March 2023 - NANOG - lists.nanog.org

UN FAO account compromised - need support from Twitter
by Randazzo, Alessio (CSI) 01 Mar '23

01 Mar '23

Dear Colleagues, I'm Alessio Randazzo, a member of the IT-Security Team of Food and Agriculture of the United Nations. Nice to e-meet you! It has come to our attention that one of our Colleagues has no longer access to his Twitter account as it has been compromised. We submitted the form last Friday, but we haven't received any feedback yet. Can someone from Twitter help us to speed up the recovery of the account? Please reply to me off-list. Thank you and kind regards, Alessio. _______________________________________ Alessio Randazzo ICT Security Engineer Digitalization and Informatics Division (CSI) [cid:b766f394-7f4b-4470-9eb2-5f725474eb03]

2 1

gtt/level3 is down?
by Dmitry Sherman 01 Mar '23

01 Mar '23

gtt/level3 is down?

3 3

BGP Engines with support to "RTFilter address-family"
by Douglas Fischer 01 Mar '23

01 Mar '23

We are implementing an interesting L3VPN scenario for distributed DFZ on mid-size PEs. And we believe that the RT Constrained Route Distribution, RFC4684, will be ideal to solve the problems of operational levels for the intervention of configurations between PEs and Route-Reflectors. However, I'm searching for BGP Engines that implement this address-family (AFI=1, SAFI=132), to avoid Lock-In. In Cisco, this feature is covered, for example, in this document: https://www.cisco.com/c/en/us/support/docs/multiprotocol-label-switching-mp… In Juniper, in that document: https://www.juniper.net/documentation/us/en/software/junos/vpn-l3/topics/to… IP Infusion's OCNOS also implements this functionality. I think Nokia implements it too. But I'm looking for an open-source engine that supports it. The official FRR documentation does not mention anything about RFC 4364, or RTFilter address family. So, I think FRR does not support RTFilter Constrained Route Distribution. Do any of the colleagues have any suggestions on this? -- Douglas Fernando Fischer Engº de Controle e Automação

7 8

Reverse Traceroute
by Rolf Winter 01 Mar '23

01 Mar '23

Dear NANOG folks, As you know, traceroute is unable to enumerate routers on the reverse path. Given that paths through the public internet are usually asymmetric, knowing the reverse path would be beneficial e.g. for troubleshooting purposes (https://youtu.be/L0RUI5kHzEQ?t=2312) We have implemented a reverse traceroute tool (https://github.com/hsanet/reverse-traceroute) both client and server for both IPv4 and IPv6. We are also in the process of specifying the protocol at the IETF (https://datatracker.ietf.org/doc/html/draft-heiwin-intarea-reverse-tracerou…) We also gave a talk on reverse traceroute at DENOG14 (https://youtu.be/Y7NtqLEtgjU) If you would like to play with reverse traceroute, the easiest option is to work with the client and use one of the public server instances (https://github.com/HSAnet/reverse-traceroute/blob/main/ENDPOINTS) If you would be willing to host a public server instance yourself, please reach out to us. Also, if you find this work useful, please start discussing the work at the IntArea WG at the IETF. If you have any questions or comments, just drop us a line, file an issue on github and/or use the IntArea mailing list. Thanks a bunch, Rolf

7 15

Coherent 100G in QSFP28
by Jared Brown 01 Mar '23

01 Mar '23

Looks like coherent 100G in the QSFP28 form factor is finally on the horizon. From the datasheet: * 100G coherent DWDM in QSFP28 form factor * tunable, flexible grid * 300 km with amplification, 120 km without * industrial or commercial temperature * 5 watts https://www.adva.com/en/products/open-optical-transport/pluggables-and-subs… - Jared

4 5