Re: BGP in the Washngton Post

2015-06-01 Thread Scott Weeks
--- b...@herrin.us wrote: From: William Herrin Interesting story about BGP and security in the Washington Post today: http://www.washingtonpost.com/sf/business/2015/05/31/net-of-insecurity-part-2/ Great article for the WP and they asked good qu

Re: AWS Elastic IP architecture

2015-06-01 Thread Mark Andrews
In message <556d35df.8080...@matthew.at>, Matthew Kaufman writes: > On 6/1/2015 6:32 PM, Mark Andrews wrote: > > In message com > >> , Christopher Morrow writes: > >> On Mon, Jun 1, 2015 at 9:02 PM, Ca By wrote: > >>> > >>> On Monday, June 1, 2015, Mark Andrews wrote: > > In message >

Re: AWS Elastic IP architecture

2015-06-01 Thread Christopher Morrow
On Tue, Jun 2, 2015 at 12:25 AM, Tony Hain wrote: > > >> -Original Message- >> From: christopher.mor...@gmail.com >> [mailto:christopher.mor...@gmail.com] On Behalf Of Christopher Morrow >> Sent: Monday, June 01, 2015 5:10 PM >> To: Tony Hain >> Cc: Hugo Slabbert; Matt Palmer; nanog list >

Re: AWS Elastic IP architecture

2015-06-01 Thread Matthew Kaufman
On 6/1/2015 6:32 PM, Mark Andrews wrote: In message , Christopher Morrow writes: On Mon, Jun 1, 2015 at 9:02 PM, Ca By wrote: On Monday, June 1, 2015, Mark Andrews wrote: In message , Christopher Morrow writes: So... I don't really see any of the above arguments for v6 in a vm setup to r

Re: AWS Elastic IP architecture

2015-06-01 Thread Hugo Slabbert
On Mon 2015-Jun-01 13:20:57 -0400, Christopher Morrow wrote: On Mon, Jun 1, 2015 at 12:21 PM, Hugo Slabbert wrote: 2. Just do it properly the first time around. I would opt for #2. sure, so would everyone... but they didn't so... what gets you enough there to help customers and also doe

RE: AWS Elastic IP architecture

2015-06-01 Thread Tony Hain
> -Original Message- > From: christopher.mor...@gmail.com > [mailto:christopher.mor...@gmail.com] On Behalf Of Christopher Morrow > Sent: Monday, June 01, 2015 5:10 PM > To: Tony Hain > Cc: Hugo Slabbert; Matt Palmer; nanog list > Subject: Re: AWS Elastic IP architecture > > On Mon, Jun

Re: Routing Insecurity (Re: BGP in the Washington Post)

2015-06-01 Thread Mark Andrews
In message , Ca By writes: > On Mon, Jun 1, 2015 at 8:21 AM, Mark Tinka wrote: > > > > > > > On 1/Jun/15 17:04, Mike Hammett wrote: > > > Actually, that's the level of attention given to all kinds of > > infrastructure just about everywhere. ;-) > > > > The difference is that there are standard

Re: BGP Multihoming 2 providers full or partial?

2015-06-01 Thread Mike Hammett
Probably not NANOG, but I have way more traffic on many other lists over the last 12+ years. I'm no stranger to over-zealous sales guys. I've started blocking the ones that call my support line and talking to the call center, despite the warning that support is only for my customers. -

Re: BGP Multihoming 2 providers full or partial?

2015-06-01 Thread Scott Weeks
- Original Message - From: "Scott Weeks" --- n...@border6.com wrote: From: Pawel Rybczyk platform where we included new feature called That might be interesting for you. --- This might be interesting for you. https://www.nanog.org/list

Re: AWS Elastic IP architecture

2015-06-01 Thread Christopher Morrow
On Mon, Jun 1, 2015 at 9:32 PM, Mark Andrews wrote: > > In message >, Christopher Morrow writes: >> On Mon, Jun 1, 2015 at 9:02 PM, Ca By wrote: >> > >> > >> > On Monday, June 1, 2015, Mark Andrews wrote: >> >> >> >> >> >> In message >> >> >> >> , Christopher Morrow writes: >> >> > So... I don'

Re: AWS Elastic IP architecture

2015-06-01 Thread Mark Andrews
In message , Christopher Morrow writes: > On Mon, Jun 1, 2015 at 9:02 PM, Ca By wrote: > > > > > > On Monday, June 1, 2015, Mark Andrews wrote: > >> > >> > >> In message > >> > >> , Christopher Morrow writes: > >> > So... I don't really see any of the above arguments for v6 in a vm > >> > setup

Re: AWS Elastic IP architecture

2015-06-01 Thread Christopher Morrow
On Mon, Jun 1, 2015 at 9:02 PM, Ca By wrote: > > > On Monday, June 1, 2015, Mark Andrews wrote: >> >> >> In message >> >> , Christopher Morrow writes: >> > So... I don't really see any of the above arguments for v6 in a vm >> > setup to really hold water in the short term at least. I think for

Re: Capacity/transit costs vs growth

2015-06-01 Thread Jean-Francois Mezei
On 15-05-28 16:02, James Bensley wrote: > This sort of information is out there for things like transit prices, > since they are more common shared in public... > > http://drpeering.net/white-papers/Internet-Transit-Pricing-Historical-And-Projected.php Mamny thanks. Sorry for delay, was busy wri

Re: AWS Elastic IP architecture

2015-06-01 Thread Ca By
On Monday, June 1, 2015, Mark Andrews wrote: > > In message rs4vsx5mfecpfue8b7vq+au2hcx...@mail.gmail.com > > , Christopher Morrow writes: > > So... I don't really see any of the above arguments for v6 in a vm > > setup to really hold water in the short term at least. I think for > > sure you'l

Re: AWS Elastic IP architecture

2015-06-01 Thread Mark Andrews
In message , Christopher Morrow writes: > So... I don't really see any of the above arguments for v6 in a vm > setup to really hold water in the short term at least. I think for > sure you'll want v6 for public services 'soon' (arguably like 10 yrs > ago so you'd get practice and operational exp

Re: AWS Elastic IP architecture

2015-06-01 Thread Ca By
On Monday, June 1, 2015, Tony Hain wrote: > Hugo Slabbert wrote: > >>> snip > > > > On this given point, though: Facebook -ne generic hosting platform > > True, but it does represent a business decision to choose IPv6. The > relevant > point here is that the "NEXT" facebook/twitter/snapchat/...

Re: AWS Elastic IP architecture

2015-06-01 Thread Christopher Morrow
On Mon, Jun 1, 2015 at 7:20 PM, Tony Hain wrote: > True, but it does represent a business decision to choose IPv6. The relevant > point here is that the "NEXT" facebook/twitter/snapchat/... is likely being > pushed by clueless investors into outsourcing their infrastructure to > AWS/Azure/Google-c

Re: AWS Elastic IP architecture

2015-06-01 Thread Christopher Morrow
On Mon, Jun 1, 2015 at 6:36 PM, Matt Palmer wrote: > On Mon, Jun 01, 2015 at 11:30:00AM -0400, Christopher Morrow wrote: >> I don't get why >> 'ipv6 address on my vm' matters a whole bunch (*in a world where v4 is >> still available to you I mean), > > It simplifies infrastructure management consi

Re: RE: AWS Elastic IP architecture

2015-06-01 Thread Hugo Slabbert
Agree with everything in your post. -- Hugo - Original Message - From: Tony Hain Sent: 2015-06-01 - 16:20 To: 'Hugo Slabbert' , 'Matt Palmer' Subject: RE: AWS Elastic IP architecture > Hugo Slabbert wrote: snip >> >> On this given point, though: Facebook -ne generic hosting platfo

RE: AWS Elastic IP architecture

2015-06-01 Thread Tony Hain
Hugo Slabbert wrote: >>> snip > > On this given point, though: Facebook -ne generic hosting platform True, but it does represent a business decision to choose IPv6. The relevant point here is that the "NEXT" facebook/twitter/snapchat/... is likely being pushed by clueless investors into outsourc

Re: AWS Elastic IP architecture

2015-06-01 Thread Hugo Slabbert
The question that Matthew Kaufman proposed was specifically asking about app architecture deployments, so what Facebook is choosing to do is entirely germane. I'd lean more on the "ipv6 evangelism" side of the discussion, but: Facebook controls the whole stack and can require buy-in from their

Re: AWS Elastic IP architecture

2015-06-01 Thread Matt Palmer
On Mon, Jun 01, 2015 at 11:30:00AM -0400, Christopher Morrow wrote: > I don't get why > 'ipv6 address on my vm' matters a whole bunch (*in a world where v4 is > still available to you I mean), It simplifies infrastructure management considerably. Having to balance between "how many subnets will I

Re: AWS Elastic IP architecture

2015-06-01 Thread Matt Palmer
On Mon, Jun 01, 2015 at 10:49:09AM -0700, Matthew Kaufman wrote: > On 6/1/2015 12:06 AM, Owen DeLong wrote: > >... Here’s the thing… In order to land IPv6 services without IPv6 support > >on the VM, you’re creating an environment where... > > Let's hypothetically say that it is much easier for the

Re: AWS Elastic IP architecture

2015-06-01 Thread Matt Palmer
The question that Matthew Kaufman proposed was specifically asking about app architecture deployments, so what Facebook is choosing to do is entirely germane. - Matt On Mon, Jun 01, 2015 at 02:43:27PM -0400, Todd Underwood wrote: > fb is not a 'cloud provider'. > > it's orthogonal to the questio

Re: PeeringDB Admin

2015-06-01 Thread Jason Bothe
It’s working now, thanks!! :D Jason Bothe, Manager of Networking o +1 713 348 5500 m +1 713 703 3552 ja...@rice.edu > On 1, Jun 2015, at 5:00 PM, Job Snijders wrote: > > On Mon, Jun 01,

Re: PeeringDB Admin

2015-06-01 Thread Job Snijders
On Mon, Jun 01, 2015 at 04:47:49PM -0500, Jason Bothe wrote: > Could I please have a PeeringDB admin contact me off-list ? Done! Kind regards, Job

Re: PeeringDB Admin

2015-06-01 Thread Niels Bakker
* ja...@rice.edu (Jason Bothe) [Mon 01 Jun 2015, 23:51 CEST]: Could I please have a PeeringDB admin contact me off-list ? I've mailed their support alias several times and have literally always had quick and to-the-point answers. -- Niels.

Re: BGP Multihoming 2 providers full or partial?

2015-06-01 Thread Patrick W. Gilmore
On Jun 01, 2015, at 17:46 , William Herrin wrote: > On Mon, Jun 1, 2015 at 5:13 PM, Baldur Norddahl > wrote: >> This is only a problem if you use so called tier 1 transit providers. >> >> The smaller fish in the pond have multiple transits themselves and will >> there by always have an alternat

PeeringDB Admin

2015-06-01 Thread Jason Bothe
Could I please have a PeeringDB admin contact me off-list ? Thanks! Jason Bothe, Manager of Networking Rice University o +1 713 348 5500 m +1 713 703 3552 ja...@rice.edu

Re: BGP Multihoming 2 providers full or partial?

2015-06-01 Thread William Herrin
On Mon, Jun 1, 2015 at 5:13 PM, Baldur Norddahl wrote: > This is only a problem if you use so called tier 1 transit providers. > > The smaller fish in the pond have multiple transits themselves and will > there by always have an alternative route available. Hi Baldur, Cogent is not a tier 1 (not

Re: Colo Capacity quote in Renton, WA 98057, USA needed

2015-06-01 Thread Don Gould
Hi Sam, Thanks what a great resource! I'm feeling the NOG love here right now!!! I got a bit DDOS'ed with support and now I'm just wading through the replies. I did discover that I'm just paying way to much and have been bitten by not paying proper attention to refreshing service arrangemen

Giganews/AS30094 Contact

2015-06-01 Thread Carlos Friacas
Hello, Can someone from Giganews/AS30094 please contact me off-list? Thanks & Regards, - Carlos Friacas See: Network Services Area

Re: BGP Multihoming 2 providers full or partial?

2015-06-01 Thread William Herrin
On Mon, Jun 1, 2015 at 5:05 PM, Blake Hudson wrote: > After studying failure modes and attempting to optimize BGP using partial > routing tables, I am of the opinion that BGP with a full routing table to > directly connected devices is by far the best way to gain the availability > benefits of BGP

Re: BGP Multihoming 2 providers full or partial?

2015-06-01 Thread Baldur Norddahl
This is only a problem if you use so called tier 1 transit providers. The smaller fish in the pond have multiple transits themselves and will there by always have an alternative route available. Regards Baldur Den 01/06/2015 22.32 skrev "William Herrin" : > On Mon, Jun 1, 2015 at 2:40 PM, Blake

Re: BGP Multihoming 2 providers full or partial?

2015-06-01 Thread Blake Hudson
William Herrin wrote on 6/1/2015 3:28 PM: On Mon, Jun 1, 2015 at 2:40 PM, Blake Hudson wrote: A gateway of last resort, also called a backup default route, will take care of partitions No, Blake, it won't. A partition means one of your ISPs has no route to the destination. Route the packet to

Suddenlink RWHOIS = down

2015-06-01 Thread Blair Trosper
Can someone from Suddenlink contact me offlist (or just handle) for the fact that your rwhois server is offline? Found a referral to rwhois.suddenlink.net:4321. connect: Connection refused

Re: BGP Multihoming 2 providers full or partial?

2015-06-01 Thread William Herrin
On Mon, Jun 1, 2015 at 2:40 PM, Blake Hudson wrote: > A gateway of last resort, also called a backup default route, will take care > of partitions No, Blake, it won't. A partition means one of your ISPs has no route to the destination. Route the packet to that ISP via a default route and it gets

Re: AWS Elastic IP architecture

2015-06-01 Thread Lee Howard
On 6/1/15, 1:49 PM, "Matthew Kaufman" wrote: >On 6/1/2015 12:06 AM, Owen DeLong wrote: >> ... Here¹s the thingŠ In order to land IPv6 services without IPv6 >> support on the VM, you¹re creating an environment where... > >Let's hypothetically say that it is much easier for the cloud provider >if

Re: BGP Multihoming 2 providers full or partial?

2015-06-01 Thread Jeremy Malli
You could have your transit providers send you a default route in the BGP session instead of nailing it up using a static. That way if the interface does not physically go down but the BGP session does, the default route will be pulled when the BGP session dies. Also, you could go with a less

Re: 300+ms of hotel wifi bufferbloat - peaking at 1.5 sec!

2015-06-01 Thread Dave Taht
On Mon, Jun 1, 2015 at 11:58 AM, Josh Reynolds wrote: > There's a bit of discussion on the AFMUG list about that speed test Dave. > People with 500Mb, 1Gb,10Gb pipes were getting drastically different results > depending on what "type" of test they did. There were also huge discussions of the dsl

Re: AWS Elastic IP architecture

2015-06-01 Thread Matthew Kaufman
On 6/1/2015 12:12 PM, Christopher Morrow wrote: On Mon, Jun 1, 2015 at 1:49 PM, Matthew Kaufman wrote: 1) An all-IPv6 network inside, so the hosts can all talk to each other over IPv6 without using (potentially overlapping copies of) RFC1918 space... this point keeps coming up... I don't see

Re: AWS Elastic IP architecture

2015-06-01 Thread Christopher Morrow
On Mon, Jun 1, 2015 at 1:49 PM, Matthew Kaufman wrote: > 1) An all-IPv6 network inside, so the hosts can all talk to each other over > IPv6 without using (potentially overlapping copies of) RFC1918 space... this point keeps coming up... I don't see that 'overlapping ipv4' matters at all here. it

Re: AWS Elastic IP architecture

2015-06-01 Thread Luan Nguyen
Original I asked because was in the process of thinking out loud what options are there for disaster recovery. I could do anycast BGP, advertise out say a /24 of "elastic IP" and internally have that block running inside our data center interconnect dmvpn tunnels. We do have WAN OPT so it probably

Re: 300+ms of hotel wifi bufferbloat - peaking at 1.5 sec!

2015-06-01 Thread Josh Reynolds
There's a bit of discussion on the AFMUG list about that speed test Dave. People with 500Mb, 1Gb,10Gb pipes were getting drastically different results depending on what "type" of test they did. Josh Reynolds CIO, SPITwSPOTS www.spitwspots.com On 06/01/2015 10:52 AM, Dave Taht wrote: I did the

Re: 300+ms of hotel wifi bufferbloat - peaking at 1.5 sec!

2015-06-01 Thread Dave Taht
I did the dslreports tests on the NANOG wifi while listening to srikanth today: http://www.dslreports.com/speedtest/593926 And my own (flent data also in this dir)... http://snapon.lab.bufferbloat.net/~d/nanog/download_cdf.png pretty good bandwidth. Pretty horrific latency... a couple detours a

Re: AWS Elastic IP architecture

2015-06-01 Thread Todd Underwood
fb is not a 'cloud provider'. it's orthogonal to the question. t On Mon, Jun 1, 2015 at 2:36 PM, Ca By wrote: > On Mon, Jun 1, 2015 at 10:49 AM, Matthew Kaufman > wrote: > > > On 6/1/2015 12:06 AM, Owen DeLong wrote: > > > >> ... Here’s the thing… In order to land IPv6 services without IPv6 >

Re: BGP Multihoming 2 providers full or partial?

2015-06-01 Thread Blake Hudson
A gateway of last resort, also called a backup default route, will take care of partitions and is, in my opinion, a good idea if you are not providing transit to others. It's a requirement if you're not taking full routes, but even if you do take full routes the management cost is practically n

Re: AWS Elastic IP architecture

2015-06-01 Thread Ca By
On Mon, Jun 1, 2015 at 10:49 AM, Matthew Kaufman wrote: > On 6/1/2015 12:06 AM, Owen DeLong wrote: > >> ... Here’s the thing… In order to land IPv6 services without IPv6 support >> on the VM, you’re creating an environment where... >> > > Let's hypothetically say that it is much easier for the cl

Re: AWS Elastic IP architecture

2015-06-01 Thread Matthew Kaufman
On 6/1/2015 12:06 AM, Owen DeLong wrote: ... Here’s the thing… In order to land IPv6 services without IPv6 support on the VM, you’re creating an environment where... Let's hypothetically say that it is much easier for the cloud provider if they provide just a single choice within their network

Re: WiFi courses/vendors recommendation

2015-06-01 Thread Michel Luczak
> > Just watch it here if you're expecting to plug UniFi APs into standard > 802.3af/at ports and get power. When I last interacted with them (customer > equipment; year or two old, I believe) a lot of their WAPs are 24V, not > 802.3af/at. The Pro and AC models are 802af/at. Only the “not Pro

Re: WiFi courses/vendors recommendation

2015-06-01 Thread Josh Reynolds
They come from the outdoor WISP space, so most of their gear is 24v passive POE. However, they have multiple models of 802.3at/af switches now (up to 48 port), two routers with 24v/48v PoE output capability, and several UniFi APs that are either 802.3af or 802.3at. Josh Reynolds CIO, SPITwSP

Re: WiFi courses/vendors recommendation

2015-06-01 Thread Josh Reynolds
That "7 year" requirement is the most off the wall statement. Do you work in HR? :) How about "find somebody with experience, ideally somebody who's done high-level work for a W/ISP". Josh Reynolds CIO, SPITwSPOTS www.spitwspots.com On 06/01/2015 08:29 AM, Edwards, Jermaine wrote: Wi-Fi is

Re: WiFi courses/vendors recommendation

2015-06-01 Thread Hugo Slabbert
Doubt how much PoE you'd use for the MetroWifi stuff, but for the "small/medium events Wifi coverage": Ubiquiti Networks. Its cheap and it works great. Support sucks though. Just watch it here if you're expecting to plug UniFi APs into standard 802.3af/at ports and get power. When I last i

Re: AWS Elastic IP architecture

2015-06-01 Thread Christopher Morrow
On Mon, Jun 1, 2015 at 12:21 PM, Hugo Slabbert wrote: > 2. Just do it properly the first time around. > > I would opt for #2. sure, so would everyone... but they didn't so... what gets you enough there to help customers and also doesn't required a forklift of your running operation?

RE: AWS Elastic IP architecture

2015-06-01 Thread Tony Hain
>>> snip > > What I read in your line of comments to Owen is that the service only does > a header swap once and expects the application on the VM to compensate. > In that case there is an impact on the cost of deployment and overall utility. > > 'compensate' ? do you mean 'get some extra informa

Re: WiFi courses/vendors recommendation

2015-06-01 Thread Guillaume Tournat
Fortinet has good products for wifi indoor. Not tested outdoor. > Le 1 juin 2015 à 00:43, Mike Lyon a écrit : > > Ubiquiti Networks. > > Its cheap and it works great. Support sucks though. > > I use Ubuquiti gear for my wireless ISP and i use their UniFi APs for when > i do events. > > If

Re: BGP in the Washngton Post

2015-06-01 Thread Max Tulyev
Is there *IN THEIORY* any possibility to make BGP secure enough now? Yes, RPKI protects from fat fingered people, but NOT protects from people doing hijacks knowlingly. The global routing registry really can be the solution, but it automatically gives one authority a power to cut off any network.

RE: WiFi courses/vendors recommendation

2015-06-01 Thread Edwards, Jermaine
Wi-Fi is a unique space especially outdoors as it is an unlicensed spectrum. I would suggest looking for an engineer with at least 7 years of field experience along with a strong networking background. The training will only show you how to configure gear and teach perfect world theory. We al

Re: BGP Multihoming 2 providers full or partial?

2015-06-01 Thread Maqbool Hashim
First off thanks to everyone that responded to my original post, very instructive and informational replies along with a good view of different perspectives. Baldur, you pointed out that for ingress it's exactly the same to take partials, we are only affected on outbound and we can achieve a la

Re: AWS Elastic IP architecture

2015-06-01 Thread Hugo Slabbert
I would hope that in the 'header swap' service there's as little overhead applied to the end system as possible... I'd like my apache server to answer v6 requests without having a v6 address-listening-port on my machine. Why? Honestly: why would you want to abstract v6 up into the application

Re: AWS Elastic IP architecture

2015-06-01 Thread Christopher Morrow
On Mon, Jun 1, 2015 at 11:41 AM, Tony Hain wrote: > > >> -Original Message- >> From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of >> Christopher Morrow >> Sent: Monday, June 01, 2015 7:24 AM >> To: Matt Palmer >> Cc: nanog list >> Subject: Re: AWS Elastic IP architecture >> >> On Mo

Re: BGP Multihoming 2 providers full or partial?

2015-06-01 Thread Baldur Norddahl
On 1 June 2015 at 15:29, Blake Hudson wrote: > Something to point out: Sometimes the device you connect to is up, but has > no reachability to the rest of the world. Using static routes is.. well.. > static. There are a few cases (such as the one mentioned) where a static > route can be somewhat

RE: AWS Elastic IP architecture

2015-06-01 Thread Tony Hain
> -Original Message- > From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of > Christopher Morrow > Sent: Monday, June 01, 2015 7:24 AM > To: Matt Palmer > Cc: nanog list > Subject: Re: AWS Elastic IP architecture > > On Mon, Jun 1, 2015 at 1:19 AM, Matt Palmer > wrote: > > On Sun,

Re: Routing Insecurity (Re: BGP in the Washington Post)

2015-06-01 Thread Roland Dobbins
On 1 Jun 2015, at 22:31, Ca By wrote: scrubbers on the other)... which is a very dangerous arms race with real money on both sides looking to escalate the harm / fix. My fondest wish is for there to cease to be a need for DDoS mitigation tools and techniques, and I do my best to try and edu

Re: Routing Insecurity (Re: BGP in the Washington Post)

2015-06-01 Thread Roland Dobbins
On 1 Jun 2015, at 22:21, Mark Tinka wrote: The difference is that there are standardized (global) guidelines for those infrastructures within their own industry, that lack of compliance can lead to serious fines, jail time or both. 1. Ensuring insurance underwriters understand the amount of

Re: Routing Insecurity (Re: BGP in the Washington Post)

2015-06-01 Thread Ca By
On Mon, Jun 1, 2015 at 8:21 AM, Mark Tinka wrote: > > > On 1/Jun/15 17:04, Mike Hammett wrote: > > Actually, that's the level of attention given to all kinds of > infrastructure just about everywhere. ;-) > > The difference is that there are standardized (global) guidelines for > those infrastruc

Re: AWS Elastic IP architecture

2015-06-01 Thread Christopher Morrow
On Mon, Jun 1, 2015 at 3:06 AM, Owen DeLong wrote: > >> On May 31, 2015, at 7:46 PM, Christopher Morrow >> wrote: >> >> On Sun, May 31, 2015 at 9:07 PM, Owen DeLong wrote: >>> As I said before: >>> >>> Host Virtual (vr.org ) >>> Softlayer (softlayer.com )

Re: Routing Insecurity (Re: BGP in the Washington Post)

2015-06-01 Thread Mark Tinka
On 1/Jun/15 17:04, Mike Hammett wrote: > Actually, that's the level of attention given to all kinds of infrastructure > just about everywhere. ;-) The difference is that there are standardized (global) guidelines for those infrastructures within their own industry, that lack of compliance can

Re: Routing Insecurity (Re: BGP in the Washington Post)

2015-06-01 Thread Mark Tinka
On 1/Jun/15 17:00, Jared Mauch wrote: > This can have catastrophic effects if one does that with your sewers, > septic fields, etc but we accept it in the BGP and routing universe > for some reason. Because our industry (for better or worse) is not as regulated as other "life-concerning" things

Re: Routing Insecurity (Re: BGP in the Washington Post)

2015-06-01 Thread Mike Hammett
Actually, that's the level of attention given to all kinds of infrastructure just about everywhere. ;-) - Mike Hammett Intelligent Computing Solutions http://www.ics-il.com - Original Message - From: "Jared Mauch" To: "Ca By" Cc: nanog@nanog.org Sent: Monday, June 1, 20

Routing Insecurity (Re: BGP in the Washington Post)

2015-06-01 Thread Jared Mauch
> On Jun 1, 2015, at 10:08 AM, Ca By wrote: > The article left me with the feeling that there was a secure version of BGP > that is available but network operators are too short-term-focused and > foolish to deploy it. > > I believe the situation is more complicated than that, no? There is no >

Re: AWS Elastic IP architecture

2015-06-01 Thread Christopher Morrow
On Mon, Jun 1, 2015 at 1:19 AM, Matt Palmer wrote: > On Sun, May 31, 2015 at 10:46:02PM -0400, Christopher Morrow wrote: >> So... ok. What does it mean, for a customer of a cloud service, to be >> ipv6 enabled? > > IPv6 feature-parity with IPv4. > > My must-haves, sorted in order of importance (mo

Re: BGP in the Washngton Post

2015-06-01 Thread Christopher Morrow
On Mon, Jun 1, 2015 at 9:39 AM, Måns Nilsson wrote: > Subject: BGP in the Washngton Post Date: Mon, Jun 01, 2015 at 09:24:33AM > -0400 Quoting William Herrin (b...@herrin.us): >> Interesting story about BGP and security in the Washington Post today: >> >> http://www.washingtonpost.com/sf/business

Re: BGP in the Washngton Post

2015-06-01 Thread Ca By
On Mon, Jun 1, 2015 at 6:24 AM, William Herrin wrote: > Interesting story about BGP and security in the Washington Post today: > > > http://www.washingtonpost.com/sf/business/2015/05/31/net-of-insecurity-part-2/ > > -Bill > > The article left me with the feeling that there was a secure version of

RE: BGP in the Washngton Post

2015-06-01 Thread Jeff Masiello
Excellent find, Thanks! I forwarded this to a bunch of people. Mostly managers. Jeff A. Masiello -Original Message- From: NANOG [mailto:nanog-bounces+jmasiello=actionet@nanog.org] On Behalf Of William Herrin Sent: Monday, June 01, 2015 9:25 AM To: nanog@nanog.org Subject: BGP i

Re: BGP Multihoming 2 providers full or partial?

2015-06-01 Thread Mike Hammett
Seems like a perfectly good post to me. Someone made an inquiry as to how to solve a particular problem There were multiple solutions presented. Pawel posted relevant, on-topic information regarding how his product could solve the problem in a unique way. No harm, no foul. - Mike Ham

Re: BGP in the Washngton Post

2015-06-01 Thread Måns Nilsson
Subject: BGP in the Washngton Post Date: Mon, Jun 01, 2015 at 09:24:33AM -0400 Quoting William Herrin (b...@herrin.us): > Interesting story about BGP and security in the Washington Post today: > > http://www.washingtonpost.com/sf/business/2015/05/31/net-of-insecurity-part-2/ sort of dissappointe

Re: BGP Multihoming 2 providers full or partial?

2015-06-01 Thread Blake Hudson
Baldur Norddahl wrote on 5/31/2015 1:13 PM: Remember this: 1) for inbound traffic there will be no difference at all. 2) routers will ignore a static route if the link is down. If you can get BFD from the providers then even better. So you can emulate 99% of what you get with full routes by lo

BGP in the Washngton Post

2015-06-01 Thread William Herrin
Interesting story about BGP and security in the Washington Post today: http://www.washingtonpost.com/sf/business/2015/05/31/net-of-insecurity-part-2/ -Bill -- William Herrin her...@dirtside.com b...@herrin.us Owner, Dirtside Systems . Web:

Re: BGP Multihoming 2 providers full or partial?

2015-06-01 Thread Scott Weeks
--- n...@border6.com wrote: From: Pawel Rybczyk platform where we included new feature called That might be interesting for you. --- This might be interesting for you. https://www.nanog.org/list Please read #5 before going further. Product Eva

Re: WiFi courses/vendors recommendation

2015-06-01 Thread James Bensley
On 31 May 2015 at 23:28, James Laszko wrote: > I don't have a vendor-agnostic answer for you on #1, but as far as a vendor - > Ruckus Wireless. +1 for Ruckus, I have worked with a Ruckus partner in the UK I can recommend if anyone needs one. The Ruckus tin is great having seen it to believe it.

Re: AWS Elastic IP architecture

2015-06-01 Thread Owen DeLong
> On May 31, 2015, at 7:46 PM, Christopher Morrow > wrote: > > On Sun, May 31, 2015 at 9:07 PM, Owen DeLong wrote: >> As I said before: >> >> Host Virtual (vr.org ) >> Softlayer (softlayer.com ) >> Linode (Linode.com ) >> >> All have