May 2020 - NANOG - lists.nanog.org

finishline.com
by Bryan Holloway 11 May '20

11 May '20

If anyone from finishline.com is lurking, could you please reach out to me off-line? Our AS seems to be blocked to your web-site as a whole, which appears to be hosted by Akamai. However, the curious thing is that we see this behavior from other IPs not part of our AS, so it's difficult to tell if it's just us, Akamai, or something more systemic. E-mails to various contacts are going unanswered. Thank you!

1 0

NORAD no-fail mission - Cheyenne Mountain complex re-activated
by Sean Donelan 10 May '20

10 May '20

In 2008, NORAD changed its Cheyenne Mount Complex to a backup command center. NORAD's day-to-day early warning mission was moved to Peterson Air Force Base. The Cheyeene Mount Complex was kept ready as a 'warm backup' and skeleton maintenance and training crews. In late February 2020, NORAD split its operation staff into two watch centers and re-activated the Cheyenne Mountain Complex. Crews do not physically interact with the other watch crews to minimize an infection impacting both command centers. When off-duty, they stay in separate quarters in distant areas on Peterson AFB. https://www.stripes.com/news/air-force/to-protect-no-fail-mission-norad-mil… Of course, not everyone has a mountain lair on standby. I've also heard some electric grid operators made similar staffing changes. The ISO operation staff is split into seperate crews, which physically isolate on and off-duty during their 7 or 14-day watches.

1 0

Throughput issues on Wave G/CondoInternet (Redmond, WA)
by Neel Chauhan 10 May '20

10 May '20

Hi NANOG mailing list, I have Wave G "Gigabit" service in Redmond, WA, and download speeds have been slow. Wave G is Wave Broadband's MDU-focused Gigabit offering, and was formerly CondoInternet, although I joined only this year on a Wave G-branded service. To Seattle, I cap at about 600-750 Mbps download while I get 900 Mbps uploads. To servers far away, it does gown to 10-30 Mbps while I can upload at 200-500 Mbps. The downloads speeds are far lower than what's normal from TCP (I **do** know higher latency == slower downloads). The issue appears to be the window size being smaller on downloads on the routers on Wave G's side and that limits download throughput. This is a Wireshark screenshot of a download test: https://i.imgur.com/2gXbNSZ.png The green line is the window size, and the blue line is the outstanding bytes. In comparison, this is a Wireshark screenshot of an upload test: https://i.imgur.com/WOGvpWx.png The download test shows a small window size and spikes in the outstanding bytes and this gets reset very often after the first increase instead of gradually using the pipe's full capacity and then resetting, showing the window size can't get higher. The upload test shows a larger window size and a sawtooth shape of the outstanding bytes which is what should normally happen. This happens on both FreeBSD 13-CURRENT and Windows 10, both hardwired and Wi-Fi. My work Windows 10 PC via RDP and personal FreeBSD VPS servers have no issues whatsoever to the same exact servers, both being in the Seattle metro. "Tech Support" hasn't been helpful since they insist on a tech visit which I believe isn't needed ("Wave G" isn't Wave's DOCSIS offering, no HFC issues here), or blame the issue on something outside their network (these issues **don't** exist outside Wave G). Ziply/Frontier and CenturyLink aren't available here, and why would I go to Comcast's overpriced, asymmetrical, capped garbage? If someone works for Wave Broadband, or more specifically on the Wave G service, please shoot me an private email so we can get this resolved (and I can share my service details and pcap file if necessary in the said private email). -Neel Chauhan === https://www.neelc.org/

1 0

Re: alternative to voip gateways
by Clayton Zekelman 10 May '20

10 May '20

When we do DSL, we service everything out of ADSL2+ combo cards on Zhone MXK gear. -Integrated metallic testing on the combo cards helps reduce truck rolls -Having dialtone on the pair helps with identifying pairs in the field using ANAC -Having dialtone on a pair provides sealing current -Having dialtone on a pair stops other techs from "stealing" the pair for something else, because they think it isn't in use -Derived voice (VoIP on CPE) makes the voice more subject to line impairments, etc. At peak we had around 6000 leased CLEC copper pairs from the local ILEC. Just notes from personal experience. At 12:54 PM 10/05/2020, Baldur Norddahl wrote: >On Sun, May 10, 2020 at 4:16 PM Mike Hammett ><<mailto:nanog@ics-il.net>nanog(a)ics-il.net> wrote: >If POTS last mile is available, why complicate it with VoIP? > > >Because it is cheaper and easier? It is a lot of >equipment there simply does not need to be >there. If you have DSL you have CPE equipment >and that CPE equipment can have FXP out for very >little extra. You also save having filters to separateÂ DSL and voice. > >In any case, even the ILEC here is dropping >analog and delivering phone services via VoIP >and FXP out on the CPE. I believe because the >technicianÂ only needs to go to the DSLAM to >connect you. If you are also getting analog >voice, he needs to go to the CO too because >voice and DSLAM are no longer cohosted. > >Regards, > >Baldur -- Clayton Zekelman Managed Network Systems Inc. (MNSi) 3363 Tecumseh Rd. E Windsor, Ontario N8W 1H4 tel. 519-985-8410 fax. 519-985-8409

1 0

anyone on from hotmail.com, msn.com, live.com smtp?
by Joseph Jenkins 10 May '20

10 May '20

We are getting this messages when sending emails from our domain. We've submitted tickets, but haven't received a response yet. Anyone have any insights? 550 5.7.1 Unfortunately, messages from [1.1.1.1] weren't sent. Please contact your Internet service provider since part of their network is on our block list (S3140). You can also refer your provider to http://mail.live.com/mail/troubleshooting.aspx#errors. [ AM5EUR03FT014.eop-EUR03.prod.protection.outlook.com] It's our own address and everything on the Microsoft site says we are clean with no issues.

3 3

Re: anyone on from hotmail.com, msn.com, live.com smtp?
by Terrence Koeman 09 May '20

09 May '20

Hi Joseph, I've had the same issue that started a year ago. Eventually they removed the subnet, but it was blocked again a week later. It seems to me they import a third party block list containing my subnet, which re-blocks it shortly after removal, and they won't whitelist. They wouldn't tell me the source (nor the reason). I've repeated the remove/block cycle a few times and then just gave up and renumbered my mail servers. They don't seem to care. At all. Your mileage may vary though. If you do get to a solution I'd appreciate hearing about it :) Good luck! -- Regards, Terrence Koeman, PhD/MTh/BPsy Darkness Reigns (Holding) B.V. Please quote relevant replies. Spelling errors courtesy of my 'smart'phone. ________________________________ From: Joseph Jenkins <joe(a)breathe-underwater.com> Sent: Saturday, 9 May 2020 04:36 To: NANOG Subject: anyone on from hotmail.com, msn.com, live.com smtp? > We are getting this messages when sending emails from our domain. We've > submitted tickets, but haven't received a response yet. Anyone have any > insights? > > 550 5.7.1 Unfortunately, messages from [1.1.1.1] weren't sent. Please > contact your Internet service provider since part of their network is on > our block list (S3140). You can also refer your provider to > http://mail.live.com/mail/troubleshooting.aspx#errors. [ > AM5EUR03FT014.eop-EUR03.prod.protection.outlook.com] > > It's our own address and everything on the Microsoft site says we are clean > with no issues.

1 0

How to manage Static IPs to customers
by Javier Gutierrez Guerra 08 May '20

08 May '20

Hi there, Just wanted to reach out and get an idea how is people managing customers with static Ips, more specifically on Docsis networks where the customer could be moved between cmts's when a node is split Thanks in advance for all responses, Javier Gutierrez Guerra

13 19

Weekly Routing Table Report
by cscora＠apnic.net 08 May '20

08 May '20

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 09 May, 2020 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 807903 Prefixes after maximum aggregation (per Origin AS): 307689 Deaggregation factor: 2.63 Unique aggregates announced (without unneeded subnets): 396306 Total ASes present in the Internet Routing Table: 67970 Prefixes per ASN: 11.89 Origin-only ASes present in the Internet Routing Table: 58375 Origin ASes announcing only one prefix: 24342 Transit ASes present in the Internet Routing Table: 9595 Transit-only ASes present in the Internet Routing Table: 312 Average AS path length visible in the Internet Routing Table: 4.4 Max AS path length visible: 50 Max AS path prepend of ASN ( 22394) 38 Prefixes from unregistered ASNs in the Routing Table: 1107 Number of instances of unregistered ASNs: 1109 Number of 32-bit ASNs allocated by the RIRs: 31553 Number of 32-bit ASNs visible in the Routing Table: 26053 Prefixes from 32-bit ASNs in the Routing Table: 120117 Number of bogon 32-bit ASNs visible in the Routing Table: 22 Special use prefixes present in the Routing Table: 2 Prefixes being announced from unallocated address space: 0 Number of addresses announced to Internet: 2840843264 Equivalent to 169 /8s, 83 /16s and 212 /24s Percentage of available address space announced: 76.7 Percentage of allocated address space announced: 76.7 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.5 Total number of prefixes smaller than registry allocations: 600637 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 211601 Total APNIC prefixes after maximum aggregation: 62375 APNIC Deaggregation factor: 3.39 Prefixes being announced from the APNIC address blocks: 0 Unique aggregates announced from the APNIC address blocks: 0 APNIC Region origin ASes present in the Internet Routing Table: 10552 APNIC Prefixes per ASN: 0.00 APNIC Region origin ASes announcing only one prefix: 2951 APNIC Region transit ASes present in the Internet Routing Table: 1575 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 27 Number of APNIC region 32-bit ASNs visible in the Routing Table: 5627 Number of APNIC addresses announced to Internet: 0 Equivalent to 0 /8s, 0 /16s and 0 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-141625 APNIC Address Blocks ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 237006 Total ARIN prefixes after maximum aggregation: 109034 ARIN Deaggregation factor: 2.17 Prefixes being announced from the ARIN address blocks: 0 Unique aggregates announced from the ARIN address blocks: 0 ARIN Region origin ASes present in the Internet Routing Table: 18488 ARIN Prefixes per ASN: 0.00 ARIN Region origin ASes announcing only one prefix: 6744 ARIN Region transit ASes present in the Internet Routing Table: 1917 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 42 Number of ARIN region 32-bit ASNs visible in the Routing Table: 3230 Number of ARIN addresses announced to Internet: 0 Equivalent to 0 /8s, 0 /16s and 0 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-399260 ARIN Address Blocks RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 229629 Total RIPE prefixes after maximum aggregation: 106279 RIPE Deaggregation factor: 2.16 Prefixes being announced from the RIPE address blocks: 0 Unique aggregates announced from the RIPE address blocks: 0 RIPE Region origin ASes present in the Internet Routing Table: 27047 RIPE Prefixes per ASN: 0.00 RIPE Region origin ASes announcing only one prefix: 11719 RIPE Region transit ASes present in the Internet Routing Table: 3830 Average RIPE Region AS path length visible: 4.4 Max RIPE Region AS path length visible: 31 Number of RIPE region 32-bit ASNs visible in the Routing Table: 9135 Number of RIPE addresses announced to Internet: 0 Equivalent to 0 /8s, 0 /16s and 0 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 106119 Total LACNIC prefixes after maximum aggregation: 24608 LACNIC Deaggregation factor: 4.31 Prefixes being announced from the LACNIC address blocks: 0 Unique aggregates announced from the LACNIC address blocks: 0 LACNIC Region origin ASes present in the Internet Routing Table: 9810 LACNIC Prefixes per ASN: 0.00 LACNIC Region origin ASes announcing only one prefix: 2438 LACNIC Region transit ASes present in the Internet Routing Table: 1844 Average LACNIC Region AS path length visible: 5.1 Max LACNIC Region AS path length visible: 50 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 7383 Number of LACNIC addresses announced to Internet: 0 Equivalent to 0 /8s, 0 /16s and 0 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-270748 + ERX transfers LACNIC Address Blocks AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 22440 Total AfriNIC prefixes after maximum aggregation: 4678 AfriNIC Deaggregation factor: 4.80 Prefixes being announced from the AfriNIC address blocks: 0 Unique aggregates announced from the AfriNIC address blocks: 0 AfriNIC Region origin ASes present in the Internet Routing Table: 1388 AfriNIC Prefixes per ASN: 0.00 AfriNIC Region origin ASes announcing only one prefix: 490 AfriNIC Region transit ASes present in the Internet Routing Table: 268 Average AfriNIC Region AS path length visible: 5.1 Max AfriNIC Region AS path length visible: 23 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 678 Number of AfriNIC addresses announced to Internet: 0 Equivalent to 0 /8s, 0 /16s and 0 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7545 5445 686 636 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4739 4192 73 ERX-CERNET-BKB China Education and Rese 7552 3389 1330 22 VIETEL-AS-AP Viettel Group, VN 45899 2811 1766 151 VNPT-AS-VN VNPT Corp, VN 7713 2709 830 515 TELKOMNET-AS-AP PT Telekomunikasi Indon 9808 2574 9043 62 CMNET-GD Guangdong Mobile Communication 9498 2268 434 223 BBIL-AP BHARTI Airtel Ltd., IN 4766 2267 11102 561 KIXS-AS-KR Korea Telecom, KR 4755 2126 441 194 TATACOMM-AS TATA Communications formerl 9394 2042 4914 20 CTTNET China TieTong Telecommunications Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 11492 4352 291 664 CABLEONE, US 7155 4034 280 28 VIASAT-SP-BACKBONE, US 16509 3996 8007 1791 AMAZON-02, US 22773 3542 2969 153 ASN-CXA-ALL-CCI-22773-RDC, US 6327 3368 1324 92 SHAW, CA 16625 3094 1625 2208 AKAMAI-AS, US 30036 2403 366 95 MEDIACOM-ENTERPRISE-BUSINESS, US 209 2401 5077 535 CENTURYLINK-US-LEGACY-QWEST, US 5650 2302 2981 1621 FRONTIER-FRTR, US 26484 2191 137 198 IKGUL-26484, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 5767 1603 138 UNI2-AS, ES 31334 4768 484 13 KABELDEUTSCHLAND-AS, DE 39891 3651 203 20 ALJAWWALSTC-AS, SA 8551 3201 379 45 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 2960 443 2024 AKAMAI-ASN1, EU 12389 2496 2251 725 ROSTELECOM-AS, RU 9009 2133 222 1169 M247, GB 34984 2111 351 561 TELLCOM-AS, TR 13188 1607 100 35 TRIOLAN, UA 25019 1181 987 110 SAUDINETSTC-AS, SA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 6530 3305 586 Uninet S.A. de C.V., MX 10620 3350 530 530 Telmex Colombia S.A., CO 11830 2665 369 63 Instituto Costarricense de Electricidad 6503 1686 327 388 Axtel, S.A.B. de C.V., MX 7303 1553 1032 258 Telecom Argentina S.A., AR 13999 1382 507 335 Mega Cable, S.A. de C.V., MX 28573 1374 2242 203 CLARO S.A., BR 6147 1153 379 39 Telefonica del Peru S.A.A., PE 3816 1096 568 144 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 11172 957 112 70 Alestra, S. de R.L. de C.V., MX Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1391 393 22 LINKdotNET-AS, EG 24835 1114 574 25 RAYA-AS, EG 36992 1091 1539 76 ETISALAT-MISR, EG 36903 890 467 88 MT-MPLS, MA 29571 601 68 12 ORANGE-COTE-IVOIRE, CI 6713 562 1863 34 IAM-AS, MA 37342 466 32 1 MOVITEL, MZ 36935 409 522 44 Vodafone-, EG 23889 365 231 15 MauritiusTelecom, MU 15399 351 45 10 WANANCHI-, KE Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 6530 3305 586 Uninet S.A. de C.V., MX 12479 5767 1603 138 UNI2-AS, ES 7545 5445 686 636 TPG-INTERNET-AP TPG Telecom Limited, AU 31334 4768 484 13 KABELDEUTSCHLAND-AS, DE 4538 4739 4192 73 ERX-CERNET-BKB China Education and Rese 11492 4352 291 664 CABLEONE, US 7155 4034 280 28 VIASAT-SP-BACKBONE, US 16509 3996 8007 1791 AMAZON-02, US 39891 3651 203 20 ALJAWWALSTC-AS, SA 22773 3542 2969 153 ASN-CXA-ALL-CCI-22773-RDC, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 12479 5767 5629 UNI2-AS, ES 7545 5445 4809 TPG-INTERNET-AP TPG Telecom Limited, AU 31334 4768 4755 KABELDEUTSCHLAND-AS, DE 4538 4739 4666 ERX-CERNET-BKB China Education and Research Net 7155 4034 4006 VIASAT-SP-BACKBONE, US 11492 4352 3688 CABLEONE, US 39891 3651 3631 ALJAWWALSTC-AS, SA 22773 3542 3389 ASN-CXA-ALL-CCI-22773-RDC, US 7552 3389 3367 VIETEL-AS-AP Viettel Group, VN 6327 3368 3276 SHAW, CA Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 174 COGENT-174, US 62485 UNALLOCATED 8.23.229.0/24 3356 LEVEL3, US 32985 UNALLOCATED 8.28.31.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 174 COGENT-174, US 14109 UNALLOCATED 8.38.252.0/24 3356 LEVEL3, US 23061 UNALLOCATED 8.39.119.0/24 3356 LEVEL3, US 26584 UNALLOCATED 8.42.62.0/23 209 CENTURYLINK-US-LEGACY-QWEST, 395438 UNALLOCATED 8.42.206.0/24 3356 LEVEL3, US 40544 UNALLOCATED 12.0.33.0/24 6461 ZAYO-6461, US Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US 198.18.17.0/24 18229 CTRLS-AS-IN CtrlS Datacenters Ltd., IN Complete listing at http://thyme.rand.apnic.net/current/data-dsua Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:9 /9:11 /10:38 /11:99 /12:286 /13:578 /14:1167 /15:1915 /16:13351 /17:8242 /18:13611 /19:25818 /20:40699 /21:48063 /22:100236 /23:82842 /24:469658 /25:1280 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 5608 5767 UNI2-AS, ES 8151 5139 6530 Uninet S.A. de C.V., MX 31334 4757 4768 KABELDEUTSCHLAND-AS, DE 11492 4106 4352 CABLEONE, US 7155 3900 4034 VIASAT-SP-BACKBONE, US 16509 3867 3996 AMAZON-02, US 39891 3651 3651 ALJAWWALSTC-AS, SA 7545 3441 5445 TPG-INTERNET-AP TPG Telecom Limited, AU 22773 3433 3542 ASN-CXA-ALL-CCI-22773-RDC, US 7552 3279 3389 VIETEL-AS-AP Viettel Group, VN Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1561 2:1161 3:30 4:19 5:3344 6:51 8:1410 9:1 11:1 12:1787 13:508 14:2291 15:75 16:9 17:296 18:81 20:97 23:3550 24:2265 25:2 27:2495 31:3095 32:104 34:3 35:42 36:923 37:3270 38:1968 39:398 40:124 41:3595 42:660 43:2115 44:207 45:14223 46:3702 47:286 49:1449 50:1424 51:92 52:1073 54:263 55:676 56:6 57:52 58:1758 59:1171 60:729 61:2262 62:2200 63:1982 64:5145 65:2296 66:4958 67:2849 68:1183 69:3863 70:1432 71:679 72:2892 74:2607 75:1436 76:671 77:2830 78:1655 79:2363 80:1923 81:1622 82:1269 83:1175 84:1233 85:2503 86:546 87:1714 88:986 89:2768 90:313 91:7925 92:1506 93:2496 94:2688 95:3896 96:1203 97:330 98:937 99:977 100:87 101:971 102:922 103:23620 104:3410 105:381 106:805 107:1961 108:707 109:3728 110:1832 111:2009 112:1602 113:1359 114:1532 115:1826 116:1790 117:2078 118:2084 119:1717 120:815 121:1034 122:2419 123:1984 124:1549 125:2029 128:1352 129:1199 130:633 131:1836 132:765 133:300 134:1309 135:285 136:618 137:858 138:2169 139:994 140:639 141:949 142:902 143:1210 144:980 145:331 146:1495 147:1049 148:2108 149:1168 150:859 151:1303 152:1485 153:384 154:4669 155:1041 156:3267 157:1104 158:830 159:1978 160:1927 161:1041 162:3062 163:857 164:1458 165:1290 166:535 167:1608 168:3475 169:534 170:4187 171:768 172:1916 173:2534 174:1005 175:1018 176:2653 177:4232 178:3045 179:1548 180:2278 181:2528 182:3084 183:1123 184:2420 185:16436 186:3751 187:2718 188:4107 189:2283 190:8656 191:1419 192:10351 193:7494 194:6128 195:4378 196:3219 197:1874 198:6089 199:5961 200:7199 201:5235 202:10523 203:10165 204:4576 205:3088 206:3202 207:3277 208:4074 209:4419 210:3988 211:1977 212:3337 213:3072 214:1174 215:61 216:5982 217:2411 218:844 219:596 220:2027 221:916 222:998 223:1452 End of report

1 0

Spoofer Report for NANOG for Apr 2020
by CAIDA Spoofer Project 08 May '20

08 May '20

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within usa, can. Inferred improvements during Apr 2020: ASN Name Fixed-By 21709 IMPLEX-NET 2020-04-07 174 COGENT-174 2020-04-24 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Apr 2020: ASN Name First-Spoofed Last-Spoofed 54825 PACKET 2016-04-15 2020-04-26 32097 WII 2016-05-27 2020-04-30 209 CENTURYLINK-US-LEGACY-QWEST 2016-08-16 2020-04-30 6128 CABLE-NET-1 2016-09-03 2020-04-28 7459 GRANDECOM-AS1 2016-09-26 2020-04-30 20412 CLARITY-TELECOM 2016-09-30 2020-04-27 6181 FUSE-NET 2016-10-10 2020-04-28 174 COGENT-174 2016-10-21 2020-04-30 32440 LONI 2016-11-03 2020-04-25 12083 WOW-INTERNET 2016-11-09 2020-04-28 39939 RISE-CO-AS39939 2016-11-11 2020-04-24 30036 MEDIACOM-ENTERPRISE-BUSINESS 2016-11-16 2020-04-30 9009 M247 2017-01-10 2020-04-27 63296 AWBROADBAND 2017-09-01 2020-04-29 20448 VPNTRANET-LLC 2018-09-20 2020-04-29 8047 GCI 2019-04-11 2020-04-29 46300 HSC-WAP 2019-10-30 2020-04-30 2886 EC-813-2886 2019-11-05 2020-04-03 21859 ZNET 2019-12-26 2020-04-29 239 UTORONTO 2020-01-28 2020-04-25 13614 ALLWEST 2020-03-16 2020-04-30 26335 MTSU 2020-03-20 2020-04-30 397270 NETINF-PRIMARY 2020-04-03 2020-04-03 7859 PAIR-NETWORKS 2020-04-03 2020-04-24 5078 ONENET-AS-1 2020-04-06 2020-04-28 13781 ENERGYNET 2020-04-15 2020-04-22 208217 YUNJIANET 2020-04-27 2020-04-27 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block… Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

OARC Online 32a Workshop, June 9th, Call for contributions
by Jake Zack 07 May '20

07 May '20

Hi all, OARC is hosting an online meeting on June 9th, 17:00-19:00 UTC.<webextlink://OARC%20is%20hosting%20an%20online%20meeting%20on%20June%209th,%2017:00-19:00%20UTC.> The Programme Committee are seeking contributions from the community. All DNS-related subjects are welcome, but we're particularly interested in content which is timely and operationally relevant in light of the COVID-19 pandemic. Suggestions for discussion topics would also be good. As the session is limited to 2 hours we'd like to encourage brevity, presentations ought to be no longer than 20 minutes, not including time for questions. Subject areas we are looking for include the following, but not limited to: * data on traffic growthx * operational scaling and availability challenges * infrastructure and skills bottlenecks * supply chain challenges * personnel & infrastructure protection * security/disinformation threats, public education * ideas that are helping * lessons learned * information from official channels * universal access inequities **Workshop Milestones:** * 7 May 2020 - Submissions open via Indico * 21 May 2020 - Deadline for submission (23:59 UTC) * 28 May 2020 - Initial Contribution list published * 02 Jun 2020 - Full agenda published * 04 Jun 2020 - Deadline for slideset submission * 09 Jun 2020 - OARC (online) 32a Workshop Details for presentation submission are published at: <https://www.dns-oarc.net/oarc32a> To allow the Programme Committee to make objective assessments of submissions, so as to ensure the quality of the workshop, submissions SHOULD include slides. Draft slides are acceptable on submission. Additional information for speakers of OARC (online) 32a: * your talk will be live broadcast and recorded for future reference * your presentation slides will be available for delegates and others to download and refer to, before, during and after the meeting If you have questions or concerns you can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via <submissions(a)dns-oarc.net<mailto:submissions@dns-oarc.net>> Jacob Zack, for the DNS-OARC Programme Committee OARC depends on sponsorship to fund its workshops and associated social events. Please contact <sponsor(a)dns-oarc.net<mailto:sponsor@dns-oarc.net>> if your organization is interested in becoming a sponsor. Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.

1 0