- NANOG - lists.nanog.org

ARO Security
by Nicholas Schmidt 18 May '15

18 May '15

I cant find a way to reach out to whoever manages ARO directly so I figure it would be best to publish this to the list. We are a group of network operators who are failing at enforcing extremely basic security in our own applications. 1.) Retrieving an ARO password sends a plain text email of your current password. Im sure this is minor as its just ARO and none of us would ever re-use a password in more critical systems. 2.) The SSL cert for secretariat.nanog.org is invalid. It looks to be trying to use the wildcard for amsl.com $ openssl s_client -showcerts -connect secretariat.nanog.org:443 CONNECTED(00000003) depth=0 /OU=Domain Control Validated/CN=*.amsl.com verify error:num=20:unable to get local issuer certificate verify return:1 depth=0 /OU=Domain Control Validated/CN=*.amsl.com verify error:num=27:certificate not trusted verify return:1 depth=0 /OU=Domain Control Validated/CN=*.amsl.com verify error:num=21:unable to verify the first certificate verify return:1 --- Certificate chain 0 s:/OU=Domain Control Validated/CN=*.amsl.com i:/C=US/ST=Arizona/L=Scottsdale/O=Starfield Technologies, Inc./OU= http://certs.starfieldtech.com/repository//CN=Starfield Secure Certificate Authority - G2

5 6

Re: Visualware/Speedtest self-hosting alternatives
by Rich Brown 18 May '15

18 May '15

> Hi, > Are there any turn key solutions out there like Visualware's MCS which you can install in a datacenter and let customers check overall throughput/latency and other metrics from their locations to the datacenter? I think someone also mentioned M-LAB but I didn't see the URL. They're at: http://www.measurementlab.net/tests This one isn't self-hosted, but I like it a lot: DSL Reports Speed Test http://dslreports.com/speedtest Rich

1 0

Visualware/Speedtest self-hosting alternatives
by Durga Dash 18 May '15

18 May '15

Hi, Are there any turn key solutions out there like Visualware's MCS which you can install in a datacenter and let customers check overall throughput/latency and other metrics from their locations to the datacenter? Thanks Durga.

5 4

survey on performance measurement platforms and related standards
by Bajpai, Vaibhav 18 May '15

18 May '15

Dear NANOG, I would like to share something with you today. As you know, IETF LMAP [1] is making efforts to standardize large-scale measurements to allow divergent measurement platforms to converge towards interoperability. Early discussions within this group often lead to folks asking for feature sets and possibilities of each contemporary performance measurement platform. So we started digging literature work in this space and found that although there were surveys on topology-based measurement platforms (such CAIDA Ark et al.); literature work on performance measurement platforms (such as RIPE Atlas, SamKnows et al.) was missing. Therefore, we started writing such a survey in 2013 to plug this gap and also complement this with current state of IETF standardization efforts happening within the LMAP and IPPM working groups. This work got published and came online recently. I thought would share this with you: ----------------8<-----------------8<-----------------8<-----------------8< A Survey on Internet Performance Measurement Platforms and Related Standardization Efforts Vaibhav Bajpai, Jürgen Schönwälder IEEE Communications Surveys & Tutorials April, 2015 A number of Internet measurement platforms have emerged in the last few years. These platforms have deployed thousands of probes at strategic locations within access and backbone networks and behind residential gateways. In this paper we provide a taxonomy of these measurement platforms on the basis of their deployment use-case. We describe these platforms in detail by exploring their coverage, scale, lifetime, deployed metrics and measurement tools, architecture and overall research impact. We conclude the survey by describing current standardization efforts to make large-scale performance measurement platforms interoperable. Author Copy: http://vaibhavbajpai.com/documents/papers/proceedings/lsmp-comst-2015.pdf DOI: http://dx.doi.org/10.1109/COMST.2015.2418435 ----------------8<-----------------8<-----------------8<-----------------8< Thanks! [1] https://datatracker.ietf.org/wg/lmap Best, Vaibhav ===================================================== Vaibhav Bajpai Research I, Room 91 Computer Networks and Distributed Systems (CNDS) Lab School of Engineering and Sciences Jacobs University Bremen, Germany www.vaibhavbajpai.com =====================================================

1 0

IP Geolocation
by Ben Perkins 18 May '15

18 May '15

Hi, Last year we purchased a /22 IPv4 block through RIPE. Although most sites (including RIPE https://stat.ripe.net/185.57.92.0%2F22#tabId=at-a-glance) have updated the IP Geolocation for them to London, a few sites have yet to change and are blocking access to their sites based on this. The 2 main sites that we are having issues with are Amex and Paypal. We have opened tickets with them but are just being passed around and not really getting anywhere. Has anyone had experience of this before or know of a good contact at either to help get this resolved? Thanks in advance, Ben

1 0

Hulu and HBO
by Mike Hammett 18 May '15

18 May '15

When I fire up their streams, they come from Level3 IPs. Can anyone confirm that Hulu and HBO come from Level 3 and not just someone that has the box I was talking to on Level3's network? ----- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest Internet Exchange http://www.midwest-ix.com

4 4

Re: Fixing Google geolocation screwups
by Pedro Cavaca 16 May '15

16 May '15

https://support.google.com/websearch/answer/873?hl=en On 7 April 2015 at 23:26, John Levine <johnl(a)iecc.com> wrote: > A friend of mine lives in Alabama and has business service from at&t. > But Google thinks he's in France. We've checked for various > possibilities of VPNs and proxies and such, and it's pretty clear that > the Goog's geolocation for addresses around 99.106.185.0/24 is screwed > up. Bing and other services correctly find him in Alabama. > > Poking around I see lots of advice about how to use Google's > geolocation data, but nothing on how to update it. Anyone > know the secret? TIA > > Regards, > John Levine, johnl(a)iecc.com, Primary Perpetrator of "The Internet for > Dummies", > Please consider the environment before reading this e-mail. http://jl.ly > > >

9 11

Looking for IPv6 /48 from allocation that exists 2-3+ yrs
by Fred Hollis 16 May '15

16 May '15

Hello NANOG, Due to problems with some geo ip databases, we are looking for a /48 from an /32 or /36 allocation that exists for a few years already. East-coast preferred, but open to others in north america as well. Please contact me offlist Thank you, Fred

1 0

CenturyLink
by Mike Hammett 16 May '15

16 May '15

Could someone familiar with CenturyLink's Indianapolis network hit me up offlist? As I don't have a sales opportunity, I didn't engage those channels. ----- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest Internet Exchange http://www.midwest-ix.com

1 0

BGP Update Report
by cidr-report＠potaroo.net 15 May '15

15 May '15

BGP Update Report Interval: 07-May-15 -to- 14-May-15 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS23752 298407 4.4% 3014.2 -- NPTELECOM-NP-AS Nepal Telecommunications Corporation, Internet Services,NP 2 - AS9829 209003 3.1% 167.3 -- BSNL-NIB National Internet Backbone,IN 3 - AS19361 187594 2.8% 5517.5 -- A.Telecom S.A.,BR 4 - AS22059 130260 1.9% 21710.0 -- APVIO-1 - Apvio, Inc.,US 5 - AS54169 95960 1.4% 47980.0 -- MGH-ION-1 - Marin General Hospital,US 6 - AS36947 83322 1.2% 1096.3 -- ALGTEL-AS,DZ 7 - AS24560 75398 1.1% 61.2 -- AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services,IN 8 - AS45899 74074 1.1% 97.9 -- VNPT-AS-VN VNPT Corp,VN 9 - AS3709 72128 1.1% 2671.4 -- NET-CITY-SA - City of San Antonio,US 10 - AS7713 65973 1.0% 21991.0 -- TELKOMNET-AS-AP PT Telekomunikasi Indonesia,ID 11 - AS9498 62340 0.9% 46.9 -- BBIL-AP BHARTI Airtel Ltd.,IN 12 - AS26821 58631 0.9% 8375.9 -- REVNET - Revelation Networks, Inc.,US 13 - AS7552 43148 0.6% 49.2 -- VIETEL-AS-AP Viettel Corporation,VN 14 - AS46844 40795 0.6% 114.6 -- ST-BGP - Sharktech,US 15 - AS327687 39924 0.6% 1597.0 -- RENU,UG 16 - AS25563 37913 0.6% 9478.2 -- WEBLAND-AS Webland AG, Autonomous System,CH 17 - AS33667 33346 0.5% 1667.3 -- CMCS - Comcast Cable Communications, Inc.,US 18 - AS33651 33229 0.5% 1661.5 -- CMCS - Comcast Cable Communications, Inc.,US 19 - AS6517 32047 0.5% 281.1 -- RELIANCEGLOBALCOM - Reliance Globalcom Services, Inc,US 20 - AS3633 30893 0.5% 523.6 -- PROVINCE-OF-BRITISH-COLUMBIA - Province of British Columbia,CA TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS54169 95960 1.4% 47980.0 -- MGH-ION-1 - Marin General Hospital,US 2 - AS7713 65973 1.0% 21991.0 -- TELKOMNET-AS-AP PT Telekomunikasi Indonesia,ID 3 - AS22059 130260 1.9% 21710.0 -- APVIO-1 - Apvio, Inc.,US 4 - AS197914 16797 0.2% 16797.0 -- STOCKHO-AS Stockho Hosting SARL,FR 5 - AS18135 10624 0.2% 10624.0 -- BTV BTV Cable television,JP 6 - AS393588 9740 0.1% 9740.0 -- MUBEA-FLO - Mubea,US 7 - AS25563 37913 0.6% 9478.2 -- WEBLAND-AS Webland AG, Autonomous System,CH 8 - AS26821 58631 0.9% 8375.9 -- REVNET - Revelation Networks, Inc.,US 9 - AS25553 23131 0.3% 7710.3 -- GLUHOV-TRK TRK Gluhov Ltd.,CZ 10 - AS47680 7644 0.1% 7644.0 -- NHCS EOBO Limited,IE 11 - AS202195 7547 0.1% 7547.0 -- ASTEKOSTMN West Siberian Regional Center of Telecommunications Tekos-Tyumen Ltd.,RU 12 - AS57120 7489 0.1% 7489.0 -- TMK-AS JSC "TMK",RU 13 - AS32005 21466 0.3% 7155.3 -- THE-CHURCH-PENSION-GROUP - CHURCH PENSION GROUP SERVICES CORPORATION,US 14 - AS1757 11096 0.2% 5548.0 -- LEXIS-AS - LexisNexis,US 15 - AS19361 187594 2.8% 5517.5 -- A.Telecom S.A.,BR 16 - AS6629 10764 0.2% 5382.0 -- NOAA-AS - NOAA,US 17 - AS56636 4299 0.1% 4299.0 -- ASVEDARU VEDA Ltd.,RU 18 - AS2167 21171 0.3% 4234.2 -- HPES - Hewlett-Packard Company,US 19 - AS39789 4161 0.1% 4161.0 -- RU-ACTIVE Limited Liability Company Active,RU 20 - AS13483 11197 0.2% 3732.3 -- INFOR-AS13483 - INFOR GLOBAL SOLUTIONS (MICHIGAN), INC.,US TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 202.70.64.0/21 148942 2.1% AS23752 -- NPTELECOM-NP-AS Nepal Telecommunications Corporation, Internet Services,NP 2 - 202.70.88.0/21 148635 2.1% AS23752 -- NPTELECOM-NP-AS Nepal Telecommunications Corporation, Internet Services,NP 3 - 204.80.242.0/24 95888 1.4% AS54169 -- MGH-ION-1 - Marin General Hospital,US 4 - 105.96.0.0/22 82710 1.2% AS36947 -- ALGTEL-AS,DZ 5 - 118.98.88.0/24 66174 0.9% AS64567 -- -Private Use AS-,ZZ AS7713 -- TELKOMNET-AS-AP PT Telekomunikasi Indonesia,ID 6 - 76.191.107.0/24 65027 0.9% AS22059 -- APVIO-1 - Apvio, Inc.,US 7 - 64.34.125.0/24 64975 0.9% AS22059 -- APVIO-1 - Apvio, Inc.,US 8 - 107.0.152.0/24 57680 0.8% AS33651 -- CMCS - Comcast Cable Communications, Inc.,US AS33667 -- CMCS - Comcast Cable Communications, Inc.,US 9 - 196.43.128.0/24 38124 0.6% AS327687 -- RENU,UG 10 - 130.0.192.0/21 16797 0.2% AS197914 -- STOCKHO-AS Stockho Hosting SARL,FR 11 - 66.7.138.0/24 16095 0.2% AS6517 -- RELIANCEGLOBALCOM - Reliance Globalcom Services, Inc,US 12 - 66.7.156.0/24 15646 0.2% AS6517 -- RELIANCEGLOBALCOM - Reliance Globalcom Services, Inc,US 13 - 92.43.216.0/21 12870 0.2% AS25563 -- WEBLAND-AS Webland AG, Autonomous System,CH 14 - 185.84.192.0/22 12655 0.2% AS25563 -- WEBLAND-AS Webland AG, Autonomous System,CH 15 - 178.174.96.0/19 12387 0.2% AS25563 -- WEBLAND-AS Webland AG, Autonomous System,CH 16 - 193.169.125.0/24 11794 0.2% AS25553 -- GLUHOV-TRK TRK Gluhov Ltd.,CZ 17 - 193.169.124.0/23 11308 0.2% AS25553 -- GLUHOV-TRK TRK Gluhov Ltd.,CZ 18 - 198.185.16.0/24 11094 0.2% AS1757 -- LEXIS-AS - LexisNexis,US 19 - 192.58.232.0/24 10762 0.2% AS6629 -- NOAA-AS - NOAA,US 20 - 42.83.48.0/20 10624 0.1% AS18135 -- BTV BTV Cable television,JP Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0