September 2000 - NANOG - lists.nanog.org

Re: ARIN Policy on IP-based Web Hosting
by Danny McPherson 01 Sep '00

01 Sep '00

I agree with Alec here. If you've got complaints or want to be involved, use the ppml list - whether or not you make it to the meetings. Though the meetings indeed have a significant impact on policies, I'm pretty certain that if valid points are made on the mailing list they'll be considered at the meetings, and if they're not - whine about it on the ppml list -- that's what it's for... -danny > Certainly. That's what ppml(a)arin.net is for.

3 2

Re: IPv6 allocatin (was Re: ARIN Policy on IP-based Web Hosting)
by Vadim Antonov 01 Sep '00

01 Sep '00

On Fri, 1 Sep 2000, Scott Francis wrote: > > Are we building production networks or doing experiments? IPv6 exhibits > > no added functionality over IPv4 + NAT, so why bother? > > what? > > *scratches head* > > that's odd, I was under the impression that an order of magnitude more > address space, all of it PUBLICLY ROUTEABLE, If that was of any importance, a trivial addition of an "extra bits" IPv4 option would suffice. In fact, majority of network hosts are not "Publicly Routeable" for the simple reason that they're sitting behind firewalls, or have dynamic addresses. > without any translation > bottlenecks (and yes, there *are* translation bottlnecks on a setup > with several thousands IPs running through a single NAT box), Are you trying to do NAT at OC-3? :) Actually, a newer faster PCs can, probably, do that at even higher bitrates :) It is _very_ easy to install as many NATs in parallel as you wish, simply by segmenting private address space, and routing different segments through different NAT boxes. (And any application-level firewall is already a "NAT" :) > with support for encryption in the packet format, constituted 'added > functionality'. Mmmm... I apparenty have a delusion of having a working IPSEC in my box... > Apparently I was mistaken. No, I agree that having these things available in the initial design is nice; but that alone does not justify redoing the entire network from scratch, since pretty much the same effect can demonstrably be achieved using the already-deployed technology. --vadim

1 0

MYDOMAIN.COM faking auth on COM.BR zone
by Frederico A C Neves 01 Sep '00

01 Sep '00

Dear Nanog Readers, As we have not yet received any response from our abuse request (attached) to MYDOMAIN.COM and more 10 phone calls we are looking for help of any kind here. COM.BR zone is populated with 280K zone delegations (92% of the .BR registered domain names). Mydomain.com DNS servers are delegated to 1361 domains inside the .BR zone. We don't known why but these servers are answering authoritatively to COM.BR zone and they are carrying a wild card record to. This is causing some confusion and trouble to buggy resolvers (notably NT). If someone knows a contact different of the whois and the web site information please let me known asap privately. Best Regards Frederico Neves .BR tech contact --begin bash> dig @a.root-servers.net br ns ; <<>> DiG 8.2 <<>> @a.root-servers.net br ns ; (1 server found) ;; res options: init recurs defnam dnsrch ;; got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6 ;; flags: qr rd; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 5 ;; QUERY SECTION: ;; br, type = NS, class = IN ;; ANSWER SECTION: br. 2D IN NS NS.DNS.br. br. 2D IN NS NS1.DNS.br. br. 2D IN NS NS2.DNS.br. br. 2D IN NS NS3.NIC.FR. br. 2D IN NS NS-EXT.VIX.COM. ;; ADDITIONAL SECTION: NS.DNS.br. 2D IN A 143.108.23.2 NS1.DNS.br. 2D IN A 200.255.253.234 NS2.DNS.br. 2D IN A 200.19.119.99 NS3.NIC.FR. 2D IN A 192.134.0.49 NS-EXT.VIX.COM. 2D IN A 204.152.184.64 ;; Total query time: 768 msec ;; FROM: clone.registro.br to SERVER: a.root-servers.net 198.41.0.4 ;; WHEN: Fri Sep 1 17:52:07 2000 ;; MSG SIZE sent: 20 rcvd: 209 bash> dig @NS.DNS.br. com.br ns ; <<>> DiG 8.2 <<>> @NS.DNS.br. com.br ns ; (1 server found) ;; res options: init recurs defnam dnsrch ;; got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6 ;; flags: qr aa rd; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 3 ;; QUERY SECTION: ;; com.br, type = NS, class = IN ;; ANSWER SECTION: com.br. 1D IN NS NS2.DNS.br. com.br. 1D IN NS NS-EXT.VIX.COM. com.br. 1D IN NS NS.DNS.br. com.br. 1D IN NS NS1.DNS.br. ;; ADDITIONAL SECTION: NS2.DNS.br. 1D IN A 200.19.119.99 NS.DNS.br. 1D IN A 143.108.23.2 NS1.DNS.br. 1D IN A 200.255.253.234 ;; Total query time: 1 msec ;; FROM: clone.registro.br to SERVER: NS.DNS.br. 143.108.23.2 ;; WHEN: Fri Sep 1 17:52:24 2000 ;; MSG SIZE sent: 24 rcvd: 157 bash> dig @ns1.mydomain.com com.br any ; <<>> DiG 8.2 <<>> @ns1.mydomain.com com.br any ; (1 server found) ;; res options: init recurs defnam dnsrch ;; got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6 ;; flags: qr aa rd; QUERY: 1, ANSWER: 9, AUTHORITY: 0, ADDITIONAL: 7 ;; QUERY SECTION: ;; com.br, type = ANY, class = IN ;; ANSWER SECTION: com.br. 42m40s IN SOA ns1.mydomain.com. hostmaster.com.br. ( 967828523 ; serial 4h33m4s ; refresh 34m8s ; retry 1w5d3h16m16s ; expiry 42m40s ) ; minimum com.br. 3D IN NS ns1.mydomain.com. com.br. 3D IN NS ns2.mydomain.com. com.br. 3D IN NS ns3.mydomain.com. com.br. 3D IN NS ns4.mydomain.com. com.br. 1D IN A 208.184.130.40 com.br. 1D IN MX 10 a.mx.mydomain.com. com.br. 1D IN MX 10 b.mx.mydomain.com. com.br. 1D IN MX 10 c.mx.mydomain.com. ;; ADDITIONAL SECTION: ns1.mydomain.com. 3D IN A 208.184.130.51 ns2.mydomain.com. 3D IN A 208.184.130.52 ns3.mydomain.com. 3D IN A 208.184.130.53 ns4.mydomain.com. 3D IN A 208.184.130.55 a.mx.mydomain.com. 1D IN A 208.184.130.53 b.mx.mydomain.com. 1D IN A 208.184.130.51 c.mx.mydomain.com. 1D IN A 208.184.130.55 ;; Total query time: 1022 msec ;; FROM: clone.registro.br to SERVER: ns1.mydomain.com 208.184.130.51 ;; WHEN: Fri Sep 1 17:52:46 2000 ;; MSG SIZE sent: 24 rcvd: 340 --end -- ---------------------------------------------------------------- Frederico A C Neves Registro .br - ANSP <fneves(a)registro.br> R.Pio XI, 1500 Tel +55-11-3645-2418 Sao Paulo - SP - Brazil - 05468-901

1 0

Re: IPv6 allocatin (was Re: ARIN Policy on IP-based Web Hosting)
by Shawn McMahon 01 Sep '00

01 Sep '00

On Fri, Sep 01, 2000 at 01:48:21PM -0700, Scott Francis wrote: > > > You're right though - IPv6/Internet2 implementation on a large scale will likely be some > time down the road yet. If anything I said implied I equate IPv6 necessarily with Internet2, I apologize for not having made myself more clear. IPv6 may very well turn out to be an important tool in fixing the Internet. Internet2 is another kettle of fish entirely, and if it connects to the Internet at any point that allows anybody on Internet2 to connect to points on the Internet, then there's no such thing as Internet2 and it's just part of the Internet.

1 0

Looking to profile a few unique ISPs
by dgreenfi＠cmp.com 01 Sep '00

01 Sep '00

Thought this might of interest to some. Network Magazine (www.networkmagazine.com) is looking to profile four or five leading ISPs from around the globe. We are particularly interested in finding those smaller providers that might not get all the press exposure of the Tier-1s, but are really innovating in the networking technology being deployed, their service offerings, or even their internal business practices. These innovations will have a demonstrable impact on the customer through things like better performance, improved customer service, higher reliability, etc. etc. If your company wants to participate, drop me an email with a brief description of the innovation, its business impact. and the point person driving this change. I will look to meet with him/her between the 10 and the 27th (of September). The individual should be prepared to explain - The business problem that was faced - The choices available for solving this problem - Details on the particular choice that was taken - What challenges were faced in deploying this technology/application/process or procedure - How those challenges were solved All responses must be received by Wednesday of next week. All the best, David Greenfield International Technology Editor --------------------------------------------------------------------------------------------------------- NETWORK MAGAZINE Incorporating Data Communication Magazine International Office #2 Chai Taib, Entrance A, Suite 6 Jerusalem, 95405, Israel v: +972-2-651-9742 e: dgreenfi(a)cmp.com http://www.cmp.com

1 0

Cisco NetFlow
by Karyn Ulriksen 01 Sep '00

01 Sep '00

I am considering moving into using Cisco's NetFlow package and also the TSM service. I'm sure someone out there has a lot of experience with this product and am looking for some feedback on good, bads, gotchas... Thanx. --------------------------------------------------------------------- Best regards, Karyn Ulriksen Director of Network Operations PublicHost, A SiteStream Company 22 Mauchly, Suite 200 Irvine, California 92618 USA Phone: (949) 743-2000 email: kulriksen(a)publichost.com URL: http://www.publichost.com ===========================================

1 0

IPV6, IPV4, and NAT
by David Hares 01 Sep '00

01 Sep '00

Since the current threads have brought up the issues with NAT ... A couple of years ago, Bob Moskowitz presented a paper at IETF outlining the issues with multiple layers of NAT. I've lost the URL. Anyone know what it is? Dave ----------- David Hares Director of Network Engineering NetworkTwo Communications Phone: 734.827.3620 650 KMS Place FAX: 734.827.3690 Ann Arbor, MI 48108 Email: dhares(a)networktwo.net

1 0

Re: ARIN Policy on IP-based Web Hosting
by J. Scott Marcus 01 Sep '00

01 Sep '00

At 19:29 08/31/2000 -0400, dan(a)netrail.net wrote: >On Thu, 31 Aug 2000, Daniel Senie wrote: > >> dan(a)netrail.net wrote: >> > >> > In a democratic process, which ARIN is, refusal to participate in the >> > voting process, when eligible, usually removes one's standing to complain. >> >> Cough up your $500 as an individual and you can buy a vote. Sounds >> democratic... > >The vast majority of the participants here work for ARIN member companies. >They get a vote. It's democratic... Yup. :-) Furthermore, this measure was discussed (and other issues of interest to folks on the NANOG list are routinely discussed) at ARIN Public Policy meetings, which are _not_ restricted to ARIN members. The next one is in Washington, DC, which is convenient to many of you. (See http://www.arin.net/announcements/memmeet.html) Show up! Be heard! Furthermore, ARIN pays a great deal of attention to its public policy e-mail list, as was previously noted. That list is also open to the general public. Sign up at http://www.arin.net/members/mailing.htm ! There are a number of opportunities and mechanisms to democratically influence ARIN policies. It exists to serve its members and the Internet community. I for one would welcome seeing the broader community take more advantage of those mechanisms. Cheers, - Scott (speaking only for himself)

2 1

The Cidr Report
by Tony Bates 01 Sep '00

01 Sep '00

This is an auto-generated mail on Fri Sep 1 12:00:00 PDT 2000 It is not checked before it leaves my workstation. However, hopefully you will find this report interesting and will take the time to look through this to see if you can improve the amount of aggregation you perform. The report is split into sections: 0) General Status List the route table history for the last week, list any possibly bogus routes seen and give some status on ASes. 1) Gains by aggregating at the origin AS level This lists the "Top 30" players who if they decided to aggregate their announced classful prefixes at the origin AS level could make a significant difference in the reduction of the current size of the Internet routing table. This calculation does not take into account the inclusion of holes when forming an aggregate so it is possible even larger reduction should be possible. 2) Weekly Delta A summary of the last weeks changes in terms of withdrawn and added routes. Please note that this is only a snapshot but does give some indication of ASes participating in CIDR. Clearly, it is generally a good thing to see a large amont of withdrawls. 3) Interesting aggregates Interesting here means not an aggregate made as a set of classful routes. Thanks to xara.net for giving me access to their routing tables once a day. Please send any comments about this report directly to me. Check http://www.employees.org/~tbates/cidr-report.html for a daily update of this report. ------------------------------------------------------------------------------ CIDR REPORT for 01Sep00 0) General Status Table History ------------- Date Prefixes 250800 85144 260800 91672 270800 91299 280800 91282 290800 85417 300800 85709 310800 85345 010900 85543 Check http://www.employees.org/~tbates/cidr.plot.html for a plot of the table history. Possible Bogus Routes --------------------- AS Summary ---------- Number of ASes in routing system: 6240 Number of ASes announcing only one prefix: 3082 (1039 cidr, 2043 classful) Largest number of cidr routes: 589 announced by AS705 Largest number of classful routes: 1076 announced by AS701 1) Gains by aggregating at the origin AS level --- 01Sep00 --- ASnum NetsNow NetsCIDR NetGain % Gain Description AS10476 2 1 1 50.0% Sinfonet,S.A Panama AS10039 2 1 1 50.0% mire.net AS9983 1 1 0 0.0% Australian Bureau of Statistics. AS9982 1 1 0 0.0% PAICHAI UNIVERSITY AS9981 1 1 0 0.0% Iworld Networking, Inc. AS9979 1 1 0 0.0% KOREA EXCHANGE BANK AS9978 1 1 0 0.0% The University of Seoul AS9977 1 1 0 0.0% IOSYSTEM AS9974 1 1 0 0.0% KOREA SECURITIES COMPUTER CORP. B AS9973 1 1 0 0.0% KEB Futures Co. AS9968 1 1 0 0.0% Kyobo Life Insurance AS9966 1 1 0 0.0% KORAMBANK AS9962 1 1 0 0.0% Sunchon National University AS9960 1 1 0 0.0% NEW C&C CO.,LTD. AS9954 1 1 0 0.0% Kunsan National University AS9953 1 1 0 0.0% Hyundai Eng. & Const. Co., Ltd. AS9951 1 1 0 0.0% D3C Net AS9950 1 1 0 0.0% INT Co.,Ltd. AS9935 1 1 0 0.0% AGNS-Customer-KW AS9927 1 1 0 0.0% A Multihomed ISP Company AS9912 1 1 0 0.0% Quality Internet Services AS9891 1 1 0 0.0% iGreatLink.com AS9879 1 1 0 0.0% OGILVY ASIA/PACIFIC AS9877 1 1 0 0.0% Ngee Ann Polytechnic Computer Cen AS9871 1 1 0 0.0% JC Entertainment Co. AS9868 1 1 0 0.0% Catholic University of TAEGU HYOS AS9866 1 1 0 0.0% LGCAPITAL AS9862 1 1 0 0.0% YES24 CO. LTD AS9859 1 1 0 0.0% ChungCheong College AS9856 1 1 0 0.0% ec-Bank co., Ltd. For the rest of the previous weeks gain information please see http://www.employees.org:80/~tbates/cidr-report.html 2) Weekly Delta Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report 3) Interesting aggregates Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report

1 0

Re: ARIN Policy on IP-based Web Hosting
by sigma＠pair.com 01 Sep '00

01 Sep '00

>It's been a long time since I've seen so many people get so upset over >what strikes me as an obvious step which others took a long time ago >and has a policy which makes room for worthy exceptions. Because some hosts are providing other virtualized services which are nowhere near being ready for use without per-IP allocations. I'll grant that it's not such a big issue for HTTP anymore, except of course for bandwidth shapers, network analysis tools, load-balancing switches, kernel-based virtualizations, etc etc etc. Kevin

3 2