Re: Hurricane Electric AS6939

2020-10-13 Thread Ryan Hamel
You would get better peering from Equinix IX, which includes free HE IPv4 Peering + IPv6 Transit Ryan On Oct 13 2020, at 4:29 pm, Aaron Gould wrote: > Do y’all like HE for Internet uplink? I’m thinking about using them for > 100gig in Texas. It would be for my eyeballs ISP. We currently have Sp

Re: Cogent Layer 2

2020-10-14 Thread Ryan Hamel
Mike, Layer 2 is fine once it works. You will have to put up with whatever VLAN tags they pick, if you plan on having multiple virtual circuits on a 10G hub. They do like to see into the flows of traffic, as they only allow up to 2Gbits/flow, per there legacy infrastructure. If the circuit does

Re: Cogent Layer 2

2020-10-14 Thread Ryan Hamel
gt; From: NANOG on > behalf of Ryan Hamel > Sent: Wednesday, October 14, 2020 7:54 PM > To: Mike Hammett > Cc: nanog@nanog.org > Subject: Re: Cogent Layer 2 > > > Mike, > > Layer 2 is fine once it works. > You will have to put up with whatever VLAN tags they

Re: Cogent Layer 2

2020-10-14 Thread Ryan Hamel
hat has all the performance > of SDH with all the functionality of Ethernet. Very popular service. > Unfortunately, management replaced with Switched Ethernet, which many > customers distrusted because of potential overbooking issues. > > > From: Ryan Hamel > Sent: Wedn

Re: Cogent Layer 2

2020-10-14 Thread Ryan Hamel
Yep. Make sure you run BFD with your peering protocols, to catch outages very quickly. On Oct 14 2020, at 12:47 pm, Mike Hammett wrote: > I haven't heard any concerns with reliability, on-net performance (aside from > 2 gig flow limit) or other such things. Do they generally deliver well in >

Re: Cogent Layer 2

2020-10-15 Thread Ryan Hamel
{ protocol udp; destination-port [ 3784 3785 4784 ]; source-prefix-list bgp_hosts; } then accept; } term deny_bfd { from { protocol udp; destination-port [ 3784 3785 4784 ]; } then discard; } Ryan On Oct 14 2020, at 11:29 pm, Saku Ytti wrote: > On Thu, 15 Oct 2020 at 09:11, Ryan Hamel (m

Re: Cogent Layer 2

2020-10-15 Thread Ryan Hamel
t 1:03 am, Saku Ytti wrote: > On Thu, 15 Oct 2020 at 10:28, Ryan Hamel wrote: > > > My experience with multiple carriers is that reroutes happen in under a > > minute but rarely happen, I also have redundant backup circuits to another > > datacenter, so no traffic is truly

Re: cheap MPLS router recommendations

2020-10-16 Thread Ryan Hamel
It can handle a few full tables, but the performance of an MX80/MX104 is nearly the same as the EX4200 switch. Ryan On Oct 16 2020, at 4:41 pm, Tony Wicks wrote: > Well, there is always the MX104 (if you want redundancy) or MX80 if you > don’t. That will give you 80gig wire speed just don’t loa

Re: Asus wifi AP re-writing DNS packets

2020-10-28 Thread Ryan Hamel
I'm curious to know why they would add such a thing, and how you got the iptables rules from the device. Do these Asus routers provide SSH directly into the shell? Ryan On Oct 28 2020, at 11:33 am, Anurag Bhatia wrote: > Hello, > > Wondering anyone from Asus here or anyone who could connect me

Re: Telia Not Withdrawing v6 Routes

2020-11-15 Thread Ryan Hamel
This same issue happened in Los Angeles a number of years ago, but for IPv4 and v6. They need to setup sane BGP timers, and/or advocate the use of BFD for BGP sessions both customer facing and internal. Ryan On Nov 15 2020, at 5:58 pm, Matt Corallo wrote: > Has anyone else experienced issues wh

Re: Global Peer Exchange

2020-11-30 Thread Ryan Hamel
That's Cogent for ya. Ryan On Mon, Nov 30, 2020, 10:14 AM Paul Emmons wrote: > > You take down a 10g connection and they bill each side $.2 a meg, 95th >> percintile billing. VLAN between the two sites. Both sites have to have a >> different AS number. So if you want to move 1g of data, 95th

RE: Verizon FiOS/Google Peering Issues in Northeast?

2021-01-26 Thread Ryan Hamel
Brian, It’s an overall Verizon issue, they say it’s a fiber cut in Brooklyn https://twitter.com/VerizonSupport/status/1354109889572982786?s=20, but that would be a single point of failure. Quite a discussion on the outages mailing list. Ryan From: NANOG On Behalf Of Brian Loveland Sen

RE: Verizon FiOS/Google Peering Issues in Northeast?

2021-01-26 Thread Ryan Hamel
They’re saying it’s a fiber cut in Brooklyn. https://twitter.com/VerizonSupport/status/1354109889572982786 Would be interesting to see the RFO on this. Ryan From: NANOG On Behalf Of Robert Webb Sent: Tuesday, January 26, 2021 9:14 AM To: Brian Loveland Cc: North American Network Operato

RE: Suspicious IP reporting

2021-02-04 Thread Ryan Hamel
Joe, The underlying premise here is, “pick your battles”. If you don’t want an IP address to access your device in anyway, setup a firewall and properly configure it to accept whitelisted traffic only, or just expose a VPN endpoint. The Internet is full of both good and bad actors that probe

RE: Suspicious IP reporting

2021-02-04 Thread Ryan Hamel
but that's it. Do you not understand my issue? I thought that is the real problem with the online bullies in this thread. -- Thank You, Joe On Thu, Feb 4, 2021 at 5:01 PM Ryan Hamel mailto:administra...@rkhtech.org> > wrote: Joe, The underlying premise here is, “pick y

RE: Twitter is down (What a shame)

2021-04-16 Thread Ryan Hamel
Twitter works for me on desktop and mobile. From: NANOG On Behalf Of ADNS NetBSD List Subscriber Sent: Friday, April 16, 2021 5:23 PM To: nanog@nanog.org Subject: Twitter is down (What a shame) Looks like backend is down – main page loads, no content. Does this mean we return to a nor

RE: DoD IP Space

2021-04-24 Thread Ryan Hamel
Mel, I hope you're not implementing this in an ISP network, it's not net neutral if a carrier is making a (political) route/filtering decision. (Points to The Great Firewall of China) Ryan -Original Message- From: NANOG On Behalf Of Mel Beckman Sent: Saturday, April 24, 2021 4:17 PM T

RE: Juniper hardware recommendation

2021-05-07 Thread Ryan Hamel
Hello! We wouldn’t be able to give any sort of answer without knowing your current and future requirements. Each model has its own throughput classes, and sometimes a full on MX router isn’t required. From: NANOG On Behalf Of Javier Gutierrez Guerra Sent: Friday, May 7, 2021 1:55 PM To:

RE: MPLS/MEF Switches and NIDs

2021-05-28 Thread Ryan Hamel
At a few sites of mine, I’ve seen Cisco NCS 520 devices for local in-rack deployments, and NCS 540’s for aggregation and extension handoffs. Looking at their datasheets real fast, MPLS + EVPN support come in on the 540 series. Ryan From: NANOG On Behalf Of Shawn L via NANOG Sent: Friday

BGP - Traffic Management

2021-08-19 Thread Ryan Hamel
Hello, Does anyone know of any US carriers that will accept more specific routes other than what's required for the DFZ, like "le 31" or "upto /31" (junos speak) ? I know Zayo supports this internally but would like to know of other carriers for redundancy. I am currently dealing with a net

Re: Jenkins amplification

2020-02-03 Thread Ryan Hamel
Jean, Do you have facts to support this claim? Signed, A happy pfSense user. On Mon, Feb 3, 2020, 12:42 PM Jean | ddostest.me via NANOG wrote: > Netgate bought Pfsense and they already started to destroy it. > > You should consider to switch to Opnsense. > > On 2020-02-03 14:34, Matt Harris

Re: Hi-Rise Building Fiber Suggestions

2020-02-25 Thread Ryan Hamel
I'd say a pair of Juniper switches on each floor, with their virtual-chassis capability. Terminate the top/bottom floor of fiber 1 into switch 1, and the other into switch two. Create an LACP bond between each floors switches, tag the necessary VLANs, and put the VLAN SVIs onto the first pair of

Re: Hi-Rise Building Fiber Suggestions

2020-02-25 Thread Ryan Hamel
How would that work to solve Norman's problem? That sounds like a lot of money spending, and setup time, for nothing. Ryan On Feb 25 2020, at 8:21 pm, Bradley Burch wrote: > > Should consider DWDM or GPON and in those look at passive optical > technologies that can benefit the project. > > On F

Re: Hi-Rise Building Fiber Suggestions

2020-02-25 Thread Ryan Hamel
I do not recommend doing that, it's 30 members in a single stack. Mine was only two, directly connected to each other. Treat your control plane like your L2, don't extend it farther than necessary. Ryan On Feb 25 2020, at 9:00 pm, Tim Požár wrote: > > Also, Juniper switches will stack over fiber

Re: RIPE NCC Executive Board election

2020-05-13 Thread Ryan Hamel
write the code demonstrating a proof of concept with a couple of Linux VMs, showing off the client and router changes, and release it for the community to play around with. Actions speak louder than words. Just like RIPE votes, and listing your email address as spam. Have a good one. Ryan Hamel On Ma

Re: Contact at Ubiquiti Networks?

2020-05-27 Thread Ryan Hamel
op protection for spanning-tree protocols - Junos OS 15.1X53-D50 Root protection for spanning-tree protocols - Junos OS 15.1X53-D50 Ryan Hamel On May 26 2020, at 11:09 pm, Phil Lavin wrote: > > Even the big guys like Juniper fail at basic functionality. Our brand new > > MX204 fails

Re: Curious Cloudflare DNS behavior

2020-05-30 Thread Ryan Hamel
Hey Constantine, John came in with a technical issue. If you have nothing worthy to say about it specifically, it's best to keep quiet. Thanks! Ryan On May 30 2020, at 11:52 am, Constantine A. Murenin wrote: > When you're not paying for service, you're not the customer, you're the > product. >

Re: Issue with Noction IRP default setting (Was: BGP route hijack by AS10990)

2020-08-01 Thread Ryan Hamel
Job, I disagree on the fact that it is not fair to the BGP implementation ecosystem, to enforce a single piece of software to activate the no-export community by default, due to ignorance from the engineer(s) implementing the solution. It should be common sense that certain routes that should b

Re: Issue with Noction IRP default setting (Was: BGP route hijack by AS10990)

2020-08-01 Thread Ryan Hamel
experience on the DFZ, they have SOME > responsibility to keep their software from accidentally breaking the internet. > > -Matt > > > On Sat, Aug 1, 2020 at 2:30 PM Ryan Hamel (mailto:r...@rkhtech.org)> wrote: > > Job, > > > > I disagree on the fact th

Re: BFD for routes learned trough Route-servers in IXPs

2020-09-15 Thread Ryan Hamel
> "How can I check if my communication against the NextHop of the routes that I > learn from the route-servers are OK? If it is not OK, how can I remove it > from my FIB?" Install a route optimizer that constantly pings next hops, when the drop threshold is met, remove the routes. No one is goi

Re: Juniper configuration recommendations/BCP

2020-10-08 Thread Ryan Hamel
There is linux happening in some devices. https://www.juniper.net/documentation/en_US/junos/topics/concept/evo-overview.html Ryan On Thu, Oct 8, 2020, 4:16 PM Matt Harris wrote: > Matt Harris​ > | Infrastructure Lead Engineer > 816‑256‑5446 > | Direct > Looking for something? > *Helpdesk Porta

RE: Microsoft peering contact

2021-08-30 Thread Ryan Hamel
Tomas, In the bottom left corner, there is an escalation matrix based on priority, depending on the issue you can work up the chain at a reasonable pace. Ryan From: NANOG On Behalf Of Tomas Lynch Sent: Monday, August 30, 2021 10:21 AM To: NANOG Subject: Microsoft peering contact H

Re: IPv6 woes - RFC

2021-09-04 Thread Ryan Hamel
Jeroen, > You people keep on giving money to ISPs that are not providing the service you want. Not everyone has the luxury of picking their ISP, and the common consumer doesn't know or care about IPv6. They want Netflix to work and that's it. Ryan On Sat, Sep 4, 2021, 1:47 PM Jeroen Massar via

RE: CenturyLink Fiber Latency Issues (Seattle, WA)

2021-11-01 Thread Ryan Hamel
Neel, Sounds like buffer bloat. Run a speed test, whatever is your maximum for your download and upload take 10% away from it, and setup traffic shaping in OPNsense (https://docs.opnsense.org/manual/shaping.html) with those values. If the issue goes away, then you're exceeding the buffer of Centu

Re: junos config commit question

2022-02-11 Thread Ryan Hamel
If it's before committing the changes just run "top" to get back to the root of the configuration tree, then "rollback 0" to go back to the version before any changes were made, then just "exit" out. Ryan On Fri, Feb 11, 2022, 2:20 PM Lyndon Nerenberg (VE7TFX/VE6BBM) < lyn...@orthanc.ca> wrote:

RE: Ukraine request yikes

2022-03-01 Thread Ryan Hamel
It’s already spread to the news - https://www.rollingstone.com/politics/politics-news/ukraine-icann-russia-internet-runet-disconnection-1314278/ Ryan From: NANOG On Behalf Of George Herbert Sent: Tuesday, March 1, 2022 12:17 AM To: Nanog Subject: Ukraine request yikes Posted by Bill

AWS - IP Address is Blocked?

2022-06-29 Thread Ryan Hamel
their block list or explain what is happening, I would greatly appreciate if you could contact me off list. Thank you very much for your time. Ryan Hamel

RE: HE.net and BGP Communities

2022-07-24 Thread Ryan Hamel
Yes. Ryan -Original Message- From: NANOG On Behalf Of Rubens Kuhl Sent: Sunday, July 24, 2022 12:36 PM To: Nanog Subject: HE.net and BGP Communities The last mention I found on NANOG about HE.net and BGP communities for traffic engineering is from April 2021 and said they provided non

RE: AS15960 abuse contact?

2022-09-07 Thread Ryan Hamel
Might as well send it to their upstream abuse contacts and state their customer is unresponsive. Ryan From: NANOG On Behalf Of Tim Burke Sent: Wednesday, September 7, 2022 1:10 PM To: nanog@nanog.org list Subject: AS15960 abuse contact? Anyone have an abuse contact at AS15960 / blueho

RE: BCP38 For BGP Customers

2022-11-07 Thread Ryan Hamel
RPKI and IRR should be part of the prefix-list generation process, from there setup rpf-check with a fail-filter pointing to an ACL that allows source traffic matching the prefix-list and drops the rest. Although at that point you can just apply said ACL to the L3 interfaces supplying the BGP ha

RE: Sites blocking ISP Addresses

2022-11-30 Thread Ryan Hamel
Based on experience, all I can say is good luck. They do not respond to anyone. Ryan From: NANOG On Behalf Of James Dexter Sent: Tuesday, November 29, 2022 8:43 AM To: nanog@nanog.org Subject: Sites blocking ISP Addresses Dear list, We have address ranges that are being blocked by sites

AS3356 Announcing 2000::/12

2022-12-07 Thread Ryan Hamel
AS3356 has been announcing 2000::/12 for about 3 hours now, an aggregate covering over 23K prefixes (just over 25%) of the IPv6 DFZ. Prayers for anyone impacted, the team announcing it, and the team resolving the issue. Ryan Hamel

RE: AS3356 Announcing 2000::/12

2022-12-07 Thread Ryan Hamel
These as well: 3257 3356 3491 3356 They probably leaked a hold down route. Ryan Hamel -Original Message- From: Christopher Morrow Sent: Wednesday, December 7, 2022 8:48 PM To: r...@rkhtech.org Cc: nanog@nanog.org Subject: Re: AS3356 Announcing 2000::/12 On Wed, Dec 7, 2022 at 11:25

RE: AS3356 Announcing 2000::/12

2022-12-09 Thread Ryan Hamel
t: Re: AS3356 Announcing 2000::/12 On Thu, Dec 8 2022 at 12:38 PM, Job Snijders mailto:nanog@nanog.org> > wrote: Hi all, On Wed, Dec 07, 2022 at 08:24:54PM -0800, Ryan Hamel wrote: AS3356 has been announcing 2000::/12 for about 3 hours now, an aggregate covering over 2

IP Blocked from Airbnb

2022-12-22 Thread Ryan Hamel
Hello Everyone, If there is someone on this list from Airbnb who can get an IP address removed from a block list, please contact me off list. Thanks! Ryan Hamel

RE: GTT blocking IPv4 address 128.31.0.39

2023-01-03 Thread Ryan Hamel
g Tor. Ryan Hamel -Original Message- From: NANOG On Behalf Of Neel Chauhan Sent: Tuesday, January 3, 2023 7:49 PM To: nanog@nanog.org Subject: GTT blocking IPv4 address 128.31.0.39 Hi, I am a customer of ReliableSite in their New Jersey location, and RS uses GTT as a transit ISP, along

RE: Lima, OH Spectrum/Charter Severe Node/Hop Latency Issues

2023-02-07 Thread Ryan Hamel
Austin, If you run MTRs or traceroutes through the node, is there any other additional packet loss seen in the path, and at the destination? What does the reverse MTR or traceroute look like? The attached image was stripped out by the mailing list system. Bufferbloat is controlled at the fi

Re: IPv4 Subnet 23.151.232.0/24 blackholed?

2023-04-25 Thread Ryan Hamel
Neel, Carriers rebuild their prefixes lists once or twice in a 24 hour period. Considering that you just got the block today and is in ReliableSite's AS-SET, you just got to be patient. Having announcements propagated immediately either sounds like it happened a day after you gave them the L

Re: 10G CPE w/VXLAN - vendors?

2023-06-14 Thread Ryan Hamel
Putting the smart devices on the edge allows for a much-simplified core topology. Either way, I was doing research on FPGA-based hardware a couple of weeks ago and came across this which may tick all the boxes. https://ethernitynet.com/products/enet-network-appliances/uep-60/ I do not know the

Re: 10G CPE w/VXLAN - vendors?

2023-06-14 Thread Ryan Hamel
The problem with these switch suggestions is the lack of RFC2544 testing, and jitter + latency monitoring required for meeting SLA. That is why I mentioned the FPGA solution. Ryan Hamel From: NANOG on behalf of Brandon Price Sent: Wednesday, June 14, 2023 2

Re: 10G CPE w/VXLAN - vendors?

2023-06-14 Thread Ryan Hamel
t boxes in the field as I speak. It works very well. I also agree with your stance on Broadcom, it's hard to come up with alternatives that are not ADVA/Ciena/Cisco/RAD. Ryan Hamel From: NANOG on behalf of Mark Tinka Sent: Wednesday, June 14, 2023 10:30 PM

Re: 10G CPE w/VXLAN - vendors?

2023-06-14 Thread Ryan Hamel
I fully agree here too. That's why I proposed a "smarter" CPE to replace the standard appliances deployed on site, where the only thing changing is the configuration on the device itself, not product being handed off. Ryan Hamel From: NANOG on

Re: 10G CPE w/VXLAN - vendors?

2023-06-15 Thread Ryan Hamel
;s as in Cogent, Level3/Lumen, Zayo, etc. Juniper's ACX7024 does look interesting as a building demarc/agg device, but overkill for a single client CPE. It can't hold full tables for transit handoffs, but the customer can establish multi-hop BGP sessions upstre

Re: MX204 Virtual Chassis Setup

2023-08-21 Thread Ryan Hamel
Paschal, It is not supported, nor is it recommended for redundancy in a routed setup. Please describe your (desired) topology, that way the community can discuss alternatives. Thanks, Ryan Hamel From: NANOG on behalf of Pascal Masha Sent: Monday, August 21

Re: Guest Column: Kentik's Doug Madory, Last Call for Upcoming ISOC Course + More

2023-09-08 Thread Ryan Hamel
Randy, You're right, the problem is not technical. It's a choice to click the links or not. NANOG does not have to sanitize links for you. Those emails do not have to be read, and no one is stopping you from filtering them out. For you to say, "my privacy has been sold", is simply not true. Ry

Re: Guest Column: Kentik's Doug Madory, Last Call for Upcoming ISOC Course + More

2023-09-09 Thread Ryan Hamel
rious things? Y'all have been making a mountain out of a molehill. Ryan From: Tom Beecher Sent: Saturday, September 9, 2023 9:30:13 AM To: Martin Hannigan Cc: Ryan Hamel ; nanog@nanog.org Subject: Re: Guest Column: Kentik's Doug Madory, Last Call fo

RE: Sflow billing or usage calculation software

2019-04-13 Thread Ryan Hamel
bound, that way intelligent routing changes can be made much quicker. -- Ryan Hamel Network Administrator ryan.ha...@quadranet.com | +1 (888) 578-2372 QuadraNet Enterprises, LLC. | Dedicated Servers, Colocation, Cloud From: NANOG On Behalf Of Tony C Sent: Friday, April 12, 2019 8:22 PM To: nanog@nano

RE: Must have ISP Open Source & tools

2019-07-07 Thread Ryan Hamel
My List: Oxidized as a replacement for RANCID Telegraf + InfluxDB = Tons of Grafana Dashboards (Open Source Slack Alternative) Ansible or Python Knowledge with Paramiko or netmiko for network automation. BGP: FRRouting - Mimics Cisco CLI BIRD - Programming style config format. Exabgp - Mostly us

RE: Must have ISP Open Source & tools

2019-07-08 Thread Ryan Hamel
Java as a dependency this day and age… -Ryan From: Jason Kuehl Sent: Monday, July 08, 2019 6:41 AM To: Mehmet Akcin Cc: Ryan Hamel ; Niels Bakker ; nanog@nanog.org Subject: Re: Must have ISP Open Source & tools We use https://cbackup.me/en/ over Rancid -- Sincerely, Jason W Kuehl Cell

Re: Performance metrics used in commercial BGP route optimizers

2019-07-16 Thread Ryan Hamel
The answers which you seek would be considered secret sauce to these vendors. But you can start at running MTRs through a VRF per carrier only containing a default route, and looking at the results. Ryan On Tue, Jul 16, 2019 at 6:11 AM -0700, "Dimeji Fayomi" mailto:o...@students.waikato.ac.n

RE: Performance metrics used in commercial BGP route optimizers

2019-07-16 Thread Ryan Hamel
Nowhere near the number as an engineer fat fingering a route. There are ISPs that accept routes all the way to /32 or /128, for traffic engineering with ease, and/or RTBH. Ryan -Original Message- From: NANOG On Behalf Of Nick Hilliard Sent: Tuesday, July 16, 2019 11:04 AM To: Job Snijd

Re: Spam due to new ARIN allocation

2019-08-02 Thread Ryan Hamel
> > Do it. I'd name and shame all of them. Ryan On Fri, Aug 2, 2019, 4:33 PM Tim Burke wrote: > >> We recently received a new ASN from ARIN - you know what that means... >> the sales vultures come out to play! >> >> So far, it has resulted in spam from Cogent (which is, of course, to be >> expec

Re: What can ISPs do better? Removing racism out of internet

2019-08-04 Thread Ryan Hamel
> could network operators do anything to make these sites “not so easy” to be > found, reached, and used to end innocent lives? Nope. If they follow the word of the providers and services they use, there is no reason to terminate the service. CloudFlare terminating 8chan's service was a one off

Re: new BGP hijack & visibility tool “BGPalerter”

2019-08-14 Thread Ryan Hamel
Job, I appreciate the effort and the intent behind this project, but why should the community contribute to an open source project on GitHub that is mainly powered by a closed source binary? Ryan On Wed, Aug 14, 2019, 10:55 AM Job Snijders wrote: > Dear NANOG, > > Recently NTT investigated how

Re: Recommended DDoS mitigation appliance?

2019-11-17 Thread Ryan Hamel
Rob, I am going to assume you want it to spit out 10G clean, what size dirty traffic are you expecting it to handle? Ryan On Nov 17 2019, at 2:18 pm, Rabbi Rob Thomas wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > > Hello, NANOG! > I'm in the midst of rebuilding/upgrading our b

PayPal - IP Address Blocked

2019-12-17 Thread Ryan Hamel
Hey everyone, Can someone from PayPal who manages their IP ACLs to reach out to me, offlist? I have an IP address that is acting like its blocked but support is saying it's not. Thank you in advance for your time. Ryan Hamel

Re: Holiday route leak

2019-12-30 Thread Ryan Hamel
On Mon, Dec 30, 2019, 12:44 PM Job Snijders wrote: > Dear all, > > On Fri, Dec 27, 2019 at 04:06:24PM -0500, Christopher Morrow wrote: > > If there are AS46844 folk listening around their eggnog ... it'd be > > nice if you would stop leaking prefixes: https://imgur.com/a/Js0YvP2 > > > > this from

Re: Wikipedia drops support for old Android smartphones; mandates TLSv1.2 to read

2019-12-31 Thread Ryan Hamel
Just let the old platforms ride off into the sunset as originally planned like the SSL implementations in older JRE installs, XP, etc. You shouldn't be holding onto the past. Ryan On Tue, Dec 31, 2019, 12:41 AM Constantine A. Murenin wrote: > On Tue, 31 Dec 2019 at 02:29, Matt Hoppes < > mattli

Intuit - IP Block - Connection Timed Out

2018-05-09 Thread Ryan Hamel
. Thanks! -- Ryan Hamel ryan.ha...@quadranet.com | +1 (888) 578-2372 QuadraNet, Inc. | Dedicated Servers, Colocation, Cloud

RE: AS3266: BitCanal hijack factory, courtesy of Cogent, GTT, and Level3

2018-06-27 Thread Ryan Hamel
Why would we need an RFC for Comic Sans? -Original Message- From: NANOG On Behalf Of Alain Hebert Sent: Wednesday, June 27, 2018 1:50 PM To: nanog@nanog.org Subject: Re: AS3266: BitCanal hijack factory, courtesy of Cogent, GTT, and Level3     I ain't friday, but: There is no RFC for th

RE: unwise filtering policy on abuse mailboxes

2018-07-27 Thread Ryan Hamel
All, My colleague has already contacted their friend at Psychz when I received the first message. Not everyone has to be on the list to get the message relayed to them. Rich, shall we all drop your email? It would achieve the same effect, and make this email thread more productive. Ryan

RE: Web UI DHCP Option 82

2018-08-17 Thread Ryan Hamel
Mike, Take a look into Kea from ISC. The config is JSON based, which allows for nearly any scripting language to make changes, or you can dig into how it works with MySQL for dynamic operation (https://kea.isc.org/wiki/HostReservationsHowTo). Ryan From: NANOG On Behalf Of Mike Hammett Sent:

RE: Web UI DHCP Option 82

2018-08-19 Thread Ryan Hamel
x27;s no GUI but I'll second the Kea recommendation. At 09:36 AM 8/18/2018, Colton Conor wrote: >Mike, I am looking for the same thing. Does Mikrotik have the ability >to do what you are requesting? > >On Fri, Aug 17, 2018 at 5:11 PM Ryan Hamel ><<mailto:r

RE: automatic rtbh trigger using flow data

2018-08-30 Thread Ryan Hamel
There are software that combine your needs altogether. I'm sure there are others. WANGuard from Andrisoft (https://www.andrisoft.com/software/wanguard) Fastnetmon (https://fastnetmon.com/) From: NANOG On Behalf Of Aaron Gould Sent: Thursday, August 30, 2018 12:53 PM To: Nanog@nanog.org Subject:

RE: automatic rtbh trigger using flow data

2018-08-30 Thread Ryan Hamel
Exactly Aaron. No provider will allow a customer to null route a source IP address. I could only assume that a null route on Michel's network is tanking the packets at their edge to 192.0.2.1 (discard/null0). -- Ryan Hamel Senior Support Engineer ryan.ha...@quadranet.com | +1 (888) 578

RE: automatic rtbh trigger using flow data

2018-08-31 Thread Ryan Hamel
From experience, sflows are horribly inaccurate for DDoS detection, since the volume could disrupt the control plane and render the process useless, thus not giving data to the external system to act upon it. You can't get any better than mirroring your inbound transit, and sampling the output t

RE: automatic rtbh trigger using flow data

2018-09-01 Thread Ryan Hamel
No ISP is in the business of filtering traffic unless the client pays the hefty fee since someone still has to tank the attack. I also don’t think there is destination prefix IP filtering in flowspec, which could seriously cause problems. From: NANOG On Behalf Of Baldur Norddahl Sent: Saturday

RE: automatic rtbh trigger using flow data

2018-09-02 Thread Ryan Hamel
going to offer such filtering services for free when DDoS mitigation is a cash cow. Ryan Hamel From: NANOG On Behalf Of Baldur Norddahl Sent: Sunday, September 02, 2018 1:42 AM To: nanog@nanog.org Subject: Re: automatic rtbh trigger using flow data This is not true. Some of our transits do RTBH for

RE: Console Servers

2018-09-18 Thread Ryan Hamel
I just use a Raspberry Pi with USB to Serial adapters or old servers with PCI(-E) 8 port serial cards. They make it so easy to adapt to any environment, and it phones home to my conserver (https://www.conserver.com/) gateway. The total cost for hardware is less than $150. Ryan From: NANOG On

RE: NANOG Security Track: Route Security

2018-09-30 Thread Ryan Hamel
Just like how all the email threads on NANOG are archived, all talks should be archived as well. Ryan Hamel From: NANOG On Behalf Of Krassimir Tzvetanov Sent: Sunday, September 30, 2018 3:31 PM To: Sam Oduor Cc: NANOG mailing list Subject: Re: NANOG Security Track: Route Security Sam, To

RE: NANOG Security Track: Route Security

2018-10-01 Thread Ryan Hamel
knowledge? That's crazy. Ryan Hamel -Original Message- From: NANOG On Behalf Of Ryan Woolley Sent: Monday, October 01, 2018 11:48 AM To: NANOG Subject: Re: NANOG Security Track: Route Security On Mon, Oct 1, 2018 at 8:16 AM Netravnen wrote: > > On Mon, 1 Oct 2018 at 14:01, Jo

RE: Oct. 3, 2018 EAS Presidential Alert test

2018-10-03 Thread Ryan Hamel
Confirmed Verizon - Android - Los Angeles. -- Ryan Hamel Network Engineer ryan.ha...@quadranet.com | +1 (888) 578-2372 x201 QuadraNet Enterprises, LLC. | Dedicated Servers, Colocation, Cloud -Original Message- From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Milt Aitken Sent

RE: Brocade SLX Internet Edge

2018-10-31 Thread Ryan Hamel
it must use the Jericho chipset or some variant to get that kind of performance. In the end, your mileage may vary. -- Ryan Hamel Network Engineer ryan.ha...@quadranet.com | +1 (888) 578-2372 x201 QuadraNet Enterprises, LLC. | Dedicated Servers, Colocation, Cloud -Original Message--

RE: Brocade SLX Internet Edge

2018-10-31 Thread Ryan Hamel
+1 SecureCRT in general, and don’t buy Brocade, I was happy when I got to pull out the last Foundry. -- Ryan Hamel Network Engineer ryan.ha...@quadranet.com<mailto:ryan.ha...@quadranet.com> | +1 (888) 578-2372 x201 QuadraNet Enterprises, LLC. | Dedicated Servers, Colocation, Cloud

RE: Switch with high ACL capacity

2018-11-06 Thread Ryan Hamel
swing /32's or /128's to said dedicated links so it won't affect your clients traffic. -- Ryan Hamel Network Administrator ryan.ha...@quadranet.com | +1 (888) 578-2372 QuadraNet Enterprises, LLC. | Dedicated Servers, Colocation, Cloud -Original Message- From: NANOG On

RE: Switch with high ACL capacity

2018-11-06 Thread Ryan Hamel
/48 through the carrier that has the filters in place to ensure they get all the traffic. After post processing the spoofed traffic, it should leave you with flooding to take care of. -- Ryan Hamel Network Administrator ryan.ha...@quadranet.com | +1 (888) 578-2372 QuadraNet Enterprises, LLC

RE: Should ISP block child pornography?

2018-12-06 Thread Ryan Hamel
When I receive a report, we follow our procedures with the Cyber Tip Line, and then immediately null route the IP address until the content is removed. From: NANOG On Behalf Of Suresh Ramasubramanian Sent: Thursday, December 06, 2018 10:49 PM To: Mark Seiden Cc: nanog@nanog.org Subject: Re: Sho

RE: VPS providers contacts

2019-02-08 Thread Ryan Hamel
exception on data it doesn’t know to expect, and rolling back the changes if it’s possible. -- Ryan Hamel Network Administrator ryan.ha...@quadranet.com | +1 (888) 578-2372 QuadraNet Enterprises, LLC. | Dedicated Servers, Colocation, Cloud

Re: maximum ipv4 bgp prefix length of /24 ?

2023-09-29 Thread Ryan Hamel
Matt, It's not just you or Google, I just got those emails to my Office 365 at the same time. My guess is that the list admins/moderators got the emails and just responded without approving the moderated emails. Ryan From: NANOG on behalf of Matthew Petach S

Re: Low to Mid Range DWDM Platforms

2023-10-06 Thread Ryan Hamel
Solid Optics? -- https://www.solid-optics.com/product/edfamux-multiplexer-amplifier-dispersion-compensation-dwdm-mux-edfa/ Ryan From: NANOG on behalf of Dave Bell Sent: Friday, October 6, 2023 6:52 AM To: Mark Tinka Cc: nanog@nanog.org Subject: Re: Low to Mi

Re: transit and peering costs projections

2023-10-14 Thread Ryan Hamel
Why not place the routers in Dallas, aggregate the transit, IXP, and PNI's there, and backhaul it over redundant dark fiber with DWDM waves or 400G OpenZR? Ryan From: NANOG on behalf of Tim Burke Sent: Saturday, October 14, 2023 8:45 PM To: Dave Taht Cc: Netw

Re: Congestion/latency-aware routing for MPLS?

2023-10-18 Thread Ryan Hamel
That's not a good option for bad weather depending on the region. Rain fade and other effects at 24Ghz and above can hinder a set of links, which is sometimes better than having no links at all. The encoding and error correcting capabilities play a crucial part in having a good connection. Ryan

Re: Am I the only one who thinks this is disconcerting?

2023-11-13 Thread Ryan Hamel
Matt, Why would HE hijack Cogent's IP space? That would end in a lawsuit and potentially even more de-peering between them. Ryan Hamel From: NANOG on behalf of Matt Corallo Sent: Monday, November 13, 2023 11:32 AM To: Bryan Fields ; nanog@nanog.org Su

Re: ipv6 address management - documentation

2023-11-16 Thread Ryan Hamel
Christopher, A residential customer would be getting their /56 from the providers pool via RA or DHCPv6. With a /32 aggregate, it can handle 1.6 million /56 delegations, which can cover a few regions. It all depends on the planning going into splitting up the aggregate. A rule of thumb I go by

Re: CPE/NID options

2023-11-27 Thread Ryan Hamel
The problem with using switches as a CPE device is the lack of RFC2544 (or equivalent) testing, and monitoring of the complete circuit with TWAMP. Both of which are used to ensure compliance with an SLA. Ryan Hamel From: NANOG on behalf of Josh Luthman Sent

Re: CPE/NID options

2023-11-27 Thread Ryan Hamel
circuit without a truck roll. Ryan Hamel From: Josh Luthman Sent: Monday, November 27, 2023 6:41 AM To: Ryan Hamel Cc: Christopher Hawker ; North American Network Operators' Group Subject: Re: CPE/NID options Caution: This is an external email and m

Re: 202401102221.AYC Re: Streamline The CG-NAT Re: 202401100645.AYC Re: IPv4 address block

2024-01-10 Thread Ryan Hamel
they can match a MAC address of the customer router + MAC address of the carrier equipment, to the DHCP and flow logs. As along as the carrier implements IPv6, it will cut down on the active NAT sessions and port forwards the equipment needs to process. Ryan Hamel

Re: Where to Use 240/4 Re: 202401100645.AYC Re: IPv4 address block

2024-01-11 Thread Ryan Hamel
Abraham, You're arguing semantics instead of the actual point. Residential customers want Internet access, not intranet access. Again, VRFs are plentiful and so are CG-NAT firewall appliances or servers to run those VMs. Save yourself the time and effort on this and implement IPv6. Ryan _

Re: Stealthy Overlay Network Re: 202401100645.AYC Re: IPv4 address block

2024-01-11 Thread Ryan Hamel
Abraham, You may not need permission from the IETF, but you effectively need it from every networking vendor, hardware vendor, and OS vendor. If you do not have buy in from key stakeholders, it's dead-on arrival. Ryan From: NANOG on behalf of Abraham Y. Chen

Re: IPv6? Re: Where to Use 240/4 Re: 202401100645.AYC Re: IPv4 address block

2024-01-12 Thread Ryan Hamel
, January 12, 2024 3:45:32 AM To: Ryan Hamel Cc: nanog@nanog.org ; Michael Butler ; Chen, Abraham Y. Subject: IPv6? Re: Where to Use 240/4 Re: 202401100645.AYC Re: IPv4 address block Caution: This is an external email and may be malicious. Please take care when clicking links or opening attachments

  1   2   >