April 2015 - NANOG - lists.nanog.org

Re: PoC for shortlisted DDoS Vendors
by dennis＠justipit.com 02 Apr '15

02 Apr '15

You should include Radware on that list . ----- Reply message ----- From: "Mohamed Kamal" <mkamal(a)noor.net> To: "NANOG" <nanog(a)nanog.org> Subject: PoC for shortlisted DDoS Vendors Date: Wed, Apr 1, 2015 9:51 AM In our effort to pick up a reasonably priced DDoS appliance with a competitive features, we're in a process of doing a PoC for the following shortlisted vendors: 1- RioRey 2- NSFocus 3- Arbor 4- A10 The setup will be inline. So it would be great if anyone have done this before and can help provide the appropriate tools, advices, or the testing documents for efficient PoC. Thanks. -- Mohamed Kamal Core Network Sr. Engineer

1 0

Re: BGP offloading (fixing legacy router BGP scalability issues)
by Pawel Rybczyk 02 Apr '15

02 Apr '15

Hi Freddy, As Paul has mentioned, you could check the David's project - SIR, look at his presentation: https://www.youtube.com/watch?v=o1njanXhQqM We've also developed a platform for the BGP monitoring and routing optimization which could solve your problem. It would inject to the border routers only TOP X prefixes with which you exchange most of the traffic. The added value would be that route orders point to best performing transit (low latency, 0 packet loss) per distant prefix. If you are interested to know more about our software please contact me off-list. -- Regards, Pawel Rybczyk Regional Manager BORDER 6 sp. z o.o. pawel.rybczyk(a)border6.com office: +48 22 242 89 51 (ext.103) mobile: +48 664 300 375 > David Barroso's (Spotify) SDN Internet Router [0] comes to mind. > > 0 - https://github.com/dbarrosop/sir > > On 4/2/2015 午後 07:47, Baldur Norddahl wrote: >> Filtering countries is a bad idea, but it is probably possible to create >> filters so 99% of your actual traffic is handled by a relatively small >> subset of global routes and the remaining 1% routed via a default >> route or >> via a Linux box. >> >> Anyone know of tools and methods to do this? How effective is it ( how >> many >> routes is necessary to capture 99% of the traffic)? >> >> Regards >> >> Baldur >

1 0

How are you doing DHCPv6 ?
by Randy Carpenter 02 Apr '15

02 Apr '15

I am wondering how people out there are using DHCPv6 to handle assigning prefixes to end users. We have a requirement for it to be a redundant server that is centrally located. DHCPv6 will be relayed from each customer access segment. We have been looking at using ISC dhcpd, as that is what we use for v4. However, it currently does not support any redundancy. It also does not do very much useful logging for DHCPv6 requests. Certainly not enough to keep track of users and devices. So, my questions are: How are you doing DHCPv6 with Prefix Delegation? What software are you using? When DHCPv6 with Prefix Delegation seems to be about the only way to deploy IPv6 to end users in a generic device-agnostic fashion, I am wondering why it is so difficult to find a working solution. thanks, -Randy -- | Randy Carpenter | Vice President - IT Services | Red Hat Certified Engineer | First Network Group, Inc. | (800)578-6381, Opt. 1 ----

13 37

Fwd: Holborn fire is still burning under the pavement - BBC News
by Colin Johnston 02 Apr '15

02 Apr '15

Will take a lot of water to clear this up if gone into main tunnels :( Colin > >> http://www.bbc.co.uk/news/uk-england-london-32157618 <http://www.bbc.co.uk/news/uk-england-london-32157618> >> >> Holborn fire is still burning under the pavement >> >> >> Local road closures are in place but Holborn Tube station is open >> A road in central London remains closed as an electrical fire continues to burn under the pavement. >> >> Some 5,000 people were evacuated from nearby buildings after smoke was seen coming out of an inspection cover on Kingsway, in Holborn, on Wednesday. >> >> London Fire Brigade (LFB) said the fire has been contained but has been "technically difficult" to tackle. >> >> More than 20 firefighters and officers are still at the scene and local road closures are in place. >> >> LFB Assistant Commissioner Peter Cowup said: "This has been a technically difficult incident to tackle. >> >> "The reason that the fire is still burning is because the service tunnel is hard to reach. >> >> "Although firefighters have been applying water through access points throughout the night, the complexity of the tunnel layout means that it will be some time until the fire is fully extinguished." >> >> He added LFB, the Met Police and utility companies were making steady progress to try and resolve the situation. >> >> 'Not an overnight job' >> >> Speaking to BBC London 94.9 <http://www.bbc.co.uk/radio/player/bbc_london>, Insp Neil Johnson, from the Met Police, said: "The fire is still live in the subway. The problem at the moment is there is a gas pipe underneath and we are all in agreement that it is ok and if we can keep it contained it will be fine. >> >> "All we need to do is keep people out of the area and let the fire brigade and utilities do their job." >> >> >> The view from the London Eye on Thursday night highlighted the area affected by the power cut >> >> Firefighters were called to the fire at about 12:30 BST on Wednesday >> "I imagine this road will be closed a long time after this is finished because of damage the heat does to the road," Mr Johnson said. >> >> "It will have to remain closed until a structural engineer examines it properly and either he or she says what work has to be done and that work is completed - this is not an overnight job." >> >> On Thursday onlookers reported struggling to breathe and "chaos" in and around Holborn. The cause of the fire is still unknown. >> >> UK Power Networks said the number of customers currently affected by the power cuts stood at about 1,000 and they had restored power to 2,000. >> >> Apologising to customers Matt Rudling, from UK Power Networks, said: "The gas is still burning under there and until we can gain access to that particular area we won't understand what's caused it and what we can do." >> >> >> Smoke was seen coming out of an inspection cover on Kingsway on Wednesday >> >> "We want to try and restore [power to] all those remaining customers by the end of day today." >> >> He apologised for the disruption and added that emergency generators were being used to supply power to the area. >> >> UK Power Networks' engineers are also trying and connect some of the damaged cables to unaffected ones. >> >> Kingsway is closed between Holborn and Aldwych, the Strand Underpass, Waterloo Bridge northbound and Southampton Row southbound between Vernon Place and High Holborn, which is causing delays. >> >> Holborn station is open, however nine bus routes are being diverted <http://www.twitlonger.com/show/n_1slhjq1>. >>

1 0

Tier 1 robust DDoS protection solution! No, not yet!
by Ramy Hashish 02 Apr '15

02 Apr '15

Due to the enterprise market demand on DDoS protection solutions - which was initiated by a DDoS vendor, all operators in my country are trying to deploy their solution as fast as they can. As a result to the recent vendor's competition in DDoS protection, the detection/mitigation time can be seconds rather than minutes. However, for some reason tier 1 providers cannot keep pace with these fast mitigation responses, not to mention the tier one providers who are only providing the BGP-based blackholing for DDoS, this inconsistency will finally lead to inefficient DDoS mitigation solution. I have my own concerns about today's DDoS mitigation solutions, however I need to know what are tier one provider's plans for DDoS mitigation? Regards, Ramy

1 0

RFC 7511 - Scenic Routing for IPv6
by Sadiq Saif 01 Apr '15

01 Apr '15

Informational of course. :) https://tools.ietf.org/html/rfc7511 -- Sadiq Saif https://staticsafe.ca

7 6

Re: PoC for shortlisted DDoS Vendors
by Kenneth McRae 01 Apr '15

01 Apr '15

Why aren't you also looking at Hauwei? On Apr 01, 2015, at 09:53 AM, Mohamed Kamal <mkamal(a)noor.net> wrote: In our effort to pick up a reasonably priced DDoS appliance with a competitive features, we're in a process of doing a PoC for the following shortlisted vendors: 1- RioRey 2- NSFocus 3- Arbor 4- A10 The setup will be inline. So it would be great if anyone have done this before and can help provide the appropriate tools, advices, or the testing documents for efficient PoC. Thanks. -- Mohamed Kamal Core Network Sr. Engineer

1 0

Charter NOC contact?
by Shawn L 01 Apr '15

01 Apr '15

Can someone from Charter's NOC contact me off list? We have a mutual customer who's having issues and not getting anywhere going through normal channels. thanks

1 0

Re: Experience Brocade ICX7750 and other vendor SFP
by i3D.net - Martijn Schmidt 01 Apr '15

01 Apr '15

Hello, Brandon Martin<lists.nanog(a)monmotha.net> , 31/3/2015 10:07 PM: I'm not sure where the VDX line ends up in this. It's apparently somewhat the result of actually merging the two technology lines, and it runs somewhat different software as a result. The VDX was AFAIK already in development before Brocade bought Foundry, which is further backed up by the fact that in e.g. FlexOptix's transceiver re-programming tool you have to select a "Brocade Storage" firmware for those transceivers rather than the "Brocade IP" firmware used for Foundry-like gear. It is however true that Brocade has since ported over a lot of Foundry features to the VDX platform. As for optics: it will work well (read: interface comes up and passes traffic) with most other-vendor transceivers even if you don't re-program, but like the Foundry-lineage kit you lose light level monitoring when the firmware doesn't match. Best regards, Martijn Schmidt http://www.i3D.net i3D.net is a private company registered in The Netherlands at Meent 93b, Rotterdam. Registration #: 14074337 - VAT # NL 8202.63.886.B01. i3D.net is CDSA certified on Content Protection and Security and provides hosting from 16 global ISO-certified datacenters. We are ranked in the Deloitte Technology Fast 500 EMEA as one of the fastest growing technology companies.

1 0