RE: BGP Multihoming 2 providers full or partial?

2015-05-31 Thread Joseph Jackson
Can your devices support a full table?  

You can load balance  outbound traffic easily with out doing a full table.   
THo that won't be the shortest AS path.  In regards to cost savings how were 
you thinking of doing so?  Does one provider charge more?  Just use the cheaper 
provider.

-Original Message-
From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Maqbool Hashim
Sent: Friday, May 29, 2015 3:37 AM
To: nanog@nanog.org
Subject: BGP Multihoming 2 providers full or partial?

Hi,


We are an enterprise that are eBGP multihoming to two ISPs. We wish to load 
balance in inbound and outbound traffic thereby using our capacity as 
efficiently as possible. My current feeling is that it would be crazy for us to 
take a full Internet routing table from either ISP. I have read this document 
from NANOG presentations:


https://www.google.com/url?sa=trct=jq=esrc=ssource=webcd=1cad=rjauact=8ved=0CCoQFjAAurl=https%3A%2F%2Fwww.nanog.org%2Fmeetings%2Fnanog41%2Fpresentations%2FBGPMultihoming.pdfei=cyRnVb--FeWY7gbq4oHoAQusg=AFQjCNFsMx3NZ0Vn4bJ5zJpzFz3senbaqgbvm=bv.93990622,d.ZGU


The above document reenforces my opinion that we do not need full routing 
tables. However I was seeking some clarity as there are other documents which 
suggest taking a full routing table would be optimal. I guess it depends on 
our criteria and requirements for load balancing:


- Just care about roughly balancing link utilisation

- Be nice to make some cost savings


We have PI space and two Internet routers one for each ISP. Either of our links 
is sufficient to carry all our traffic, but we want to try and balance 
utilisation to remain within our commits if possible. I am thinking a rough 
approach for us would be:


- Take partial (customer) routes from both providers

- Take defaults from both and pref one


Maybe we can refine the above a bit more, any suggestions would be most welcome!


Many Thanks



Verizon FIOS and DSL issues in North Texas Area

2014-02-25 Thread Joseph Jackson
Hey list,



Been seeing issues hitting youtube/wikipedia and other random websites
from the north texas area when taking Verizon FIOS and DSL.



Haven't been able to narrow it down to any traceroutes or pings as
they all seem to be OK.
Have reports from other Verizon customers seeing the same issues
yesterday and today.



Thanks

Joseph



Integra Telecom BGP contact

2013-11-01 Thread Joseph Jackson
Anyone from Integra Telecom who knows their BGP routing on list?  I
have an open ticket but can't get past the noc techs and the issue is
a weird one.

Thanks!



Re: Advisory — D-root is changing its IPv4 address on the 3rd of January.

2012-12-14 Thread Joseph Jackson
Mike,

You will need to update your root.hints file on any of your forwarding DNS
servers.  Most OS vendors will include an update but its a good idea to
manually check.


On Fri, Dec 14, 2012 at 10:59 AM, Michael Thomas m...@mtcc.com wrote:

 Matthew Newton wrote:

 On Fri, Dec 14, 2012 at 04:42:46PM +, Nick Hilliard wrote:

 On 13/12/2012 22:54, Jason Castonguay wrote:

 Advisory — D-root is changing its IPv4 address on the 3rd of January.

 You've just given 3 weeks notice for a component change in one of the few
 critical part of the Internet's infrastructure, at a time when most


 I think that /was/ the advance notification - you've got 6 months :)

  The old address will continue to work for at least six months
   after the transition, but will ultimately be retired from
   service.


 So really stupid question, and hopefully it's just me, do I need to do
 something
 on my servers?

 Second question: I know that renumbering is important in the abstract, but
 is there
 really an overwhelming reason why renumbering the root servers is
 critical? Shouldn't
 they all be in PI space for starters?

 Mike




RE: Internet routing table completeness monitoring?

2012-10-03 Thread Joseph Jackson
I have cacti graph the amount of prefixes announced and withdrawn from a BGP 
peer on each BGP router.



-Original Message-
From: ML [mailto:m...@kenweb.org] 
Sent: Tuesday, October 02, 2012 11:43 PM
To: North American Networking and Offtopic Gripes List
Subject: Internet routing table completeness monitoring?

Has anyone put in place a method to identify if one their BGP peers suddenly 
withdraws X% of their prefixes?

e.g I should expect ~420k prefixes in a complete[1] routing table from a 
transit peer today.  If suddenly I'm only getting 390k prefixes I'd guess a 
major network was depeered or similiar.

If so how are people doing this? SNMP MIB, screen scrape?



[1] Varying levels of completeless apply.




RE: Internet routing table completeness monitoring?

2012-10-03 Thread Joseph Jackson
Not sure I don't have any non-cisco BGP routers.  Sorry!



-Original Message-
From: Neil Robst [mailto:neil.ro...@kit-digital.com] 
Sent: Wednesday, October 03, 2012 8:54 AM
To: Joseph Jackson; m...@kenweb.org; North American Networking and Offtopic 
Gripes List
Subject: RE: Internet routing table completeness monitoring?

This is still only possible on Cisco routers, isn't it - Foundry/Brocade gear 
doesn't currently include an SNMP OID for this info, does it?

-Original Message-
From: Joseph Jackson [mailto:jjack...@aninetworks.net] 
Sent: 03 October 2012 14:51
To: m...@kenweb.org; North American Networking and Offtopic Gripes List
Subject: RE: Internet routing table completeness monitoring?

I have cacti graph the amount of prefixes announced and withdrawn from a BGP 
peer on each BGP router.



-Original Message-
From: ML [mailto:m...@kenweb.org] 
Sent: Tuesday, October 02, 2012 11:43 PM
To: North American Networking and Offtopic Gripes List
Subject: Internet routing table completeness monitoring?

Has anyone put in place a method to identify if one their BGP peers suddenly 
withdraws X% of their prefixes?

e.g I should expect ~420k prefixes in a complete[1] routing table from a 
transit peer today.  If suddenly I'm only getting 390k prefixes I'd guess a 
major network was depeered or similiar.

If so how are people doing this? SNMP MIB, screen scrape?



[1] Varying levels of completeless apply.





Re: World IPv6 Only Day.

2011-06-09 Thread Joseph Jackson
Wouldn't the multicast flooding be just like broadcasts tho?  Some of
my sites don't have switches that will be upgraded or upgradeable to
software that will support IPv6 directly (at least not for a few
years).  Is that going to cause major headaches?  I under stand the RA
risks but the DHCPv6 snooping I'm not too clear on.



On Thu, Jun 9, 2011 at 1:55 AM, Tim Chown t...@ecs.soton.ac.uk wrote:

 On 9 Jun 2011, at 05:36, Karl Auer wrote:

 On Wed, 2011-06-08 at 17:37 -1000, Paul Graydon wrote:
 Dumb question.. what does the switch (L2) have to do with IPv6 (L3), or
 is it one of those 'somewhere in between the two' things?

 Well, a modern switch should work fine, even if not directly IPv6 aware,
 but it won't understand multicast and will generally flood multicast
 frames to all interfaces. So definitely stipulate IPv6 capability, even
 for switches

 And it won't have DHCPv6 snooping, or tools to mitigate rogue RAs.

 Tim





RE: Google wants your Internet to be faster

2010-08-10 Thread Joseph Jackson


-Original Message-
From: Jeroen van Aart [mailto:jer...@mompl.net] 
Sent: Tuesday, August 10, 2010 3:33 PM
To: NANOG list
Subject: Re: Google wants your Internet to be faster

Kevin Oberman wrote:
 That said, the actual, published document has some huge issues. It pays
 excellent lip service to net neutrality, but it has simply HUGE
 loopholes with lots of weasel words that could be used to get away with
 most anything. for example, it expressly excludes and wireless network.

Not having read any of the articles and not having researched the matter 
of network neutrality much at all. But wouldn't using either a VPN 
service or setting up VPN on one or more virtual servers at strategic 
locations of your choice avoid this? Unless they try to bandwidth 
limit your VPN tunnel(s) indiscriminately. Or did I miss something 
blatantly obvious?

At least VPN does a great job of routing around GeoIP blocking...


The way I understand it is if you aren't paying for preferred service then your 
VPN traffic would be at the bottom of the stack on forwarding.  So while it 
gets around GeoIP stuff vpns would be subject to the same quality of service 
settings as any other traffic that isn't paying for a faster service.

Joseph



Linux Network Generator

2009-12-10 Thread Joseph Jackson
Hey list,

I've been doing some stress testing of a router this week using Network Traffic 
Generator from http://sourceforge.net/projects/traffic/ and while it works well 
I was wondering what other generators you all have used and find helpful.  


Maybe something that Traffic doesn't do like provide response times and other 
stats.. tho I realize iperf would be a better app  for that.





DNS query analyzer

2009-11-30 Thread Joseph Jackson
Hey List!

Anyone know of a tool that can take a pcap file from wireshark that was used to 
collect dns queries and then spit out statistics about the queries such as RTT 
and timeouts?


Thanks!

Joseph