July 2022 - NANOG - lists.nanog.org

Europe data centers struggling to operate in heat wave
by Sean Donelan 20 Jul '22

20 Jul '22

I was wondering when we would see the first stories about data center and IXP issues in Europe due to the heat wave. https://www.protocol.com/bulletins/google-oracle-cloud-uk-heat According to Google Cloud's service health page, one of its London buildings hosting cloud services for one of its Western Europe regions experienced a "cooling related failure" starting Tuesday morning. The company powered down services in part of that region to fix the issue. Meanwhile, Oracle is having similar issues. Its service health page said it's working to repair the cooling system in its London data center and has powered down some of its services to "to prevent uncontrolled hardware failures." Oracle said it expects service to be restored today.

1 0

Contact for Broadridgeadvisor.com
by abxy_subscriptions+nanog＠aleeas.com 20 Jul '22

20 Jul '22

Is there a contact for Broadridgeadvisor.com? Your customers can't reach you from AS20298. Browser error: connection timed out. --- Matt Dittmer Network Engineer Waverly Utilities

1 0

Papers/analysis on network equipment pricing since pandemic/banning foreign competition
by Drew Weaver 19 Jul '22

19 Jul '22

Has anyone seen any interesting write ups or analysis on what has been happening with network equipment pricing and availability in the United States over the last couple of years? Everyone (or at least I did) knew by March 2020 that what manufacturers were doing wasn't really going to work anymore going forward and yet it's 2 1/3 years later and we're still looking at a 1+ year lead time on basic products. Not to be glib but I am pretty sure I could've devised a process to build ethernet switches by hand with a soldering iron by now. Not to mention how many additional supply chains could've been established since then. Did Huawei actually serve an important purpose in the market? Did we put too many eggs in the Broadcom basket? Did the industry come together and "agree" that the time is nigh to charge $16,000 for a Dell S4148T but also that it would take 9 months to get it at that price? I think it would be fascinating to learn more about what is happening in this market. Please share any resources on or off-list. Thanks and have a great weekend! -Drew

4 4

Re: What's going on with AS147028?
by noc＠whojk.com 16 Jul '22

16 Jul '22

I think one of the reason is LL-IX strips their own ASN (59947) from the path and feed it to the route server. I see it as junk routes, and lots of people forgot(or intentionally not) to add 59947 back. I scanned all LLIX members<https://ixp.ll-ix.com/api/v4/member-export/ixf/1.0> this morning(https://i.imgur.com/CsB8I1M.png), only AS140731 is still feeding junk routes generated by LL-IX to the RIS and bgp.tools, I think it's fine to remove AS141011/AS141237/AS147028 from the filter list. On Wed, Jul 13, 2022 at 6:22 AM Mike Leber wrote: This kind of thing is a problem from time to time with the data we get from route collectors. When we see it we have to add the culprit ASN to a filter list we keep in bgp.he.net. It tends to be a repeat problem with some collectors and some ASNs. We haven't really figured out why people send junk routes to route collectors. The things we've seen aren't just route leaks. We've seen a variety of AS path spoofing. We've already added this specific ASN to the filter list and pushed an update for bgp.he.net. Note, this email is specifically talking about routes received from route collectors and not routes operationally received by he.net via BGP sessions with actual networks. Mike. On 7/12/22 12:49 PM, Eric Dugas via NANOG wrote: A friend of mine mentioned that both our Canadian ASNs were listed in AS147028's peer list on https://bgp.he.net/AS147028 but we have no adjacency to this network. Their peer count jumped from 1 in May 2022 to 1,800 and just a few days ago jumped to 8,800. Beside NL-IX, all the IX they are listed on are virtual IX with a few dozen "hobby networks". The only lead I have is they use HE as transit and they're pumping back BGP feed to route collectors like RIPE RIS or Route Views with routes stripped of HE's ASN. Eric

1 1

AS 10797 Charter Communications Contact
by Aaron M. Pace 15 Jul '22

15 Jul '22

If anyone from Charter could contact me off list would appreciate it. Troubleshooting an issue for slow performance to remote users using with a hardware IPsec appliance. If I use a different egress circuit from my network, fixes the issue. It seems to be resolved after a few days, and the transit AS (Lumen) does not see any issues in their path. Thanks Aaron

1 0

Google Ads
by Christopher Wolff 15 Jul '22

15 Jul '22

Hello, If you have experience fixing banned google ads accounts please email me off-list. Thanks in advance.

1 0

Rack Survey
by Q. Marchi 13 Jul '22

13 Jul '22

Hey hey, TL;DR;: Doing a survey, take it at https://forms.gle/NX7RuqNzyetfMTBw7 I'm a Systems Development Engineer for the Google Global Caching Operations team and I'm currently conducting a very-short (2 question) survey regarding rack choice, and preference. The responses that we receive will help us identify any missing gaps in the hardware that we procure for use in our partners' POPs, as well as how we design our lab spaces around what the industry uses. If you would like to help us with this, you can take the survey at https://forms.gle/NX7RuqNzyetfMTBw7 . Responses to the survey are public, and can be viewed after completing the survey. A Google account is required to view the survey to prevent multiple responses from a single individual, however the information is not visible to me or anyone else with survey access. Since the survey is hosted on Google Forms, Google's Privacy Policy and Terms of Service applies. You can view both of them at https://policies.google.com/. Thanks for your time, Q., a Cat Distribution Node (CDN) Engineer ------------------------------ Google Global Networking • Q. Marchi • Systems Development Engineer • qmarchi@ • Preferred pronouns: he, him ------------------------------

1 0

Straight Talk Wireless Contact
by Joshua Pool 13 Jul '22

13 Jul '22

Does anyone have a network or admin contact for Straight Talk wireless? Regards, Josh

1 0

Call for Participation -- ICANN DNSSEC and Security Workshop for ICANN75 Annual General Meeting
by Jacques Latour 13 Jul '22

13 Jul '22

Call for Participation -- ICANN DNSSEC and Security Workshop for ICANN75 Annual General Meeting In cooperation with the ICANN Security and Stability Advisory Committee (SSAC), we are planning a DNSSEC and Security Workshop for the ICANN75 Annual General Meeting being held as a hybrid meeting from 17-22 September 2022 in the Malaysian Time Zone (UTC +8). This workshop date will be determined once ICANN creates a block schedule for us to follow; then we will be able to request a day and time. The DNSSEC and Security Workshop has been a part of ICANN meetings for several years and has provided a forum for both experienced and new people to meet, present and discuss current and future DNSSEC deployments. For reference, the most recent session was held at the ICANN74 Public Forum on Monday, 13 June 2022. The presentations and transcripts are available at https://74.schedule.icann.org/meetings/BCyJbniR9TpSCohBp#/, and https://74.schedule.icann.org/meetings/WiPRZ59cBZDvj5ws2 The DNSSEC Workshop Program Committee is developing a program for the upcoming meeting. Proposals will be considered for the following topic areas and included if space permits. In addition, we welcome suggestions for additional topics either for inclusion in the ICANN75 workshop, or for consideration for future workshops. 1. Global DNSSEC Activities Panel For this panel, we are seeking participation from those who have been involved in DNSSEC deployment as well as from those who have not deployed DNSSEC but who have a keen interest in the challenges and benefits of deployment, including Root Key Signing Key (KSK) Rollover activities and plans. 2. DNSSEC Best Practice Now that DNSSEC has become an operational norm for many registries, registrars, and ISPs, what have we learned about how we manage DNSSEC? * Do you still submit/accept DS records with Digest Type 1? * What is the best practice around key roll-overs? * What about Algorithm roll-overs? * Do you use and support DNSKEY Algorithms 13-16? * How often do you review your disaster recovery procedures? * Is there operational familiarity within your customer support teams? * What operational statistics have been gathered about DNSSEC? * Are there experiences being documented in the form of best practices, or something similar, for transfer of signed zones? Activities and issues related to DNSSEC in the DNS Root Zone are also desired. 3. DNSSEC Deployment Challenges The program committee is seeking input from those that are interested in implementation of DNSSEC but have general or particular concerns with DNSSEC. In particular, we are seeking input from individuals that would be willing to participate in a panel that would discuss questions of the following nature: * Are there any policies directly or indirectly impeding your DNSSEC deployment? (RRR model, CDS/CDNSKEY automation) * What are your most significant concerns with DNSSEC, e.g., complexity, training, implementation, operation or something else? * What do you expect DNSSEC to do for you and what doesn't it do? * What do you see as the most important trade-offs with respect to doing or not doing DNSSEC? 4. Security Panel The program committee is looking for presentations on DNS, DNSSEC, routing and other topics that could impact the security and/or stability of the Internet. We are looking for presentations that cover implementation issues, challenges, opportunities and best practices for: * Emerging threats that could impact the security and/or stability of the Internet * DoH and DoT * RPKI (Resource Public Key Infrastructure) * BGP routing & secure implementations * MANRS ( Mutually Agreed Norms for Routing Security) * Browser security – DNS, DNSSEC, DoH * EMAIL & DNS related security – DMARC, DKIM, TLSA, etc… If you are interested in participating, please send a brief (1-3 sentence) description of your proposed presentation to dnssec-security-workshop(a)icann.org<mailto:dnssec-security-workshop@icann.org> by COB Friday, 12 August 2022. Thank you, Kathy and Andrew On behalf of the DNSSEC Workshop Program Committee: Steve Crocker, Shinkuro Mark Elkins, DNS/ZACR Jacques Latour, .CA Russ Mundy, Parsons Ondrej Filip, CZ.NIC Yoshiro Yoneya, JPRS Fred Baker, ISC Dan York, Internet Society

1 0

What's going on with AS147028?
by Eric Dugas 12 Jul '22

12 Jul '22

A friend of mine mentioned that both our Canadian ASNs were listed in AS147028's peer list on https://bgp.he.net/AS147028 but we have no adjacency to this network. Their peer count jumped from 1 in May 2022 to 1,800 and just a few days ago jumped to 8,800. Beside NL-IX, all the IX they are listed on are virtual IX with a few dozen "hobby networks". The only lead I have is they use HE as transit and they're pumping back BGP feed to route collectors like RIPE RIS or Route Views with routes stripped of HE's ASN. Eric

5 5