Re: Anycast but for egress

2021-07-28 Thread Glenn McGurrin via NANOG
I'd had a similar thought/question, though keeping the geo diversity, you manage the crawlers, and are making contact individually with these sites from what you have stated (and so don't need a one size fit's all list for public posting), so why not have a restricted subset of the crawlers

Re: Anycast but for egress

2021-07-28 Thread Mark Tinka
On 7/28/21 17:09, Bill Woodcock wrote: I was about to say something about us having equal success over 105 or so countries, when I came to the realization that inviting quantitative comparisons of manhood with Mark is the very definition of folly. :-) Well, we are nowhere close to the

russian prefixes

2021-07-28 Thread Randy Bush
https://www.businessinsider.com/russia-cuts-self-off-from-global-internet-tests-defenses-rbc-2021-7 says "Russia disconnected itself from the rest of the internet, a test of its new defense from cyber warfare, report says" did this show up in bgp? e.g. rv/ris? randy

Industry Tools + As Heard on Twitter

2021-07-28 Thread Nanog News
*Tools + Resources for Industry Pros: IPv6 Website Validator*NANOG loves sharing valuable tools and resources for our community of students and new + seasoned professionals. *IPv6-test.com is a free service that checks your IPv6 and IPv4 connectivity and speed.* Diagnose connection problems,

Re: russian prefixes

2021-07-28 Thread Baldur Norddahl
On Wed, Jul 28, 2021 at 11:29 PM Randy Bush wrote: > > https://www.businessinsider.com/russia-cuts-self-off-from-global-internet-tests-defenses-rbc-2021-7 > says "Russia disconnected itself from the rest of the internet, a test > of its new defense from cyber warfare, report says" > Would that

Re: Anycast but for egress

2021-07-28 Thread Baldur Norddahl
> > > On Jul 27, 2021, at 17:20, Vimal wrote: > > Yes, this makes sense as the destination can be anywhere around the > world, and that routing is asymmetric as others mentioned. However, if the > destination service is "close" (in the routing metric sense) to the > initiating host, anycast

Re: Anycast but for egress

2021-07-28 Thread Baldur Norddahl
Here is what I think would happen if you were to try this setup. Let's assume you deployed in eu-west-2 (London) and eu-central-1 (Frankfurt). You would find that you could successfully connect to a number of networks but also that some of them would work from the "wrong" site. Eg. you would have

Re: Anycast but for egress

2021-07-28 Thread Mark Tinka
On 7/28/21 01:16, Daniel Corbe wrote: This is interesting... I wonder whether Anycast will still have some failure modes and break TCP connections if routing (configuration) were to change? I checked the PDF linked by Bill Woodcock... while the methodology is the same from 20y ago, would

Re: Anycast but for egress

2021-07-28 Thread Randy Bush
we, verio, did anycast tcp streaming (hour long) of the tony awards in about '96. solid. randy --- ra...@psg.com `gpg --locate-external-keys --auto-key-locate wkd ra...@psg.com` signatures are back, thanks to dmarc header butchery

Re: Anycast but for egress

2021-07-28 Thread Bill Woodcock
> On Jul 27, 2021, at 6:15 PM, Vimal wrote: > > AWS Global Accelerator gives anycast IPs that's good for ingress, but my > original question was about having predictable egress IPs. > > It looks like having a few EIPs/a contiguous network block is the way to go. Yes. Predictable and

Call for Participation -- ICANN DNSSEC and Security Workshop for ICANN72 Virtual Annual General Meeting

2021-07-28 Thread Jacques Latour
Hello NANOG! This is the CfP for our next DNSSEC & Security workshop @ ICANN72. Jacques Call for Participation -- ICANN DNSSEC and Security Workshop for ICANN72 Virtual Annual General Meeting In cooperation with the ICANN Security and Stability Advisory Committee (SSAC), we are planning a

Re: Anycast but for egress

2021-07-28 Thread Vimal
Hi all, great replies. :) Let me clarify my initial question, and then respond one by one: My intention is to run a web-crawling service on a public cloud. This service is geographically distributed, and therefore will run in multiple regions around the world inside AWS... this means there will

Re: Anycast but for egress

2021-07-28 Thread Vimal
AWS Global Accelerator gives anycast IPs that's good for ingress, but my original question was about having predictable egress IPs. It looks like having a few EIPs/a contiguous network block is the way to go. Thanks! On Tue, Jul 27, 2021 at 4:30 PM Andras Toth wrote: > Since you mentioned

Re: Anycast but for egress

2021-07-28 Thread Bill Woodcock
> On Jul 28, 2021, at 3:21 AM, Mark Tinka wrote: > On 7/28/21 01:16, Daniel Corbe wrote: > >>> This is interesting... I wonder whether Anycast will still have some >>> failure modes and break TCP connections if routing (configuration) were to >>> change? I checked the PDF linked by Bill

Re: Anycast but for egress

2021-07-28 Thread Vimal
On AWS once we purchase EIPs, they are allocated to our account and so we can assign them to VPC NAT gateways. That's our current plan. On Tue, Jul 27, 2021 at 4:16 PM Daniel Corbe wrote: > > > On Jul 27, 2021, at 17:20, Vimal wrote: > > > > Hi all, great replies. :) Let me clarify my initial

Re: Anycast but for egress

2021-07-28 Thread William Herrin
On Wed, Jul 28, 2021 at 6:04 AM Vimal wrote: > My intention is to run a web-crawling service on a public cloud. This service > is geographically distributed, and therefore will run in multiple regions > around the world inside AWS... this means there will be multiple AWS VPCs, > each with their