Re: Announcing Peering-LAN prefixes to customers

2019-01-16 Thread Randy Bush
> Running a few exchange points in Africa since 2002, the news was that > the exchange point LAN should not be visible anywhere on the Internet. > It would be interesting to know that this wasn't the case in other parts > of the world. slide 8 of http://archive.psg.com/970210.nanog.pdf

Re: Service Provider NetFlow Collectors

2019-01-16 Thread jim deleskie
Erik, Feel free to ping me, I own Mimir Networks, we have a full-service flow collection/DDoS detection and mitigation system that I'd love to show you. We built it having been a long time user of other commercial and open source tools, for very large deployments. Would be happy to give you a

Re: Announcing Peering-LAN prefixes to customers

2019-01-16 Thread John Kristoff
On Wed, 16 Jan 2019 12:20:39 + Randy Bush wrote: > slide 8 of http://archive.psg.com/970210.nanog.pdf In Randy's presentation there is the suggestion to develop an IX filter list. Nearly 20 years later that actually happened. This wasn't a popular

Re: Announcing Peering-LAN prefixes to customers

2019-01-16 Thread Job Snijders
On Wed, Jan 16, 2019 at 15:24 Randy Bush wrote: > > Do you use AS0 as origin on the RPKI objects for said exchange point > > LAN(s) to prevent route propagation? > > but as0 does not exactly do that as it can be overridden by a different > roa for the same prefix. as0 is pretty useless. Why

Re: ASNs decimation in ZW this morning

2019-01-16 Thread Colin Johnston
> On 15 Jan 2019, at 17:03, C. A. Fillekes wrote: > > > Whole countries falling off the net? BUT TEH TOP POSTINGS!!! > > I'm a little frustrated with the very existence of that thread. > > Trying to constructively change the topic to something more interesting lol. > > I guess the

Re: Announcing Peering-LAN prefixes to customers

2019-01-16 Thread Randy Bush
> Do you use AS0 as origin on the RPKI objects for said exchange point > LAN(s) to prevent route propagation? but as0 does not exactly do that as it can be overridden by a different roa for the same prefix. as0 is pretty useless. randy

Re: Announcing Peering-LAN prefixes to customers

2019-01-16 Thread Mark Tinka
On 16/Jan/19 10:06, Job Snijders wrote: > > > I can see some use cases, but in today’s internet landscape the > practice just increases the attack surface, so it’s not the Best > Current Practise. I would say... Mark.

Re: Announcing Peering-LAN prefixes to customers

2019-01-16 Thread Job Snijders
On Wed, Jan 16, 2019 at 14:49 Mark Tinka wrote: > On 16/Jan/19 11:38, Christoffer Hansen wrote: > > > Do you use AS0 as origin on the RPKI objects for said exchange point > > LAN(s) to prevent route propagation? > > I don't operate any exchange points anymore, but I am not aware of any > such

Re: Announcing Peering-LAN prefixes to customers

2019-01-16 Thread Mark Tinka
On 16/Jan/19 11:38, Christoffer Hansen wrote: > Do you use AS0 as origin on the RPKI objects for said exchange point > LAN(s) to prevent route propagation? I don't operate any exchange points anymore, but I am not aware of any such operation of AS0 this side of the globe. Mark.

Re: ASNs decimation in ZW this morning

2019-01-16 Thread Mark Tinka
On 16/Jan/19 15:54, Colin Johnston wrote: > > > I wonder how they block social media sites/whats up, is it null > routing on peering cores or filtering since did not see filtering in > place from ZIM<>UK last month... In Africa, the majority of connectivity happens over mobile networks. So

Call for Participation -- ICANN DNSSEC Workshop at ICANN64 Kobe, Japan

2019-01-16 Thread Jacques Latour
Call for Participation -- ICANN DNSSEC Workshop at ICANN64 Kobe, Japan The DNSSEC Deployment Initiative and the Internet Society Deploy360 Programme, in cooperation with the ICANN Security and Stability Advisory Committee (SSAC), are planning a DNSSEC Workshop during the ICANN64 meeting held

Re: Announcing Peering-LAN prefixes to customers

2019-01-16 Thread Arnold Nipper
On 16.01.2019 17:39, Christoffer Hansen wrote: > On 16/01/2019 15:55, John Kristoff wrote: >> In Randy's presentation there is the suggestion to develop an IX filter >> list. Nearly 20 years later that actually happened. >> >> >> >> This wasn't a popular

Re: Announcing Peering-LAN prefixes to customers

2019-01-16 Thread Amreesh Phokeer
On Wed, Jan 16, 2019 at 3:55 PM Job Snijders wrote: > Perhaps that is because for a while you couldn’t set AS 0 in AFRINIC ROAs > as Origin ASN. I think that’s fixed now. > You absolutely can. But not sure if anyone ever created one. -- Amreesh Phokeer

Network Speed Testing and Monitoring Platform

2019-01-16 Thread Colton Conor
As an internet service provider with many small business and residential customers, our most common tech support calls are speed related. Customers complaining on slow speeds, slowdowns, etc. We have a SNMP and ping monitoring platform today, but that mainly tells us up-time and if data is

Re: Announcing Peering-LAN prefixes to customers

2019-01-16 Thread John Kristoff
On Wed, 16 Jan 2019 16:39:32 + Christoffer Hansen wrote: > You could do the same trick. But with data fetched from PeeringDB via > the public API. Works well. I think that is essentially what the service does, but in a BGP feed and maintained for you, kind of like the bogons service. John

Re: Network Speed Testing and Monitoring Platform

2019-01-16 Thread Christoffer Hansen
On 16/01/2019 17:52, Colton Conor wrote: > We are looking for a way to remotely test customers internet connections > besides telling the customer to go to speedtest.net, or worse sending a > tech out with a laptop to do the same thing. > > What opensource and commercial options are out there?

Re: Announcing Peering-LAN prefixes to customers

2019-01-16 Thread Christoffer Hansen
On 16/01/2019 15:55, John Kristoff wrote: > In Randy's presentation there is the suggestion to develop an IX filter > list. Nearly 20 years later that actually happened. > > > > This wasn't a popular service when I left Team Cymru, but it seems to > still

Re: dyn internet intelligence

2019-01-16 Thread Mehmet Akcin
someone offline followed up with me. I am truly impressed how hard they made it to acquire such interesting service (which was easy and awesome under renesys..) On Tue, Jan 15, 2019 at 2:03 PM Mehmet Akcin wrote: > can someone from dyn reach out to me offline? > >

Re: Announcing Peering-LAN prefixes to customers

2019-01-16 Thread Job Snijders
On Wed, Jan 16, 2019 at 19:40 Christoffer Hansen wrote: > On 16/01/2019 15:55, John Kristoff wrote: > > In Randy's presentation there is the suggestion to develop an IX filter > > list. Nearly 20 years later that actually happened. > > > > > > > > This

Re: Announcing Peering-LAN prefixes to customers

2019-01-16 Thread Siyuan Miao
(Perhaps off-topic) KINX are using 192.145.251.0/24 as their Peering IPv4 space. However, I couldn't find any valid SWIP or IRR record created by IP owner Hiawatha Broadband Communications, Inc. Some ISP like Hurricane Electric will route this prefix to KINX but I'm not sure if it's authorized

Re: Announcing Peering-LAN prefixes to customers

2019-01-16 Thread Matthias Waehlisch
On Wed, 16 Jan 2019, Amreesh Phokeer wrote: > > > On Wed, Jan 16, 2019 at 3:55 PM Job Snijders wrote: > Perhaps that is because for a while you couldn’t set AS 0 in AFRINIC > ROAs as Origin ASN. I think that’s fixed now. > > > You absolutely can. But not sure if anyone ever

Re: Network Speed Testing and Monitoring Platform

2019-01-16 Thread Mike Hammett
Good luck with that if their only devices are tablets, phones, and Rokus? - Mike Hammett Intelligent Computing Solutions Midwest Internet Exchange The Brothers WISP - Original Message - From: "David Guo via NANOG" To: "Colton Conor" , "NANOG" Sent: Wednesday, January

Re: ASNs decimation in ZW this morning

2019-01-16 Thread John Von Essen
Im confused as to what exactly happened and how it was implemented. I assume the government wanted to restrict access to sites like whatsapp, facebook, twitter, etc.,. So did they tell national ISPs/Mobile (strong-arm) to simply block access to those sites, or they did they tell them to

Re: Network Speed Testing and Monitoring Platform

2019-01-16 Thread David Guo via NANOG
We ask our customers use iperf3 to test speed. Get Outlook for iOS From: NANOG on behalf of Colton Conor Sent: Thursday, January 17, 2019 00:54 To: NANOG Subject: Network Speed Testing and Monitoring Platform As an internet service

Re: Network Speed Testing and Monitoring Platform

2019-01-16 Thread J. Hellenthal via NANOG
Might be worth while to get some graphing on customers max transmission speeds over the period of three days, a week, two weeks, month to better predict what they may be seeing so you can better predict the area’s that could be effected due to whatever causes. A lot of times I find this comes

Re: Service Provider NetFlow Collectors

2019-01-16 Thread James Breeden
Jim, please send me additional information on your solution as well, we're in the market for a flow analytics solution. James W. Breeden Managing Partner [logo_transparent_background] Arenal Group: Arenal Consulting Group | Acilis Telecom | Pines Media PO Box 1063 | Smithville, TX 78957

Re: Network Speed Testing and Monitoring Platform

2019-01-16 Thread Colton Conor
Last time I setup Iperf3 it was semi difficult, and would be impossible trying to coach a soccer mom on how to setup over the phone. I am leaning towards a CPE that has speed test built in, or a low cost, sub $100 device we could ship to the customer to install. Anyone know of something like

RE: Network Speed Testing and Monitoring Platform

2019-01-16 Thread Chris Kimball
Would a raspberry pi work for this? Could 3D print a nice case with your logo for it. From: NANOG On Behalf Of Colton Conor Sent: Wednesday, January 16, 2019 2:16 PM To: David Guo Cc: NANOG Subject: Re: Network Speed Testing and Monitoring Platform Last time I setup Iperf3 it was semi

Re: Network Speed Testing and Monitoring Platform

2019-01-16 Thread Casey Russell
I don't think a raspberry pi will reliably fill a full Gig and keep it full (maybe that's not required in this scenario), but I've installed a Linux based OS with the PerfSONAR tools (including iperf) on a couple of different mini PCs in the "few hundred dollars" price range. The last one was the

RE: Network Speed Testing and Monitoring Platform

2019-01-16 Thread Cummings, Chris
Depending on the Bandwidth needed, yes, but the Pi is limited at the NIC level because it is on a shared USB 2.0 Bus. [cid:image001.jpg@01D42B24.779DE300] Chris Cummings | Network Engineer Coeur Mining, Inc.| 104 S. Michigan Ave. Suite 900 | Chicago, IL 60603 t:

Re: Network Speed Testing and Monitoring Platform

2019-01-16 Thread valdis . kletnieks
On Wed, 16 Jan 2019 19:26:41 +, Chris Kimball said: > Would a raspberry pi work for this? > > Could 3D print a nice case with your logo for it. The Pi has a bandwidth limit at 300mbits/sec due to a USB port being used. I wonder if something like the RIPE Atlas probes could be flashed with

Re: Your opinion on network analysis in the presence of uncertain events

2019-01-16 Thread Mel Beckman
MTBF can’t be used alone to predict failure probability, because product mortality follows the infamous “bathtub curve”. Products are as likely to fail early in their lives as later in their lives. MTBF as a scalar value is just an average. -mel via cell On Jan 16, 2019, at 12:43 PM,

Re: Announcing Peering-LAN prefixes to customers

2019-01-16 Thread Randy Bush
>> slide 8 of http://archive.psg.com/970210.nanog.pdf > In Randy's presentation from the credit where due department: this was not my bright idea. the presentation was from a get together of some large isp operators a few weeks prior. randy

Re: ASNs decimation in ZW this morning

2019-01-16 Thread Scott Weeks
--- col...@gt86car.org.uk wrote: From: Colin Johnston I wonder how they block social media sites/whats up, is it null routing on peering cores or filtering since did not see filtering in place from ZIM<>UK last month... - Regarding the shutdown:

RE: Your opinion on network analysis in the presence of uncertain events

2019-01-16 Thread adamv0025
My understanding was that the tool will combine historic data with the MTBF datapoints form all components involved in a given link in order to try and estimate a likelihood of a link failure. Heck I imagine if one would stream a heap load of data at a ML algorithm it might draw some very

Re: Network Speed Testing and Monitoring Platform

2019-01-16 Thread Ryan Wilkins
A Raspberry Pi uses USB 2 for Ethernet interconnection to the CPU so it most definitely will not keep even half a gig full. It’ll do a bit over 300 Mbps. Ryan Wilkins > On Jan 16, 2019, at 2:45 PM, Casey Russell wrote: > > I don't think a raspberry pi will reliably fill a full Gig and keep

Re: Network Speed Testing and Monitoring Platform

2019-01-16 Thread Blake Hudson
I investigated building a product that could reliably speedtest up to a gig and found the same thing. A raspberry Pi 3B or 3B+ can reliably test up to ~100Mbps. The 3B only has a 10/100 NIC; The 3B+, while having a gigabit NIC, tops out at ~300Mbps internally. Both models of the Pi are

Re: Network Speed Testing and Monitoring Platform

2019-01-16 Thread James R Cutler
On Jan 16, 2019, at 4:01 PM, valdis.kletni...@vt.edu wrote: > > So out of curiosity - does anybody have info on what percentage of residential > internet connections are on CPE that's been suitably de-bufferbloated? I have not read anything suggesting that de-bufferbloating has happened. It

Re: Network Speed Testing and Monitoring Platform

2019-01-16 Thread valdis . kletnieks
On Wed, 16 Jan 2019 10:52:58 -0600, Colton Conor said: > As an internet service provider with many small business and residential > customers, our most common tech support calls are speed related. Customers > complaining on slow speeds, slowdowns, etc. So out of curiosity - does anybody have info

Fiber owners

2019-01-16 Thread Mehmet Akcin
Hello I am trying to get a hold of people who have ownership rights to fiber ( location is not important ) I have few business and technical questions about monitoring, repairs, etc. Thank you Mehmet -- Mehmet +1-424-298-1903

Re: Announcing Peering-LAN prefixes to customers

2019-01-16 Thread Christoffer Hansen
On 16/01/2019 08:56, Mark Tinka wrote: > Running a few exchange points in Africa since 2002, the news was that > the exchange point LAN should not be visible anywhere on the Internet. Do you use AS0 as origin on the RPKI objects for said exchange point LAN(s) to prevent route propagation?

Re: Announcing Peering-LAN prefixes to customers

2019-01-16 Thread Job Snijders
On Wed, Jan 16, 2019 at 12:39 Christoffer Hansen wrote: > > On 16/01/2019 08:56, Mark Tinka wrote: > > Running a few exchange points in Africa since 2002, the news was that > > the exchange point LAN should not be visible anywhere on the Internet. > > Do you use AS0 as origin on the RPKI objects

Re: Announcing Peering-LAN prefixes to customers

2019-01-16 Thread Job Snijders
On Wed, Jan 16, 2019 at 10:56 Mark Tinka wrote: > On 3/Jan/19 22:08, Andy Davidson wrote: > > > There are no stupid questions! It is a good idea to not BGP announce > and perhaps also to drop traffic toward peering LAN prefixes at > customer-borders, this was already well discussed in the