Re: NG Firewalls & IPv6

2018-04-04 Thread Adam Kennedy via NANOG
We've deployed about a dozen Sophos SG and XG firewalls with IPv6 on WAN, LAN and VPN with great success. The XG is the firmware with the more modern appearance and a couple latest-gen features. But the SG is just as "next gen" and still has good IPv6 capability. -- Adam Kennedy, Network &

Re: NG Firewalls & IPv6

2018-04-05 Thread Adam Kennedy via NANOG
We've been using DHCP-PD with Sophos SG/XG on a couple Comcast connections and it works fine. It will even go through all your firewall objects and automatically change the IPv6 prefix from the old to new if the prefix from PD changes. -- Adam Kennedy, Network & Systems Engineer

Re: Are network operators morons? [was: CloudFlare issues?]

2019-06-25 Thread Adam Kennedy via NANOG
Now with that out of the way... The mentality of everyone working together for a Better Internet (tm) is sort of a mantra of WISPA and WISPs in general. It is a mantra that has puzzled me and perplexed my own feelings as a network engineer. Do I want a better overall experience for my users and

Re: WIKI documentation Software?

2020-03-14 Thread Adam Kennedy via NANOG
We've been using BookStack. It's easy for staff to use and understand. We gave each department their own "shelf" in there and can assign rights to shelves so managers of the departments can add their own books/chapters/pages. Once you dive in you'll see how it's organized but it's a really solid

Re: DNS cache Validation

2020-05-18 Thread Adam Kennedy via NANOG
I wrote a script to expose stats from unbound to SNMP and built a Cacti template for that. Recently started moving the DNS stats to feed into Telegraf that pushes to an InfluxDB server, then built a dashboard in Grafana. We track DNS RTT for a few queries, number of drops, number of rejects,

Re: Famous operational issues

2021-02-23 Thread Adam Kennedy via NANOG
While we're talking about raid types... A few acquisitions ago, between 2006-2010, I worked at a Wireless ISP in Northern Indiana. Our CEO decided to sell Internet service to school systems because the e-rate funding was too much to resist. He had the idea to install towers on the schools and