November 2019 - NANOG - lists.nanog.org

NANOG 78 call for presentations is open
by Vincent Celindro 21 Nov '19

21 Nov '19

NANOG Community, The NANOG Program Committee (PC) is excited to announce that we are now accepting proposals for all sessions at NANOG 78 in San Francisco, California, February 10-12, 2020. Below is a summary of key details and dates from the Call For Presentations on the NANOG website, which can be found at https://www.nanog.org/meetings/nanog-78/submit-presentation/ Given by many of the industry’s top minds, presentations at NANOG meetings are meant to spark the imagination, encourage dialog, and drive new solutions to our greatest networking challenges. The PC is currently seeking proposals, and also welcomes suggestions for speakers and topics. Presentations may cover current technologies, soon-to-be deployed technologies, and industry innovation. Vendors are welcome to submit talks which cover relevant technologies and capabilities, but presentations should not be promotional, or discuss proprietary solutions. The primary speaker, moderator, or author should submit a presentation proposal and abstract via the Program Committee Tool at: https://www.nanog.org/meetings/submit-presentation/ - Sign in with your Profile Account - Select the type of talk you propose to present, and complete the title and abstract Timeline for submission and proposal review: - Submitter enters abstract (and draft slides if possible) in Program Committee Tool prior to the deadline for slide submission. - PC performs initial review and assigns a “shepherd” to help develop the submission — within 2 weeks. - Submitter develops draft slides of talk if not already submitted with the initial proposal. Please submit initial draft slides early — the PC does not evaluate submissions until draft slides are available for review. NANOG Staff is available to assist with slide templates upon request from the submitter. - Panel and Track submissions should provide a topic list and intended/confirmed participants in the abstract. - PC reviews the slides and continues to work with Submitter as needed to develop the topic. - Draft presentation slides should be submitted prior to the published deadline for slides (Dec. 30, 2019). - PC evaluates submissions to determine presentations for the agenda (posted on Jan. 27, 2020). - Agenda assembled and posted. - Submitters notified. - Final presentation slides must be submitted prior to the published deadline for slides (Feb. 3, 2020). If you think you have an interesting topic but want feedback or suggestions for developing an idea into a presentation, please email the PC ( nanogpc(a)nanog.org) and a representative will respond to you in a timely manner. Otherwise, submit your talk, keynote, track, or panel proposal to the Program Committee Tool at your earliest convenience. We look forward to reviewing your submission! Key dates for NANOG 78: Date Event/Deadline Nov. 18, 2019 CFP Opens Dec. 16, 2019 Standard Registration Begins Dec. 30, 2019 CFP Deadline: Presentation Slides Due Jan. 13, 2020 CFP Topic List & NANOG Meeting HIghlights Page posted Jan. 20, 2020 Late Registration Begins Jan. 27, 2020 NANOG 78 Agenda Posted Feb. 3, 2020 Speaker FINAL presentations DUE (NO CHANGES accepted after this date) Feb. 9, 2020 Lightning Talk Submissions Open, Onsite Registration Begins Final slides must be submitted by Monday, February 3, 2020, and no changes will be accepted between that date and the conference. Materials received after that date may be updated on the website after the completion of the conference. We look forward to seeing you in February in San Francisco, California! Sincerely, Vincent Celindro - PC Chair On behalf of the NANOG Program Committee

1 0

Iran cuts 95% of Internet traffic
by Sean Donelan 21 Nov '19

21 Nov '19

Its very practical for a country to cut 95%+ of its Internet connectivity. Its not a complete cut-off, there is some limited connectivity. But for most ordinary individuals, their communication channels are cut-off. https://twitter.com/netblocks/status/1196366347938271232

4 4

Re: Iran cuts 95% of Internet traffic
by Scott Weeks 21 Nov '19

21 Nov '19

--- eric.kuhnke(a)gmail.com wrote: From: Eric Kuhnke <eric.kuhnke(a)gmail.com> The vast majority of Iranian ISPs' international transit connectivity is through AS12880 DCI , which is a government run telecom authority. Google "AS12880 DCI Iran" for more info. DCI is also responsible for layer 2 transport and DWDM services for smaller downstream ISPs, on other international terrestrial fiber links, which are opaque to us NANOG list people from the perspective of global v4/v6 routing table/prefix announcement analysis. --------------------------------------------- Quoting a journalist, so.... https://www.theguardian.com/world/2019/nov/21/irans-digital-shutdown-other-… First quote out of order from the article: "Internet penetration and complexity has vastly grown in Iran over the past decade, but the country’s users still connect to the global network through just two gateways. Both are controlled by the regime, and can be blocked when it chooses." <There's the problem. My company alone has more than two...> "Access to the internet is gradually being restored in Iran after an unprecedented five-day shutdown that cut its population off from the rest of the world and suppressed news of the deadliest unrest since the country’s 1979 revolution." "The internet-freedom group Access Now recorded 75 internet outages in 2016, which more than doubled to 196 last year." "Iranians were cut off from the global internet, but internally, networks appeared to be functioning relatively normally." "the Iranian government has been working to develop the so-called “halal net”, a closed-off version of the internet similar to China’s “great firewall”. Iran has been pressuring businesses to shift their operations inside the country on to what it calls the National Information Network, which now boasts its own banking platforms, industrial services and messaging apps – ones that activists believe are closely surveilled by authorities." <RFC 1984> "The Trump sanctions have actually made it easier for Iran to seal its citizens off from the global internet ... Many Iranian tech firms have been left with no option but to use the Islamic Republic’s internal network and infrastructure instead." (reordered quote) "The last time Iran attempted to choke off access, during unrest in January 2018, it was forced to open connections again after just 30 minutes, Rashidi says. “It was a disaster,” he says. “Nothing was working: all the government offices, hospitals, financial services were gone ... they’ve discovered a lot of things do need access to the outside world” This time, it appears to have gone more smoothly: two sources able to monitor internet traffic inside Iran confirmed to the Guardian there was no significant disruption, indicating hospitals, financial software and even ride-sharing apps were still able to function, even as Iranians were unable to connect to websites such as Google." "Other authoritarian governments are pursuing a similar path. This month, Russia implemented a new law requiring ISPs to install equipment better able to identify the source of web traffic, as part of a strategy to one day be able to completely re-route the Russian internet through state-controlled data points." <RFC 1984> :) “Regimes around the world will be watching very closely both the public response and the response of the international community,” he says. “If it turns out this is feasible to implement, they will see there is no political cost.” scott

2 1

Google NOC contact for public APIs? (GeoIP issues with googleapis.com)
by Neil Hanlon 21 Nov '19

21 Nov '19

Having a bit of a weird issue where traffic from one of our data centers looks to be getting a response for googleapis.com which is in Malaysia, despite the data center being in northeast USA--assuming I'm reading the reverse DNS on the IP addresses right (228.27.217.172.in-addr.arpa domain name pointer kul09s01-in-f4.1e100.net.) Our other data centers seem to get OK DNS responses, not exactly "perfect" (Switzerland gets some "waw" (warsaw?) node when there appear to be "zrh" nodes it could get), but this response in our us-northeast facility has a 300ms+ RTT and is causing performance issues in our application. Does anyone have a contact at Google, or if someone at Google could contact me off-list, I'd appreciate it. --Neil

1 0

Fastly Peering Contact
by Chad Sorrell 21 Nov '19

21 Nov '19

Anyone have a contact at Fastly they could send me offline? I've been trying to get something established since March and I haven't heard anything at all. I'm concerned maybe my email isn't reaching anyone. Thanks -- Chad Sorrell Network Architect Intelligent Fiber Network

2 2

Re: Hulu thinks all my IP addresses are "business class", how to reach them?
by tim＠pelican.org 21 Nov '19

21 Nov '19

On Thursday, 21 November, 2019 12:00, "Rob Seastrom" <rs(a)seastrom.com> said: >> On Nov 21, 2019, at 05:33, "tim(a)pelican.org" <tim(a)pelican.org> wrote: >> >> Or am I woefully naive, and it's actually trivial for a non-US resident to come >> up with a US credit card and billing address to pay for the service? > > It’s a thing. Need a US address but fairly straightforward. Ask your > favorite border hopping Canadian. > Fair enough - thanks for the info. These days, you have to show up in person at a branch with a passport to open almost any kind of bank account here, following a money-laundering crackdown, so I was assuming it ought to be a sufficiently-strong check to satisfy rights-holders. Regards, Tim.

1 0

Level(3) DNS Spoofing All Domains
by Marshall, Quincy 19 Nov '19

19 Nov '19

This is mostly informational and may have already hit this group. My google-foo failed me if so. I discovered that the CenturyLink/Level(3) public DNS (4.2.2.2, etc) are spoofing all domains. If the hostname begins with a "w" and does not exist in the authoritative zone these hosts will return two Akamai hosts. [root@localhost ~]# dig +short w3.dummydomaindoesntexist.gov @4.2.2.2 23.202.231.167 23.217.138.108 [root@localhost ~]# dig +short w3.dummydomaindoesntexist.net @4.2.2.2 23.202.231.167 23.217.138.108 [root@localhost ~]# dig +short w3.dummydomaindoesntexist.com @4.2.2.2 23.202.231.167 23.217.138.108 [root@localhost ~]# dig +short w3.dummydomaindoesntexist.org @4.2.2.2 23.202.231.167 23.217.138.108 My apologies if this is old news. Lawrence Q. Marshall --------------------------------------------------------------------------------------- This email has been scanned for email related threats and delivered safely by Mimecast. For more information please visit http://www.mimecast.com ---------------------------------------------------------------------------------------

12 15

Twitter Peering Contact
by Louis D 19 Nov '19

19 Nov '19

Hello Nanog, Does anyone here know a contact for Twitters peering group that is not from Peeringdb? I have been having issues the last several days first not receiving any routes and now the session failing. This is over the NYIIX peering if that helps at all. Any information is appreciated. Thank you, Louis D

1 0

AT&T Security Contact
by Robert Webb 19 Nov '19

19 Nov '19

Apologies for the off topic email but I am trying to get in touch with someone at AT&T Security who has a clue. Received three text messages on my Verizon Wireless phone from my wife's number which were from AT&T with links to someone's tech visit ticket which gave me access to their services and tech appointment. Thanks..

1 0

Dell OS10 switches
by Dmitry Sherman 19 Nov '19

19 Nov '19

Hello, Any recommendations about Dell S4200 switches with their OS10 Cisco like OS? Pricing is very attractive. They claim to support 1.5M bgp routes. Anyone has any experience with Dell’s switches? Can I rely on them in production network? Thanks Best regards, Dmitry Sherman [X]

1 0