December 2022 - NANOG - lists.nanog.org

N87: Call for Presentations, Hackathon, Road Less Traveled, Scholarships + More
by Nanog News 15 Dec '22

15 Dec '22

*Call for Presentations for NANOG 87! * *Deadline for Presentation Submissions is 9, Jan. 2023* We are looking to schedule over 1,800 minutes of content for NANOG 87, and have confirmed 165 minutes already - so don’t wait! *Specific talk topics include:* • Network Automation - practical uses, how to get started • Network Future - forecast for changes in technology, design, applications • Research & Education - what research is happening now in network operations • Security - developments in problems/solutions, various protocols of • Tutorials - all levels, IPv6, BGP, Segment Routing, DNS *MORE INFO <https://www.nanog.org/program/call-presentations/>* *The Road Less Traveled * *Unusual Career Paths from the NANOG Community* Did you ever take the road less traveled? Community member + Network Architect Ron Grant understands a curvy path. He is an early adopter of the tech industry. His interest began in the early 70s while attending the University of British Columbia (UBC) in pursuit of a computer science and mathematics degree; around the same time, the first message was sent over the ARPANET. The Canadian native may have started on the road to technology but would take a significant detour. *READ MORE <https://www.nanog.org/stories/road-less-traveled-unusual-career-paths-from-…>* *NANOG 87 Hackathon Registration is Open!* *Hackathon Kicks-Off Friday, 3 Feb 2023* *Theme: *Interacting With Sources of Truth Whether a single database or a collection of correlated data from multiple sources. Register today! *MORE INFO * <https://nanog.org/events/nanog-87-hackathon/> *2023 Scholarship Applications Available!* *$10,000 Scholarships will be Awarded to Eligible Students * NANOG will award $10,000 scholarships this year to eligible undergrad and graduate students in network, electrical, or computer engineering; computer science; and telecommunications. *APPLY TODAY <https://learnmore.scholarsapply.org/nanog/>* *FEATURED On NANOG TV!* *Hours of Curated Talks + Original Programming* 🎥 This week's featured NANOG TV video is our most recent episode of "Internet Innovators." 👉 ▶️ Internet Innovators: African "Father of the Internet" Nii Quaynor. *About the Innovator:* If you watch "Internet Innovators" in Africa, you have Nii Quaynor to thank. As the "African Father of the Internet," Quaynor has pioneered internet development and expansion throughout Africa. He is responsible for the first Internet connectivity throughout the continent. *WATCH NOW <https://www.nanog.org/news-stories/nanog-tv/internet-innovators/internet-in…>*

1 0

Yahoo Mail admin assistance
by Sam Roche 14 Dec '22

14 Dec '22

If someone from the Yahoo mail admin team is on the list, could you please reach out to me privately? We had an issue where our customer SMTP server was turned into an open relay for a short period of time. The issue was resolved a couple of weeks ago, however our customers with Yahoo email addresses are still having our invoices go to their spam folder. Thanks in advance for your assistance. Sam. Sam Roche Manager, Network Operations [Logo Description automatically generated] 196 Taylor Road, Bracebridge, ON P1L 1J9 Support: support(a)lakelandnetworks.com<mailto:support@lakelandnetworks.com> 705-640-0556 TF: 1-844-444-4249 Direct: sroche(a)lakelandnetworks.com<mailto:sroche@lakelandnetworks.com> 705-640-0086 | https://www.lakelandnetworks.com/faqs/ Lakeland Networks<http://www.lakelandnetworks.com/>

2 1

Direct plus
by Mehmet Akcin 14 Dec '22

14 Dec '22

Hi Anyone from *AS396106 <https://bgp.tools/as/396106>* direct plus on the list , or know someone from this company who can contact me offlist please ? Mehmet -- Mehmet +1-424-298-1903

1 0

Comcast circuit guru lurking?
by Bryan Holloway 14 Dec '22

14 Dec '22

Looking for some help or direction with MTU issues on a recently installed point-to-point circuit. Attempts to rectify have involved front-line PMs/folks who don't grok the problem. Please contact me off-list, thank you!! - bryan

2 1

Cloudflare/Internet2 Peering Outage?
by Norman Elton 13 Dec '22

13 Dec '22

Any Cloudflare contacts lurking? We observed a spike in DNS timeouts beginning around 7:20 PM EST. We eventually determined that DNS queries to Cloudflare-managed DNS servers, traversing our Internet2 connection, were consistently failing. Cloudflare servers reachable via our Cogent internet connection were fine. We applied a band-aid by shutting down our Internet2 connection, at which point all queries began to flow properly again via our Cogent connection We'll continue investigating in the morning, but might need assistance from Cloudflare. Thanks, Norman Elton William & Mary (wm.edu, AS 11975)

1 0

Large prefix lists/sets on IOS-XR
by Sander Steffann 13 Dec '22

13 Dec '22

Hi, What is the best/most efficient/most convenient way to push large prefix lists or sets to an XR router for BGP prefix filtering? Pushing thousands of lines through the CLI seems foolish, I tried using the load command but it seems horribly slow. What am I missing? :) Cheers! Sander --- for every complex problem, there’s a solution that is simple, neat, and wrong

9 18

AS3356 Announcing 2000::/12
by Ryan Hamel 13 Dec '22

13 Dec '22

AS3356 has been announcing 2000::/12 for about 3 hours now, an aggregate covering over 23K prefixes (just over 25%) of the IPv6 DFZ. Prayers for anyone impacted, the team announcing it, and the team resolving the issue. Ryan Hamel

9 14

Windows 11 now implements RFC 7217 (stable privacy addresses)!
by Fernando Gont 13 Dec '22

13 Dec '22

Folks, After over 10 (yes, *ten*) years, we have finally addressed security/privacy issues in the generation of IPv6 stable addresses in most popular operating systems. The traditional scheme/algorithm to generate stable IPv6 addresses with SLAAC required that the underlying MAC address be employed to generate the Interface Identifier. That is, the underlying MAC address would be embedded in the lower bits of an IPv6 address. This scheme allowed for host-tracking (since MAC addresses are usually globally-unique), address scanning (since addresses will follow specific patterns) and a number of other issues. In 2011, I submitted an IETF Internet-Draft proposing a scheme for generating stable addresses with SLAAC, meant to replace the traditional scheme. The scheme could be summarised and simplified as: Interface_ID = Hash(Prefix, Secret). Thus, interface identifiers would be stable within the same subnet, but vary across subnets. [Replacing the traditional scheme with this new scheme was anything but easy -- if you're curious, please check the "IPv6 Addressing" section in <https://www.si6networks.com/2020/08/06/a-brief-history-of-recent-advances-i…> ] Over time, popular operating systems and packages adopted the proposed algorithm: the Linux kernel, NetworkManager, OpenBSD's slaacd, MacOS, etc. Eventually, virtually every popular OS had adopted the scheme.... except Windows. Based on a recent note by Brian Carpenter, I ended up testing Windows 11, and I can confirm that it does implement RFC 7217 / RFC 8064! Therefore, e.g. if multiple prefixes are employed on a subnet, the stable addresses for each of such prefixes will employ a different Interface Identifier, thus avoiding the security/privacy issues discussed above -- this is really good news! Unfortunately, Windows still generates temporary addresses with the algorithm specified in RFC 4941, thus resulting in all temporary addresses for a given interface employing the same Interface Identifier (!). This problem has been addressed in RFC 8981... but it's implementation is not yet widespread, yet (it has been incoporated in e.g. the Linux kernel, though). I just hope it doesn't take Windows and others yet another 10+ years to implement RFC 8981, to finally address the remaining security/privacy issues in IPv6 address generation! [Original article with screenshots: https://www.linkedin.com/posts/fernandogont_after-over-10-yes-ten-years-we-… ] Thanks! Regards, -- Fernando Gont SI6 Networks e-mail: fgont(a)si6networks.com PGP Fingerprint: F242 FF0E A804 AF81 EB10 2F07 7CA1 321D 663B B494

2 1

TATA Communications
by Norman Jester 12 Dec '22

12 Dec '22

Contact me off list... seeing major loss at 64.86.252.65 in your path. Norman Jester 619-319-7055

2 1

RE: Large prefix lists/sets on IOS-XR
by Jakob Heitz (jheitz) 09 Dec '22

09 Dec '22

Sander, How big? How slow? You can reply to me off or on list. About 8 to 10 years ago, we had a large effort to improve this. Now customers push many megabytes of prefix-sets several times a day and it works. I have sent some questions internally to get a better answer. Related, in 7.2.1, we added the as-set, which allows you to filter BGP routes by origin-as. It is similar to as-path-set. as-path-set is slow, using a linear lookup, but it is versatile, allowing ios-regex. as-set can only use numbers and only for origin-as, but it is fast using a log(N) lookup. Regards, Jakob. -----Original Message----- Date: Fri, 9 Dec 2022 00:02:52 +0100 From: Sander Steffann <sander(a)steffann.nl> Hi, What is the best/most efficient/most convenient way to push large prefix lists or sets to an XR router for BGP prefix filtering? Pushing thousands of lines through the CLI seems foolish, I tried using the load command but it seems horribly slow. What am I missing? :) Cheers! Sander --- for every complex problem, there?s a solution that is simple, neat, and wrong

1 0