, at 23:49, Mike Hammett wrote: If the core of the mission is local LAN play and your Internet connection fills up You're assuming the DDoS attack originates from outside the local network(s). I was curious as to whether they'd seen any *internal* DDoS attacks. And again,

Re: Quakecon: Network Operations Center tour

2015-08-02 Thread Laurent Dumont
I recently wrapped up a 1300 players with gigabit connections where we had a single 5gig link. We never saturated the link and peaked at 3.92Gbps for a new minutes. Bandwidth usage peaks on the first day and settles down after that (the event was during an entire weekend starting on friday).

Re: Quakecon: Network Operations Center tour

2015-08-02 Thread Mikael Abrahamsson
On Sun, 2 Aug 2015, Dave Pooser wrote: I wonder if that would be a reason for the relatively anemic 1Gb Internet pipe-- making sure that a DDoS couldn't push enough packets through to inconvenience the LAN party. I was involved in delivering 1GigE to Dreamhack in 2001 which at the time (if

Re: Quakecon: Network Operations Center tour

2015-08-02 Thread Harald F. Karlsen
On 01.08.2015 21:27, Sean Donelan wrote: What Powers Quakecon | Network Operations Center Tour https://www.youtube.com/watch?v=mOv62lBdlXU Cool stuff! For reference here are the blog for the tech-crew at the worlds second largest LAN-party, The Gathering: http://technical.gathering.org

Re: Quakecon: Network Operations Center tour

2015-08-02 Thread Christopher Morrow
On Sun, Aug 2, 2015 at 7:56 AM, Niels Bakker niels=na...@bakker.net wrote: I guess a tale of punching 300-odd patchpanels is not that captivating to everybody out there. I find this hard to believe. :) I was hoping for more 'how the network is built' (flat? segmented? any security protections

Re: Quakecon: Network Operations Center tour

2015-08-02 Thread Roland Dobbins
On 2 Aug 2015, at 22:32, Christopher Morrow wrote: any security protections so competitors can't kill off their competition?) It would be interesting to learn whether they saw any DDoS attacks or cheating attempts during competitive play, or even casual non-competitive play amongst

Re: Quakecon: Network Operations Center tour

2015-08-02 Thread Randy Bush
josh, thanks for the more technical scoop. now i get it a bit better. We also re-designed the LAN back in 2011 to break up the giant single broadcast domain down to a subnet per table switch. so it is heavily routed using L3 on the core 'switches'? makes a lot of sense. randy

Re: Quakecon: Network Operations Center tour

2015-08-02 Thread Randy Bush
so it is heavily routed using L3 on the core 'switches'? makes a lot of sense. Lots of switches will happily forward layer 3 packets. and a lot of so-called switches will happily *route* at L3, which is i think the point. in this case, heavily subnetting a LAN, it makes a lot of sense.

Re: Quakecon: Network Operations Center tour

2015-08-02 Thread Nick Hilliard
On 02/08/2015 23:30, Randy Bush wrote: otoh, i did not believe in the fad of using 65xxs at the bgp global edge. while it was temporarily cheap, two years later not a lot of folk had that many boats which needed anchoring. A juniper EX9200 is a switch and a cisco sup2t box is a router. The

Re: Quakecon: Network Operations Center tour

2015-08-02 Thread Nick Hilliard
On 02/08/2015 22:59, Randy Bush wrote: so it is heavily routed using L3 on the core 'switches'? makes a lot of sense. Lots of switches will happily forward layer 3 packets. Nick

Re: Quakecon: Network Operations Center tour

2015-08-02 Thread Josh Hoppes
On Sun, Aug 2, 2015 at 4:59 PM, Randy Bush ra...@psg.com wrote: josh, thanks for the more technical scoop. now i get it a bit better. We also re-designed the LAN back in 2011 to break up the giant single broadcast domain down to a subnet per table switch. so it is heavily routed using L3

Re: Quakecon: Network Operations Center tour

2015-08-02 Thread Christopher Morrow
On Sun, Aug 2, 2015 at 9:46 PM, Christopher Morrow morrowc.li...@gmail.com wrote: On Sun, Aug 2, 2015 at 6:57 PM, Nick Hilliard n...@foobar.org wrote: As anchors, I would be hard put to make a choice between a 6500 and a 7500, which was a fine router in its day but alas only had a useful

Re: Quakecon: Network Operations Center tour

2015-08-02 Thread Christopher Morrow
On Sun, Aug 2, 2015 at 6:57 PM, Nick Hilliard n...@foobar.org wrote: As anchors, I would be hard put to make a choice between a 6500 and a 7500, which was a fine router in its day but alas only had a useful lifetime of a small number of years. Obsolescence happens. isn't some of L3's edge

Re: Quakecon: Network Operations Center tour

2015-08-01 Thread Christopher Morrow
. Many NANOG geeks might be interested in this video tour of the Quakecon NOC tour. As any ISP operator knows, gamers complain faster about problems than any NMS, so you've got to admire the bravery of any NOC in the middle of a gaming convention floor. What Powers Quakecon | Network Operations

Re: Quakecon: Network Operations Center tour

2015-08-01 Thread Steven Miano
| Network Operations Center Tour https://www.youtube.com/watch?v=mOv62lBdlXU -- Miano, Steven M. http://stevenmiano.com

Quakecon: Network Operations Center tour

2015-08-01 Thread Sean Donelan
Powers Quakecon | Network Operations Center Tour https://www.youtube.com/watch?v=mOv62lBdlXU