August 2025 - NANOG - lists.nanog.org

beware: being old sucks
by Randy Bush 22 Aug '25

22 Aug '25

warning if you have old kit in strange corners i woke to this on an antique C3750G diff --git a/configs/sw0.psg.com b/configs/sw0.psg.com index d0fbb88c..a8e15f25 100644 - -- a/configs/sw0.psg.com @@ -357,6 +357,7 @@ access-list 99 permit 192.168.0.0 0.0.3.255 access-list 99 permit 189.108.156.0 0.0.0.255 access-list 99 permit 189.108.159.0 0.0.0.255 ! + tftp-server nvram:startup-config <<<<<<====== snmp-server community cMm4-b4D RO 98 snmp-server trap-source Vlan1 snmp-server location Ashburn VA US and here is the talos report, thanks joe https://blog.talosintelligence.com/static-tundra/ set `no vstack` in config. no, that is not the default. randy

1 0

Worsening google service reputation and abuse
by Jared Mauch 21 Aug '25

21 Aug '25

Is there anyone at Google that is able to address the ongoing abuse problems that are coming out of your services like classroom, groups and otherwise? Wanting me to create a google account for the addresses that are receiving the abuse does not scale and as the reputation continues to get worse, I don't want to block all google services - but getting someone to work with on the issues would be appreciated. X-Notifications: COURSE_INVITATION:792026619952-1755166651116 X-Google-Group-Id: 1087901814827 X-Google-Group-Id: 328755863 X-Google-Group-Id: 864553705765 X-Google-Group-Id: 295922276390 X-Google-Group-Id: 534760014314 Decade+ old mailman has the end-user accept invitations to lists, but google seems to not even use it's own tools so isn't really meeting what would be a general standard. I saw others complain about this as well, and i've had to configure various blocking of different google services which is a moving target of abuse. It's fair to say that a human should be able to send e-mail to an owner alias for a mailing list, but not subscribe that to a group or classroom. - jared -- Jared Mauch | pgp key available via finger from jared(a)puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine.

24 73

Anyone on the list from Hulu?
by Mike Lyon 21 Aug '25

21 Aug '25

Looks like Hulu dropped the record they had for one of our netblocks that has been working fine for years and now suddenly, it's causing issues for our customers. I sent an email into ipadmin(a)hulu.com on Sunday but haven't heard anything back. Anyone on the list that could help? Thank You, Mike -- Mike Lyon mike.lyon(a)gmail.com http://www.linkedin.com/in/mlyon

1 0

Breaking the Sorting Barrier for Directed Single-Source Shortest Paths
by Ryan Hamel 21 Aug '25

21 Aug '25

I was scrolling LinkedIn and came across a post that mentioned a research paper: Breaking the Sorting Barrier for Directed Single-Source Shortest Paths TLDR: Dijkstra got defeated after 40 years. It will be interesting to see what convergence times will look like with this implemented. Different formats of the same research paper: * https://arxiv.org/pdf/2504.17033 * https://dl.acm.org/doi/pdf/10.1145/3717823.3718179 Kind regards, Ryan Hamel

5 9

Multi-WAN link aggregation / multi-path VPNs…
by Mike Lyon 21 Aug '25

21 Aug '25

Let’s talk multi-WAN Link Aggregation / Multipath VPNs… Theres ZeroTier, Speedify (commercial offering), kinda-sorta Wireguard, PepLink Speedfusion, etc… Use case is bonding a bunch of WAN devices like Starlink, FWA, Cellular, DSL, avian carrier, etc to have one big fat pipe. What have you used successfully and liked? Any problems you’ve run into? Thank you, Mike

2 1

Recommended DNS server for a medium 20-30k users isp
by DurgaPrasad - DatasoftComnet 21 Aug '25

21 Aug '25

Hello all, Do you have any recommendations for recursive DNS servers for a medium sized (20-30k users) ISP. We have used powerdns and unbound but sometimes find the caching times a bit on upper side. Any suggestions between these two or anything new? Also need points on how much we tune the settings pros and cons if any. Thank you /DP

35 62

Re: : Can a prefix be never routed on Internet but used only for source address in IP packets?
by Jakob Heitz (jheitz) 20 Aug '25

20 Aug '25

ICMP packets from internal devices. Example “unreachable”. Kind Regards, Jakob ---------------------------- Question: Can a prefix be never routed on the Internet but used only one-way for source address in IP packets? That is. a user owns an IP prefix. They never advertise a route to it in BGP on the Internet. But they use the prefix solely for source address in IP traffic from a source to a destination (sink). In this set up, the destination server obviously cannot/doesn't return any acknowledgements etc. to the source. Anyone aware if there is any such known application in use on the Internet - even if it is rare? Thanks. Sriram

4 3

Can a prefix be never routed on Internet but used only for source address in IP packets?
by Sriram, Kotikalapudi (Fed) 20 Aug '25

20 Aug '25

Question: Can a prefix be never routed on the Internet but used only one-way for source address in IP packets? That is. a user owns an IP prefix. They never advertise a route to it in BGP on the Internet. But they use the prefix solely for source address in IP traffic from a source to a destination (sink). In this set up, the destination server obviously cannot/doesn't return any acknowledgements etc. to the source. Anyone aware if there is any such known application in use on the Internet - even if it is rare? Thanks. Sriram

9 10

Internet Visualization Exhibit (IVE) at SIGCOMM 2025
by Loqman Salamatian 19 Aug '25

19 Aug '25

Paul Barford (University of Wisconsin–Madison) and I (Columbia University) are organizing the Internet Visualization Exhibition (IVE) as a special, non-paper session at SIGCOMM 2025 on September 11. The goal is to showcase creative and insightful visualizations of Internet-scale systems — from connectivity maps and temporal changes to AS-level graphs and other innovative ways of making the Internet more understandable. If you’ve created visualizations that reveal patterns, highlight anomalies, or explain complex behaviors in the Internet, we would love to see them and showcase them. We’re looking for: Static images, animations, or interactive demos Visuals that reveal structure, highlight anomalies, or explain complex behaviors Work that’s compelling, bold, or just visually satisfying Submissions are lightweight: just a visual and a short description. There’s no formal review process. Important: You don’t need to attend SIGCOMM to take part. While presenting in person is a great way to connect with others and share your work, the exhibition is open to submissions from anyone, anywhere. Whether you’re a researcher, network operator, data-viz enthusiast, or artist working with Internet data or infrastructure, we’d love to see what you’ve been visualizing! 📄 More details: https://burdantes.github.io/ive/ 📩 Questions? Reach out to me. And please share with anyone who might be interested! Loqman Salamatian

1 0

Re: Can a prefix be never routed on Internet but used only for source address in IP packets?
by Jonathan Kalbfeld 19 Aug '25

19 Aug '25

This happens unintentionally quite a bit with misconfigured NAT. You will see RFC 1918 source addresses in packets from time to time. I can't speak to the application or value of this, but I have seen this and done it accidentally on one occasion. Jonathan Kalbfeld office: +1 310 317 7933 fax: +1 310 317 7901 home: +1 310 317 7909 mobile: +1 310 227 1662 ThoughtWave Technologies, Inc. Studio City, CA 91604 https://thoughtwave.com View our network at https://bgp.he.net/AS54380 +1 844 42-LINUX > > On Aug 19, 2025 at 9:34 AM, Sriram, Kotikalapudi (Fed) via NANOG <nanog(a)lists.nanog.org> wrote: > > > Question: Can a prefix be never routed on the Internet but used only one-way for source address in IP packets? > > That is. a user owns an IP prefix. They never advertise a route to it in BGP on the Internet. But they use the prefix solely for source address in IP traffic from a source to a destination (sink). In this set up, the destination server obviously cannot/doesn't return any acknowledgements etc. to the source. Anyone aware if there is any such known application in use on the Internet - even if it is rare? Thanks. > > Sriram > _______________________________________________ > NANOG mailing list > https://lists.nanog.org/archives/list/nanog@lists.nanog.org/message/MSEGDFS… >

2 1