Re: MX204 Virtual Chassis Setup

2023-08-24 Thread Andrey Kostin
Aaron Gould писал(а) 2023-08-23 12:38: some of these port capabilities are weird to me.  like on the ACX7100-48L you can do 4x100 or 8x50, but ONLY one 40g ?! me@7100> show chassis pic pic-slot 0 fpc-slot 0 | find 400   48 0   1x400G 1x100G 1x40G 4x100G 2x100G 8x50G 2x50G 4x25G 4x10G

Re: any dangers of filtering every /24 on full internet table to preserve FIB space ?

2022-10-14 Thread Andrey Kostin
David Conrad писал(а) 2022-10-12 11:39: Andrey, There was a period in the mid- to late-90s where some of RIRs allocated longer than /24s, i.e., to match the amount of address space justified by the requester, even if that meant (say) a /29. This didn’t last very long as one of the (at the time)

Re: any dangers of filtering every /24 on full internet table to preserve FIB space ?

2022-10-12 Thread Andrey Kostin
Matthew Petach писал(а) 2022-10-11 20:33: My point is that it's not a feature of BGP, it's a purely human convention, arrived at through the intersection of pain and laziness. There's nothing inherently "right" or "wrong" about where the line was drawn, so for networks to decide that /24 is

Re: Assumptions about network designs...

2022-07-12 Thread Andrey Kostin
to happen on such big scale. Maybe caused by HW or SW bug. I'm talking just about probabilities of different scenarios and trying to compare them. So far, IMO provided version doesn't look very convincing. Kind regards, Andrey Kostin sro...@ronan-online.com писал(а) 2022-07-11 20:18: I’m “guess

Re: Rogers Outage Canada

2022-07-11 Thread Andrey Kostin
It's hard to believe that a same time maintenance affecting so many devices in the core network could be approved. Core networks are build with redundancy, so that failures can't completely destroy the whole network. If it would be just "particular devices" they could be isolated much faster.

Re: A few questions regarding about RPKI/invalids

2022-03-30 Thread Andrey Kostin
Seeing this prefix with exactly same path coming from Zayo. My path is 6461 3356 3549 11172 270150 I Kind regards, Andrey Drew Weaver писал(а) 2022-03-30 09:29: Hello, We've noticed that there are a number of routes being passed along from 3356 with invalid origin AS. Of those, almost all of

Re: Famous operational issues

2021-02-19 Thread Andrey Kostin
M engineer and had to fly frequently with testing devices. One time he tried to explain at airport security control what DWDM spectrum analyser is for, the officer called another for help and he said something like this: "DWDM spectrum analyser? Pass it, usual thing..." -- Kind regards, Andrey Kostin

Re: SRv6

2020-09-18 Thread Andrey Kostin
aar...@gvtc.com писал 2020-09-15 20:31: Hi Aaron, Also, with VPN's over SRv6 would this enable automatic vpn capability over the internet? I mean if I can do VPN's over an IPv6 network, seems that I could do that across the Internet as well. I think you already can do it over any kind of

Re: [c-nsp] LDPv6 Census Check

2020-06-12 Thread Andrey Kostin
Saku Ytti писал 2020-06-12 12:10: On Fri, 12 Jun 2020 at 18:52, David Sinn wrote: Unless you want ECMP then it VERY much matters. But I guess since we are only talking about theoretical instead of building an actual practical network, it doesn't matter. Well blatantly we are, because in

Re: Abuse Desks

2020-04-30 Thread Andrey Kostin
Maybe there is a market opportunity there? Develop reporting standard (or use one that was posted here), then develop reporting, processing and analytic tools, and then provide it as a service? Looks like a nice use case how to utilise clouds ;) Kind regards, Andrey Mike Hammett писал

Re: "Is BGP safe yet?" test

2020-04-23 Thread Andrey Kostin
Vincent Bernat писал 2020-04-22 15:26: ❦ 22 avril 2020 12:51 -04, Andrey Kostin: BTW, has anybody yet thought/looked into extending RPKI-RTR protocol for validation of prefixes received from peer-as to make ingress filtering more dynamic and move away prefix filters from the routers

Re: "Is BGP safe yet?" test

2020-04-23 Thread Andrey Kostin
Christopher Morrow писал 2020-04-22 14:05: a question about the data types here... So, a neighbor with no downstream ASN could be filtered directly with ROA == prefixlist-content. A neighbor with a downstream ASN has to be ROA (per asn downstream) == prefixlist-content. So you'd now have to do

Re: "Is BGP safe yet?" test

2020-04-22 Thread Andrey Kostin
Jay R. Ashworth писал 2020-04-22 11:02: Well, given how little the BCP38 website below has moved that football, you're not likely in much danger... :-) Cheers, -- jra BCP38 website doesn't proclaim anybody in person to be unsafe, but if it would be possible to make such test it'd be more

Re: "Is BGP safe yet?" test

2020-04-21 Thread Andrey Kostin
Baldur Norddahl писал 2020-04-21 02:49: My company is in Europe. Lets say an attacker joins the IX in Seattle a long way from here and a place we definitely are not present at. We do however use Hurricane Electric as transit and they are peering freely at Seattle. Everyone there thus sees our

Re: "Is BGP safe yet?" test

2020-04-20 Thread Andrey Kostin
Denys Fedoryshchenko писал 2020-04-20 15:27: And most important, the most common answer: All Tier-1 implemented it? No. Major hosting operators, such as AWS, gcloud, etc? - No. So... Absolutely, RPKI has different scale of effectiveness and benefits for big telecoms or clouds vs small ISPs

Re: "Is BGP safe yet?" test

2020-04-20 Thread Andrey Kostin
Mark Tinka писал 2020-04-20 12:57: On 20/Apr/20 18:50, Tom Beecher wrote: I (and Ben, and a few others) are all too familiar with the ARIN madness around their TAL. Simple - we just don't accept it, which means our networks will be unsafe against North American resources. Highly doubtful my

Re: "Is BGP safe yet?" test

2020-04-20 Thread Andrey Kostin
CloudFlare? — Chris Cummings FROM: NANOG on behalf of Tom Beecher DATE: Monday, April 20, 2020 at 10:35 TO: Andrey Kostin CC: Nanog SUBJECT: Re: "Is BGP safe yet?" test ( Speaking 100% for myself. ) I think it was tremendously irresponsible, especially in the context of cur

Re: EVPN multicast route (multi home case ) implementation / deployment information

2020-02-04 Thread Andrey Kostin
Hi Mankamana, For Juniper: Starting in Junos OS 18.4R1, devices with IGMP snooping enabled use selective multicast forwarding in a centrally routed EVPN-VXLAN network to replicate and forward multicast traffic. As before, IGMP snooping allows the leaf device to send multicast traffic only to

Re: 5G roadblock: labor

2020-01-07 Thread Andrey Kostin
Paul Nash писал 2020-01-06 18:45: Depending on what you are after, folk like Ruckus and Cisco have had centrally-managed enterprise WiFi for many years. I manage a Ruckus installation for an apartment building where there is one SSID from about 150 APs, users have a unique password per

Re: 5G roadblock: labor

2020-01-06 Thread Andrey Kostin
Sabri Berisha писал 2020-01-06 16:21: - On Jan 5, 2020, at 10:07 PM, Mark Tinka mark.ti...@seacom.mu wrote: I predict that your in-flight wifi will become a lot cheaper as a result of this. Thanks, Sabri On Lufthansa flights unlimited Internet access is 12 Euro, and 3 Euro is for

Re: 5G roadblock: labor

2020-01-06 Thread Andrey Kostin
Mark Tinka писал 2020-01-04 00:43: On 4/Jan/20 00:26, Andrey Kostin wrote: Could be true very soon. When supporting cable infrastructure will become too expensive they will cut it in lieu of mobile, like many railways were decomissioned earlier. Must be a local tipping point in each area

Re: 5G roadblock: labor

2020-01-06 Thread Andrey Kostin
John D'Ambrosia писал 2020-01-05 07:48: Sabri At the very end you note 100base-t as a precursor to 400g. 100baset really found its success as an access solution - computer connections. 400GbE will be an aggregation / core solution. It will be some time if ever where 400GbE is used as an

Re: 5G roadblock: labor

2020-01-03 Thread Andrey Kostin
Sabri Berisha писал 2020-01-03 16:53: I predict that there will be a time where, just like POTS lines were exchanged for cellular phones, people will disconnect their cable internet and rely on 6g or 7g alone. And probably still with IPv4 addresses. Could be true very soon. When

Re: 5G roadblock: labor

2020-01-03 Thread Andrey Kostin
Mark Tinka писал 2020-01-03 04:36: And more interestingly, if that city's residents and visitors had the option of connecting to active 5G or wi-fi, what do we think they'd choose? Currently /me don't bother switching to wifi in public places bcz LTE provides enough bw for my humble

Deutsche Telecom AS3320 contact

2019-04-03 Thread Andrey Kostin
Hi NANOG, Looking for a contact from AS3320 Deutsche Telekom to ask a question about their routing policy/filtering causing that some globally routed prefixes aren't seen in AS3320. Kind regards, Andrey Kostin