January 2015 - NANOG - lists.nanog.org

Re: Office 365 Expert
by Joel M Snyder 09 Jan '15

09 Jan '15

>My suggested rule of thumb if you can't actually measure the traffic >in advance for your population: count the number of >workstation devices that will be your network, >figure at least 0.5 Megabit of WAN for each typical business >user workstation or laptop. I can't help but laugh (laughing with, not laughing at--all due respect to the NA part of NANOG) at this. I've been spending the last 4 years working on various UN networks where getting 0.5Mb of bandwidth to a site can be a challenge, and 4 Mbit/second for an office of 8 users is an unaffordable luxury. And these are sites where the end users want to move to Office 365. We've done a bit of testing, and one of the issues with O365 is that O365 is a BIG thing and you have to decide which slice of O365 you are calling "O365" at a particular site. For some people, that's just "outsourced Exchange" (in which case we would allocate 30K-50Kbps per office user downstream bandwidth, and drop in a WAN Opt box plus do some shenanigans to break into the HTTPS through proxy). For other people, O365 is the whole "nothing is on my hard disk (but cache)" thing, plus Lync (not just voice, but voice+video). Those folks really are going to require major bandwidth; this is where numbers like 512K/simultaneous user make more sense. You can excuse (or at least explain) Microsoft's lack of benchmarks and guidance because of the complexity of O365 and also because they have the sort of North American viewpoint that makes it hard for them to understand high latency/low bandwidth pipes. They try hard, but often just don't get it because of the amazing resources and richness available to a company of that size. I had a great conversation with them about 3 years ago about Exchange and AD forest design where they were strongly advocating centralizing everything in data centers, rather than pushing anything like a DC or mailbox server out to a branch office. When I asked about the bandwidth required, they said that it was "not much." Pressed for details, they said "we do it ourselves, and it hardly impacts the bandwidth on our most poorly-connected offices." Pressed even further, it turns out that a T3/E3 is the lowest link they would consider acceptable for an office. (My total upstream bandwidth budget at one agency for 100 offices and 9,000 users in 24 timezones is less than a single T3... Thanks Microsoft!) Anyway, not adding much to this conversation since it's clear that Bob is asking in the context of "bandwidth is cheap, fast, and inexpensive," but I couldn't help but giggle at the kinds of numbers you guys are throwing around here for people to read email and work on spreadsheets. jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 jms(a)Opus1.COM http://www.opus1.com/jms

2 1

Fwd: whois server features
by shawn wilson 09 Jan '15

09 Jan '15

Is there a list of NIC (and other popular whois server) features (what can be searched on) and what data they provide (and what title they give it)? A quick search yields: http://www.ripe.net/ripe/docs/ripe-358 https://www.arin.net/resources/whoisrws/whois_diff.html https://www.apnic.net/apnic-info/whois_search/using-whois/searching/query-o… (In declining order of information - I also couldn't find the info for AFRINIC queries) I also couldn't find information on what fields they have (and obviously how they map to one another). There are also a few other whois servers around that I have no idea about: https://www.opensource.apple.com/source/adv_cmds/adv_cmds-149/whois/whois.c

12 20

XO Peering Question..
by gcroft＠unitedshore.com 08 Jan '15

08 Jan '15

Hey All, Quick question for those of you who may be pulling a partial or full table from XO.. Can you tell me your MED/Weight on the routes from them? Please and Thank you. [cid:62CA825B-35AD-469A-B224-9BA199DC5662]GREGORY S CROFT Information Security Engineer gcroft(a)unitedshore.com<mailto:gcroft@unitedshore.com> p 855.888.8737 ext.4999 p 248.833.4999 UNITEDSHORE.COM<http://unitedshore.com/> United to better serve you. Share your experience at mymanager(a)unitedshore.com<mailto:mymanager@unitedshore.com> The contents of this message may be confidential. If you are not the intended recipient, do not disseminate, disclose, copy or use this message without the permission of the author. Nothing contained in this message or in any attachment shall satisfy the requirements for a writing, and nothing contained herein shall constitute a contract or electronic signature. If this message has been received in error, please delete it immediately.

2 1

something strange about bgp community
by Song Li 08 Jan '15

08 Jan '15

Hi everyone, Today when I check one route in Routeviews I find something strange as follows: route-views>sh ip bgp 176.108.0.0 BGP routing table entry for 176.108.0.0/19, version 23405621 Paths: (33 available, best #28, table default) Not advertised to any peer Refresh Epoch 1 202018 35320 35320 57800 5.101.110.2 from 5.101.110.2 (5.101.110.2) Origin IGP, localpref 100, valid, external Community: 702:120 2914:429 20485:52990 20485:53990 20485:54040 20485:54050 47541:10001 rx pathid: 0, tx pathid: 0 the AS-Path is "202018 35320 35320 57800" but the community is 702:120 2914:429 20485:52990 .... According to RFC 1997, the community format is AA:NN and AA means the AS#. Here, AS702, AS2914 and AS20485 do not appear in the AS-Path and as a result they should not appear in the community. Could anybody tell me what's the reason they do appear in the community of this route? Thanks! -- Song Li Room 4-204, FIT Building, Network Security, Department of Electronic Engineering, Tsinghua University, Beijing 100084, China Tel:( +86) 010-62446440 E-mail: refresh.lsong(a)gmail.com

6 7

1U or SS7 to SIP services in Sovereign House London
by Daryl G. Jurbala 08 Jan '15

08 Jan '15

I know it’s a long shot on this list, but if you know of anyone who can provide these services or even just a good place like NANOG for that part of the world please contact me off list.

3 2

MPLS VPN design - RR in forwarding path?
by Marcin Kurek 08 Jan '15

08 Jan '15

Hi everyone, I'm reading Randy's Zhang BGP Design and Implementation and I found following guidelines about designing RR-based MPLS VPN architecture: - Partition RRs - Move RRs out of the forwarding path - Use a high-end processor with maximum memory - Use peer groups - Tune RR routers for improved performance. Since the book is a bit outdated (2004) I'm curious if these rules still apply to modern SP networks. What would be the reasoning behind keeping RRs out of the forwarding path? Is it only a matter of performance and stability? Thanks, Marcin

15 29

Solicitation for Statements of Interest regarding Root KSK Rollover
by Edward Lewis 08 Jan '15

08 Jan '15

(I am not sure if this appeared on this list before, so just to be sure, perhaps yet another posting of this announcement:) ICANN, as the IANA functions operator, in cooperation with Verisign as the Root Zone Maintainer and the National Telecommunications Information Administration (NTIA) as the Root Zone Administrator, together known as the Root Zone Management (RZM) partners, seek to develop a plan for rolling the DNS root zone key-signing key (KSK). The KSK is used to sign the root zone zone-signing key (ZSK), which in turn is used to DNSSEC-sign the Internet’s root zone. The Root Zone Partners are soliciting five to seven volunteers from the community to participate in a Design Team to develop the Root Zone KSK Rollover Plan (“The Plan”). These volunteers along with the RZM partners will form the Design Team to develop The Plan. Individuals interested in volunteering approximately 5 hours per week for the Design Team should consult the announcement: https://www.icann.org/en/system/files/files/ksk-soi-11dec14-en.pdf and submit their Statement of Interest to ksk-rollover-soi(a)icann.org no later than January 16, 2015.

1 0

RADB
by John East 08 Jan '15

08 Jan '15

Is there anyone from RADB or MerIt on this list that could contact me off the list? John

2 1

Microsoft - RE: Office 365 Expert - I am not. I have a customer that...
by Bob Evans 08 Jan '15

08 Jan '15

Thanks Frank... I do have a customer with 500 meg/sec service running 350 meg/sec average all day.... just 800 employees - no company driven focused use of MS office 365. Applications used and time of day, etc. So, I don't think one can compare a college's overall app bandwidth usage to a business primarily using office 365. I'm really looking for a "minimum bandwidth recommended requirement for 100 employees all using Office 365 hosted docs that are all outside the LAN. " MS has no such number. MS just leaving it to the individual case-by-case discovery process. I bet Microsoft can't answer that simple question or they wouldn't have these GB per user equations that use X for average document size. Best, I have to go on so far is what one of our customers "thinks" is needed. Thank You Bob Evans CTO > 1 Mbps/user seems very high -- the local college has over 200 employees > using O365 (and over 1400 students) and its broadband connection is just > 250 > Mbps and they're at less than 150 Mbps during the day. > > Frank > > -----Original Message----- > From: NANOG [mailto:nanog-bounces@nanog.org] On Behalf Of Bob Evans > Sent: Wednesday, January 07, 2015 3:03 PM > To: Roy Hirst > Cc: nanog(a)nanog.org > Subject: Re: Office 365 Expert - I am not. I have a customer that... > > Thanks to those of you that answered...It is hypothetical....However, I > found another customer that uses Office 365 heavily ... said they > discovered 1 meg/sec per Microsoft Office 365 user works well in most > scenarios. This customer has 80 users and a 100 meg/sec connection with > us. > > Thank You > Bob Evans > CTO > > > >>> On 1/6/2015 12:37 PM, Bob Evans wrote: >>>> I have a customer that heavily uses Microsoft Office 365. It's >>>> hosted. All >>>> the data I see about usage per user appears theoretical. In that the >>>> formulas assume people are taking turns using the bandwidth as if >>>> there is >>>> a patient line of packets at the Internet gas pump. Nobody is >>>> clicking at >>>> the same time. We all know that is not the real world. >>>> >>>> Does anyone have any experience with Office 365 hosted that can tell >>>> me >>>> the practical bandwidth allocation (NOT in KB per month, but in >>>> megabits/sec) for 100 users (during normal work hours) needs to be >>>> available ? >>>> >>>> Thank You in advance, >>>> Bob Evans >>>> CTO Fiber Internet Center >>>> >>>> >>>> >>>> >>>> >> >> > > > > >

1 0

Security Track @ NANOG 63 Call for Participation
by John Kristoff 08 Jan '15

08 Jan '15

[ Apologies if you saw this elsewhere already - jtk ] Friends, colleagues, fellow operators, The network security track, formerly known as the ISP security BoF, will be on the agenda at NANOG 63 in San Antonio and I will be the track facilitator. We not only seek your participation, but we are also interested you contributing to the track content. If you have an idea or if you know someone who might like to present, discuss or conduct a demonstration of something, we want to hear from you. Here is an incomplete list of relevant topics to stir your thoughts: * Cloud security (whatever that means :-) * Control plane best practices and templates * DDoS mitigation experience and case studies * Embedded device problems and protections * Government regulatory, compliance and privacy issues * IPv6 security concerns or case studies * MPLS and VLAN security issues * NetFlow-based security tools and techniques * OpenFlow/SDN security considerations * Route leak/hijack monitoring and mitigation * Walled garden techniques * X.509 certificate infrastructure concerns * <insert your new cool tool or idea here> If you want your PGP key signed by me (or anyone else), you should upload your key to the biglumber event keyring page before arriving so we have a record of it before meeting in person. <http://biglumber.com/x/web?keyring=6371> John

1 0