Re: Québec Sales tax

2018-03-27 Thread Eric Dugas

Replied off-list since it's a bit off-topic.
On Tue, Mar 27, 2018, 18:47 Jean-Francois Mezei  wrote:
> On 2018-03-27 18:28, Eric Dugas wrote:
> > On the IP geoloc subject, we (EBOX) actually have multiple pools for 
> > QC-based and ON-based customers.
>
> You may all have different IP pools, but are they registered such that
> geolocation services show them with different provinces, or do they all
> point to your
>
> OrgName: EBOX
> OrgId: QUEBE-50
> Address: 1225 St-Charles Ouest, Suite 1100
> City: Longueuil
> StateProv: QC
> PostalCode: J4K 0B9
> Country: CA
>
> address ?
> (there were complains in the past of some of your ON customers unable to
> access Sport Check and being directed to Sport Experts store web sites
> due to geolocation.



Re: Québec Sales tax

2018-03-27 Thread Jean-Francois Mezei
On 2018-03-27 18:28, Eric Dugas wrote:
> On the IP geoloc subject, we (EBOX) actually have multiple pools for QC-based 
> and ON-based customers.

You may all have different IP pools, but are they registered such that
geolocation services show them with different provinces, or do they all
point to your

OrgName:EBOX
OrgId:  QUEBE-50
Address:1225 St-Charles Ouest, Suite 1100
City:   Longueuil
StateProv:  QC
PostalCode: J4K 0B9
Country:CA

address ?

(there were complains in the past of some of your ON customers unable to
access Sport Check and being directed to Sport Experts store web sites
due to geolocation.


Re: Qu??bec Sales tax

2018-03-27 Thread Jean-Francois Mezei
On 2018-03-27 18:21, Ken Chase wrote:
> If Netflix has no physical presence in Quebec, what the lever are they going
> to use to force this? A lawsuit in  in the
> US? What court is going to entertain a foreign jurisdiction's tax claim in
> their court? And how would that be then enforced?


Or Netflix could just call the QC govt's bluff and just stop serving QC
customers and see QC voters rebel against the government if they lose
Netflix.

The "no presence in Canada" has had other impacts *Netflix refusing to
comply to a CRTC request for infornation claiming CRTC doesn't regulate
foreign companies with no presence in Canada).  (Ironically, Netflix has
hired lobysists who are quite active in Canada).

The jurisdiction aspect is an important one. Basically, the current
structure favour people buying services outside their own country to
avoid tax. And it isn't just in Canada. (For instance, the small
Canadian streaming services have to charge tax to their customers, but
Netflix doesn't. (google/apple do because they have physical presence here).

BTW, and this is a serious Orwelian thing, foreign providers who
register will be required to give the QC government their customer lists
so that the QC govt can find any tax cheaters who pretend to live in
different province and charhe penalies of $100 or more to those
individuals).

So the QC govt will claim some fairly serious extra-territorial powers.




Re: Québec Sales tax

2018-03-27 Thread Eric Dugas
On the IP geoloc subject, we (EBOX) actually have multiple pools for QC-based 
and ON-based customers. When a customer is provisioned, his service address is 
validated in our system and it auto-populates the Radius profile with a 
different profile for each provinces e.g. fttn-on-50 or fttn-qc-50. I don't see 
why we couldn't do this on Telus in the west (we're currently only servicing QC 
and ON).

On the TPIA side, it's a little bit less easy. I could automatically SWIP 
netblocks from reports we get from the operators to the POI they're configured 
in.
I don't see this as a big issue.
Eric
On Mar 27 2018, at 6:10 pm, Jean-Francois Mezei  
wrote:
>
> Not quite networking but probably relevant.
> The Canadian province of Québec just introduced a new budget with
> basically the intent to force foreign digital companies who sell
> services to Québekers to collect the local value added sales tax and
> remit those to the QC government.
>
> The goal is to capture tax from Netflix who has so far escaped taxation
> in Canada by having no legal/physical presence in Canada, no cache
> servers of its own etc. Netflix does not currently collect province
> information from customers (or any address info for that matter).
>
> They based many of their arguments on an OECD study (which ironically
> the Canadian federal government says is not completed yet (as excuse for
> not proceeding with similar tax).
>
> So foreign digital services will be required to require subscibers enter
> AND VALIDATE their address so that they have an accurate province field
> (validation remains to be finalized), and IF they sell more than $30,000
> to Québec residents, will be required to self register with QC
> government to collect local sales tax (and remit to QC government).
>
> The Québec budget expects that validation of address will be based on IP
> address geolocation or custoemrs send paper bills to prove place of
> residence.
>
> (Although requiring full address/phone number and sendint this to credit
> card network for authorization might constitute a better means to
> validate address).
>
> I suspect the big winners will be VPN services in the USA :-)
> Because many ISPs span multiple provinces, IP geolocation generally
> points to their HQ address, not necessarily the province of the
> subscriber. (This is especially true for DSL in bell Canada wholesale
> where currently a single point of connection between Bell and ISP allows
> full reach of all of its DSL territory in QC/ON. For Cable, ISPs require
> different IP pools for Rogers in Ontario and Vidéotron in Ontario (with
> a couple of exceptions where Vidéotron has service in a couple fo
> Ontario towns). In Western Canada, things are harder as Shaw serves BC,
> AB, SASK and MB.
>



Re: Qu??bec Sales tax

2018-03-27 Thread Ken Chase
If Netflix has no physical presence in Quebec, what the lever are they going
to use to force this? A lawsuit in  in the
US? What court is going to entertain a foreign jurisdiction's tax claim in
their court? And how would that be then enforced?

Canada has tried this before:

https://www.ctvnews.ca/business/u-s-judge-puts-halt-to-canadian-court-order-for-google-to-delist-search-results-1.3663055

Court file: https://scc-csc.lexum.com/scc-csc/scc-csc/en/item/16701/index.do

Im a big fan of Canada standing up for its sovereignty (I live here), but nice
try.

/kc


On Tue, Mar 27, 2018 at 06:10:51PM -0400, Jean-Francois Mezei said:
  >Not quite networking but probably relevant.
  >
  >The Canadian province of Qu??bec just introduced a new budget with
  >basically the intent to force foreign digital companies who sell
  >services to Qu??bekers to collect the local value added sales tax and
  >remit those to the QC government.
  >
  >The goal is to capture tax from Netflix who has so far escaped taxation
  >in Canada by having no legal/physical presence in Canada, no cache
  >servers of its own etc. Netflix does not currently collect province
  >information from customers (or any address info for that matter).
  >
  >They based many of their arguments on an OECD study (which ironically
  >the Canadian federal government says is not completed yet (as excuse for
  >not proceeding with similar tax).
  >
  >So foreign digital services will be required to require subscibers enter
  >AND VALIDATE their address so that they have an accurate province field
  >(validation remains to be finalized), and IF they sell more than $30,000
  >to Qu??bec residents, will be required to self register with QC
  >government to collect local sales tax (and remit to QC government).
  >
  >The Qu??bec budget expects that validation of address will be based on IP
  >address geolocation or custoemrs send paper bills to prove place of
  >residence.
  >
  >(Although requiring full address/phone number and sendint this to credit
  >card network for authorization might constitute a better means to
  >validate address).
  >
  >I suspect the big winners will be VPN services in the USA :-)
  >
  >Because many ISPs span multiple provinces, IP geolocation generally
  >points to their HQ address, not necessarily the province of the
  >subscriber. (This is especially true for DSL in bell Canada wholesale
  >where currently a single point of connection between Bell and ISP allows
  >full reach of all of its DSL territory in QC/ON. For Cable, ISPs require
  >different IP pools for Rogers in Ontario and Vid??otron in Ontario (with
  >a couple of exceptions where Vid??otron has service in a couple fo
  >Ontario towns). In Western Canada, things are harder as Shaw serves BC,
  >AB, SASK and MB.

--
Ken Chase - m...@sizone.org Guelph Canada


Québec Sales tax

2018-03-27 Thread Jean-Francois Mezei
Not quite networking but probably relevant.

The Canadian province of Québec just introduced a new budget with
basically the intent to force foreign digital companies who sell
services to Québekers to collect the local value added sales tax and
remit those to the QC government.

The goal is to capture tax from Netflix who has so far escaped taxation
in Canada by having no legal/physical presence in Canada, no cache
servers of its own etc. Netflix does not currently collect province
information from customers (or any address info for that matter).

They based many of their arguments on an OECD study (which ironically
the Canadian federal government says is not completed yet (as excuse for
not proceeding with similar tax).

So foreign digital services will be required to require subscibers enter
AND VALIDATE their address so that they have an accurate province field
(validation remains to be finalized), and IF they sell more than $30,000
to Québec residents, will be required to self register with QC
government to collect local sales tax (and remit to QC government).

The Québec budget expects that validation of address will be based on IP
address geolocation or custoemrs send paper bills to prove place of
residence.

(Although requiring full address/phone number and sendint this to credit
card network for authorization might constitute a better means to
validate address).

I suspect the big winners will be VPN services in the USA :-)

Because many ISPs span multiple provinces, IP geolocation generally
points to their HQ address, not necessarily the province of the
subscriber. (This is especially true for DSL in bell Canada wholesale
where currently a single point of connection between Bell and ISP allows
full reach of all of its DSL territory in QC/ON. For Cable, ISPs require
different IP pools for Rogers in Ontario and Vidéotron in Ontario (with
a couple of exceptions where Vidéotron has service in a couple fo
Ontario towns). In Western Canada, things are harder as Shaw serves BC,
AB, SASK and MB.


Re: How does ER Infinity Hold up?

2018-03-27 Thread Jason Kuehl
UBNT’s recent hostility to the open source community

What do you mean by that?

On Tue, Mar 27, 2018, 12:02 PM Owen DeLong  wrote:

> I don’t know about the device itself, but given UBNT’s recent hostility to
> the
> open source community, I won’t be buying their products anyway.
>
> Owen
>
> > On Mar 27, 2018, at 00:16 , howard stearn  wrote:
> >
> > I've seen this list looking for inexpensive routers before, so i'm
> > wondering. . . Since this was released rather recently, Is anyone using
> > ER-8-XG to receive a full bgp table yet? (Yes BGP and are you neighbored
> > with 1, 2, 10, 40 peers?)
> > https://dl.ubnt.com/datasheets/edgemax/EdgeRouter_ER-8-XG_DS.pdf
> >
> > How does it stack up against Cisco, or your other previous router?
> >
> > What's the lookup time on a new unknown destination?
>
>


Re: How does ER Infinity Hold up?

2018-03-27 Thread Justin Wilson
My biggest issue with the ER Infinity is you can’t individually set the speed 
on ports.  You have to set them in groups of 4, which is a major bummer.   We 
are getting ready to put one into production as soon as I figure out some more 
details on communities.

I am intrigued by Owen’s comments on their Open Source hostility.  I need to 
look into this.

Justin Wilson
j...@mtin.net

www.mtin.net
www.midwest-ix.com

> On Mar 27, 2018, at 11:59 AM, Owen DeLong  wrote:
> 
> I don’t know about the device itself, but given UBNT’s recent hostility to the
> open source community, I won’t be buying their products anyway.
> 
> Owen
> 
>> On Mar 27, 2018, at 00:16 , howard stearn  wrote:
>> 
>> I've seen this list looking for inexpensive routers before, so i'm
>> wondering. . . Since this was released rather recently, Is anyone using
>> ER-8-XG to receive a full bgp table yet? (Yes BGP and are you neighbored
>> with 1, 2, 10, 40 peers?)
>> https://dl.ubnt.com/datasheets/edgemax/EdgeRouter_ER-8-XG_DS.pdf
>> 
>> How does it stack up against Cisco, or your other previous router?
>> 
>> What's the lookup time on a new unknown destination?
> 



Re: How does ER Infinity Hold up?

2018-03-27 Thread Owen DeLong
I don’t know about the device itself, but given UBNT’s recent hostility to the
open source community, I won’t be buying their products anyway.

Owen

> On Mar 27, 2018, at 00:16 , howard stearn  wrote:
> 
> I've seen this list looking for inexpensive routers before, so i'm
> wondering. . . Since this was released rather recently, Is anyone using
> ER-8-XG to receive a full bgp table yet? (Yes BGP and are you neighbored
> with 1, 2, 10, 40 peers?)
> https://dl.ubnt.com/datasheets/edgemax/EdgeRouter_ER-8-XG_DS.pdf
> 
> How does it stack up against Cisco, or your other previous router?
> 
> What's the lookup time on a new unknown destination?



Re: CDN-provided caching platforms?

2018-03-27 Thread valdis . kletnieks
On Tue, 27 Mar 2018 02:26:24 -, Russell Berg said:

> I was wondering if there are other CDN caching platforms out there we should
> be researching/deploying?

Does traffic analysis show any other destinations that have enough traffic that
caching might help?



pgpuOk1TczoI0.pgp
Description: PGP signature


RE: CDN-provided caching platforms?

2018-03-27 Thread Luke Guillory
Concurrent is one of them, we use Qwilt but that will get expensive really 
quick with their licensing.

https://www.concurrent.com/laguna-cache/




Luke

ns






-Original Message-
From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Mike Hammett
Sent: Tuesday, March 27, 2018 8:41 AM
Cc: nanog@nanog.org
Subject: Re: CDN-provided caching platforms?

Wondering the same, but for IXes.

There's an open caching server effort, but open seems to be relative. They 
still want you to spend a boatload of money for a box from one of their 
vendors. I forget its name at the moment.




-
Mike Hammett
Intelligent Computing Solutions

Midwest Internet Exchange

The Brothers WISP

- Original Message -

From: "Russell Berg" 
To: nanog@nanog.org
Sent: Monday, March 26, 2018 9:26:24 PM
Subject: CDN-provided caching platforms?

I work for a regional Midwestern US "Tier 2" ISP that provides both wholesale 
and enterprise Internet connectivity. We have caching platforms in place from 
the likes of Akamai, Google, Netflix, and Facebook; I was wondering if there 
are other CDN caching platforms out there we should be researching/deploying? 
PM me if more appropriate...

TIA

Russ

Russell Berg
Chief Technology Officer
WIN / Airstream Communications (AS 11796)
P: 715-832-3726 | C: 715-579-8227
www.wins.net





Re: CDN-provided caching platforms?

2018-03-27 Thread Dan White

Valve/Steam.

On 03/27/18 02:26 +, Russell Berg wrote:

I work for a regional Midwestern US "Tier 2" ISP that provides both
wholesale and enterprise Internet connectivity.  We have caching platforms
in place from the likes of Akamai, Google, Netflix, and Facebook; I was
wondering if there are other CDN caching platforms out there we should be
researching/deploying? PM me if more appropriate...


--
Dan White
BTC Broadband
Network Admin Lead
Ph  918.366.0248 (direct)   main: (918)366-8000
Fax 918.366.6610email: dwh...@mybtc.com
http://www.btcbroadband.com


Re: CDN-provided caching platforms?

2018-03-27 Thread Mike Hammett
Wondering the same, but for IXes. 

There's an open caching server effort, but open seems to be relative. They 
still want you to spend a boatload of money for a box from one of their 
vendors. I forget its name at the moment. 




- 
Mike Hammett 
Intelligent Computing Solutions 

Midwest Internet Exchange 

The Brothers WISP 

- Original Message -

From: "Russell Berg"  
To: nanog@nanog.org 
Sent: Monday, March 26, 2018 9:26:24 PM 
Subject: CDN-provided caching platforms? 

I work for a regional Midwestern US "Tier 2" ISP that provides both wholesale 
and enterprise Internet connectivity. We have caching platforms in place from 
the likes of Akamai, Google, Netflix, and Facebook; I was wondering if there 
are other CDN caching platforms out there we should be researching/deploying? 
PM me if more appropriate... 

TIA 

Russ 

Russell Berg 
Chief Technology Officer 
WIN / Airstream Communications (AS 11796) 
P: 715-832-3726 | C: 715-579-8227 
www.wins.net 




CDN-provided caching platforms?

2018-03-27 Thread Russell Berg
I work for a regional Midwestern US "Tier 2" ISP that provides both wholesale 
and enterprise Internet connectivity.  We have caching platforms in place from 
the likes of Akamai, Google, Netflix, and Facebook; I was wondering if there 
are other CDN caching platforms out there we should be researching/deploying? 
PM me if more appropriate...

TIA

Russ

Russell Berg
Chief Technology Officer
WIN / Airstream Communications (AS 11796)
P: 715-832-3726 | C: 715-579-8227
www.wins.net



How does ER Infinity Hold up?

2018-03-27 Thread howard stearn
I've seen this list looking for inexpensive routers before, so i'm
wondering. . . Since this was released rather recently, Is anyone using
ER-8-XG to receive a full bgp table yet? (Yes BGP and are you neighbored
with 1, 2, 10, 40 peers?)
https://dl.ubnt.com/datasheets/edgemax/EdgeRouter_ER-8-XG_DS.pdf

How does it stack up against Cisco, or your other previous router?

What's the lookup time on a new unknown destination?


Problems with Skype video - outgoing calls only

2018-03-27 Thread Igor Krneta

Hi guys,

last few days we have a several of our customers complaining about weird 
problem with skype video chat.


When they try to initiate video call from their computer, call fails and 
receiving side gets notification that they were called. But when 
receiving side tries to call them, call gets through immediately, no 
problems.


This affects only video calls. Audio calls, chat, file transfer, group 
conference all work without any problems during the same session. And we 
have sent our tech's to customer premises with our own equipment.


They too have the same problem while on location while using our 
laptops/phones/tablets.


After customers started complaining, we switched their IP address to 
some of our other IP ranges and problem was gone for some time.


Now, we have started getting reports of skype video not working from our 
other IP ranges.


What's most frustrating about this problem is that it's not a problem 
for all users in particular subnet, only a few of them at time. For 
others, everything works as usual.


We have checked and double checked everything about our network, and all 
is well and in normal parameters.


No new firewalls/rules/equipment change/updates

Anyone having same issues maybe ?


Sincerely,

Igor Krneta

Elta Kabel d.o.o.





Re: Spiffy Netflow tools?

2018-03-27 Thread Nick Hilliard
Stipo wrote:
>  +1 ElastiFlow, the templates are great, a great quickstart to using
> netflow on elk stack.

out of curiosity, I set up a test ElastiFlow installation on a small
site recently.  It's completely gorgeous from an eye candy point of view
and it's pretty easy to see how you could tap into the ELK APIs to do
interesting data mangling.

On the down-side, it used ~40x the amount of disk space that nfsen used
for the same accounting period, and even though it was only handling
less than 1G traffic at a NF sample rate of 1:10, logstash and
elastisearch managed to peg between 4-6 cores on the server which was
handling it.  Granted, these were only E5606 (2011-era Westmere Xeon)
cpus, but even still there was an alarming mismatch between the amount
of compute power required compared to the amount of netflow traffic
being handled.  It would be interesting to hear the sort of cpu
requirements needed for larger installations. Obviously you can scale
elkstack sideways, so it wouldn't be difficult to build out something
which performed well.  The issue is that burning cpu time can become an
expensive proposition.

Nick