July 2025 - NANOG - lists.nanog.org

Correctly dealing with bots and scrapers.
by Andrew Latham 21 Mar '26

21 Mar '26

I just had an issue with a web-server where I had to block a /18 of a large scraper. I have some topics I could use some input on. 1. What tools or setups have people found most successful for dealing with bots/scrapers that do not respect robots.txt for example? 2. What tools for response rate limiting deal with bots/scrapers that cycle over a large variety of IPs with the exact same user agent? 3. Has anyone written or found a tool to concentrate IP addresses into networks for IPTABLES or NFT? (60% of IPs for network X in list so add network X and remove individual IP entries.) -- - Andrew "lathama" Latham -

17 31

New c-nsp, j-nsp, a-nsp, etc mailing lists
by Drew Weaver 20 Jan '26

20 Jan '26

I was a big fan of the *-nsp(a)puck.nether.net<mailto:*-nsp@puck.nether.net> mailing lists that now seem to be completely gone without any indication of whether or when they might return. I've been considering just setting up new ones. Please email me off-list if you think this might be useful. Thanks, -Drew

15 25

Hardware question
by Craig Smith 10 Nov '25

10 Nov '25

Hello, Is anyone out there aware of a fail safe switch/router/1U server where upon power failure or watchdog event 2 ports would fail to pass through data, but could also be assigned an IP address and act as a bridge in "normal" mode? The desire is to have an appliance that could perform monitoring and send telemetry in between a customer device and an Internet connection but not create a single point of failure or require multiple ISP handoffs. Best, Craig

14 18

2025 State of Network Automation Survey - Requesting Your Participation
by Chris Grundemann 23 Sep '25

23 Sep '25

Hey all! It's that time of year again... Survey time. The 2025 State of Network Automation Survey is open!!! No automation experience required - please share with everyone who has edit access on a production network, regardless of how automated that network might be. https://www.surveymonkey.com/r/StateOfNetworkAutomation_2025 For consistency, and ability to track trends, most of the questions are word-for-word repeats from prior years surveys. This year I deleted a few questions that don't seem relevant anymore, and I made a few questions optional, rather than required, in hopes of MANY more responses -- I also built in some logic, so that *folks who have ZERO network automation experience / deployment can still answer the survey easily*, in hopes of more accurate data collection. There are also some new questions, all suggested by the Network Automation Forum community. Finally, you will notice that we (now with NAF backing) moved off of the free Google form to a much sleeker SurveyMonkey survey. w00t Again - we invite anyone and everyone with enable on a production network to complete the survey, and we hope that everyone here will share the survey in other foraa as well - mailing lists, newsletters, social media, discord, slack, reddit, etc, etc. Survey results have been submitted as a talk for NANOG 95 in October. And will be available publically one way or another before the end of the year. Thanks! ~Chris

4 6

Source Address Validation (SAV) Deployment and Operational Practices
by Amir Herzberg 04 Aug '25

04 Aug '25

Friends: uRPF and similar SAV techniques have been around for long, with new variants recently/being standardized by the IETF (eFP-uRPF, BAR-SAV). We have done simulations to evaluate the impacts of these variants. To improve our research, we set up a short, quick survey for network managers and administrators of ASNs. In this study, we want to understand the deployment challenges, operational considerations, adoption trends and operator concerns in this area. It would be amazing if you could respond to the survey, available in: https://forms.gle/3rRtCTa2xk217tyd6 We really appreciate your help. The form also contains an option to leave your email for us to send you our research results (paper, simulations, survey). Thanks a lot!! -- Amir Herzberg Comcast professor of Security Innovations, Computer Science and Engineering, University of Connecticut Homepage: https://sites.google.com/site/amirherzberg/home `Applied Introduction to Cryptography and Cybersecurity' textbook: https://sites.google.com/site/amirherzberg/crypto-cyber-book

1 1

** Now Loading: NANOG 95 Talks You Won’t Want to Miss, Video of the Week + Join the NANOG Sponsor Showcase!
by Nanog News 31 Jul '25

31 Jul '25

*** Now Loading: NANOG 95 Talks You Won’t Want to Miss* ------------------------------------------------------------ *Check Out Talks That Have been Confirmed!* *Coming to the NANOG 95 Stage!* 🚨 Talk Submissions are open ‘til Sept. 8. We’re early in the game, but some top-tier talks are already confirmed. Check them out + register (https://nanog.org/events/nanog-95/register/) for NANOG 95 in Arlington (Oct. 27–29) today! *VIEW MORE* (https://nanog.org/events/nanog-95/) *** Video of the Week* *Inside Google Peering: Trends, Recent Policy Changes, And Future Direction* ------------------------------------------------------------ *Speaker Dave Schwartz - Google* 1.3K views in a month? 🔥 This one’s turning heads. Catch Dave’s deep dive into what’s new with Google’s peering policies, and why it matters more than ever. Subscribe to our YouTube Channel. WATCH NOW ( https://www.youtube.com/watch?v=Yg-qV6Fktjw&list=PLO8DR5ZGla8gr-Hw8obs1A0wg… ) *** Join the NANOG Sponsor Showcase!* ------------------------------------------------------------ The NANOG Showcase has been one of the most popular sponsorship opportunities. Speak directly to your audience at our next conference! *MORE INFO* (https://nanog.org/events/sponsorship/value-sponsorship/) *** Stay Connected* ------------------------------------------------------------ http://www.facebook.com http://www.instagram.com/nanog_org/ http://www.linkedin.com/company/nanog/ https://www.twitter.com/nanog/ http://nanog.org

1 0

AS24429 Alibaba Cloud CDN
by Noah 29 Jul '25

29 Jul '25

Hi Folks, I would like to get in touch with peering folks at AS24429, reach me off-list please. Cheers, *.**/noah*

1 0

GoDaddy deleting most ancillary registration contact information
by Mel Beckman 29 Jul '25

29 Jul '25

I just received this notice through one of my clients. Due to recent changes in the Registration Data Policy (Addendum II), we're updating how Organization Name info is displayed in WHOIS/RDDS: Currently, we collect Registrant, Administrative, Billing, and Technical contacts. Going forward, we'll collect the minimum data required by each domain registry. Most registries will be moving to the minimum data set, so Technical, Administrative, and Billing contacts will no longer be collected or displayed in WhoIs/RDDS. On or after August 21, 2025, we'll delete extra contact data and the registrant fax number from our systems unless the registry specifically requires that data. There is no action needed from you for the above changes. Where your Registrant contact data contains a populated Organization field, this will not be displayed in the Whois/RDDS. First, this seems like awfully short notice. Second, although I remember reading something about this a month ago having to do with GDPR, I didn’t realize it would result in the deletion of existing data in North America. For domains I manage, I have an opportunity, however brief, to collect this information for future use. However, I’m surprised that this is happening to domains registered in North America. I would think it would conflict with ICANN requirements. Has anybody else got ideas on the impact of this going forward? I’m not in the domain resale business, but I am in the business of troubleshooting network problems. :-) -mel

16 36

OARC 45 Call for Contributions
by Willem Toorop 28 Jul '25

28 Jul '25

This workshop will be a hybrid event. Date - 7-8 October 2025 Location - Stockholm, Sweden Time - Approx 10:00 CEST (08:00 UTC) - 17:00 CEST (15:00 UTC) Adjacent to Netnod Tech Meeting 2025 (9 October 2025) (https://www.netnod.se/netnod-tech-meeting-2025) Deadline for Submissions - 2025-07-29 23:59 UTC https://indico.dns-oarc.net/event/55/abstracts/ All DNS-related subjects and discussion topics are welcome although we're particularly keen to hear more about operational and security related experiences, best practices and practical advice; both for newcomers to the DNS arena and those who have been around for longer who want to learn more about new features and opportunities to improve resilience, security and privacy. (These topics we think will complement the usual high-quality data-based research submissions we always hope to receive!) If you have something interesting to share with the community that lies outside of the focus above, please don't be put off - if it's good, we'll be happy to include it. If you'd like to offer a talk, but are not quite sure what to pick, here's a non-exhaustive list of ideas: 1. *Operations & Deployment* * Configuration management, deployment processes, and interoperability experiences. * Tools, tips, and making effective use of DNS software features. 2. *Performance, Resilience & Scaling* * Provisioning, load-balancing, and planning for resilience. * DNS performance management, efficiency improvements, and metrics. * Monitoring infrastructure: log pipelines, analytics, and anomaly detection. 3. *Security, Privacy & Policy* 1. DoS attacks, DNS abuse, DNSSEC signing and validation. 2. Privacy considerations, for example: encrypted transport, qname minimization, data anonymization. 3. Relevant global and regional policies, legislation, and compliance. 4. *Research & Innovation* 1. Data-driven testing, measurement, and analysis. 2. New protocols, protocol extensions, and next-generation namespace management. 5. *Lessons & Learnings* 1. Outage experiences, recovery stories, and cautionary tales For further details please see https://www.dns-oarc.net/oarc45 Willem Toorop, for the DNS-OARC Programme Committee

1 1

Remote hands assistance in LA
by Suriya Kamon 28 Jul '25

28 Jul '25

Hello NANOG, We are after remote hands assistance for one of our sites in LA (well known DC) for major and minor works. Please contact me off list with your contact details, rates, etc. Thank you all. Cheers, S plusminus3 at protonmail dot com Sent with [Proton Mail](https://proton.me/mail/home) secure email.

1 0