Re: draft-ietf-mpls-ldp-ipv6-16

2015-02-19 Thread Mark Tinka
On 19/Feb/15 19:03, Phil Bedard wrote: ASR9K IOS-XR 5.3.0 Release Notes: IPv6 Support in MPLS LDP: Starting from release 5.3.0, support for native MPLS LDP over IPv6 is enabled to continue providing existing services seamlessly while enabling new ones. The attributes and capabilities of

Re: OT - Small DNS appliances for remote offices.

2015-02-19 Thread Mel Beckman
If your time is worth anything, you can't beat the Mac Mini, especially for a branch office mission-critical application like DNS. I just picked up a Mini from BestBuy for $480. I plugged it in, applied the latest updates, purchased the MacOSX Server component from the Apples Store ($19), and

Re: OT - Small DNS appliances for remote offices.

2015-02-19 Thread Denys Fedoryshchenko
On 2015-02-19 18:26, valdis.kletni...@vt.edu wrote: On Thu, 19 Feb 2015 14:52:42 +, David Reader said: I'm using several to connect sensors, actuators, and such to a private network, which it's great for - but I'd think at least twice before deploying one as a public-serving host in

Re: OT - Small DNS appliances for remote offices.

2015-02-19 Thread Colin Johnston
older apple tv will work as well :) Colin On 19 Feb 2015, at 19:47, Mel Beckman m...@beckman.org wrote: If your time is worth anything, you can't beat the Mac Mini, especially for a branch office mission-critical application like DNS. I just picked up a Mini from BestBuy for $480. I

Re: OT - Small DNS appliances for remote offices.

2015-02-19 Thread Keenan Tims
If you have a lot of locations, as I believe Ray is looking for, all of this is a manual process you need to do for each instance. That is slow and inefficient. If you're doing more than a few, you probably want something you can PXE boot for provisioning and manage with your preferred DevOps

Re: OT - Small DNS appliances for remote offices.

2015-02-19 Thread Mel Beckman
Keenan, Red. Herrings. You can provision macs over the network. That's one of the functions of Mac OSX Server OS. It's trivial to then promote them to servers themselves. All remotely. Also, the Mac is running a full BIND9 implementation, not some cutdown version. Yes the GUI is minimal, but

Re: OT - Small DNS appliances for remote offices.

2015-02-19 Thread Colin Johnston
here here, apple kits rocks for low end server work, sun kit rocks for high end server work. Colin On 19 Feb 2015, at 20:55, Mel Beckman m...@beckman.org wrote: Keenan, Red. Herrings. You can provision macs over the network. That's one of the functions of Mac OSX Server OS. It's

Re: OT - Small DNS appliances for remote offices.

2015-02-19 Thread Rob Seastrom
Bryan Seitz se...@bsd-unix.net writes: odroid-c1 + eMMC module + RTC battery + case + power adapter. Should run you about $75 *AND* wouldn't be bad for running NTP as well. I haven't looked into the details of the clock, so wouldn't be bad is probably true, notably good, well, that would be

Re: Intrusion Detection recommendations

2015-02-19 Thread Joe Klein
I now have a few moments to discuss Security Onion, and why it works well for a many small and mid-sided organization. Security Onion is a Linux distro for IDS, NSM, and log management. The whole thing can be run on a single, or separated systems, based on the needs, network and security

Re: OT - Small DNS appliances for remote offices.

2015-02-19 Thread Rob Seastrom
Denys Fedoryshchenko de...@visp.net.lb writes: Beaglebone has gigabit mac, but due some errata it is not used in gigabit mode, it is 100M (which is maybe enough for small office). But it is hardware mac. The Beaglebone Black rev C BOM calls out the ethernet phy chip as LAN8710A-EZC-TR which

RE: Re: Intrusion Detection recommendations

2015-02-19 Thread Darden, Patrick
These are all excellent tools for a dedicated knowledgeable network security person to use. The most important element being the dedicated knowledgeable network security person. --p -Original Message- From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Jimmy Hess Sent:

Re: OT - Small DNS appliances for remote offices.

2015-02-19 Thread Denys Fedoryshchenko
Beaglebone has gigabit mac, but due some errata it is not used in gigabit mode, it is 100M (which is maybe enough for small office). But it is hardware mac. Another hardware MAC on inexpensive board it is Odroid-C1. But stability of all this boards in heavy networking use is under question, i

RE: Re: Intrusion Detection recommendations

2015-02-19 Thread Darden, Patrick
I believe the ASA was first developed as the PIX on Plan 9. The OS that came out of that was originally called Finesse OS, but was later renamed as PIX OS. After Cisco purchased the PIX and renamed it to the ASA, they began using a Linux kernel around PIX OS V8. --p -Original

Re: OT - Small DNS appliances for remote offices.

2015-02-19 Thread Denys Fedoryshchenko
On 2015-02-19 15:13, Rob Seastrom wrote: Denys Fedoryshchenko de...@visp.net.lb writes: Beaglebone has gigabit mac, but due some errata it is not used in gigabit mode, it is 100M (which is maybe enough for small office). But it is hardware mac. The Beaglebone Black rev C BOM calls out the

RE: Re: Intrusion Detection recommendations

2015-02-19 Thread Darden, Patrick
+10 The original SANS DDOS task force, and many others since, have emphasized this. Filter your Outbound! Bogons for obvious reasons, BGP3 to keep routing multipliers, non-internals to keep from being used as an amplifier network, the list goes on. Be a good network neighbor. --p

Re: OT - Small DNS appliances for remote offices.

2015-02-19 Thread Bryan Seitz
On Thu, Feb 19, 2015 at 06:18:43AM -0500, Rob Seastrom wrote: Bryan Seitz se...@bsd-unix.net writes: odroid-c1 + eMMC module + RTC battery + case + power adapter. Should run you about $75 *AND* wouldn't be bad for running NTP as well. I haven't looked into the details of the clock,

Re: Intrusion Detection recommendations

2015-02-19 Thread Owen DeLong
The PIX was originally developed as a “Network Translation, Inc.” box (translation.com http://translation.com/). (John Mayes, Brantley Coile, Johnson Wu) Cisco continued the PIX name for many years and through some major changes to the operating system. A later round of major changes had it

RE: HTTPv6 access to www.centurylink.com and www.qwest.com are down

2015-02-19 Thread Frank Bulk
I never heard back from anyone, but the two sites came back up 1:59 pm Central time, so it was down just over a week. Now it Frank -Original Message- From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Frank Bulk Sent: Sunday, February 15, 2015 9:39 PM To: nanog@nanog.org Subject:

Re: OT - Small DNS appliances for remote offices.

2015-02-19 Thread Christopher Morrow
On Wed, Feb 18, 2015 at 7:24 PM, Domenick Petrella domenick.petre...@gmail.com wrote: The BeagleBone's ethernet is directly connected to the SoC, so you would get a higher throughput ceiling than the rpi. sounds super important... question though, what's the expected average/normal/budgeted

Re: v6 deagg

2015-02-19 Thread Christopher Morrow
On Thu, Feb 19, 2015 at 10:16 PM, manning bill bmann...@isi.edu wrote: and then there are the loons who will locally push /64 or longer, some of which may leak. 2001:2b8:46:::/64 ... a fairly extensive list actually show route table inet6.0 | grep ^2 | except /4[876543210] | except

Re: v6 deagg

2015-02-19 Thread Brent Jones
Instead, we may find network equipment vendors might ship with larger/faster TCAM, and faster processing to handle increasing routing table demands. We've been hearing the end is nigh! for a decade, and as far as I can tell, we are no closer to the end than when we started. Maybe some equipment

RE: OT - Small DNS appliances for remote offices.

2015-02-19 Thread Joshua Riesenweber
If you're already installing a Cisco router, maybe look at an SRE-V module? You could install a VM/OS on the router. Cheers,Josh

draft-ietf-mpls-ldp-ipv6-16

2015-02-19 Thread Tim Durack
I notice draft-ietf-mpls-ldp-ipv6-16 was posted February 11, 2015. What is the chance of getting working code this decade? I would quite like to play with this new fangled IPv6 widget... (Okay, I'd like to stop using IPv4 for infrastructure. LDP is the last piece for me.) -- Tim:

Re: OT - Small DNS appliances for remote offices.

2015-02-19 Thread Valdis . Kletnieks
On Thu, 19 Feb 2015 14:52:42 +, David Reader said: I'm using several to connect sensors, actuators, and such to a private network, which it's great for - but I'd think at least twice before deploying one as a public-serving host in user-experience-critical role in a remote location. I

Re: draft-ietf-mpls-ldp-ipv6-16

2015-02-19 Thread Måns Nilsson
Subject: draft-ietf-mpls-ldp-ipv6-16 Date: Thu, Feb 19, 2015 at 11:06:40AM -0500 Quoting Tim Durack (tdur...@gmail.com): I notice draft-ietf-mpls-ldp-ipv6-16 was posted February 11, 2015. What is the chance of getting working code this decade? I would quite like to play with this new fangled

Re: OT - Small DNS appliances for remote offices.

2015-02-19 Thread David Reader
On Thu, 19 Feb 2015 15:26:36 +0200 Denys Fedoryshchenko de...@visp.net.lb wrote: As far as i know, Raspberry PI ethernet over USB might be fine for DNS too, but before it had issues with large data transfers (ethernet driver hangs). No idea about now. On Thu, 19 Feb 2015 15:26:36 +0200 Denys

Re: OT - Small DNS appliances for remote offices.

2015-02-19 Thread Eduardo Schoedler
People, processor of this hardware will be killed before the 100M ethernet be the problem. -- Eduardo Schoedler 2015-02-19 12:52 GMT-02:00 David Reader david.rea...@zeninternet.co.uk: On Thu, 19 Feb 2015 15:26:36 +0200 Denys Fedoryshchenko de...@visp.net.lb wrote: As far as i know,

Re: draft-ietf-mpls-ldp-ipv6-16

2015-02-19 Thread Phil Bedard
ASR9K IOS-XR 5.3.0 Release Notes: IPv6 Support in MPLS LDP: Starting from release 5.3.0, support for native MPLS LDP over IPv6 is enabled to continue providing existing services seamlessly while enabling new ones. The attributes and capabilities of the existing MPLS LDP have been extended to

Re: v6 deagg

2015-02-19 Thread manning bill
and then there are the loons who will locally push /64 or longer, some of which may leak. even if things were sane nothing longer than a /32 were to be in the table, are we not looking at the functional equivalent of v4 host routes? /bill PO Box 12317 Marina del Rey, CA 90295 310.322.8102

Re: draft-ietf-mpls-ldp-ipv6-16

2015-02-19 Thread George, Wes
On 2/19/15, 2:27 PM, Mark Tinka mark.ti...@seacom.mu wrote: Getting IPv6 support in LDP is one thing. This is one document that we need to keep track to know what MPLS applications currently running off of LDPv4 still need to be ported to run over LDPv6:

Re: v6 deagg

2015-02-19 Thread Jima
That might be a little more valid once we move past 2000::/3 -- at the moment, more like IPv4 /29s. Alas, /48 seems to be the generally accepted maximum prefix length, so, yeah, this could be unfortunate. Jima On 2015-02-19 20:16, manning bill wrote: and then there are the loons who

Re: OT - Small DNS appliances for remote offices.

2015-02-19 Thread Domenick Petrella
The BeagleBone's ethernet is directly connected to the SoC, so you would get a higher throughput ceiling than the rpi. On Wed, Feb 18, 2015, 19:03 Geoff Mulligan nano...@mulligan.org wrote: I have used the BeagleBone to run a few simple servers. I don't know if the ethernet port on the Bone

Re: Call For Presentations RIPE 70, submission deadline 1 March 2015

2015-02-19 Thread Leslie
Just a reminder that this deadline is coming up! We can't wait to see your submissions :) Leslie On Tue, Jan 13, 2015 at 5:57 AM, Benno Overeinder be...@nlnetlabs.nl wrote: Dear colleagues, Please find the CFP for RIPE 70 below. The deadline for submissions is 1 March 2015. Please also

v6 deagg

2015-02-19 Thread Randy Bush
in a discussion with some fellow researchers, the subject of ipv6 deaggregation arose; will it be less or more than we see in ipv4? in http://archive.psg.com/jsac-deagg.pdf it was thought that multi-homing, traffic engineering, and the /24 pollution disease were the drivers. multi-homing seems