August 2024 - NANOG - lists.nanog.org

Spoofer Report for NANOG for Jul 2024
by CAIDA Spoofer Project 08 Aug '24

08 Aug '24

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within usa, can. Inferred improvements during Jul 2024: ASN Name Fixed-By 4922 SHENTEL 2024-07-26 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Jul 2024: ASN Name First-Spoofed Last-Spoofed 40676 AS40676 2016-08-29 2024-07-31 27364 ACS-INTERNET 2016-09-27 2024-07-30 20412 CLARITY-TELECOM 2016-09-30 2024-07-01 2152 CSUNET-NW 2017-11-08 2024-07-31 21804 ACCESS-SK 2019-06-09 2024-07-28 46997 2021-12-22 2024-07-13 12183 TALKIE-COMMUNICATIONS 2022-12-10 2024-07-27 3701 NERONET 2023-04-18 2024-07-26 855 CANET-ASN-4 2023-04-26 2024-07-18 400282 2023-04-27 2024-07-26 202400 2023-05-08 2024-07-28 61461 Airtek Solutions C.A. 2023-05-13 2024-07-31 394660 CHOICETEL-ER 2023-10-07 2024-07-05 394684 WISPERNET 2024-01-17 2024-07-25 55 UPENN 2024-02-26 2024-07-17 394195 CLEARNETWORX 2024-03-22 2024-07-29 20326 TERASWITCH 2024-04-15 2024-07-09 214961 2024-05-14 2024-07-25 393530 TLU 2024-05-22 2024-07-27 19935 CRRS 2024-05-29 2024-07-23 25853 ELJY30540 2024-06-11 2024-07-29 216211 2024-06-22 2024-07-27 13371 DUKE-INTERCHANGE 2024-07-03 2024-07-31 17049 MBO-NET 2024-07-13 2024-07-13 395337 MACST-VEGAS 2024-07-14 2024-07-14 150325 2024-07-18 2024-07-18 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block… Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

N92 Presentation Submission Deadline Approaching + More
by Nanog News 08 Aug '24

08 Aug '24

*Reminder— Submit Your Presentation for N92!* *Deadline for Presentations is Approaching — Sun. 08, Sept.* *We aim to highlight presentations throughout NANOG 92, focusing on IPv6.* *Specific talk topics that are always sought after: * - Network Automation - practical uses, how to get started - Kubernetes - implementation and best practices - Future of Networking - forecast for changes in technology, design, applications - + More *LEARN MORE <https://nanog.org/program/call-presentations/>* *Early Bird Registration Ends 19, Aug.* *Join Us for our 92nd Community-Wide Meeting (21-23, Oct.) in Toronto* *Discounted early-bird pricing for our next meeting in Toronto, Ontario, Canada, ends on Mon., 19 Aug. * Keep up to date with the most cutting-edge topics in network engineering and network with global industry leaders at our most affordable rate! Learn more about registration fees and deadlines below. *LEARN MORE <https://nanog.org/events/nanog-92/register/>* *We Have a Mailing List for Pickleball! * We are currently looking at some courts near the NANOG 92 conference venue for early morning play on Mon-Wed before the sessions. We are also looking for opportunities to play during the days before and after the conference. Absolute beginners and non-attendees are welcome. Coach Louie will bring extra paddles and balls for anyone who needs them. *JOIN NOW <https://mailman.nanog.org/mailman/listinfo/pickleball>* *Join the NANOG Showcase in Toronto! * *Connect with Attendees, Share Product Info + Brand Your Org.* *Showcase your newest technologies + solutions + more! * - Increase your brand’s visibility + reach - Amplify your organization’s message - Connect with industry influencers + decision makers - Empower people + inspire change *Contact swinstead(a)nanog.org <swinstead(a)nanog.org> for more info.*

1 0

Server rental inside of One Wilshire in Los Angeles
by Walt 08 Aug '24

08 Aug '24

Asking for a friend, please contact me off list. The ask: Multi-core server + 32G memory (or 64G) more than 1T storage space. At least 4 10GE optical ports. Linux OS 1 year term Thanks Walt

13 20

FW: NANOG Digest, Vol 199, Issue 6
by Michael Malitsky 07 Aug '24

07 Aug '24

We offer highly customizable colo arrangements. For small engagements, we usually price per box, so it doesn't have to be 1U. Mundelein IL (northern Chicago suburbs) Sincerely, Michael Malitsky Advanced Business Group 847-247-0700 -----Original Message----- From: NANOG <nanog-bounces+malitsky=netabn.com(a)nanog.org> On Behalf Of nanog-request(a)nanog.org Sent: Wednesday, August 7, 2024 7:00 AM To: nanog(a)nanog.org Subject: NANOG Digest, Vol 199, Issue 6 Date: Mon, 5 Aug 2024 22:02:57 -0700 From: Tim Utschig <tim(a)tetro.net> To: nanog(a)nanog.org Subject: Personal Colo 2024 Message-ID: <ZrGugaTLgkgQMgXh(a)tetro.net> Content-Type: text/plain; charset=utf-8 Are there any providers of 1U personal colos these days? VMs are neat, but they lack the power to experiment with without paying an arm and a leg. I was lucky enough to have my 1U hosted by Dave Rand back in the day. Thanks. -- Tim Utschig <tim(a)tetro.net> 408-644-3861 (mobile)

1 0

Re: Server rental inside of One Wilshire in Los Angeles
by Elmar K. Bins 07 Aug '24

07 Aug '24

mark(a)tinka.africa (Mark Tinka) wrote: > Unless others have done it differently, what I used to do was run fibre to > whatever the local terminal server's gateway router was, and use copper > within or between (nearby) racks between the terminal server and the end > device. Oh sure, if you have an entire rack (or more) to cable, most modern switches will give you some copper ports, or you throw an extra one in. We mostly drop single boxes... Elmar.

1 0

Personal Colo 2024
by Tim Utschig 07 Aug '24

07 Aug '24

Are there any providers of 1U personal colos these days? VMs are neat, but they lack the power to experiment with without paying an arm and a leg. I was lucky enough to have my 1U hosted by Dave Rand back in the day. Thanks. -- Tim Utschig <tim(a)tetro.net> 408-644-3861 (mobile)

13 12

Contact mail for Weekly Global Routing Table Report has ended up on Spamhaus HBL
by Laura Smith 05 Aug '24

05 Aug '24

Just as an FYI, it appears the pfsinoz -at- gmail.com address given in the Weekly Global Routing Table Report has sended up on the Spamhaus HBL list. You might want to fix this to ensure visibility of the reports are maintained. :)

5 6

Amazon peering request help
by ic 04 Aug '24

04 Aug '24

Hi, I’m trying to create a peering request on interconnect.amazon but when I reach “step 3” (contact email) and when I try the “Create” button (last step) I’m getting “Error: Too many requests”. It seems some API behind the peering request form is broken… Anyone listening here can help? Best regards, Michel (AS43930)

2 2

RIPEstats apparently broken
by Rubens Kuhl 03 Aug '24

03 Aug '24

This is what the example query from https://stat.ripe.net/docs/02.data-api/announced-prefixes.html is returning: { "messages": [ [ "error", "There was a problem handling this request. The error has been logged and we will look into the cause as soon as possible. We apologise for any inconvenience." ], [ "warning", "There was a failure working out what the latest available data point is. Results may be incorrect!" ] ], "see_also": [], "version": "1.2", "data_call_name": "announced-prefixes", "data_call_status": "supported", "cached": false, "data": {}, "query_id": "20240802194014-83da148b-94dc-4cd3-9655-7146cf1fee0a", "process_time": 7, "server_id": "app114", "build_version": "live.2024.7.29.212", "status": "error", "status_code": 500, "time": "2024-08-02T19:40:14.012851" } I would assume this was not intentional... are any other users out there affected by this issue ? Rubens

5 5

DOCSIS Modem Stat Collection
by Ryan Kozak 03 Aug '24

03 Aug '24

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 I am having the kind of problem with my ISP at home that's difficult to prove without receipts and got tired of how I couldn't pull any real stats from the DOCSIS modem. It's a Hitron CODA-45 and there's no SNMP or anything similar as far as I can tell. Digging into the HTTP status page that you can pull up, I noticed the way it loads is very odd: it's all javascript-based and actually hitting some internal calls that return JSON in the background. One weekend later and I built something to pull from that, do some basic math, and plot some graphs. Just in case someone else finds this useful, bearing in mind that it's been tested against exactly one modem running exactly one version of software: https://github.com/ReK42/modem-info Regards, Ryan -----BEGIN PGP SIGNATURE----- Version: ProtonMail wnUEARYKACcFgmat3agJkP7aH/V1zBsBFiEExqGOs9CyQpg6/JJ5/tof9XXM GwEAAMztAQDwI2boyH6d+XP8XtM5rHy8o3J1OqoIIwv4g0cQZWemAQEA4f7b W5y2WuW4/JBYrW1HjJnASNn2BCMn2xc5o3fdgQU= =kHtF -----END PGP SIGNATURE-----

1 0