Re: How to force rapid ipv6 adoption

2015-10-02 Thread Fred Baker (fred)
> On Oct 2, 2015, at 2:18 PM, William Herrin <b...@herrin.us> wrote: > > On Fri, Oct 2, 2015 at 5:03 PM, Fred Baker (fred) <f...@cisco.com> wrote: >> There's no way to change the IPv4 address to be larger > > http://bill.herrin.us/network/ipxl.html >

Re: How to force rapid ipv6 adoption

2015-10-02 Thread Fred Baker (fred)
> On Oct 1, 2015, at 3:42 PM, Todd Underwood wrote: > > it's just a new addressing protocol that happens to not work with the rest > of the internet. it's unfortunate that we made that mistake I understand the comment, but I see some issues with it. The problem isn't that

Re: How to build an IPv6-only internal network?

2015-07-08 Thread Fred Baker (fred)
On Jul 8, 2015, at 12:53 PM, Cryptographrix cryptograph...@gmail.com wrote: Hypothetically, I want to build an internal network that runs just IPv6 and apply stateless ACLs at redundant external connections. How do users access the current v4 address space? There are two short answers:

Re: Residential VSAT experiences?

2015-06-22 Thread Fred Baker (fred)
On Jun 22, 2015, at 3:11 PM, William Herrin b...@herrin.us wrote: Two-way satellite systems based on SV's in geostationary orbit (like the two you're considering) have high latency. 22,000 miles out, another 22,000 miles back and do it again for the return packet. You'll start around 500ms

Re: Meeting IRS requirements for encrypted transmission of FTI

2015-04-02 Thread Fred Baker (fred)
Dumb question. So this is essentially physical or link layer encryption. That’s fine out on the wire, but is decrypted in memory (if I understand what you said), and requires point to point connectivity to be any better than that. Are you aware of anyone at NIST or other places suggesting end

Re: IPv6 allocation plan, security, and 6-to-4 conversion

2015-01-30 Thread Fred Baker (fred)
On Jan 29, 2015, at 3:28 PM, Eric Louie elo...@techintegrity.com wrote: If I have to do 6-to-4 conversion, is there any way to do that with multiple diverse ISP connections, or am I restricted to using one entry/exit point? (If that's true, do I need to allocate a separate block of

Re: Why is .gov only for US government agencies?

2014-10-20 Thread Fred Baker (fred)
On Oct 19, 2014, at 5:05 AM, Matthew Petach mpet...@netflight.com wrote: Wondering if some of the long-time list members can shed some light on the question--why is the .gov top level domain only for use by US government agencies? Where do other world powers put their government agency

Re: Why is .gov only for US government agencies?

2014-10-20 Thread Fred Baker (fred)
On Oct 20, 2014, at 10:07 AM, John Orthoefer j...@direwolf.com wrote: On Oct 20, 2014, at 12:50 PM, Fred Baker (fred) f...@cisco.com wrote: […] and the older .arpa names quickly fell into disuse. People don’t use in-addr.arpa anymore? ;) johno They do use that, of course

Re: Bare TLD resolutions

2014-09-17 Thread Fred Baker (fred)
IMHO, since ICANN has created the situation, the ball is in ICANN’s court to say how this works without disrupting name services. Their ill-informed hipshot is not our emergency. On Sep 17, 2014, at 9:09 AM, Jay Ashworth j...@baylink.com wrote: Pursuant to

Re: Prefix hijacking, how to prevent and fix currently

2014-08-28 Thread Fred Baker (fred)
On Aug 28, 2014, at 9:55 AM, Tarun Dua li...@tarundua.net wrote: AS Number 43239 AS Name SPETSENERGO-AS SpetsEnergo Ltd. Has started hijacking our IPv4 prefix, while this prefix was NOT in production, it worries us that it was this easy for someone to hijack it.

Re: Carrier Grade NAT

2014-07-30 Thread Fred Baker (fred)
On Jul 30, 2014, at 8:45 AM, Owen DeLong o...@delong.com wrote: I will say that if amazon would get off the dime and support IPv6, it would make a significant difference. Per Microsoft public statements, they are now moving address space allocated them in Brazil to the US to fill a major

Re: Carrier Grade NAT

2014-07-30 Thread Fred Baker (fred)
On Jul 30, 2014, at 8:45 AM, Owen DeLong o...@delong.com wrote: I will say that if amazon would get off the dime and support IPv6, it would make a significant difference. Someone that works for Amazon once told me that they are primed for it now; the question is whether their customers

Re: Inevitable death, was Re: Verizon Public Policy on Netflix

2014-07-18 Thread Fred Baker (fred)
On Jul 14, 2014, at 4:32 PM, Scott Helms khe...@zcorum.com wrote: I continue to vehemently disagree with the notion that ASN = ISP since many/most of the ASNs represent business networks that have nothing to do with Internet access. And there are a number of ISPs with multiple ASNs. If you

Re: Net Neutrality...

2014-07-16 Thread Fred Baker (fred)
Relevant article by former FCC Chair http://www.washingtonpost.com/posteverything/wp/2014/07/14/this-is-why-the-government-should-never-control-the-internet/ signature.asc Description: Message signed with OpenPGP using GPGMail

Re: We hit half-million: The Cidr Report

2014-05-01 Thread Fred Baker (fred)
On May 1, 2014, at 4:10 PM, Jean-Francois Mezei jfmezei_na...@vaxination.ca wrote: Pardon my ignorance here. But in a carrier-grade NAT implementation that serves say 5000 users, when happens when someone from the outside tries to connect to port 80 of the shared routable IP ? More to the

Re: The Cidr Report

2014-04-30 Thread Fred Baker (fred)
On Apr 26, 2014, at 12:19 PM, Deepak Jain dee...@ai.net wrote: Does anyone have doomsday plots of IPv6 prefixes? We are already at something like 20,000 prefixes there, and a surprising number of deaggregates (like /64s) in the global table. IIRC, a bunch of platforms will fall over at

Re: IPv6 isn't SMTP

2014-03-26 Thread Fred Baker (fred)
On Mar 25, 2014, at 8:31 PM, Cutler James R james.cut...@consultant.com wrote: 3. Arguing about IPv6 in the context of requirements upon SMTP connections is playing that uncomfortable game with one’s own combat boots. And not particularly productive. That is one of my two big take-aways

Re: NAT64 and matching identities

2013-11-19 Thread Fred Baker (fred)
On Nov 19, 2013, at 8:36 AM, Andrew Sullivan asulli...@dyn.com wrote: On Mon, Nov 18, 2013 at 03:06:52PM -0500, Justin M. Streiner wrote: Other IPv6 transition mechanisms appear to be no less thorny than NAT64 for a variety of reasons. Some of us who worked on the NAT64/DNS64 combination

Re: IP Fragmentation - Not reliable over the Internet?

2013-09-02 Thread Fred Baker (fred)
On Aug 27, 2013, at 12:34 AM, Owen DeLong o...@delong.com wrote: If I send a packet out as a legitimate series of fragments, what is the chance that they will get dropped somewhere in the middle of the path between the emitting host and the receiving host? To my thinking, the answer to

Re: It's the end of the world as we know it -- REM

2013-04-24 Thread Fred Baker (fred)
I guess my question is what the difference is between the sharp-demand curve (Tony's latest, which perhaps mirrors APNIC's final few months of IPv4) and the straight-line curve. My read is that we're arguing about the difference between late 2013 and some time in 2014. I suspect that what most

Re: It's the end of the world as we know it -- REM

2013-04-24 Thread Fred Baker (fred)
On Apr 24, 2013, at 4:50 PM, Michael Thomas m...@mtcc.com wrote: On 04/24/2013 03:26 PM, Fred Baker (fred) wrote: Frankly, the ISPs likely to be tracking this list aren't the people holding back there. To pick on one that is fairly public, Verizon Wireline is running dual stack

Re: De-funding the ITU

2013-01-12 Thread Fred Baker (fred)
On Jan 12, 2013, at 8:17 PM, John Levine jo...@iecc.com wrote: Please learn a little more about the ITU before doing so. There is more to the ITU than the dysfunctional ITU-T, and the political fallout from the US being seen as a big rich bully taking its wallet and going home is likely not

Re: TCP time_wait and port exhaustion for servers

2012-12-05 Thread Fred Baker (fred)
If you want to get into software rewriting, the simplest thing I might come up with would be to put TCBs in some form of LRU list and, at a point where you need a port back, close the TCB that least recently did anything. My understanding is that this was implemented 15 years ago to manage SYN

Re: IPv6 Netowrk Device Numbering BP

2012-11-03 Thread Fred Baker (fred)
On Nov 1, 2012, at 8:20 AM, Masataka Ohta wrote: We should better introduce partially decimal format for IPv6 addresses or, better, avoid IPv6 entirely. With respect, it is already possible to use the decimal subset if you wish. For example, you could write 2001:dba::192:168:2:1 It

Re: abha ahuja

2012-10-21 Thread Fred Baker (fred)
On Oct 20, 2012, at 3:41 PM, Randy Bush wrote: abha ahuja died this day in 2001. wonderful person, good netizen, good researcher. sigh. Yes. She is missed.

Re: IPv4 address length technical design

2012-10-05 Thread Fred Baker (fred)
On Oct 5, 2012, at 4:34 PM, Barry Shein wrote: Well, XNS (Xerox Networking System from PARC) used basically MAC addresses. Less a demonstration of success than that it has been tried. But it's where ethernet MAC addresses come from, they're just XNS addresses and maybe this has changed but

Re: The End-To-End Internet (was Re: Blocking MX query)

2012-09-06 Thread Fred Baker (fred)
It would be really nice if people making statements about the end to end principle would talk about the end to end principle. http://web.mit.edu/Saltzer/www/publications/endtoend/endtoend.pdf The abstract of the paper states the principle: This paper presents a design principle that helps

Re: Testing 1gbps bandwidth

2012-08-14 Thread Fred Baker (fred)
On Aug 14, 2012, at 4:40 AM, valdis.kletni...@vt.edu valdis.kletni...@vt.edu wrote: On Tue, 14 Aug 2012 15:32:47 +0400, Luqman Kondeth said: Is anyone aware of any public IPerf servers in the middle east or close by?(Europe) or anywhere that can do udp?. I have a 1gbps Internet link which

Re: using reserved IPv6 space

2012-07-16 Thread Fred Baker (fred)
On Jul 13, 2012, at 8:05 AM, TJ wrote: On Fri, Jul 13, 2012 at 10:38 AM, -Hammer- bhmc...@gmail.com wrote: OK. I'm pretty sure I'm gonna get some flak for this but I'll share this question and it's background anyway. Please be gentle. In the past, with IPv4, we have used reserved or