Re: Web/Streaming issues

2017-02-14 Thread Christopher Morrow
On Mon, Feb 13, 2017 at 1:49 PM, Art Stephens wrote: > Been getting complaints from customers about web services such Netflix, > Youtube, Facebook and Snapchat either slow to load or not loading at all > and yet speed tests seem to be ok. > > speed tests aren't necessarily related at all with (at

Re: backbones filtering unsanctioned sites

2017-02-13 Thread Christopher Morrow
On Mon, Feb 13, 2017 at 4:53 PM, Jean-Francois Mezei < jfmezei_na...@vaxination.ca> wrote: > > > Cogent seems to have been very very silent on the issue. > > why would they say anything at all? it's blatantly clear what's happened, right? "lea order to block access" no explanation necessary. >

Re: YouTube streaming failures

2017-02-12 Thread Christopher Morrow
verizon wired, comcast (on a mobile device) both work in IAD's area. On Sun, Feb 12, 2017 at 8:53 PM, Patrick W. Gilmore wrote: > I cannot stream on AppleTV or iPhone. Works on my laptop. > > Comcast, Massachusetts. > > -- > TTFN, > patrick > > > On Feb 12, 2017, at 8:08 PM, Brett A Mansfield <

Re: backbones filtering unsanctioned sites

2017-02-10 Thread Christopher Morrow
On Fri, Feb 10, 2017 at 5:30 PM, Ken Chase wrote: > If its not just cogent then we have an even larger issue -- that > theres asymetric application of rulings. So we should just assume > that if we can't get to something via cogent then all backbones > within the same jurisdiction(*) should or wi

Re: backbones filtering unsanctioned sites

2017-02-10 Thread Christopher Morrow
On Fri, Feb 10, 2017 at 2:08 PM, Ken Chase wrote: > >"Abuse cannot not provide you a list of websites that may be > encountering > >reduced visibility via Cogent" > > They could, if they kept a list of forward lookups they had done to get IPs > i think you mean passive-dns .. which is a thin

Re: backbones filtering unsanctioned sites

2017-02-10 Thread Christopher Morrow
his. > > I bet an answer from cogent here is: "you can always TE around 174" that's hard for end-users, but the direct customer can certainly do this... and yea, sucks :( > /kc > > > On Fri, Feb 10, 2017 at 03:03:11PM -0500, Christopher Morrow said: >

Re: backbones filtering unsanctioned sites

2017-02-10 Thread Christopher Morrow
On Fri, Feb 10, 2017 at 1:39 PM, Mike Hammett wrote: > Have we determined that this is intentional vs. some screw up? > > if you look at the cogent LG it's pretty clear that the announce reachability for the /20 that includes the tpb /32.. and that the /32 is particularly routed elsewhere, and th

Re: backbones filtering unsanctioned sites

2017-02-10 Thread Christopher Morrow
On Fri, Feb 10, 2017 at 6:47 AM, Robert McKay wrote: > On 2017-02-10 04:18, Ken Chase wrote: > >> https://torrentfreak.com/internet-backbone-provider-cogent- >> blocks-pirate-bay-and-other-pirate-sites-170209/ >> >> /kc >> > > Strange indeed.. but they forgot to ban it on IPv6 - maybe they're try

Re: IPv6-enabled multi-factor providers (not DUO)

2017-02-02 Thread Christopher Morrow
On Thu, Feb 2, 2017 at 11:32 AM, David Sotnick wrote: > Hi NANOG, > > (Apologies if this is slightly off-topic; there are a lot of IPv6-advocates > here who might have some insights). > > At my day job, we use Duo Security for MFA. It works well, with the caveats > that it's cloud-based and heavi

Re: OmanTel hijacking of IP space

2017-01-11 Thread Christopher Morrow
On Wed, Jan 11, 2017 at 10:50 AM, Jared Mauch wrote: > 206.125.164.0 thanks to everyone who's (not) filtering. You're making the internet a little (less) better each time this happens.. What year is it?

Re: SoCal FIOS outage(?) / static IP readdressing

2017-01-04 Thread Christopher Morrow
On Wed, Jan 4, 2017 at 4:53 PM, Paul B. Henson wrote: > > From: Christopher Morrow > > Sent: Wednesday, January 04, 2017 8:42 AM > > > > and think about it, you could get ipv6 on your network... the OP still > > doesn't have that native on his fios I bet. &g

Re: SoCal FIOS outage(?) / static IP readdressing

2017-01-04 Thread Christopher Morrow
On Wed, Jan 4, 2017 at 8:37 AM, Jared Mauch wrote: > > > On Jan 4, 2017, at 7:54 AM, Baldur Norddahl > wrote: > > > > I solved this issue by making my own ISP. > > I’ve been thinking of the same in my underserved area. Labor is $5/foot > here and despite friends and colleagues telling me to mov

Re: Benefits (and Detriments) of Standardizing Network Equipment in a Global Organization

2016-12-28 Thread Christopher Morrow
On Wed, Dec 28, 2016 at 1:39 PM, Chris Grundemann wrote: > On Tue, Dec 27, 2016 at 3:10 PM, Leo Bicknell wrote: > > > 2 Vendor > > > > Can be implemented multiple ways, for instance 1 vendor per site > > alternating sites, or gear deployed in pairs with one from each vendor > > up and down the s

Re: BCP38 and Red Hat

2016-12-15 Thread Christopher Morrow
On Thu, Dec 15, 2016 at 9:48 AM, Stephen Satchell wrote: > https://bugzilla.redhat.com/show_bug.cgi?id=1370963 > > Just a reminder that I have a feature request outstanding with Red Hat > to add support for BCP38, as well as measures for certain protocol-based > amplification reflection attacks.

Re: Forwarding issues related to MACs starting with a 4 or a 6 (Was: [c-nsp] Wierd MPLS/VPLS issue)

2016-12-02 Thread Christopher Morrow
On Fri, Dec 2, 2016 at 11:07 AM, Christopher Morrow wrote: > > > On Fri, Dec 2, 2016 at 11:02 AM, Simon Lockhart wrote: > >> On Fri Dec 02, 2016 at 10:29:56AM -0500, Christopher Morrow wrote: >> >> 2^(8*9216) is quite a lot of different packets to test through th

Re: Forwarding issues related to MACs starting with a 4 or a 6 (Was: [c-nsp] Wierd MPLS/VPLS issue)

2016-12-02 Thread Christopher Morrow
On Fri, Dec 2, 2016 at 11:02 AM, Simon Lockhart wrote: > On Fri Dec 02, 2016 at 10:29:56AM -0500, Christopher Morrow wrote: > > you'd think standard testing of traffic through the asic path somewhere > > between 'let's design an asic!' and 'here's yo

Re:

2016-12-02 Thread Christopher Morrow
On Fri, Dec 2, 2016 at 6:08 AM, Rich Kulawiec wrote: > > We are busy trying to support a domain name system that is two to > three orders of magnitude larger (as measured by domains) than it > should be or needs to be. > > that statement seems ... hard to prove. also, what does it matter the size

Re: Forwarding issues related to MACs starting with a 4 or a 6 (Was: [c-nsp] Wierd MPLS/VPLS issue)

2016-12-02 Thread Christopher Morrow
On Fri, Dec 2, 2016 at 9:32 AM, Job Snijders wrote: > > Dear Vendors, take this issue more serious. Realise that for operators > these issues are _extremely_ hard to debug, this is an expensive time > sink. Some of these issues are only visible under very specific, rare > circumstances, much like

Re: NEVERMIND! (was: Seeking Google reverse DNS delegation contact)

2016-11-16 Thread Christopher Morrow
On Sun, Nov 13, 2016 at 3:57 PM, Christopher Morrow wrote: > So... actually someone did tell arin to aim these at ns1/2google.com... > I'll go ask arin to 'fix the glitch'. > > the glitch got fixed, shortly after this message, but not by my/our doing... hrm.. I see

Re: NEVERMIND! (was: Seeking Google reverse DNS delegation contact)

2016-11-13 Thread Christopher Morrow
So... actually someone did tell arin to aim these at ns1/2google.com... I'll go ask arin to 'fix the glitch'. thanks! -chris (sometimes people do this, I have no idea why... perhaps they just like broken ptrs?) On Thu, Nov 10, 2016 at 10:05 PM, Ronald F. Guilmette wrote: > > > My profuse apolog

Re: Another day, another illicit SQUAT - WebNX (AS18450) 103.11.67.0/24

2016-10-31 Thread Christopher Morrow
On Fri, Oct 28, 2016 at 7:36 PM, Ronald F. Guilmette wrote: > In my own defense, I didn't see the ARIN allocation because I have a > normative process that I use for looking up IP addresses. It's > hierarchical, and I always start with whatver whois.iana.org has to > say. And it says that that

Re: Death of WHOIS, Film at 11

2016-10-30 Thread Christopher Morrow
On Sat, Oct 29, 2016 at 11:05 PM, Ronald F. Guilmette wrote: > > known inaccurante answers > I'm betting that the operators of the named whois servers believe the information is as accurate as they can provide, right?

Re: Large BGP Communities beacon in the wild

2016-10-27 Thread Christopher Morrow
On Thu, Oct 27, 2016 at 5:28 PM, James Bensley wrote: > > > Name and shame, it is not acceptable! > > read the IDR thread(1), the vendors in question actually self reported. I don't think 'shame' here is quite appropriate, but certainly owen's note about: "Hey, pls don't do this again" with the a

Re: Should abuse mailboxes have quotas?

2016-10-27 Thread Christopher Morrow
On Thu, Oct 27, 2016 at 2:35 PM, Dan Hollis wrote: > On Thu, 27 Oct 2016, Christopher Morrow wrote: > >> On Thu, Oct 27, 2016 at 11:03 AM, Stephen Satchell >> wrote: >> >>> I'm tired of blatantly uncaring administrations. >>> >> it'

Re: Should abuse mailboxes have quotas?

2016-10-27 Thread Christopher Morrow
On Thu, Oct 27, 2016 at 11:03 AM, Stephen Satchell wrote: > > I'm tired of blatantly uncaring administrations. > it's also totally possible that in some cases the mailbox for abuse@ got moved behind some orgs other mail systems... This happened numerous times at $PREVIOUS_EMPLOYER. When moving

Re: AS47860 - 93.175.240.0/20 - Wiskey Tango Foxtrot

2016-10-05 Thread Christopher Morrow
On Wed, Oct 5, 2016 at 7:55 PM, Ronald F. Guilmette wrote: > > > > P.S. This crap appears to be be brought to us courtesy of AS29632, > NetAssist, LLC: > > http://new.netassist.ua/ > > So anyway, where are the grownups? > clearly whomever provides transit to 29632... probably worth hunting

Re: Questions re: VPN protocols globally

2016-10-05 Thread Christopher Morrow
On Tue, Oct 4, 2016 at 11:15 PM, Eric Germann wrote: > I’ve been charged with building a global VPN as an overlay on top of a > certain 3 letter company who also sells lots of stuff. > > you say 'vpn' do you mean 'mpls vpn' or 'ipsec vpn over intertubes' ? > We’re looking at > > US East > US We

Re: Krebs on Security booted off Akamai network after DDoS attack proves pricey

2016-09-26 Thread Christopher Morrow
On Mon, Sep 26, 2016 at 7:49 PM, Mark Andrews wrote: > > Giving them real time access to the anomalous traffic log feed for > their residence would also help. They or the specialist they bring > in will be able to use that to trace back the problem. > > wouldn't this work better as a standard bi

Re: Krebs on Security booted off Akamai network after DDoS attack proves pricey

2016-09-24 Thread Christopher Morrow
On Sat, Sep 24, 2016 at 2:43 PM, Niels Bakker wrote: > * morrowc.li...@gmail.com (Christopher Morrow) [Sat 24 Sep 2016, 18:55 > CEST]: > >> boy, it'd sure be nice if there were some 'science' and 'measurement' >> behind such statements. >> Di

Re: Krebs on Security booted off Akamai network after DDoS attack proves pricey

2016-09-24 Thread Christopher Morrow
On Sat, Sep 24, 2016 at 12:28 PM, Bill Woodcock wrote: > > > On Sep 24, 2016, at 7:47 AM, John Levine wrote: > > > >>> Well...by anycast, I meant BGP anycast, spreading the "target" > >>> geographically to a dozen or more well connected/peered origins. At > that > >>> point, your ~600G DDoS mig

Re: Krebs on Security booted off Akamai network after DDoS attack proves pricey

2016-09-23 Thread Christopher Morrow
On Fri, Sep 23, 2016 at 10:13 PM, Jon Lewis wrote: > On Fri, 23 Sep 2016, Christopher Morrow wrote: > > On Fri, Sep 23, 2016 at 9:24 PM, Jon Lewis wrote: >> >> On Fri, 23 Sep 2016, Patrick W. Gilmore wrote: >>> >>> Is CloudFlare able to fil

Re: Krebs on Security booted off Akamai network after DDoS attack proves pricey

2016-09-23 Thread Christopher Morrow
On Fri, Sep 23, 2016 at 9:24 PM, Jon Lewis wrote: > On Fri, 23 Sep 2016, Patrick W. Gilmore wrote: > > Is CloudFlare able to filter Layer 7 these days? I was under the >> impression CloudFlare was not able to do that. >> >> There have been a lot of rumors about this attack. Some say reflection, >

Re: "Defensive" BGP hijacking?

2016-09-20 Thread Christopher Morrow
On Tue, Sep 20, 2016 at 8:05 AM, John Curran wrote: > On Sep 19, 2016, at 11:58 PM, Christopher Morrow > wrote: > > > > (caution! I don't really think arin is evil!) > > Nor do I… (but I will remind folks that organizations evolve based on > participa

Re: "Defensive" BGP hijacking?

2016-09-19 Thread Christopher Morrow
(caution! I don't really think arin is evil!) On Mon, Sep 19, 2016 at 1:16 PM, John Curran wrote: > On Sep 14, 2016, at 4:59 PM, Christopher Morrow > wrote: > > > > On Wed, Sep 14, 2016 at 4:04 PM, Bryan Fields > wrote: > > > >> On 9/14/16 3:09 AM,

Re: "Defensive" BGP hijacking?

2016-09-18 Thread Christopher Morrow
On Fri, Sep 16, 2016 at 12:06 PM, Mel Beckman wrote: > > Preventing government manhandling needs to be a design goal. > Can you proffer some potential solutions or directions to look? At the end of the day the ISP or DNS operator or Enterprise is subject to local law enforcement action(s), so I

Re: "Defensive" BGP hijacking?

2016-09-14 Thread Christopher Morrow
On Wed, Sep 14, 2016 at 4:04 PM, Bryan Fields wrote: > On 9/14/16 3:09 AM, Scott Weeks wrote: > > > > Yes, RPKI. That's what I was waiting for. Now we can get to > > a real discussion > > Problem is, RPKI does not work for people with legacy blocks who will not > sign > a Legacy RSA. ARIN does

Re: Looking for recommendations for a dedicated ping responder

2016-09-09 Thread Christopher Morrow
On Fri, Sep 9, 2016 at 4:17 PM, Jared Mauch wrote: > > > On Sep 9, 2016, at 4:08 PM, Dan White wrote: > > > > We're being caught up in some sort of peering dispute between Level 3 and > > Google (in the Dallas area), and we've fielded several calls from larger > > customers complaining of 40-50%

Re: CAIDA selected by FCC for internet performance measurement

2016-08-12 Thread Christopher Morrow
isn't this what KC presented like 3 nanogs ago? On Fri, Aug 12, 2016 at 4:41 PM, Scott Weeks wrote: > > > --- s...@donelan.com wrote: > From: Sean Donelan > > CAIDA has submitted to the FCC its initial proposal for > measuring internet interconnection point performance > metrics as part of the

Re: Host.us DDOS attack -and- related conversations

2016-08-04 Thread Christopher Morrow
"it's good that there aren't any easy solutions to this sort of problem..." On Thu, Aug 4, 2016 at 12:03 PM, Robert Webb wrote: > Looks like ATL01 is down again hard. > > Although, as someone else mentioned earlier, IPv6 seems to be just fine. > > Robert > > On Wed, Aug 3, 2016 at 12:40 PM, Phil

Re: Host.us DDOS attack -and- related conversations

2016-08-03 Thread Christopher Morrow
it's good that there aren't any easy solutions to this sort of problem... wait... that's wrong, there are. On Wed, Aug 3, 2016 at 12:04 PM, Robert Webb wrote: > Thanks for that link. My host is sitting in Atlanta and I believe that > Atlanta hosts their main infrastructure. > > I am seeing arou

Re: Host.us DDOS attack -and- related conversations

2016-08-03 Thread Christopher Morrow
On Wed, Aug 3, 2016 at 10:40 AM, James Bensley wrote: > How will > BCP save you then? Can everyone stop praising it like it was a some > magic bullet? > aren't you making a 'perfect is the enemy of good' argument here? 'seatbelts don't solve all car crash deaths, so let's just go mad-max!'

Re: NFV Solution Evaluation Methodology

2016-08-03 Thread Christopher Morrow
On Wed, Aug 3, 2016 at 8:20 AM, Ca By wrote: > > > On Wednesday, August 3, 2016, Randy Bush wrote: > >> > but, NFV isn't necessarily 'cloud'... It CAN BE taking purpose built >> > appliance garbage that can't scale in a cost effective manner and >> > replacing it with some software solution on '

Re: NFV Solution Evaluation Methodology

2016-08-02 Thread Christopher Morrow
On Tue, Aug 2, 2016 at 10:16 PM, Eric Kuhnke wrote: > But but but... cloud! THE CLOUD! Cloudy clouds fluffy white flying > through the air, you should move everything to the Cloud (tm). > > Sometimes people forget that *somebody* needs to run the bare metal and OSI > layer 1 things that physic

Re: EVERYTHING about Booters (and CloudFlare)

2016-07-27 Thread Christopher Morrow
On Thu, Jul 28, 2016 at 3:55 AM, Miles Fidelman wrote: > > > On 7/27/16 10:48 PM, Randy Bush wrote: > >> They just lost all respect from here. Would someone from USA please >>> report these guys to the feds? What they are doing is outright >>> criminal. >>> >> hyperbole. it is not criminal. you

Re: EVERYTHING about Booters (and CloudFlare)

2016-07-27 Thread Christopher Morrow
On Wed, Jul 27, 2016 at 10:58 AM, Paras Jha wrote: > I consistently did not even get replies This is a common 'complaint' point for abuse senders. I often wonder why. What is a reply supposed to do or tell you?

Re: Google NOC Contact?

2016-07-18 Thread Christopher Morrow
replying offlist (I'm sure I'm not the only one) On Mon, Jul 18, 2016 at 4:30 PM, Nick Olsen wrote: > Wondering if anyone from the Google NOC is on-list. > > Having issues reaching your authoritative name servers that appear to be > anycasted on Level3's network. > > Traffic to your name serve

Re: Bitcoin mining reward halved

2016-07-09 Thread Christopher Morrow
On Sat, Jul 9, 2016 at 3:10 PM, Jimmy Hess wrote: > On Sat, Jul 9, 2016 at 2:04 PM, wrote: > > Hi, > > Blockchain-based replacement for RPKI involving encoding of > IP address registry registrations assigned to a Network operator's > specified Org ID wallet, And LOAs for propagating the an

Re: New ICANN registrant change process

2016-07-06 Thread Christopher Morrow
On Wed, Jul 6, 2016 at 10:17 PM, David Conrad wrote: > On Jul 6, 2016, at 10:41 AM, Christopher Morrow > wrote: > > Perhaps this all self-polices? > > I figure either it does or governments get involved and that most likely > ends in tears. > > I can't wait for

Re: New ICANN registrant change process

2016-07-06 Thread Christopher Morrow
On Wed, Jul 6, 2016 at 4:04 PM, David Conrad wrote: > Depends on whether or not the Registry wants their TLD to be associated >> with spam/malware distribution/botnet C&C/phishing/pharming and be removed >> at resolvers via RPZ or similar. Ultimately, the Registries are responsible >> for the poo

Re: New ICANN registrant change process

2016-07-06 Thread Christopher Morrow
On Wed, Jul 6, 2016 at 2:53 PM, David Conrad wrote: > On Jul 6, 2016, at 7:23 AM, Christopher Morrow > wrote: > > On Mon, Jul 4, 2016 at 3:03 PM, Jay Ashworth wrote: > >> Seems to me that the proper thing to be done would have been for > >> Registries to deautho

Re: New ICANN registrant change process

2016-07-06 Thread Christopher Morrow
On Mon, Jul 4, 2016 at 3:03 PM, Jay Ashworth wrote: > Seems to me that the proper thing to be done would have been for > Registries to deauthorize registrars on the grounds of continuous streams > of complaints. > > On what metric? Pure volume? Percent of registrations? type of complaint by simi

Re: IPv6 deployment excuses

2016-07-04 Thread Christopher Morrow
On Mon, Jul 4, 2016 at 12:28 PM, Matt Hoppes < mattli...@rivervalleyinternet.net> wrote: > Except the lady will eventually downsize. The college student will want > more and lease the space. > > Also, the 49,000 Sq ft office space that has been leased for 10 years and > never occupied will be take

Re: Quick question regarding: Problematic IPv6 Multicast traffic within an IX.

2016-06-25 Thread Christopher Morrow
On Sat, Jun 25, 2016 at 6:29 AM, Bruce Simpson wrote: > On 24/06/16 18:31, joel jaeggli wrote: > >> you can filter multicast destination addresses by acl. >> >> NDP you kinda need since it replaces ARP >> >> RA's you can and should filter (icmp6 type 134) >> > > Data point, although the chances o

Re: IPv4 Legacy assignment frustration

2016-06-21 Thread Christopher Morrow
how is this a problem with the RIR ? On Tue, Jun 21, 2016 at 11:01 PM, Suresh Ramasubramanian < ops.li...@gmail.com> wrote: > There is absolutely no budgeting for idiots. Beyond a long hard process > that is helped by internal escalations from affected people on a corporate > network - ideally

Re: Timeouts Loading Major Websites

2016-06-21 Thread Christopher Morrow
"the internet is on fire" not as helpful a troublereport as one might want. please provide at least (so everyone else can verify/help/troubleshoot): 1) from location X 2) site Y with protocol Z (which resolves to a.b.c.d currently) 3) traceroute to siteY (address a.b.c.d) otherwise... "sur

Re: Enough about Netflix banning HE tunnels [really: IPv6 adoption]

2016-06-13 Thread Christopher Morrow
On Fri, Jun 10, 2016 at 4:21 PM, wrote: > On Fri, 10 Jun 2016 20:12:43 -, "STARNES, CURTIS" said: > > and the Chromebook content filtering is not IPv6 compatible either > > So what are you using for content filtering? A quick google search > indicates that there do exist filtering solutions t

Re: intra-AS messaging for route leak prevention

2016-06-10 Thread Christopher Morrow
On Fri, Jun 10, 2016 at 1:17 PM, Mark Tinka wrote: > > > On 10/Jun/16 19:08, Christopher Morrow wrote: > > > > ​oh, so I didn't misunderstand.. that makes 'backup isp' less useful, no?​ > > > > With regard to reaching our network, not true. You wo

Re: Equinix IX Port Moves

2016-06-10 Thread Christopher Morrow
t; > Midwest-IX > http://www.midwest-ix.com > > - Original Message - > > From: "Christopher Morrow" > To: "Mike Hammett" > Cc: "NANOG" > Sent: Friday, June 10, 2016 9:46:17 AM > Subject: Re: Equinix IX Port Moves > > > &

Re: intra-AS messaging for route leak prevention

2016-06-10 Thread Christopher Morrow
On Fri, Jun 10, 2016 at 1:05 PM, Mark Tinka wrote: > > > On 10/Jun/16 16:47, Christopher Morrow wrote: > > > > ​so I can't be a customer of you and a network you peer with? > > > You can, but we won't learn your paths via the peering session we would &

Re: intra-AS messaging for route leak prevention

2016-06-10 Thread Christopher Morrow
On Tue, Jun 7, 2016 at 2:35 AM, Mark Tinka wrote: > One thing we do to reduce opportunistically hazardous vectors is to not > learn customer paths via peers. > ​so I can't be a customer of you and a network you peer with? (I'm sure I got your meaning wrong)​

Re: Equinix IX Port Moves

2016-06-10 Thread Christopher Morrow
On Fri, Jun 10, 2016 at 10:00 AM, Mike Hammett wrote: > Who has moved an Equinix IX port? We're told that it's a full > cancellation, re-order, re IPs, re-peering, etc. > > Can anyone lend any input either way on that? > > ​there are 2 meanings (at least) to 'move', did you mean: 1) move port f

Re: IPv6 is better than ipv4

2016-06-07 Thread Christopher Morrow
On Tue, Jun 7, 2016 at 7:51 AM, Mikael Abrahamsson wrote: > Slashdot, Github etc, still no IPv6 though. ​oddly github has ipv6 being announced from their ASN: AS​36459 | 2620:112:3000::/44 | GITHUB - GitHub, Inc., US

Re: Netflix VPN detection - actual engineer needed

2016-06-06 Thread Christopher Morrow
On Mon, Jun 6, 2016 at 3:30 PM, Aled Morris wrote: > Maybe HE's IPv6 tunnel packets could be flagged with a destination option > (extension header field) that records the end-user's IPv4 tunnel endpoint > so geolocation could be done in the "old fashioned" way on that address. > > Similar to the

Re: Netflix VPN detection - actual engineer needed

2016-06-05 Thread Christopher Morrow
On Sun, Jun 5, 2016 at 8:15 PM, Laszlo Hanyecz wrote: > For P2P stuff it's a way to get around NAT - you can get inbound torrent > connections or host a shooting game match on your desktop behind the NAT > router. ​but to be fair, stun/ice/upnp has made all that work for 'years'...​

Re: Netflix VPN detection - actual engineer needed

2016-06-05 Thread Christopher Morrow
On Sun, Jun 5, 2016 at 6:48 PM, Damian Menscher wrote: > I suggest you focus your efforts on bringing native IPv6 to the masses, not > criticizing service providers for defending themselves against abuse, just > because that abuse happens to be over a network (HE tunnel broker; Tor; > etc) you su

Re: IPv6 is better than ipv4

2016-06-02 Thread Christopher Morrow
On Thu, Jun 2, 2016 at 3:37 PM, Jeff McAdams wrote: > On Thu, June 2, 2016 13:31, Christopher Morrow wrote: > > On Thu, Jun 2, 2016 at 1:17 PM, Mike Hammett wrote: > > >> Yes. > >> > > ​REALLY??? I mean REALLY? people that operate networks haven't haven&

Re: IPv6 is better than ipv4

2016-06-02 Thread Christopher Morrow
to matter... I mean, if you haven't gotten the message now: http://i.imgur.com/8vZOU0T.gif > > > > - > Mike Hammett > Intelligent Computing Solutions > http://www.ics-il.com > > Midwest-IX > http://www.midwest-ix.com > > - Original Message ---

Re: IPv6 is better than ipv4

2016-06-02 Thread Christopher Morrow
On Thu, Jun 2, 2016 at 12:55 PM, Ca By wrote: > > > On Thursday, June 2, 2016, Christopher Morrow > wrote: > >> >> On Thu, Jun 2, 2016 at 12:23 PM, Daniel Corbe >> wrote: >> >>> Maybe we should let people believe that IPv6 is faster than IPv4 e

Re: IPv6 is better than ipv4

2016-06-02 Thread Christopher Morrow
On Thu, Jun 2, 2016 at 12:23 PM, Daniel Corbe wrote: > Maybe we should let people believe that IPv6 is faster than IPv4 even if > objectively that isn’t true. Perhaps that will help speed along the > adoption process. ​do we REALLY think it's still just /marketing problem/ that keeps v6 deploy

Re: IPv6 is better than ipv4

2016-06-02 Thread Christopher Morrow
On Thu, Jun 2, 2016 at 10:47 AM, Ca By wrote: > > https://blogs.akamai.com/2016/06/preparing-for-ipv6-only-mobile-networks-why-and-how.html > > Wherein akamai explains a detailed study showing ipv6 is "well > over 10%" faster than ipv4 on mobile, and they reference corroborating > studies from Li

Re: CALEA

2016-05-31 Thread Christopher Morrow
"Encryption The number of state wiretaps in which encryption was encountered decreased from 41 in 2013 to 22 in 2014. In two of these wiretaps, officials were unable to decipher the plain text of the messages. Three federal wiretaps were reported as being encrypted in 2014, of which two could not

Re: IPv6 Residential Deployment Survey

2016-05-23 Thread Christopher Morrow
rvey … > > ​'don't offer' from the perspective of a client is really: "Did not get" i filled in the survey as a client of the ISP.​ > Saludos, > Jordi > > > -Mensaje original- > De: NANOG en nombre de Christopher Morrow < > morrowc.l

Re: IPv6 Residential Deployment Survey

2016-05-23 Thread Christopher Morrow
On Mon, May 23, 2016 at 10:14 AM, Christopher Morrow < morrowc.li...@gmail.com> wrote: > > > On Mon, May 23, 2016 at 9:34 AM, Bjørn Mork wrote: > >> Got as far as the second page, where I was met by the question >> >> "What technology is used for th

Re: IPv6 Residential Deployment Survey

2016-05-23 Thread Christopher Morrow
On Mon, May 23, 2016 at 9:34 AM, Bjørn Mork wrote: > Got as far as the second page, where I was met by the question > > "What technology is used for the customer link ? >Choose one of the following answers " > > Come on... One technology per ISP? In what world is that? > > ​isn't this one

Re: Comcast DNS Contact

2016-05-16 Thread Christopher Morrow
On Mon, May 16, 2016 at 12:35 PM, wrote: > > Can one of the Comcast DNS guru's contact me reference an issue with a .gov resolution? > > Robert ​out of curiosity, is the .gov problem related to dnssec perhaps?​

Re: CALEA

2016-05-10 Thread Christopher Morrow
On Tue, May 10, 2016 at 4:00 PM, Josh Reynolds wrote: > This is a large list that includes many Tier 1 network operators, > government agencies, and Fortune 500 network operators > ​no one gets calea requests because prism gets all requests?​

Re: sub $500-750 CPE firewall for voip-centric application

2016-05-05 Thread Christopher Morrow
On Thu, May 5, 2016 at 8:27 PM, Jared Mauch wrote: > > > On May 5, 2016, at 4:52 PM, Javier J wrote: > > > > I'm a fan of the EdgeRouterLite3 > > > > > > I don't manage many small businesses networks anymore because we now do > > only 100% cloud and remote work but I started deploying them to al

Re: [Non-DoD Source] Re: G root not responding on UDP?

2016-04-18 Thread Christopher Morrow
On Fri, Apr 15, 2016 at 5:23 PM, Cassell, James D CIV DISA IE (US) < james.d.cassell4@mail.mil> wrote: > Regarding yesterday's G-root outage: > > Like many outages, this one resulted from a series of unfortunate events. > These unfortunate events were operational errors; steps have been taken

Re: Traffic forecasts

2016-04-18 Thread Christopher Morrow
doesn't dyn/renesys provide this as well? On Thu, Apr 14, 2016 at 9:01 AM, Tum Eh wrote: > Dear All, > > Do you use any source other than Telegeography in order to get country's > Internet bandwidth infos, or continent to continent capacities etc. > > BR, > Tum >

Re: Some doubts on large scale BGP/AS design and black hole routing risk

2016-04-04 Thread Christopher Morrow
On Mon, Apr 4, 2016 at 9:29 AM, magicb...@hotmail.com wrote: > Hi guys > > thanks everyone for your replies. > > I'd like to highlight this concept that Christopher gave before: > > ​"different providers, different entrance facilities in the building(s), > different conduits out of the area... "

Re: Some doubts on large scale BGP/AS design and black hole routing risk

2016-04-04 Thread Christopher Morrow
On Sun, Apr 3, 2016 at 6:17 PM, Mark Tinka wrote: > > > On 31/Mar/16 10:12, magicb...@hotmail.com wrote: > > > > > > > My questions are: > > > > 1. What could happen in the case of total failure in the redundant > > leased lines? Black hole routing between POPs? > > If you have redundant backhaul

Re: NTT communications horrible routing, unresponsive NOC

2016-03-23 Thread Christopher Morrow
which route and did you look at their lookingglass during the period of time when things were/are bad to see what the LG saw? https://www.us.ntt.net/support/looking-glass/ shouting into the wind doesn't really help, information though could be helpful. On Wed, Mar 23, 2016 at 7:39 PM, Paras Jha

Re: Cogent - Google - HE Fun

2016-03-18 Thread Christopher Morrow
On Wed, Mar 16, 2016 at 9:56 AM, Dennis Bohn wrote: > So if someone (say an eyeball network) was putting out a RFQ for a gig say > of upstream cxn and wanted to spec full reachability to the full V6 net, > what would the wording for that spec look like? > Would that get $provider's attention? "We

Re: Cogent - Google - HE Fun

2016-03-18 Thread Christopher Morrow
On Wed, Mar 16, 2016 at 11:22 AM, Dennis Bohn wrote: > > On Mar 16, 2016 10:06 AM, "Christopher Morrow" > wrote: >> >> On Wed, Mar 16, 2016 at 9:56 AM, Dennis Bohn wrote: >> > So if someone (say an eyeball network) was putting out a RFQ for a gig >>

Re: Why the US Government has so many data centers

2016-03-11 Thread Christopher Morrow
On Fri, Mar 11, 2016 at 12:21 PM, Roland Dobbins wrote: > On 12 Mar 2016, at 0:03, Sean Donelan wrote: > >> The U.S. Government has an odd defintion of what is a data center, which >> ends up with a lot of things no rational person would call a data center. > > > There's also a case to be made tha

Re: Cogent - Google - HE Fun

2016-03-11 Thread Christopher Morrow
On Fri, Mar 11, 2016 at 10:18 AM, Robert Jacobs wrote: > Don't like what Cogent is doing but just to bring this back to reality > Matthew and others out there... What content do you think Google has or any > other big content provider that is IPV6 only or gives an IPV6 only response > to a quer

Re: Facebook & Traceroute

2016-03-10 Thread Christopher Morrow
On Wed, Mar 9, 2016 at 11:22 PM, Sam Norris wrote: >> maybe their loadbalancer is a little wonky? (I don't see this in >> traceroutes from a few places, but I also don't end up at IAD for >> 'www.facebook.com' traceroutes... here's my last 4 hops though to the >> dest-ip you had: >> >> .13.28.75)

Re: AW: Cogent - Google - HE Fun

2016-03-10 Thread Christopher Morrow
On Thu, Mar 10, 2016 at 10:09 AM, Dennis Burgess wrote: > Not wishing to get into a pissing war with who is right or wrong, but it > sounds like google already pays or has an agreement with cogent for v4, as > that's unaffected, cogent says google is simply not advertising v6 prefixes > to them

Re: Facebook & Traceroute

2016-03-09 Thread Christopher Morrow
On Wed, Mar 9, 2016 at 10:53 PM, Sam Norris wrote: > Why does Facebook spoof the source IP address of the hop before this server? > They spoof the source IP address that is performing the traceroute. > > 66.220.156.68 > > --- > 7 FACEBOOK-IN.ear1.Atlanta2.Level3.net (4.16.185.58) 51.736 ms 51.

Re: remote serial console (IP to Serial)

2016-03-08 Thread Christopher Morrow
On Tue, Mar 8, 2016 at 2:45 PM, Royce Williams wrote: > On Tue, Mar 8, 2016 at 10:21 AM, Hugo Slabbert wrote: > >> On Tue 2016-Mar-08 19:10:14 +, Gavin Henry >> wrote: >> >> Really love the Opengear IM range. We use IM4216's >>> >> >> I'm surprised no one's mentioned freetserv[1] yet. I hav

Re: remote serial console (IP to Serial)

2016-03-08 Thread Christopher Morrow
itself. >> >> I like the raspberry pi idea... Would ensure perpetual security updates >> with the OS running on it, whereas I'm sure some of the vendors of >> commercial console products EOL support at some point. The fact it runs >> linux is inviting as we

Re: remote serial console (IP to Serial)

2016-03-08 Thread Christopher Morrow
rt -chris > -- > Joe Hamelin, W7COM, Tulalip, WA, +1 (360) 474-7474 > > On Tue, Mar 8, 2016 at 7:35 AM, Christopher Morrow > wrote: >> >> also, serial? or usb? (see previous cisco usb console port discussion) >> >> On Tue, Mar 8, 2016 at 10:33 AM, Christopher M

Re: remote serial console (IP to Serial)

2016-03-08 Thread Christopher Morrow
also, serial? or usb? (see previous cisco usb console port discussion) On Tue, Mar 8, 2016 at 10:33 AM, Christopher Morrow wrote: > for singular serial .. there are many, do you want something that's > "appliance" or are you willing to deploy 18 raspnberry-pi-like > thi

Re: remote serial console (IP to Serial)

2016-03-08 Thread Christopher Morrow
for singular serial .. there are many, do you want something that's "appliance" or are you willing to deploy 18 raspnberry-pi-like thingies? On Tue, Mar 8, 2016 at 10:30 AM, greg whynott wrote: > Recently I have taking over the responsibility of managing about 18 remote > routers and firewalls.

Re: Remote hands mailing lists?

2016-02-20 Thread Christopher Morrow
I think (though I don't see much traffic on it): newh...@snausages.com works like this. On Fri, Feb 19, 2016 at 5:30 AM, nanog wrote: > Sorry if this off-topic. > > Are there any mailing lists/forums/websites that independent techs can post > availability for remote hands work? > > I just got

Re: RBL resource to check entire netblock

2016-02-18 Thread Christopher Morrow
On Thu, Feb 18, 2016 at 12:46 PM, greg whynott wrote: > Team NANOG, > > I will summarize once I get to looking at things. This isn't an immediate > need but with that said I expect to start on it next week. I may not > evaluate all of them but what I do try I will share. > > My next challenge

Re: Cogent <=> Google Peering issue

2016-02-17 Thread Christopher Morrow
On Wed, Feb 17, 2016 at 12:29 PM, Todd Underwood wrote: > let me try to be more concrete and helpful: > > lots of people who work at google *and* at cogent are on this list. > none of them are doing anything to look at anything right now b/c > there are no facts in evidence yet. > happy to help o

Re: Devices with only USB console port - Need a Console Server Solution

2016-02-03 Thread Christopher Morrow
On Wed, Feb 3, 2016 at 2:18 AM, Erik Sundberg wrote: > Digi has something called USB Anywhere. > http://www.digi.com/products/usb-and-serial-connectivity/usb-over-ip-hubs/anywhereusb > #fail "COMING SOON: Security features, such as SSL and SNMPv3" :( "Creates systems redundancy and increases

Re: Devices with only USB console port - Need a Console Server Solution

2016-02-02 Thread Christopher Morrow
The airconsole's are cute ... but not really practical. I happened to get a chip computer (getchip.com ?) and turned it into a console server I can get to over the net ... at least at home and equinix. it's also 'cute' but not really practical... it is only 9 USD though, so there's that. I'm real

Re: Devices with only USB console port - Need a Console Server Solution

2016-02-01 Thread Christopher Morrow
seems like a total improvement swapping 1 well known, simple cable for 2... hurray progress? On Mon, Feb 1, 2016 at 11:34 PM, Erik Sundberg wrote: > Just some follow up on this one. I have also posed in the C-NSP list > > Yes you do need to have this kit to have serial console, No a normal U

<    1   2   3   4   5   6   7   8   9   10   >