look for BGP routes containing local AS#

2015-01-27 Thread Song Li
Hi everyone, Recently I studied the BGP AS path looping problem, and found that in most cases, the received BGP routes containing local AS# are suspicious. However, we checked our BGP routing table (AS23910,CERNET2) on juniper router(show route hidden terse aspath-regex .*23910.* ), and have

Re: Facebook outage?

2015-01-27 Thread Jay Ashworth
- Original Message - From: Larry Sheldon larryshel...@cox.net On 1/27/2015 00:47, Damien Burke wrote: Facebook outage? Everyone panic! https://twitter.com/search?q=facebooksrc=typd Let the record show that I noticed it quite a while ago, but did NOT go for first NANOG mention.

Re: Facebook outage?

2015-01-27 Thread Owen DeLong
On Jan 27, 2015, at 10:15 , Larry Sheldon larryshel...@cox.net wrote: On 1/27/2015 09:02, Roy wrote: According to one joker, the crash was caused by too many pictures of the Northeast blizzard :-) Cat-picture server went down. Putting those two things together, I think it was because

Re: Facebook outage?

2015-01-27 Thread Colin Johnston
implement service routers for pop machines using cbac checking and acl for private address range spoofing. block china ranges since never respond to abuse reports. move on Colin On 27 Jan 2015, at 07:23, Ken Chase m...@sizone.org wrote: cable was replugged, insta/fb back up here. /kc

Re: Facebook outage?

2015-01-27 Thread Anthony Jeffries
It is working here in rural Oregon as well. Kudos to the Facebook team for such a quick recovery. On Tue, 2015-01-27 at 01:13 -0600, Larry Sheldon wrote: On 1/27/2015 00:58, Larry Sheldon wrote: On 1/27/2015 00:47, Damien Burke wrote: Facebook outage? Everyone panic!

Cisco IOS stable/production safe versions?

2015-01-27 Thread Nick Ellermann
I have a Cisco IOS specific question for the group and also specifically related to the 6500 platform. We have always been very conservative with our IOS version that we run in production, we are still running a pretty old safe harbor build of 12.2.x on SUP 720 3BXLs with BGP and OSFP routing.

Re: Network ops lists.

2015-01-27 Thread Daniel Corbe
Ryan Finnesey r...@finnesey.com writes: At one point I stumbled across a site that listed all of the network ops lists for the corresponding regions but now I can't seem to find it would anyone happen to have a similar list? Are you referring to a list regional NOGs? Because there's other

Re: ATT uVerse blocking SIP?

2015-01-27 Thread Constantine A. Murenin
On 26 January 2015 at 13:26, Brad Bendy b...@1stclasshosting.com wrote: Has anyone seen issues where a end user on uVerse trying to connect to either another provider or ATT non uVerse (in this case DIA) is having SIP blocked? SIP leaving the uVerse network going to another uVerse DSL account

Re: scaling linux-based router hardware recommendations

2015-01-27 Thread Joe Holden
I get more than that with realtek nics on x86, problem is high interrupt rates even with msix, intel fixes some of those and chelsio makes it all go away... Just saying :) On 26/01/2015 23:27, Faisal Imtiaz wrote: Hi Micah, There is a segment in the Hardware Side of the industry that

Re: ATT uVerse blocking SIP?

2015-01-27 Thread Jared Mauch
I’ve never gotten ATT to respond to issues, including the fact the device eats the SIP packets, and some types of SIP packets can actually cause their device to reboot as well. It’s been a few years now since I really chased this down, but beware all of these ‘helpers’, including the Cisco

Re: Facebook outage?

2015-01-27 Thread Roy
According to one joker, the crash was caused by too many pictures of the Northeast blizzard :-)

Re: ATT uVerse blocking SIP?

2015-01-27 Thread Brad Bendy
They are saying this CPE has no ALG in it, but they can enable DMZ, which acourse made zero difference. What I do find funny is they escalated the problem to Tier-2 and wanted to enroll the customer in premium tech support for $15 a month, because the Internet signal is strong and is not causing

Re: scaling linux-based router hardware recommendations

2015-01-27 Thread Joe Holden
Easy to make a switch when the only thing you're actually doing is teling the asic what to do (Cumulus, Ubiquiti, ... every other broadcom vendor out there...) Better yet - Atheros have finally come out with a 24*1GE + 2*10GE switch asic - only a matter of time before they challenge broadcom

Re: scaling linux-based router hardware recommendations

2015-01-27 Thread Eddie Tardist
On Mon, Jan 26, 2015 at 8:53 PM, micah anderson mi...@riseup.net wrote: Hi, I know that specially programmed ASICs on dedicated hardware like Cisco, Juniper, etc. are going to always outperform a general purpose server running gnu/linux, *bsd... but I find the idea of trying to use

Re: Facebook outage?

2015-01-27 Thread Larry Sheldon
On 1/27/2015 09:02, Roy wrote: According to one joker, the crash was caused by too many pictures of the Northeast blizzard :-) Cat-picture server went down. -- The unique Characteristics of System Administrators: The fact that they are infallible; and, The fact that they learn from their

Re: scaling linux-based router hardware recommendations

2015-01-27 Thread Pavel Odintsov
Hello! You could try to build simple router with DPDK yourself. It's very straightforward and have good examples for simple routing. I have done some tests with PF_RING ZC (it's very similar technology to DPDK without specialization on building of network devices) while test my DDoS monitoring

Re: scaling linux-based router hardware recommendations

2015-01-27 Thread Paul S.
Anyone aware of any dpdk enabled solutions in the software routing space that doesn't cost an arm and a leg? vMX certainly does. On 1/27/2015 午後 04:33, Pavel Odintsov wrote: Hello! Looks like somebody want to build Linux soft router!) Nice idea for routing 10-30 GBps. I route about 5+ Gbps

Re: scaling linux-based router hardware recommendations

2015-01-27 Thread Baldur Norddahl
I propose the hybrid solution: A device such as the ZTE 5960e with 24x 10G and 2x 40G will set you about USD 6000 back. This thing can do MPLS and L3 equal cost multiple path routing. With that you can load balance across as many software routers as you need. It also speaks BGP and can accept

Re: scaling linux-based router hardware recommendations

2015-01-27 Thread Hugo Slabbert
There is also some work in progress to improve network performance in the Linux kernel: https://lwn.net/Articles/629155/ Preliminary, but encouraging that work is under way. -- Hugo On Tue 2015-Jan-27 11:33:16 +0400, Pavel Odintsov pavel.odint...@gmail.com wrote: Hello! Looks like

Re: scaling linux-based router hardware recommendations

2015-01-27 Thread Eduardo Schoedler
Can be Freebsd-based? http://info.iet.unipi.it/~luigi/netmap/ 2015-01-27 14:22 GMT-02:00 Hugo Slabbert h...@slabnet.com: There is also some work in progress to improve network performance in the Linux kernel: https://lwn.net/Articles/629155/ Preliminary, but encouraging that work is under

Re: scaling linux-based router hardware recommendations

2015-01-27 Thread Jim Shankland
On 1/26/15 11:33 PM, Pavel Odintsov wrote: Hello! Looks like somebody want to build Linux soft router!) Nice idea for routing 10-30 GBps. I route about 5+ Gbps in Xeon E5-2620v2 with 4 10GE cards Intel 82599 and Debian Wheezy 3.2 (but it's really terrible kernel, everyone should use modern

Re: ATT uVerse blocking SIP?

2015-01-27 Thread Dan Lowe
On Mon, Jan 26, 2015, at 10:22 PM, Jared Mauch wrote: Yes. If you move to another port, e.g.: 5061 it works fine. If you’re running on a Linux based system, you can do this: /sbin/iptables -A PREROUTING -t nat -i eth1 -p udp --dport 5061 -j REDIRECT --to-port 5060 on the host to

Re: Network ops lists.

2015-01-27 Thread Seiichi Kawamura
Not my list, but here's one. http://www.bugest.net/nogs.html I'm sure there's more though. BDNOG, BTNOG, HKNOG ... -Seiichi (2015/01/28 6:20), Ryan Finnesey wrote: At one point I stumbled across a site that listed all of the network ops lists for the corresponding regions but now I can't