January 2022 - NANOG - lists.nanog.org

25G SFP28 capable of rate-adaption down to 1G?
by Bill Woodcock 31 Jan '22

31 Jan '22

Hey, does anyone know of an SFP28 capable of rate-adapting down from 25G on the cage side down to 1G on the line side? Can be copper or fiber on the line side, I don’t care, my interest is in the chip inside. Thanks, -Bill

4 5

off-topic: applied crypto textbook - SSL/TLS chapter (and more)
by Amir Herzberg 30 Jan '22

30 Jan '22

Hi friends, if you don't mind an off-topic message... I've just updated my draft `Applied Introduction to Cryptography' textbook, available at: https://sites.google.com/site/amirherzberg/applied-crypto-textbook <https://sites.google.com/site/amirherzberg/applied-crypto-textbook> Mainly , I've extended the SSL/TLS chapter, it's roughly done now, covering the different versions and several important attacks. Enjoy, send comments, etc.; and if you think I shouldn't have sent such off-topic message - accept my apologies, I indeed wasn't sure, and tell me off-list to avoid additionally bothering the list, I promise that I'll respect this feedback. best, Amir -- Amir Herzberg Comcast professor of Security Innovations, Computer Science and Engineering, University of Connecticut Homepage: https://sites.google.com/site/amirherzberg/home

1 0

Weekly Global IPv4 Routing Table Report
by Routing Table Analysis Role Account 28 Jan '22

28 Jan '22

This is an automated weekly mailing describing the state of the Global IPv4 Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net. For historical data, please see https://thyme.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. IPv4 Routing Table Report 04:00 +10GMT Sat 29 Jan, 2022 BGP Table (Global) as seen in Japan. Report Website: https://thyme.apnic.net Detailed Analysis: https://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 887357 Prefixes after maximum aggregation (per Origin AS): 333907 Deaggregation factor: 2.66 Unique aggregates announced (without unneeded subnets): 426824 Total ASes present in the Internet Routing Table: 72715 Prefixes per ASN: 12.20 Origin-only ASes present in the Internet Routing Table: 62389 Origin ASes announcing only one prefix: 25723 Transit ASes present in the Internet Routing Table: 10326 Transit-only ASes present in the Internet Routing Table: 371 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 53 Max AS path prepend of ASN (265020) 50 Prefixes from unregistered ASNs in the Routing Table: 909 Number of instances of unregistered ASNs: 912 Number of 32-bit ASNs allocated by the RIRs: 38417 Number of 32-bit ASNs visible in the Routing Table: 31981 Prefixes from 32-bit ASNs in the Routing Table: 148775 Number of bogon 32-bit ASNs visible in the Routing Table: 21 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 546 Number of addresses announced to Internet: 3069057792 Equivalent to 182 /8s, 238 /16s and 27 /24s Percentage of available address space announced: 82.9 Percentage of allocated address space announced: 82.9 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.5 Total number of prefixes smaller than registry allocations: 300224 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 233500 Total APNIC prefixes after maximum aggregation: 65661 APNIC Deaggregation factor: 3.56 Prefixes being announced from the APNIC address blocks: 228240 Unique aggregates announced from the APNIC address blocks: 93955 APNIC Region origin ASes present in the Internet Routing Table: 12316 APNIC Prefixes per ASN: 18.53 APNIC Region origin ASes announcing only one prefix: 3526 APNIC Region transit ASes present in the Internet Routing Table: 1721 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 29 Number of APNIC region 32-bit ASNs visible in the Routing Table: 7502 Number of APNIC addresses announced to Internet: 774614912 Equivalent to 46 /8s, 43 /16s and 175 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-151865 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 258031 Total ARIN prefixes after maximum aggregation: 118815 ARIN Deaggregation factor: 2.17 Prefixes being announced from the ARIN address blocks: 258096 Unique aggregates announced from the ARIN address blocks: 123187 ARIN Region origin ASes present in the Internet Routing Table: 18939 ARIN Prefixes per ASN: 13.63 ARIN Region origin ASes announcing only one prefix: 6852 ARIN Region transit ASes present in the Internet Routing Table: 1952 Average ARIN Region AS path length visible: 3.8 Max ARIN Region AS path length visible: 34 Number of ARIN region 32-bit ASNs visible in the Routing Table: 4315 Number of ARIN addresses announced to Internet: 1296013056 Equivalent to 77 /8s, 63 /16s and 151 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 253075 Total RIPE prefixes after maximum aggregation: 116101 RIPE Deaggregation factor: 2.18 Prefixes being announced from the RIPE address blocks: 249526 Unique aggregates announced from the RIPE address blocks: 148747 RIPE Region origin ASes present in the Internet Routing Table: 28182 RIPE Prefixes per ASN: 8.85 RIPE Region origin ASes announcing only one prefix: 12128 RIPE Region transit ASes present in the Internet Routing Table: 3975 Average RIPE Region AS path length visible: 4.3 Max RIPE Region AS path length visible: 32 Number of RIPE region 32-bit ASNs visible in the Routing Table: 10629 Number of RIPE addresses announced to Internet: 713425280 Equivalent to 42 /8s, 134 /16s and 1 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 114313 Total LACNIC prefixes after maximum aggregation: 27288 LACNIC Deaggregation factor: 4.19 Prefixes being announced from the LACNIC address blocks: 115028 Unique aggregates announced from the LACNIC address blocks: 48529 LACNIC Region origin ASes present in the Internet Routing Table: 10935 LACNIC Prefixes per ASN: 10.52 LACNIC Region origin ASes announcing only one prefix: 2670 LACNIC Region transit ASes present in the Internet Routing Table: 2201 Average LACNIC Region AS path length visible: 5.0 Max LACNIC Region AS path length visible: 53 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8617 Number of LACNIC addresses announced to Internet: 176482048 Equivalent to 10 /8s, 132 /16s and 231 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-273820 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 27529 Total AfriNIC prefixes after maximum aggregation: 5357 AfriNIC Deaggregation factor: 5.14 Prefixes being announced from the AfriNIC address blocks: 35921 Unique aggregates announced from the AfriNIC address blocks: 11921 AfriNIC Region origin ASes present in the Internet Routing Table: 1585 AfriNIC Prefixes per ASN: 22.66 AfriNIC Region origin ASes announcing only one prefix: 547 AfriNIC Region transit ASes present in the Internet Routing Table: 309 Average AfriNIC Region AS path length visible: 5.1 Max AfriNIC Region AS path length visible: 42 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 918 Number of AfriNIC addresses announced to Internet: 108177664 Equivalent to 6 /8s, 114 /16s and 169 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 9808 9058 8886 46 CHINAMOBILE-CN China Mobile Communicati 7545 5859 788 690 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4682 4192 74 ERX-CERNET-BKB China Education and Rese 7552 3606 1330 20 VIETEL-AS-AP Viettel Group, VN 7713 3480 1038 51 TELKOMNET-AS-AP PT Telekomunikasi Indon 45899 3433 1880 57 VNPT-AS-VN VNPT Corp, VN 4766 2529 11121 609 KIXS-AS-KR Korea Telecom, KR 9498 2273 475 232 BBIL-AP BHARTI Airtel Ltd., IN 45090 2170 1438 79 TENCENT-NET-AP Shenzhen Tencent Compute 4755 2118 429 198 TATACOMM-AS TATA Communications formerl Complete listing at https://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 6158 10142 2617 AMAZON-02, US 11492 4517 299 789 CABLEONE, US 22773 3989 3028 368 ASN-CXA-ALL-CCI-22773-RDC, US 7155 3951 264 30 VIASAT-SP-BACKBONE, US 16625 3662 1890 2566 AKAMAI-AS, US 6327 3360 1318 63 SHAW, CA 749 2887 50780 2143 DNIC-AS-00749, US 30036 2612 374 131 MEDIACOM-ENTERPRISE-BUSINESS, US 209 2506 4962 428 CENTURYLINK-US-LEGACY-QWEST, US 20115 2248 3035 507 CHARTER-20115, US Complete listing at https://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 6789 1718 153 UNI2-AS, ES 9121 6704 1692 17 TTNET, TR 8551 4001 378 39 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 3878 3347 210 AKAMAI-ASN1, NL 39891 3274 188 25 ALJAWWALSTC-AS, SA 12389 2956 2290 906 ROSTELECOM-AS, RU 9009 2509 258 1305 M247, GB 34984 2220 357 603 TELLCOM-AS, TR 47331 1963 313 1495 TTNET, TR 58224 1788 927 583 TCI, IR Complete listing at https://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 10738 3410 571 Uninet S.A. de C.V., MX 10620 3457 520 705 Telmex Colombia S.A., CO 11830 2458 369 62 Instituto Costarricense de Electricidad 13999 1650 283 468 Mega Cable, S.A. de C.V., MX 6503 1440 354 524 Axtel, S.A.B. de C.V., MX 28573 1399 2328 253 CLARO S.A., BR 3816 1247 658 147 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 26615 1135 2350 139 TIM SA, BR 6147 1094 369 21 Telefonica del Peru S.A.A., PE 11664 1001 191 448 Techtel LMDS Comunicaciones Interactiva Complete listing at https://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1624 393 21 LINKdotNET-AS, EG 24835 1546 515 32 RAYA-AS, EG 36992 1299 1518 262 ETISALAT-MISR, EG 36903 1195 543 114 MT-MPLS, MA 29571 876 63 60 ORANGE-COTE-IVOIRE, CI 36935 736 521 39 Vodafone-, EG 6713 612 1863 34 IAM-AS, MA 15399 518 50 33 WANANCHI-, KE 37342 468 32 1 MOVITEL, MZ 23889 428 232 16 MauritiusTelecom, MU Complete listing at https://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 10738 3410 571 Uninet S.A. de C.V., MX 9808 9058 8886 46 CHINAMOBILE-CN China Mobile Communicati 12479 6789 1718 153 UNI2-AS, ES 9121 6704 1692 17 TTNET, TR 16509 6158 10142 2617 AMAZON-02, US 7545 5859 788 690 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4682 4192 74 ERX-CERNET-BKB China Education and Rese 11492 4517 299 789 CABLEONE, US 8551 4001 378 39 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 22773 3989 3028 368 ASN-CXA-ALL-CCI-22773-RDC, US Complete listing at https://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 9808 9058 9012 CHINAMOBILE-CN China Mobile Communications Grou 9121 6704 6687 TTNET, TR 12479 6789 6636 UNI2-AS, ES 7545 5859 5169 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4682 4608 ERX-CERNET-BKB China Education and Research Net 8551 4001 3962 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 7155 3951 3921 VIASAT-SP-BACKBONE, US 11492 4517 3728 CABLEONE, US 20940 3878 3668 AKAMAI-ASN1, NL 22773 3989 3621 ASN-CXA-ALL-CCI-22773-RDC, US Complete listing at https://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 46990 UNALLOCATED 8.5.242.0/23 3356 LEVEL3, US 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 46887 LIGHTOWER, US 18604 UNALLOCATED 8.25.204.0/24 3356 LEVEL3, US 32848 UNALLOCATED 8.28.72.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 22442 HOU-PHONOSCOPE, US 54338 UNALLOCATED 8.33.241.0/24 6461 ZAYO-6461, US 395438 UNALLOCATED 8.42.206.0/24 3356 LEVEL3, US 395056 UNALLOCATED 8.45.133.0/24 3356 LEVEL3, US 32306 UNALLOCATED 8.46.80.0/24 33652 CMCS, US Complete listing at https://thyme.apnic.net/current/data-badAS Prefixes from the Special Purpose Address Registry (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at https://thyme.apnic.net/current/data-spar Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.131.24.0/24 Origin: 62997 RICKEY-S-FRANCIS-JR, US 23.131.24.0/24 Transit: 6939 HURRICANE, US 23.141.0.0/24 Origin: 395350 UNASSIGNED 23.141.0.0/24 Transit: 11426 TWC-11426-CAROLINAS, US 23.252.160.0/24 Origin: 398968 GROUP-IID-01, US 23.252.160.0/24 Transit: 174 COGENT-174, US 23.252.161.0/24 Origin: 398968 GROUP-IID-01, US 23.252.161.0/24 Transit: 174 COGENT-174, US 23.252.163.0/24 Origin: 398968 GROUP-IID-01, US 23.252.163.0/24 Transit: 174 COGENT-174, US Complete listing at https://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:13 /10:40 /11:102 /12:305 /13:591 /14:1207 /15:2033 /16:13583 /17:8345 /18:13867 /19:25131 /20:43322 /21:51998 /22:108331 /23:95395 /24:522290 /25:788 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 9121 5879 6704 TTNET, TR 12479 5745 6789 UNI2-AS, ES 8151 4574 10738 Uninet S.A. de C.V., MX 8551 3466 4001 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 11492 3443 4517 CABLEONE, US 6327 3171 3360 SHAW, CA 7155 3041 3951 VIASAT-SP-BACKBONE, US 22773 2981 3989 ASN-CXA-ALL-CCI-22773-RDC, US 39891 2810 3274 ALJAWWALSTC-AS, SA 30036 2267 2612 MEDIACOM-ENTERPRISE-BUSINESS, US Complete listing at https://thyme.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1918 2:1004 3:153 4:7 5:3719 6:103 7:5 8:1551 9:1 11:172 12:1707 13:408 14:2375 15:154 16:39 17:374 18:131 20:167 21:4 22:188 23:5423 24:2335 25:6 27:2594 29:19 31:2408 32:104 34:1 35:52 36:1731 37:3941 38:2508 39:719 40:149 41:3895 42:1062 43:2082 44:293 45:15996 46:3867 47:303 49:1636 50:1900 51:107 52:1344 54:293 55:733 56:8 57:55 58:1769 59:1142 60:960 61:2261 62:2431 63:1948 64:5352 65:2312 66:4906 67:2925 68:1182 69:4164 70:1343 71:673 72:3063 74:2634 75:1515 76:715 77:2136 78:3810 79:3102 80:1931 81:1660 82:1459 83:1197 84:1323 85:3564 86:706 87:1887 88:2626 89:3135 90:496 91:7518 92:1896 93:2596 94:3245 95:4490 96:1314 97:345 98:993 99:863 100:75 101:1048 102:1916 103:28097 104:4119 105:462 106:848 107:2461 108:761 109:4187 110:2053 111:3259 112:1968 113:1532 114:1533 115:1955 116:1888 117:2503 118:2323 119:1835 120:1669 121:1028 122:2542 123:2114 124:1608 125:2071 128:1354 129:1197 130:918 131:2090 132:758 133:367 134:1940 135:290 136:854 137:855 138:2459 139:1214 140:879 141:1346 142:1249 143:1436 144:1230 145:335 146:1757 147:1479 148:2212 149:1662 150:846 151:1085 152:1819 153:447 154:3698 155:1366 156:1858 157:1220 158:1010 159:2021 160:2388 161:1292 162:3420 163:1206 164:1675 165:1546 166:622 167:1685 168:3672 169:691 170:4311 171:824 172:3016 173:3045 174:1018 175:1127 176:3509 177:4569 178:3034 179:1959 180:2285 181:2857 182:3229 183:1919 184:2400 185:19262 186:4278 187:3577 188:3795 189:3249 190:8910 191:1311 192:11000 193:8511 194:6948 195:4969 196:2916 197:2373 198:5994 199:6003 200:7475 201:5738 202:10463 203:10016 204:4527 205:3391 206:3833 207:3395 208:3995 209:4614 210:4230 211:2453 212:3938 213:3385 214:1156 215:64 216:6362 217:2617 218:1235 219:602 220:1948 221:989 222:858 223:2174 End of report

1 0

What do you think about the "cloudification" of mobile?
by Michael Thomas 28 Jan '22

28 Jan '22

There was an article in the Economist (sorry if it's paywalled) about Dish entering the mobile market using an AWS backend. I don't think that AWS brings much more than compute for the most part so I don't really get why this would be a huge win. A win maybe, but a huge win? I can certainly see that not having tons of legacy and accreted inertia is big win, but that's true of any disruptor. In the end they still need base stations, spectrum, backhaul and all of that to run their network, right? Am I missing something, or is this mainly hype? Mike https://www.economist.com/business/will-the-cloud-business-eat-the-5g-telec…

17 45

RE: [EXTERNAL] Re: Flow collection and analysis
by Laura Smith 28 Jan '22

28 Jan '22

‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Friday, January 28th, 2022 at 11:52, Jean St-Laurent <jean(a)ddostest.me> wrote: > Why DNS are still travelling in clear text? > It doesn't have to. In 2022 there are many encryption options for DNS. There are also things like DNSSEC and DANE for ensuring authenticity over cleartext. In addition, if the latest US Federal guidance is anything to go by, we may be witnessing the first big nail being put into the cleartext DNS coffin. (https://www.bastionzero.com/blog/i-read-the-federal-governments-zero-trust-…)

1 0

Flow collection and analysis
by David Bass 28 Jan '22

28 Jan '22

Wondering what others in the small to medium sized networks out there are using these days for netflow data collection, and your opinion on the tool? Thanks!

20 31

VIDEO | "Internet Innovators" w/ Steve Crocker + N84 Agenda + more
by Nanog News 27 Jan '22

27 Jan '22

New Episode of Internet Innovators!*Crocker Reveals a Behind-the-Scenes Look at Internet History* Steve Crocker is known as the man who wrote the instructions for the Internet - in his twenties. But at one time, he was just a young graduate student trying to solve a set of problems. "We knew we didn't know all the answers - we were not going to design a complete system, we were going to design a toolkit," Crocker said of the "informal group" which included life-long friend Vint Cerf and other now-famous Internet pioneers. In fact, Crocker said when he was given the "clerical task" of writing down what they were doing, he had many a sleepless night. "I was fearful the mere act of writing down what we were thinking about might trigger a backlash," he continued. "No one had chartered us, we had no authority. I was afraid it might seem like we were being presumptuous - like we were insisting that we were in charge. It caused a number of sleepless nights," he said. *Watch the full interview NOW on NANOG TV.* *WATCH NOW <https://www.nanog.org/news-stories/nanog-tv/internet-innovators/steve-crock…>* *NANOG 84 Agenda is Live * *Save the date! * Coordinate your calendars now, so you are sure not to miss out on any of the incredible upcoming talks and social hours offered virtually + in-person! Program Agenda is listed in CST, but you can adjust the time zone setting to your location. Click on any talk title to view the full abstract and speaker info. *VIEW AGENDA <https://www.nanog.org/events/nanog-84/nanog-84-agenda/>* *Get Ready for NANOG 84 Virtual Expo * Visit virtual booths throughout the conference to learn about the latest technologies, have a chance to win fun raffles. Meet + network with reps. Doors will open prior to our upcoming NANOG 84 meeting. Stay tuned for further details.

1 0

Long hops on international paths
by PAUL R BARFORD 25 Jan '22

25 Jan '22

Hello, I am a researcher at the University of Wisconsin. My colleagues at Northwestern University and I are studying international Internet connectivity and would appreciate your perspective on a recent finding. We're using traceroute data from CAIDA's Ark project for our work. We've observed that many international links (i.e., a single hop on an end-to-end path that connects two countries where end points on the hop are identified via rDNS) tend to originate/terminate at the same routers. Said another way, we are observing a relatively small set of routers in different countries tend to have a majority of the international connections - this is especially the case for hops that terminate in the US. For example, there is a router operated by Telia (AS1299) in Chicago that has a high concentration of such links. We were a bit surprised by this finding since even though it makes sense that the set of providers is relatively small (i.e., those that offer global connectivity), we assumed that the set of routers that used for international connectivity within any one country would tend to be more widely distributed (at least with respect to how they appear in traceroute data - MPLS notwithstanding). We're interested in whether or not this is indeed standard practice and if so, the cost/benefit for configuring international connectivity in this way? Any thoughts or insights you might have would be greatly appreciated - off-list responses are welcome. Thank you. Regards, PB Paul Barford University of Wisconsin - Madison

14 28

Operator survey: Incrementally deployable secure Internet routing
by Yixin Sun 25 Jan '22

25 Jan '22

Dear Nanog, We appreciate that your time is very precious, but we wanted to ask you for your help in answering a brief survey about a new secure routing system we have developed in a research collaboration between ETH, Princeton University, and University of Virginia. We'd like to thank those of you who have already helped us fill out the survey and provided insightful feedback. Your input is critical for helping inform our further work on this project. Here is the link to our survey, which takes about 10 minutes to complete, including watching a brief 3-minute introductory video: https://docs.google.com/forms/d/e/1FAIpQLSc4VCkqd7i88y0CbJ31B7tVXyxBlhEy_zs… Our architecture, called Secure Backbone AS (SBAS), allows clients to benefit from emerging secure routing deployments like SCION by tunneling into a secure infrastructure. SBAS provides substantial routing security improvements when retrofitted to the current Internet. It also provides benefits even to non-participating networks and endpoints when communicating with an SBAS-protected entity. We currently have a functional prototype of this network using SCIONLab (for the secure backbone) and the PEERING testbed (to make outbound BGP announcements). Our ultimate aim is to develop and deploy SBAS beyond an experimental scope, and the input of network operators that would actually have to run these PoPs would greatly benefit this project and help make secure routing a reality. With kind regards, Prateek, Adrian, and Yixin

5 7

Telia is now Arelion
by Justin Krejci 25 Jan '22

25 Jan '22

https://www.arelion.com/ <sigh> Since all other work is now complete in the world I should have plenty of time to update documentation, billing, labels, port names, route-maps, contact email addresses, etc. After watching their marketing video I learned the pronunciation of Arelion is not R-Lion but is actually A-Ray-Lee-On but I may continue thinking of it as R-Lion because it is shorter and it just sounds cooler in my head.

11 10