Re: Hurricane Electric AS6939

2020-10-14 Thread Eric Kuhnke
ter.com/ICSIL> > Midwest Internet Exchange <http://www.midwest-ix.com/> > <https://www.facebook.com/mdwestix> > <https://www.linkedin.com/company/midwest-internet-exchange> > <https://twitter.com/mdwestix> > The Brothers WISP <http://www.thebrotherswisp.com/> &

Re: Hurricane Electric AS6939

2020-10-14 Thread Eric Kuhnke
<https://twitter.com/mdwestix> >> The Brothers WISP <http://www.thebrotherswisp.com/> >> <https://www.facebook.com/thebrotherswisp> >> <https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg> >> -- >> *From: *"E

Re: Hurricane Electric AS6939

2020-10-14 Thread Eric Kuhnke
For small ISPs looking at setting up their first ever presence at an IX point, you almost certainly would not be ordering an actual 'wave' (eg: a specific DWDM channel on a legacy 10G DWDM platform, handed off to you with 1310/LX interfaces at both ends), but lit layer 2 transport service between t

Re: Ingress filtering on transits, peers, and IX ports

2020-10-13 Thread Eric Kuhnke
ce_port), or similar... On Tue, Oct 13, 2020 at 7:50 PM Chris Adams wrote: > Once upon a time, Eric Kuhnke said: > > Considering that one can run an instance of an anycasted recursive > > nameserver, under heavy load for a very large number of clients, on a > $600 > > 1

Re: Residential GPON last mile for network engineers (Telus AS852 and others)

2020-10-13 Thread Eric Kuhnke
; I don't have any particular insights for Telus, but there is a huge thread > about bypassing Bell ONTs on DSLReports: > https://www.dslreports.com/forum/r32230041-Internet-Bypassing-the-HH3K-up-to-2-5Gbps-using-a-BCM57810S-NIC > Cheers, > Eric > On Oct 13 2020, at 9:38 pm, Eric

Re: Ingress filtering on transits, peers, and IX ports

2020-10-13 Thread Eric Kuhnke
Aside from the BCPs currently being discussed for ingress filtering, I would be very interested in seeing what this traffic looked like from the perspective of your DNS servers' logs. I assume you're talking about customer facing recursive/caching resolvers, and not authoritative-only nameservers.

Residential GPON last mile for network engineers (Telus AS852 and others)

2020-10-13 Thread Eric Kuhnke
With the growth of gigabit class single fiber GPON last mile services, I imagine a number of people reading the list must have subscribed to such by now. Something that I have observed, and shared observations with a number of colleagues, is that very often a person who works for ($someAS) lives i

Re: Juniper configuration recommendations/BCP

2020-10-09 Thread Eric Kuhnke
I guess he never saw a Juniper M40, it's literally an i686/x86 32-bit motherboard for the routine engine, glued to a chassis with linecards containing custom ASICs and optics. As I recall it was a moderate speed Pentium 2 with some average amount of RAM and a 2.5" 44pin ATA66 laptop hard drive. Or

Wildfires: Clear fuel from hilltop and remote area communications towers

2020-09-11 Thread Eric Kuhnke
Over the past week I think I've seen about 20 to 30 photos of burnt out communications sites in Oregon and California. Due to the often remote and unstaffed nature of many of these sites, there's a natural tendency for brush, shrubs, grass and small trees to grow close to the tower compounds on ma

Re: Centurylink having a bad morning?

2020-08-31 Thread Eric Kuhnke
There's a number of enterprise end user type customers of 3356 that have on-premises server rooms/hosting for their stuff. And they spend a lot of money every month for a 'redundant' metro ethernet circuit that takes diverse fiber paths from their business park office building to the local clink/le

Re: Centurylink having a bad morning?

2020-08-30 Thread Eric Kuhnke
This is what happens when the design of 'god power' automation tools doesn't take into account the concept of blast radius. It might be more inconvenient to internally partition automated change management systems, but it can also limit the effect of automation tools gone awry. https://www.ibm.com

Re: 60ms cross continent

2020-07-10 Thread Eric Kuhnke
With common Ku band TVRO (receive only) dishes and decoders, one of the constraints for moving to higher bitrates is the physical sizes of the customer dish and economics. For a good example go to a very densely populated developing nation environment. Saddar, central Rawalpindi, Pakistan would be

Re: 60ms cross continent

2020-07-07 Thread Eric Kuhnke
he landing station in Mogadishu had a similar effect. On Tue, Jul 7, 2020 at 1:45 AM Mark Tinka wrote: > > > On 7/Jul/20 10:07, Eric Kuhnke wrote: > > The most noteworthy thing I'm seeing in C band these days, is many > > customers formerly 100% reliant upon it shift

Re: 60ms cross continent

2020-07-07 Thread Eric Kuhnke
The most noteworthy thing I'm seeing in C band these days, is many customers formerly 100% reliant upon it shifting their traffic to newly built submarine fiber routes. On Mon, Jul 6, 2020, 11:51 PM Denys Fedoryshchenko < nuclear...@nuclearcat.com> wrote: > On 2020-07-07 08:32, Eri

Re: 60ms cross continent

2020-07-06 Thread Eric Kuhnke
world throughput in kbps each direction, but entirely dropping a link is rare. On Mon, Jul 6, 2020 at 9:40 PM Denys Fedoryshchenko < nuclear...@nuclearcat.com> wrote: > On 2020-07-07 06:48, Eric Kuhnke wrote: > > This is why adaptive coding and modulation systems exist. Also dynam

Re: 60ms cross continent

2020-07-06 Thread Eric Kuhnke
This is why adaptive coding and modulation systems exist. Also dynamic channel size changes and advanced computationally intensive FECs. You don't think people working on microwave band projects above 10GHz with dollar figures in the hundreds of millions are unaware of basic rain fade and link bud

Re: Europe IP Transit Provider Ideas ?

2020-06-30 Thread Eric Kuhnke
For Africa take a look at Liquid Telecoms and WIOCC. If your target market is more specifically west african, look at the ISPs which have major POPs in Accra and Lagos. For east africa, Kenya/Tanzania, and those with good connectivity from Kenya to Djibouti and into the UAE (via Fujairah). WIOCC

Re: 60 ms cross-continent

2020-06-21 Thread Eric Kuhnke
Serious HFT moved to shortwave years ago. The chicago-NYC routes by microwave still exist, but are only for things that need higher data rates (as measured in kbps). It's hard to hide a giant log-periodic or yagi-uda antenna. The sites near Chicago that are aimed at London are well known to those i

Re: StreetNode MIB

2020-05-14 Thread Eric Kuhnke
What does it look like if you snmpwalk it, numeric option, from the root of the snmp tree? Even in the total absence of a MIB with descriptions I bet some community members could make good educated guesses as to which discrete OIDs are the voltages, RSL values, temperatures, and other critically r

Looking for a neteng contact at AS60725 O3B (SES)

2020-05-13 Thread Eric Kuhnke
I'm looking to get in touch with somebody in network engineering at AS60725. Please contact me off-list.

Re: [EXT] Shining a light on ambulance chasers - Noction

2020-04-03 Thread Eric Kuhnke
Ask for 1 or 10Gbps DIA at increasingly more difficult and preposterous locations, such as Dead Horse, Alaska (the North end of the Alaska pipeline, at the Arctic ocean) or Konduz, Afghanistan. On Wed, Mar 25, 2020, 2:54 PM Shawn L via NANOG wrote: > And here I actually went to their website (no

Re: WIKI documentation Software?

2020-03-17 Thread Eric Kuhnke
If you intend to fully self host something, the full mediawiki software that runs the back end of wikipedia is suitable. It's entirely composed of BSD/GPL/Apache licensed software. If you have any persons who are competent at administering and customizing stuff on normal LAMP stack servers it shoul

Re: Work from Home and other dynamics

2020-03-09 Thread Eric Kuhnke
For those ISPs who have high-capacity DIA/IP transit circuits (10Gbps+) feeding major corporate campuses, I'm curious what the traffic charts M-F look like compared to previous weeks. Particularly for what time it begins to rise sharply in the morning, and the daily peak value. I have a theory that

Re: RADB account deletions

2020-03-04 Thread Eric Kuhnke
For those who don't follow Canadian ISP mergers/acquisitions, Q9 was acquired by Bell (AS577) in 2016. Not sure to what extent they've been integrating its network into the larger nationwide Bell network. On Tue, Mar 3, 2020 at 10:26 AM Clinton Work wrote: > It looks like the former Allstream

Re: RIP: Bill Manning

2020-01-27 Thread Eric Kuhnke
Chris Caputo posted the following to the SIX mailing list a few days ago. I think this really shows Bill in action, helping a new IX get set up. He will be missed. Bill Manning died unexpectedly this morning, January 25th, at his home. It was Bill's presentations on June 5th, 1997 at NANOG in Tam

Re: Internet services in Antarctica

2020-01-20 Thread Eric Kuhnke
It would be really hard to quantify antarctic IPs as actually being from there. I know some of the people who've operated the geostationary links to McMurdo and to the pole (inclined orbit satellite visible only part of the day). Their WAN links go through geostationary transponder capacity and ea

Re: FYI - Suspension of Cogent access to ARIN Whois

2020-01-07 Thread Eric Kuhnke
I have two separate entries for sets of phone numbers/email addresses, associated with my name, that must be in Cogent's CRM system as cold leads. About every six months I am contacted by a new person whom I've never heard of before. My theory is that each newbie Cogent sales rep has been assigned

Re: Fwd: urgent opening: Engineer-Transport - III

2019-12-18 Thread Eric Kuhnke
The really scary and not uncommon thing now is for unethical recruiters to take your CV from somewhere, copy/paste it into their own word processing software, and start editing things in it (and removing your direct contact information) without permission from yourself, and send it onwards to their

Re: Energy Efficiency - Data Centers

2019-12-18 Thread Eric Kuhnke
The laws of thermodynamics dictate that near 100% of the electricity consumed by a piece of equipment (let's use a high powered 2RU size router as an example) comes off as heat. Unless it's doing mechanical physical work like lifting a load or spinning a fan. Some infinitesimal portion leaves as ph

Re: Important re dropping TLS 1.0 support (Reminder: Changes to Whois-RWS and RDAP Scheduled for 12 February 2020)

2019-12-13 Thread Eric Kuhnke
For people running public facing httpd, it is also worth noting that the population of old browser useragents that don't understand TLS1.2 is under half of one percent. There's very little risk or impact these days to only accepting TLS1.2 in Apache2 or nginx configuration everywhere. On Fri, Dec

Re: Elephant in the room - Akamai

2019-12-07 Thread Eric Kuhnke
I think this thread might be a perfect example that when an organization reaches a sufficiently large size, one part of its engineering/operations team may no longer be fully aware of what other work groups are doing. Definitely a structural challenge for ISPs that span very large geographical area

Re: Iran cuts 95% of Internet traffic

2019-11-19 Thread Eric Kuhnke
The vast majority of Iranian ISPs' international transit connectivity is through AS12880 DCI , which is a government run telecom authority. Google "AS12880 DCI Iran" for more info. DCI is also responsible for layer 2 transport and DWDM services for smaller downstream ISPs, on other international te

Re: Any info on devices that are running eBGP on the Internet?

2019-11-07 Thread Eric Kuhnke
The OUI prefixes that are Intel, Dell, HP, Supermicro and other x86-64 hardware vendors are almost certainly people running BIRD, FRR or similar on commodity hardware. In which case the actual routing configuration could be almost anything, those just happen to be the PCI-Express NICs in some sort

Re: virginia beach

2019-11-07 Thread Eric Kuhnke
Seems logically similar to the reason why there are landing stations, but no noteworthy datacenters on the Oregon coast. Everything goes in various ring topology paths to Hillsboro/Portland. And routes that go more directly east to meet the fiber huts on long haul routes Portland-Sacramento. On

Re: IPAM recommendations

2019-09-05 Thread Eric Kuhnke
Many others have already recommended these, but I suggest installing test VMs of both phpipam and nipap and seeing which works best for your use case. NIPAP has fairly extensive tools supporting automation for provisioning. phpipam has a few additional functions on top of only ip address managemen

Re: Protecting 1Gb Ethernet From Lightning Strikes

2019-08-14 Thread Eric Kuhnke
Another copper cable considered a "gold standard" for outdoor shielded + 9th ESD drain and ground wire, intended for long term rooftop and tower installation is Shireen. There's a variety of types. https://www.shireeninc.com/osc/cables/cat6 On Wed, Aug 14, 2019 at 6:30 PM Brandon Martin wrote:

Re: Protecting 1Gb Ethernet From Lightning Strikes

2019-08-14 Thread Eric Kuhnke
I would begin by referencing the grounding section here: https://www.blm.gov/sites/blm.gov/files/Lands_ROW_Motorola_R56_2005_manual.pdf Of utmost importance is that everything is bonded to the same potential. This means that if they have stuff on a roof, outdoor antennas or APs, whatever, it grou

Re: Corporate Identity Theft: Azuki, LLC -- AS13389, 216.179.128.0/17

2019-08-13 Thread Eric Kuhnke
> 4) Filing a "fraud request" with ARIN is a serious step and one that could quite conceivably end up with the party filing such a formal report being on the business end of lawsuit, just for having filed such a report. What makes you think that the sort of persons who w

Re: Mx204 alternative

2019-08-08 Thread Eric Kuhnke
I am not certain on the value of having 1GbE interfaces natively on a $25k plus router in the year 2019. Pair the router with a nice 1RU 1/10GbE switch installed directly next to it with full metro Ethernet layer 2 feature set. Anything that needs a 1GbE inteface, attach it to that switch, give th

Re: What can ISPs do better? Removing racism out of internet

2019-08-05 Thread Eric Kuhnke
A CDN is a hosting company. It is the logical continuation and evolution of what an httpd hosting/server colo company was twenty years ago, but with more geographical scale and a great deal more automation tools. I have never in my life seen a medium to large-sized hosting company that didn't have

Re: Best ways to ensure redundancy with no terrestrial ISPs

2019-08-03 Thread Eric Kuhnke
In a remote area in northern africa if there are no terrestrial ISPs, and there is no budget to build towers for PTP microwave, I don't know if there are any reasonable options. If sufficient funds did exist, my recommendation, if they really want true diversity between two totally different servi

Re: Colo in Africa

2019-07-16 Thread Eric Kuhnke
Without being more specific on what geographic region you want to serve, in terms of ISPs, it's hard to say. For example: If you look at submarine cable topology at layer 1, and BGP sessions, AS adjacencies between ISPs: Freetown, Sierra Leone and Monrovia, Liberia are suburbs of London, UK. If

Re: Birch/Primus/Fusion Network ASN integration?

2019-06-18 Thread Eric Kuhnke
an AS that's known to tools like > the bgp.he.net tool, etc. > > > > https://en.wikipedia.org/wiki/Birch_Communications > > > > AS20175 Birch Communications Inc. doesn't appear to be doing much of > anything > > > > There's also this, which is

Re: Birch/Primus/Fusion Network ASN integration?

2019-06-18 Thread Eric Kuhnke
e doing much of anything There's also this, which is one of their earlier acquisitions: https://www.peeringdb.com/net/3238 On Tue, Jun 18, 2019 at 12:42 AM TJ Trout wrote: > wrong fusion on peering db > > On Mon, Jun 17, 2019 at 10:35 PM Eric Kuhnke > wrote: > >> Hey

Birch/Primus/Fusion Network ASN integration?

2019-06-17 Thread Eric Kuhnke
Hey all, I'm looking for any info that might be publicly available regarding intentions to merge the Primus ASN into Birch/Fusion Network, or whether it will remain its own thing. Primus acquired by Birch: https://primus.ca/index.php/bc_en/news-and-events/primus-news-birch-completes-purchase-of-p

Re: Fibre provider in Las Vegas, NV

2019-06-09 Thread Eric Kuhnke
I would talk to the SWITCH NAP sales people in Las Vegas. They're a datacenter/colo/rack and power place, but every worthwhile last mile, facilities based fiber provider in the Vegas metro area likely has a POP in their facility. This would mean they could put you in contact with the carrier sales

Paging voip.ms management

2019-05-30 Thread Eric Kuhnke
After attempting several times, and failing to get something resembling a real RFO from your first tier customer support/ticket answering staff, I am now looking for a person in a position of responsibility at voip.ms. Please contact me off list.

Re: looking for hostname router identifier validation

2019-04-29 Thread Eric Kuhnke
I would caution against putting much faith in the validity of geolocation or site ID by reverse DNS PTR records. There are a vast number of unmaintained, ancient, stale, erroneous or wildly wrong PTR records out there. I can name at least a half dozen ISPs that have absorbed other ASes, some of tho

Re: Contacts wanted: OVH, DigitalOcean, and Microsoft (Deutschland)

2019-03-19 Thread Eric Kuhnke
Absolutely unrelated to Ronald's original post, but it's ironic that the abuse@ address is itself heavily "abused", by commercial copyright enforcement companies which think it's a catch-all address for things which are not operationally related to the health of a network (BGP hijacks, DDoS, spam e

Re: Webzilla

2019-03-18 Thread Eric Kuhnke
Looking at the AS adjacencies for Webzilla, what would prevent them from disconnecting all of their US/Western Euro based peers and transits, and remaining online behind a mixed selection of the largest Russian ASes? I do not think that any amount of well-researched papers and appeals to ethical IS

Re: A Deep Dive on the Recent Widespread DNS Hijacking

2019-02-25 Thread Eric Kuhnke
Markmonitor runs a registrar popular with fortune 500s that implements additional security steps, and talking to a clued in live human in the loop to modify anything in your domain record. On Mon, Feb 25, 2019, 6:03 PM wrote: > On Mon, 25 Feb 2019 18:23:44 -0700, Paul Ebersman said: > > > Agreed

Re: A Deep Dive on the Recent Widespread DNS Hijacking

2019-02-25 Thread Eric Kuhnke
One thing to consider with authentication for domain registrar accounts: DO NOT USE 2FA VIA SMS. This is a known attack vector that's been used by SS7 hijacking techniques for several well documented thefts of cryptocurrency, from people who were known to be holding large amounts of (bitcoin, eth

SpaceX Starlink progress, external analysis

2019-02-21 Thread Eric Kuhnke
ISPs throughout the United States that currently operate 11 GHz FCC Part 101 licensed microwave links have begun receiving PCCNs from Starlink. These specify the RF parameters and lat/long locations of the Starlink earth stations. If you have received one of these, I'd be very interested in taking

Re: Last Mile Design

2019-02-14 Thread Eric Kuhnke
A much more common configuration is a combination of a low cost 48-port L2 aggregation switch, something whitebox or similar to a Taiwanese OEM/ODM such as edgecore, with a single 10GbE uplink to a small MPLS-capable router. One 10Gbps link can fit a great many 1GbE active-E residential customers i

Re: BGP Experiment

2019-01-26 Thread Eric Kuhnke
I think a better question is, once a vulnerability has become widespread public knowledge, do you expect malicious actors, malware authors and intelligence agencies of autocratic nation-states to obey a gentlemens' agreement not to exploit something? There is not a great deal of venn diagram overl

Re: BGP Experiment

2019-01-23 Thread Eric Kuhnke
I would be very interested in hearing Ben's definition of something that is "massive", if announcing or withdrawing a single /24 from the global routing table constitutes, quote, "a massive prefix spike/flap". Individual /24s are moved around all the time by fully automated systems. On Wed, Jan

Looking for a network operations/security contact at BNSF railway

2019-01-18 Thread Eric Kuhnke
If anybody has one, please get in contact with me ASAP.

Re: BGP Experiment

2019-01-08 Thread Eric Kuhnke
FRR is undergoing a fairly rapid pace of development, thanks to the cloud-scale operators and hosting providers which are using it in production. https://cumulusnetworks.com/blog/welcoming-frrouting-to-the-linux-foundation/ On Tue, Jan 8, 2019 at 11:55 AM Randy Bush wrote: > > We plan to resume

Re: Amazon now controls 3.0.0.0/8

2018-11-08 Thread Eric Kuhnke
58, Matt Erculiani wrote: > > So it looks like GE will be solvent for a few more years and 3.3.3.3 DNS > is incoming. > > -Matt > > On Thu, Nov 8, 2018, 17:54 Eric Kuhnke >> https://news.ycombinator.com/item?id=18407173 >> >> Quoting from the post: >

Amazon now controls 3.0.0.0/8

2018-11-08 Thread Eric Kuhnke
https://news.ycombinator.com/item?id=18407173 Quoting from the post: " Apparently bought in two chunks: 3.0.0.0/9 and 3.128.0.0/9. Previous owner was GE. Anecdotal reports across the Internet that AWS EIPs are now being assigned in that range. https://whois.arin.net/rest/net/NET-3-0-0-0-1.htm

Re: bloomberg on supermicro: sky is falling

2018-10-04 Thread Eric Kuhnke
The US' extensive reliance on third party commercial contractors to implement a lot of programs, means that despite laws and SOW/PWS for their contracts, many contractors *do* have sensitive data on their networks with a gateway out to the public Internet. I have seen it. I have cringed at it. SIGI

Re: bloomberg on supermicro: sky is falling

2018-10-04 Thread Eric Kuhnke
To me this looks like a Chinese version of the NSA FIREWALK product. Which is a network implant built into a RJ45 jack intended to be soldered onto a motherboard. The FIREWALK info came out with the Snowden leaks in 2013 and the tech was years old at that time. https://en.wikipedia.org/wiki/NSA_AN

Re: watch your domain

2018-09-05 Thread Eric Kuhnke
https://medium.com/@gszathmari/hacking-law-firms-abandoned-domain-name-attack-560979e0b774 tl;dr: Expired domain names re-registered by malicious actors after the redemption period are useful for all sorts of mischief. This is a pretty easy to understand read for non-technical management types at

Re: TekSavvy (Canada) contact

2018-09-01 Thread Eric Kuhnke
mage: Image removed by sender.] <https://www.facebook.com/mdwestix>[image: > Image removed by sender.] > <https://www.linkedin.com/company/midwest-internet-exchange>[image: Image > removed by sender.] <https://twitter.com/mdwestix> > The Brothers WISP <http://www.th

TekSavvy (Canada) contact

2018-08-29 Thread Eric Kuhnke
I'm looking for a clueful neteng point of contact at TekSavvy. Please contact me off-list. Thanks!

Re: FCC: 2017 Atlantic Hurricane Season Impact on Communications

2018-08-29 Thread Eric Kuhnke
Independent ISPs? Aeronet based in San Juan is much smaller than a typical LEC type entity, but has a significant service area and builds gigabit class last mile using microwave and millimeter wave. https://bgp.he.net/AS14979#_asinfo On Mon, Aug 27, 2018, 11:46 AM Sean Donelan wrote: > The F

Re: optical circulator as a bidirectional one fiber solution

2018-08-13 Thread Eric Kuhnke
d great bidi-like results with > increased channel count. > > -Ben > > On Aug 13, 2018, at 10:49 AM, Eric Kuhnke wrote: > > Something that is broadly the same as a coherent 100G QPSK single > wavelength optical module, but in two different frequencies, and a passive > CWDM

Re: optical circulator as a bidirectional one fiber solution

2018-08-13 Thread Eric Kuhnke
Something that is broadly the same as a coherent 100G QPSK single wavelength optical module, but in two different frequencies, and a passive CWDM mux/demux prism at each end might work. The limitation would be availability of optics for a modern 100G MSA that are both coherent and Tx/Rx at two diff

Best practices on logical separation of abuse@ vs dmca@ role inboxes

2018-08-03 Thread Eric Kuhnke
If you were setting up something new from a clean sheet of paper design - do you consider it appropriate to have an abuse role inbox that's dedicated to actual network abuse issues (security problems, DDoS, IP hijacks, misbehavior of downstream customers, etc), and keep that separate from DMCA noti

Re: Rising sea levels are going to mess with the internet

2018-07-23 Thread Eric Kuhnke
I'm thankfully late to this thread and don't really agree with how operational discussions can devolve into political debates... But from a purely factual, operational consideration point of view at OSI layer 1: There is a very real reason why some facilities are built the way they are. Take a loo

Re: Proving Gig Speed

2018-07-19 Thread Eric Kuhnke
Mark already knows this, but for the benefit of the North American network operators on the list, **where** in Africa makes a huge difference. Certain submarine cables reach certain coastal cities at very different transport prices, depending on location, what sort of organizational structure of ca

Re: (perhaps off topic, but) Microwave Towers

2018-07-17 Thread Eric Kuhnke
Also worth mentioning that AT&T Canada originated with the Canadian Pacific Railway... CP Railway and Unitel --> AT&T Canada --> Allstream --> MTS-Allstream --> Zayo I have a GIS dataset with about 90% of the most important hilltop and mountaintop tower sites in WA, BC, OR and ID. There is a ton

Re: What are people using for IPAM these days?

2018-06-13 Thread Eric Kuhnke
; > - jay > > On Wed, Jun 13, 2018 at 3:50 PM Eric Kuhnke wrote: > >> Either phpipam or nipap. >> >> Both use fairly standard database backends and db schema (usually >> something >> as simple as mariadb listenong on localhost only, on the same VM tha

Re: What are people using for IPAM these days?

2018-06-13 Thread Eric Kuhnke
Either phpipam or nipap. Both use fairly standard database backends and db schema (usually something as simple as mariadb listenong on localhost only, on the same VM that is the apache2 or nginx + php stack), allowing you to scale up to external tools that do read only queries of the IP database f

Re: Application or Software to detect or Block unmanaged swicthes

2018-06-08 Thread Eric Kuhnke
This is one of the reasons why large organizations, such as the ones you describe, have both portable spectrum analyzers (covering the 2400 range and 5150-5850 MHz 802.11(whatever) bands), and also ability to hunt for MAC addresses of wifi devices that don't match known centrally managed APs. Even

Re: SIP fax sending software?

2018-06-01 Thread Eric Kuhnke
I would recommend simply outsourcing it to voip.ms for $2 a month. Port your fax DID to them. Incoming fax arrive as PDF in your choice of email inbox. You can send outbound fax from a predefined list of your own email addresses, destination to f...@voip.ms. Put the destination phone number in th

Re: Impacts of Encryption Everywhere (any solution?)

2018-05-29 Thread Eric Kuhnke
The one thing that you CAN generalize about a great many developing nation telecom markets, which is different than the US and Western Europe: Many urban locations have a complete absence of functioning last mile, legacy copper telecom infrastructure, which in a US city you would see used for ADSL

Re: Impacts of Encryption Everywhere (any solution?)

2018-05-29 Thread Eric Kuhnke
Ethiopia is significantly different and unique, in its own unusual way, because of the government monopoly telecom. Other people can correct me if I'm wrong, but unless the situation has changed in the past two years, all small to medium sized ISPs in Ethiopia are mandated by law to be downstream o

Re: Impacts of Encryption Everywhere (any solution?)

2018-05-29 Thread Eric Kuhnke
Based on my experience a couple of years ago while in West Africa: If you look at the BGP adjacencies and bidirectional traceroutes for ISPs in Sierra Leone or Liberia; Freetown and Monrovia are both are logically suburbs of London. Just with much higher transport latencies via the submarine fiber

Re: AT&T mobile intercepting TCP sockets?

2018-05-21 Thread Eric Kuhnke
Oh, I'm sure that'll never be abused by any hostile nation-state-owned monopoly telecom that likes to block/ban/MITM traffic, ever! On Mon, May 21, 2018 at 1:53 PM, Ca By wrote: > On Mon, May 21, 2018 at 1:11 PM wrote: > > > IME ATT has intercepted virtually everything on mobile (this is on a

Re: AT&T mobile intercepting TCP sockets?

2018-05-21 Thread Eric Kuhnke
The short answer is, yes. This is a strong argument in favor of three things: a) Redirect all http trafifc on webservers you control to https , such as the following apache2 configuration file snippet for a virtualhost RewriteEngine on RewriteCond %{SERVER_NAME} =domainname.com [OR] RewriteCond

Re: New Active Exploit: memcached on port 11211 UDP & TCP being exploited for reflection attacks

2018-03-01 Thread Eric Kuhnke
On the other side: VM/VPS providers have a template based image that they use for every type and subtype of operating system it's possible to auto-provision. For example Ubuntu Server Xenial AMD64 or Debian Jessie or Stretch AMD64. It's important that VM/VPS providers don't push fresh images that

Re: New Active Exploit: memcached on port 11211 UDP & TCP being exploited for reflection attacks

2018-02-27 Thread Eric Kuhnke
I question whether there is *any* high volume hoster out there that has a reputation for successfully addressing abuse issues coming from their customer base, and cuts off services... By high volume hoster I define it as companies where anybody with a credit card can buy a $2 to $15/month VPS/VM i

Merit radb https interface, TLS1.0 only?

2018-02-02 Thread Eric Kuhnke
Is the radb login page supposed to be TLS1.0 only? This is with the latest version of Firefox. Screenshot: https://imgur.com/nnlFmLZ I also noticed that the registration page is plain http/non TLS. for reference: https://www.google.com/search?client=ubuntu&channel=fs&q=tls+1.0+deprecated&ie=utf

Re: Any experience with Broadcom ICOS out there?

2018-01-05 Thread Eric Kuhnke
You may have better results with the same question on OCP (open compute platform) related forums and mailing lists. The Quanta version of that switch sold by FS is pretty much the same thing: https://linustechtips.com/main/topic/801037-qct-reveals-their-quantamesh-network-switches/ Quanta has bee

Re: Any experience with FS hardware out there?

2018-01-05 Thread Eric Kuhnke
With DC-DC power supplies there's a number of things that actually have input ranges of 36-72VDC. Way higher DC voltage than you'll ever see a 48VDC telecom battery system at "float" voltage, anyhow. On Fri, Jan 5, 2018 at 11:16 AM, Bryan Holloway wrote: > Yeah, I noticed that, although they ha

Re: Any experience with FS hardware out there?

2018-01-05 Thread Eric Kuhnke
To my eyes that looks like an Accton/Edgecore whitebox switch. The prices for the Edgecore equivalent product are about the same. On Fri, Jan 5, 2018 at 10:50 AM, Bryan Holloway wrote: > Fiberstore is rolling out some CRAZY cheap 100Gbps switches, and I'm > curious if anyone in the community ha

Re: Wi-Fi Analyzer

2017-12-29 Thread Eric Kuhnke
In addition to the other tools already recommended by previous posters, I recommend buying one of these: https://www.ubnt.com/airmax/nanobeam-ac-gen2/ It's a directional antenna/radio integrated unit and is intended as a point to point or point-to-multipoint WISP client radio. The one feature you

Re: Bandwidth distribution per ip

2017-12-20 Thread Eric Kuhnke
This is based on feedback from a colleague that spent several years in Lebanon and did a fair amount of research into the AS-adjacency paths in and out of the country, and the OSI layer 1 (submarine fiber to Cyprus, etc) paths... It sounds to me like your upstream carrier does not actually have an

Re: Waste will kill ipv6 too

2017-12-20 Thread Eric Kuhnke
I am trying to imagine the corporate boards of APNIC, RIPE and ARIN planning for a venn diagram overlap between a grey goo scenario, and fully automated ipv6 allocations... Just imagine the size of the RPKI backend! On Wed, Dec 20, 2017 at 1:12 PM, Jens Link wrote: > Lee Howard writes: > > >

Re: Companies using public IP space owned by others for internal routing

2017-12-17 Thread Eric Kuhnke
some fun examples of the size of ipv6: https://samsclass.info/ipv6/exhaustion-2016.htm https://www.reddit.com/r/theydidthemath/comments/2qxgxw/self_just_how_big_is_ipv6/ On Sun, Dec 17, 2017 at 7:05 PM, Large Hadron Collider < large.hadron.colli...@gmx.com> wrote: > Missent. > > Welcome to IPv6

Re: Small full BGP table capable router with low power consumption

2017-12-05 Thread Eric Kuhnke
It is worth mentioning for those who have not seen a Ubiquiti "edgrouter" in person yet, or worked with one, where their operating system came from... When Vyatta was acquired by Brocade, the core Vyatta team jumped ship and were hired directly by Ubiquiti. When you SSH into one of these whether i

Re: Suggestions for a more privacy conscious email provider

2017-12-05 Thread Eric Kuhnke
In my experience with creating new mail servers that use IP addresses belonging to dedicated hosting/colocation/VPS companies. This is *after* all of the obvious setup things like having a real static IP, A records, PTR records, SPF and DKIM set up proprely, are taken care of so that a public faci

Re: Incoming SMTP in the year 2017 and absence of DKIM

2017-11-29 Thread Eric Kuhnke
Anecdotal experience. I'm subscribed to a lot of mailing lists. Some pass through DKIM correctly. Others re-sign the message with DKIM from their own server. >98% of the spam that gets through my filters, which comes from an IP not in any of the major RBLs, has no DKIM signature for the domain. My

Incoming SMTP in the year 2017 and absence of DKIM

2017-11-29 Thread Eric Kuhnke
For those who operate public facing SMTPd that receive a large volume of incoming traffic, and accordingly, a lot of spam... How much weight do you put on an incoming message, in terms of adding additional score towards a possible value of spam, for total absence of DKIM signature?

Re: Wireless ISPs during disasters (hurricane harvey, irma and maria)

2017-11-27 Thread Eric Kuhnke
AeroNet is a large sized independent ISP in Puerto Rico (as compared to major US48 based national carriers, and relative to the size of the market as a whole) and makes extensive use of PTP And PtMP microwave/millimeter wave equipment, so I guess they count as a WISP. They are active on some indust

Re: Calgary <-> Toronto 100% Canadian Fibre Resiliency on failover

2017-10-13 Thread Eric Kuhnke
On a somewhat related note, if anyone has KMZs of the railway-based ROWs from Calgary-Vancouver (Fraser Valley area) and is able to share them, please contact me off list. I'm hoping to avoid re-inventing the wheel and time/labor of manually creating vector lines along the known railway corridors,

Re: Temp at Level 3 data centers

2017-10-11 Thread Eric Kuhnke
Also worth noting that temperature tolerances for large scale numbers of 1U servers, Open Compute platform type high density servers, or blade servers is a very different thing than air intake temperatures for more sensitive things like DWDM platforms... There's laser and physics related issues wh

Re: US/Canada International border concerns for routing

2017-08-08 Thread Eric Kuhnke
It is worth noting, however, that the former AllStream ASN (formerly AT&T Canada) AS15290 is a completely different thing, and has distinct infrastructure and routing from the AboveNet ASN which is operated by Zayo. Although they are probably using "Free" Zayo transport by now. If I am grossly wro

Re: Bell outage

2017-08-04 Thread Eric Kuhnke
Makes me wonder what the GIS department is like at $BIGCARRIER and how such a workgroup of specialists interfaces with their in house OSP fiber teams (and those responsible for acquiring IRUs, leasing and documenting third party dark, etc). On Fri, Aug 4, 2017 at 12:07 PM, Ken Chase wrote: > And

<    1   2   3   4   >