October 2010 - NANOG - lists.nanog.org

Re: [ncc-services-wg] RPKI Resource Certification: building features
by Randy Bush 05 Oct '10

05 Oct '10

> 1) We have not implemented support for this yet. We plan to go live > with the fully hosted version first and extend it with support for > non-hosted systems around Q2/Q3 2011. this is a significant slip from the 1q11 we were told in prague. care to explain. > Randy Bush who is cc-ed may be able to provide some more insight in > the features offered by the ISC rpkid. I don't know whether the > features mentioned by Alex in his first message will be supported by > this system. calling it isc's is a bit incorrect, but no difference. it is an open source, bsd license, i.e. free as in free, implementation of all of the rpki protocols, provisioning, up/down, publication, relying party, proto-gui to manage your resources, ... the full monty. it has been operational in a testbed with isp players from asia, the states, europe, ... for some time. randy

2 2

Re: RIP Justification
by Tim Franklin 05 Oct '10

05 Oct '10

> Now, when traffic comes from head office destined for a site prefix, > it hits the provider gear. That provider gear will need routing > information to head to a particular site. If you wanted to use > statics, you will need to fill out a form each time you add/remove a > prefix for a site and the provider must manage that. Its called a > 'pain in the arse'. > > Enter RIPv2. Or BGP. Why not?

5 5

Re: Request for participation - Arbor 2010 Worldwide Infrastructure Security Report.
by Scott Weeks 05 Oct '10

05 Oct '10

--- rdobbins(a)arbor.net wrote: From: "Dobbins, Roland" <rdobbins(a)arbor.net> The 2009 edition of the survey is available here (registration required): -------------------------------------------- Why are we required to register to look at the survey? scott

2 1

Re: [Nanog-futures] Memberships, Bylaws and other election matters
by Randy Bush 05 Oct '10

05 Oct '10

> Short term cash supply is important; we have a decent lag between now > and NANOG 52 where there will be a significant outflow of cash for > salaries, hotel contracts, etc. without any meeting revenue. yes, the published data do show that plan. and i guess it is not outrageous. a choice between borrowing from other organizations or borrowing from members. unless, of course, one can get gifts. but that's not something on which i would play bet the company. randy

1 0

Re: [Nanog-futures] Memberships, Bylaws and other election matters
by Randy Bush 04 Oct '10

04 Oct '10

>> personally, i am not strongly against it, but am sceptical. it may get >> a cash infusion now, but what will it do to income down the road when >> folk don't need to renew? [0] > > Furthermore, your opposition will surely depress demand even more, > because now folks are saying "why would I pay for a life membership > that Randy, for reasons that are largely inexplicable, would attempt > to revoke, leaving me with no recourse"* first, i find your characterizing my being sceptical as opposition to be almost offensive. i dared to question your oh so wise authority. given the ad hominem defense, i now am far more sceptical and suspicious. second, i have never said i would attempt to revoke it. again you grossly and unjustifiably wildly distort my statement. what i said was i recommended against passing it, and asked steve if he would include it in the "we won't do until consensus is reached" list. i said that very clearly because i thought it unwindable, quite the opposite of what you are attempting to put in my mouth. i used to think you credible. i no longer do. but my opinions and 15 cents will get you on the subway. well, you may also need a time machine. > I get the fellow thing, even if I think its silly. The opposition to > student membership - I even understand that, although I respectfully > disagree. just charge 'em a different fee. > your opposition to life memberships is starting to sound like > reflexive opposition because you feel like being ornery. then try q-tips. >> does newnog actually need the infusion up front? are there other ways >> to deal with the financial problem that the attempt to create of this >> class of membership implies? > Yes, we do. I have done a complete analysis, which I offered to share with > everyone at the community meeting. some of us asked for the pro forma financials to be published many months ago. and now i missed my opportunity by going to kyoto for icnp instead of going to atlanta. damn! and no, the 'budget' on the web site is far from sufficient. > * Of course there IS a recourse if life membership is canceled. Its > called "refund the unused portion of the life membership on a > pro-rated basis". not really good. you made a contract. stick to it. we're not a credit card company or google's so called privacy policy. randy

1 0

[NANOG-announce] Election reminder
by Steve Feldman 04 Oct '10

04 Oct '10

Everyone who registered for a NANOG meeting in 2009 or 2010 is eligible to vote in this year's combined NANOG/NewNOG election. If you are eligible and have not already done so, please go to http://www.nanog.org/governance/elections/2010elections/ to review the election materials and vote. Note that there are two ballots, one for the NANOG Steering Committee and charter amendment, and one for the NewNOG Bylaws ratification. Please follow both links to vote. Thanks, Steve Feldman, SC Chair _______________________________________________ NANOG-announce mailing list NANOG-announce(a)nanog.org https://mailman.nanog.org/mailman/listinfo/nanog-announce

1 0

2010.10.04 NANOG50 Monday afternoon notes
by Matthew Petach 04 Oct '10

04 Oct '10

Here's my notes from the Monday afternoon presentations. Apologies for the gaps where I nodded off in post-lunch food coma, as well as for the typos and misspellings that snuck in. Notes are posted at http://kestrel3.netflight.com/2010.10.04-NANOG50-afternoon-notes.txt Off to Bear and Gear now. ^_^ Matt

1 0

Whois lookups (was: 2010.10.04 NANOG50 day 1 morning notes posted)
by Nathan Eisenberg 04 Oct '10

04 Oct '10

http://kestrel3.netflight.com/2010.10.04-NANOG50-morning-notes.txt " Whois traffic has been going through the roof; they added more proxies in front to support it. Apparently, there's IP management packages that do whois queries. It would be good to find out who is doing it, and talk to ARIN engineering, to find a better way of handling it. We can't keep up if so many machines on the internet keep doing it like this. Source addresses are all over, they're all over, not sign of bots; could be a DLL or mac system startup that's doing it. Please, don't embed whois lookups in everyone's computers like this!! " The only thing I know of is that packages like fail2ban that perform WHOIS lookups when blocking IPs to generate abuse POC notification emails. So more SSH bruteforce attacks = more whois lookups. Nathan > For those who might care, I've put version 1.0 of my notes from the morning > session up at http://kestrel3.netflight.com/2010.10.04-NANOG50-morning-notes.txt

5 4

NANOG50 VCR (Vendor Collaboration Room)
by John Jason Brzozowski 04 Oct '10

04 Oct '10

Hopefully you are all aware of the NANOG50 VCR, please visit the following page for additional information: http://www.nanog.org/meetings/nanog50/vcr.php We wanted to send you a quick email and provide some additional information about the VCR. When in or near the VCR feel free to connect any of the wireless networks. Each is native dual stack enabled. Most are powered by residential home networking equipment. Thanks again and please let us know if you have any questions. Regards, John ========================================= John Jason Brzozowski Comcast Cable e) mailto:john_brzozowski@cable.comcast.com o) 609-377-6594 m) 484-962-0060 w) http://www.comcast6.net =========================================

1 0

re: Akamai Traffic Spikes
by Nick Olsen 04 Oct '10

04 Oct '10

Didn't see any spikes here, But from the looks of that graph something sure happened. It was huge, And only for a short period, Strange. Nick Olsen Network Operations (877) 804-3001 x106 ---------------------------------------- From: "Scott, Robert D." <robert(a)ufl.edu> Sent: Monday, October 04, 2010 3:51 PM To: "nanog(a)nanog.org" <nanog(a)nanog.org> Subject: Akamai Traffic Spikes We were trying to diagnose an issue we had around 1 PM EDST, and were looking at net flow data. The data indicated a significant change in our traffic patterns, all coming from Akamai address space. The Akamai utilization graphs show a near doubling of retail traffic in the same time period that we had traffic spikes. Does anybody have any idea what caused such a major surge in traffic? http://www.akamai.com/html/technology/nui/retail/charts.html Robert D. Scott Robert(a)ufl.edu Senior Network Engineer 352-273-0113 Phone CNS - Network Services 352-392-2061 CNS Phone Tree University of Florida 352-392-9440 FAX Florida Lambda Rail 352-294-3571 FLR NOC Gainesville, FL 32611 321-663-0421 Cell 3216630421(a)messaging.sprintpcs.com

1 0