- NANOG - lists.nanog.org

Weekly Routing Table Report
by Routing Analysis Role Account 03 Apr '15

03 Apr '15

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 04 Apr, 2015 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 539115 Prefixes after maximum aggregation (per Origin AS): 205855 Deaggregation factor: 2.62 Unique aggregates announced (without unneeded subnets): 262872 Total ASes present in the Internet Routing Table: 49858 Prefixes per ASN: 10.81 Origin-only ASes present in the Internet Routing Table: 36536 Origin ASes announcing only one prefix: 16266 Transit ASes present in the Internet Routing Table: 6290 Transit-only ASes present in the Internet Routing Table: 173 Average AS path length visible in the Internet Routing Table: 4.4 Max AS path length visible: 59 Max AS path prepend of ASN ( 55644) 56 Prefixes from unregistered ASNs in the Routing Table: 1130 Unregistered ASNs in the Routing Table: 410 Number of 32-bit ASNs allocated by the RIRs: 9061 Number of 32-bit ASNs visible in the Routing Table: 7032 Prefixes from 32-bit ASNs in the Routing Table: 25439 Number of bogon 32-bit ASNs visible in the Routing Table: 4 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 372 Number of addresses announced to Internet: 2740392868 Equivalent to 163 /8s, 87 /16s and 19 /24s Percentage of available address space announced: 74.0 Percentage of allocated address space announced: 74.0 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 97.3 Total number of prefixes smaller than registry allocations: 181677 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 133140 Total APNIC prefixes after maximum aggregation: 38684 APNIC Deaggregation factor: 3.44 Prefixes being announced from the APNIC address blocks: 138839 Unique aggregates announced from the APNIC address blocks: 56616 APNIC Region origin ASes present in the Internet Routing Table: 5036 APNIC Prefixes per ASN: 27.57 APNIC Region origin ASes announcing only one prefix: 1214 APNIC Region transit ASes present in the Internet Routing Table: 872 Average APNIC Region AS path length visible: 4.4 Max APNIC Region AS path length visible: 59 Number of APNIC region 32-bit ASNs visible in the Routing Table: 1365 Number of APNIC addresses announced to Internet: 747782656 Equivalent to 44 /8s, 146 /16s and 66 /24s Percentage of available APNIC address space announced: 87.4 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 131072-135580 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 177915 Total ARIN prefixes after maximum aggregation: 87703 ARIN Deaggregation factor: 2.03 Prefixes being announced from the ARIN address blocks: 180188 Unique aggregates announced from the ARIN address blocks: 84227 ARIN Region origin ASes present in the Internet Routing Table: 16510 ARIN Prefixes per ASN: 10.91 ARIN Region origin ASes announcing only one prefix: 6072 ARIN Region transit ASes present in the Internet Routing Table: 1716 Average ARIN Region AS path length visible: 3.8 Max ARIN Region AS path length visible: 24 Number of ARIN region 32-bit ASNs visible in the Routing Table: 386 Number of ARIN addresses announced to Internet: 1064986400 Equivalent to 63 /8s, 122 /16s and 103 /24s Percentage of available ARIN address space announced: 56.3 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 393216-394239 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 130559 Total RIPE prefixes after maximum aggregation: 65255 RIPE Deaggregation factor: 2.00 Prefixes being announced from the RIPE address blocks: 136997 Unique aggregates announced from the RIPE address blocks: 84491 RIPE Region origin ASes present in the Internet Routing Table: 17929 RIPE Prefixes per ASN: 7.64 RIPE Region origin ASes announcing only one prefix: 8164 RIPE Region transit ASes present in the Internet Routing Table: 2969 Average RIPE Region AS path length visible: 4.9 Max RIPE Region AS path length visible: 32 Number of RIPE region 32-bit ASNs visible in the Routing Table: 3568 Number of RIPE addresses announced to Internet: 694387588 Equivalent to 41 /8s, 99 /16s and 131 /24s Percentage of available RIPE address space announced: 100.9 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 196608-202239 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 59226 Total LACNIC prefixes after maximum aggregation: 11187 LACNIC Deaggregation factor: 5.29 Prefixes being announced from the LACNIC address blocks: 68995 Unique aggregates announced from the LACNIC address blocks: 32144 LACNIC Region origin ASes present in the Internet Routing Table: 2423 LACNIC Prefixes per ASN: 28.48 LACNIC Region origin ASes announcing only one prefix: 623 LACNIC Region transit ASes present in the Internet Routing Table: 495 Average LACNIC Region AS path length visible: 4.9 Max LACNIC Region AS path length visible: 22 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 1609 Number of LACNIC addresses announced to Internet: 168041728 Equivalent to 10 /8s, 4 /16s and 29 /24s Percentage of available LACNIC address space announced: 100.2 LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-265628 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 12673 Total AfriNIC prefixes after maximum aggregation: 2982 AfriNIC Deaggregation factor: 4.25 Prefixes being announced from the AfriNIC address blocks: 13724 Unique aggregates announced from the AfriNIC address blocks: 5057 AfriNIC Region origin ASes present in the Internet Routing Table: 725 AfriNIC Prefixes per ASN: 18.93 AfriNIC Region origin ASes announcing only one prefix: 193 AfriNIC Region transit ASes present in the Internet Routing Table: 159 Average AfriNIC Region AS path length visible: 4.5 Max AfriNIC Region AS path length visible: 24 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 104 Number of AfriNIC addresses announced to Internet: 64489472 Equivalent to 3 /8s, 216 /16s and 8 /24s Percentage of available AfriNIC address space announced: 64.1 AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4766 2877 11556 919 Korea Telecom 17974 2794 904 78 PT Telekomunikasi Indonesia 7545 2546 336 128 TPG Telecom Limited 4755 2003 422 212 TATA Communications formerly 4538 1760 4190 71 China Education and Research 9829 1678 1324 47 National Internet Backbone 9808 1555 8717 28 Guangdong Mobile Communicatio 4808 1452 2259 447 CNCGROUP IP network China169 9583 1405 116 574 Sify Limited 9498 1313 334 94 BHARTI Airtel Ltd. Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 22773 3018 2956 142 Cox Communications Inc. 6389 2880 3688 51 BellSouth.net Inc. 3356 2541 10683 475 Level 3 Communications, Inc. 18566 2041 379 183 MegaPath Corporation 20115 1851 1832 431 Charter Communications 6983 1752 866 245 EarthLink, Inc. 4323 1618 1020 407 tw telecom holdings, inc. 30036 1508 308 527 Mediacom Communications Corp 701 1391 11270 677 MCI Communications Services, 22561 1338 412 242 CenturyTel Internet Holdings, Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 39891 2472 128 6 SaudiNet, Saudi Telecom Compa 34984 1980 303 357 TELLCOM ILETISIM HIZMETLERI A 20940 1689 648 1248 Akamai International B.V. 8402 1214 544 15 OJSC "Vimpelcom" 6849 1212 356 24 JSC "Ukrtelecom" 31148 1046 45 21 Freenet Ltd. 13188 1024 96 72 TOV "Bank-Inform" 12479 898 801 79 France Telecom Espana SA 8551 885 373 48 Bezeq International-Ltd 6830 852 2341 452 Liberty Global Operations B.V Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 10620 3156 514 222 Telmex Colombia S.A. 28573 2358 2173 118 NET Serviços de Comunicação S 7303 1704 1102 241 Telecom Argentina S.A. 6147 1596 374 30 Telefonica del Peru S.A.A. 8151 1559 3159 449 Uninet S.A. de C.V. 6503 1209 421 57 Axtel, S.A.B. de C.V. 7738 999 1882 41 Telemar Norte Leste S.A. 26615 963 2325 35 Tim Celular S.A. 3816 922 418 154 COLOMBIA TELECOMUNICACIONES S 18881 867 1036 22 Global Village Telecom Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 8452 1694 958 13 TE-AS 24863 962 284 27 Link Egypt (Link.NET) 36903 479 241 90 Office National des Postes et 36992 417 1229 32 ETISALAT MISR 37492 318 159 71 Orange Tunisie 24835 300 144 9 Vodafone Data 3741 249 857 208 Internet Solutions 29571 232 21 13 Cote d'Ivoire Telecom 36947 192 807 13 Telecom Algeria 15706 172 32 6 Sudatel (Sudan Telecom Co. Lt Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 10620 3156 514 222 Telmex Colombia S.A. 22773 3018 2956 142 Cox Communications Inc. 6389 2880 3688 51 BellSouth.net Inc. 4766 2877 11556 919 Korea Telecom 17974 2794 904 78 PT Telekomunikasi Indonesia 7545 2546 336 128 TPG Telecom Limited 3356 2541 10683 475 Level 3 Communications, Inc. 39891 2472 128 6 SaudiNet, Saudi Telecom Compa 28573 2358 2173 118 NET Serviços de Comunicação S 18566 2041 379 183 MegaPath Corporation Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 22773 3018 2876 Cox Communications Inc. 6389 2880 2829 BellSouth.net Inc. 17974 2794 2716 PT Telekomunikasi Indonesia 39891 2472 2466 SaudiNet, Saudi Telecom Compa 7545 2546 2418 TPG Telecom Limited 28573 2358 2240 NET Serviços de Comunicação S 3356 2541 2066 Level 3 Communications, Inc. 4766 2877 1958 Korea Telecom 18566 2041 1858 MegaPath Corporation 4755 2003 1791 TATA Communications formerly Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 30662 UNALLOCATED 8.2.129.0/24 3356 Level 3 Communicatio 53506 UNALLOCATED 8.17.102.0/23 3356 Level 3 Communicatio 46467 UNALLOCATED 8.19.192.0/24 46887 Lightower Fiber Netw 18985 UNALLOCATED 8.21.68.0/22 3356 Level 3 Communicatio 46473 UNALLOCATED 8.27.122.0/24 12180 Internap Network Ser 46473 UNALLOCATED 8.27.124.0/24 12180 Internap Network Ser 27205 UNALLOCATED 8.38.16.0/21 6461 Abovenet Communicati 15347 UNALLOCATED 8.224.147.0/24 12064 Cox Communications I 33628 UNALLOCATED 12.0.239.0/24 1239 Sprint 32805 UNALLOCATED 12.1.225.0/24 7018 AT&T Services, Inc. Complete listing at http://thyme.rand.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 5.100.241.0/24 23456 32bit Transition AS 23.226.112.0/20 62788 >>UNKNOWN<< 27.100.7.0/24 56096 >>UNKNOWN<< 31.217.248.0/21 44902 COVAGE NETWORKS SASU 41.73.1.0/24 37004 >>UNKNOWN<< 41.73.10.0/24 37004 >>UNKNOWN<< 41.73.11.0/24 37004 >>UNKNOWN<< 41.73.12.0/24 37004 >>UNKNOWN<< 41.73.13.0/24 37004 >>UNKNOWN<< 41.73.15.0/24 37004 >>UNKNOWN<< Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:12 /10:34 /11:93 /12:264 /13:510 /14:1001 /15:1717 /16:12950 /17:7205 /18:12232 /19:25319 /20:35828 /21:38593 /22:58523 /23:51163 /24:290671 /25:1111 /26:1167 /27:660 /28:14 /29:11 /30:8 /31:0 /32:13 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 39891 2432 2472 SaudiNet, Saudi Telecom Compa 22773 2230 3018 Cox Communications Inc. 18566 1996 2041 MegaPath Corporation 6389 1670 2880 BellSouth.net Inc. 6983 1399 1752 EarthLink, Inc. 30036 1355 1508 Mediacom Communications Corp 34984 1285 1980 TELLCOM ILETISIM HIZMETLERI A 6147 1144 1596 Telefonica del Peru S.A.A. 10620 1116 3156 Telmex Colombia S.A. 11492 1109 1172 CABLE ONE, INC. Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1544 2:666 4:93 5:1751 6:21 8:1415 12:1819 13:9 14:1315 15:17 16:2 17:44 18:21 20:49 23:1192 24:1695 27:1854 31:1513 32:39 33:2 34:5 35:3 36:117 37:1893 38:1012 39:11 40:246 41:2929 42:265 43:1238 44:26 45:342 46:2122 47:37 49:883 50:796 52:12 54:72 55:4 56:8 57:37 58:1222 59:681 60:468 61:1759 62:1336 63:1908 64:4448 65:2257 66:4120 67:2054 68:1077 69:3270 70:959 71:441 72:1959 74:2647 75:322 76:407 77:1489 78:1223 79:798 80:1317 81:1351 82:819 83:685 84:679 85:1369 86:381 87:1074 88:511 89:1807 90:153 91:5984 92:824 93:2174 94:1964 95:2068 96:428 97:348 98:1067 99:47 100:68 101:815 103:7079 104:1481 105:61 106:224 107:913 108:616 109:2019 110:1078 111:1485 112:770 113:1051 114:834 115:1249 116:1366 117:1024 118:1707 119:1436 120:450 121:1037 122:2183 123:1728 124:1505 125:1578 128:567 129:377 130:390 131:1183 132:481 133:172 134:415 135:109 136:300 137:313 138:576 139:164 140:239 141:421 142:669 143:487 144:569 145:108 146:712 147:580 148:1104 149:464 150:562 151:605 152:491 153:240 154:339 155:738 156:406 157:334 158:319 159:969 160:373 161:639 162:1959 163:422 164:663 165:686 166:289 167:803 168:1277 169:161 170:1466 171:240 172:41 173:1548 174:701 175:662 176:1406 177:3797 178:2062 179:879 180:1926 181:1599 182:1748 183:620 184:744 185:3193 186:2622 187:1783 188:2018 189:1584 190:7696 191:909 192:8204 193:5591 194:4107 195:3661 196:1705 197:1076 198:5512 199:5528 200:6575 201:3045 202:9447 203:9108 204:4694 205:2830 206:3083 207:3003 208:3943 209:3966 210:3525 211:1856 212:2451 213:2279 214:854 215:70 216:5581 217:1798 218:676 219:453 220:1436 221:790 222:464 223:670 End of report

1 0

Re: PoC for shortlisted DDoS Vendors
by Pavel Odintsov 03 Apr '15

03 Apr '15

Hello! What about open source alternatives? Main part of commercial ddos filters are simple high performace firewalls with detection logic (which much times more stupid than well trained network engineer). But attacks for ISP is not arrived so iften and detection part coukd be executed manually (or with oss tools like netflow analyzers or my own FastNetMon toolkit). For wire speed filtration on 10ge (and even more if you have modern cpu; up to 40ge) you could use netmap-ipfw with linux or freebsd with simple patches (for enabling multy process mode). On Thursday, April 2, 2015, dennis(a)justipit.com <dennis(a)justipit.com> wrote: > You should include Radware on that list . > > ----- Reply message ----- > From: "Mohamed Kamal" <mkamal(a)noor.net <javascript:;>> > To: "NANOG" <nanog(a)nanog.org <javascript:;>> > Subject: PoC for shortlisted DDoS Vendors > Date: Wed, Apr 1, 2015 9:51 AM > > In our effort to pick up a reasonably priced DDoS appliance with a > competitive features, we're in a process of doing a PoC for the > following shortlisted vendors: > > 1- RioRey > 2- NSFocus > 3- Arbor > 4- A10 > > The setup will be inline. So it would be great if anyone have done this > before and can help provide the appropriate tools, advices, or the > testing documents for efficient PoC. > > Thanks. > > -- > Mohamed Kamal > Core Network Sr. Engineer -- Sincerely yours, Pavel Odintsov

2 2

PoC for shortlisted DDoS Vendors
by Mohamed Kamal 03 Apr '15

03 Apr '15

In our effort to pick up a reasonably priced DDoS appliance with a competitive features, we're in a process of doing a PoC for the following shortlisted vendors: 1- RioRey 2- NSFocus 3- Arbor 4- A10 The setup will be inline. So it would be great if anyone have done this before and can help provide the appropriate tools, advices, or the testing documents for efficient PoC. Thanks. -- Mohamed Kamal Core Network Sr. Engineer

3 2

Meeting IRS requirements for encrypted transmission of FTI
by Hunt, Fred - DCF 03 Apr '15

03 Apr '15

Does anyone have previous experience meeting IRS requirements for the encrypted transmission of FTI across a LAN and WAN, specifically the requirements called for in IRS Publication 1075? The IRS tests for the following: All FTI data in transit is encrypted when moving across a Wide Area Network (WAN) and within the agency's Local Area Network (LAN). If FTI is transmitted over a LAN or WAN it is encrypted with FIPS 140-2 validated encryption, using at least a 128-bit encryption key. MACsec is what we are looking at right now. I'm wondering if anyone who has been through such an implementation could share lessons learned, gotchas, etc. Any input is appreciated? Fred

3 2

From Europe to Australia via right way
by Piotr 02 Apr '15

02 Apr '15

Hello, There is some telecom, isp which have route from EU to AU via east or south east (via Russia, Red sea or other ways) ? Now i have path via US and looking something in opposite direction. thanks for some info, contact. Piotr

12 16

Denver
by Mike Hammett 02 Apr '15

02 Apr '15

So in Denver Comfluent\CoreSite seems to be the place to be... except as someone that predominately serves eyeball networks, I'm interested in NetFlix. NetFlix is in EdgeConneX... where no other significant peering is happening. Also, my partner who has been looking into the Denver market said that CoreSite costs more than Chicago Equinix. Any recommendations for where to go? Seems like both main options suck, but there aren't any better. This would be for eyeball networks getting peering with the big content guys and cheaper transit than the tier 4\5\6\7\8 (how small of markets get numbers?) where they're located. Any significant web hosting operations in the Denver market? Someone that's bigger than "Bob's DS3 Web Hosting", but not SoftLayer size where they can't get creative with their services. ----- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com

2 1

Re: PoC for shortlisted DDoS Vendors
by dennis＠justipit.com 02 Apr '15

02 Apr '15

You should include Radware on that list . ----- Reply message ----- From: "Mohamed Kamal" <mkamal(a)noor.net> To: "NANOG" <nanog(a)nanog.org> Subject: PoC for shortlisted DDoS Vendors Date: Wed, Apr 1, 2015 9:51 AM In our effort to pick up a reasonably priced DDoS appliance with a competitive features, we're in a process of doing a PoC for the following shortlisted vendors: 1- RioRey 2- NSFocus 3- Arbor 4- A10 The setup will be inline. So it would be great if anyone have done this before and can help provide the appropriate tools, advices, or the testing documents for efficient PoC. Thanks. -- Mohamed Kamal Core Network Sr. Engineer

1 0

Re: BGP offloading (fixing legacy router BGP scalability issues)
by Pawel Rybczyk 02 Apr '15

02 Apr '15

Hi Freddy, As Paul has mentioned, you could check the David's project - SIR, look at his presentation: https://www.youtube.com/watch?v=o1njanXhQqM We've also developed a platform for the BGP monitoring and routing optimization which could solve your problem. It would inject to the border routers only TOP X prefixes with which you exchange most of the traffic. The added value would be that route orders point to best performing transit (low latency, 0 packet loss) per distant prefix. If you are interested to know more about our software please contact me off-list. -- Regards, Pawel Rybczyk Regional Manager BORDER 6 sp. z o.o. pawel.rybczyk(a)border6.com office: +48 22 242 89 51 (ext.103) mobile: +48 664 300 375 > David Barroso's (Spotify) SDN Internet Router [0] comes to mind. > > 0 - https://github.com/dbarrosop/sir > > On 4/2/2015 午後 07:47, Baldur Norddahl wrote: >> Filtering countries is a bad idea, but it is probably possible to create >> filters so 99% of your actual traffic is handled by a relatively small >> subset of global routes and the remaining 1% routed via a default >> route or >> via a Linux box. >> >> Anyone know of tools and methods to do this? How effective is it ( how >> many >> routes is necessary to capture 99% of the traffic)? >> >> Regards >> >> Baldur >

1 0

How are you doing DHCPv6 ?
by Randy Carpenter 02 Apr '15

02 Apr '15

I am wondering how people out there are using DHCPv6 to handle assigning prefixes to end users. We have a requirement for it to be a redundant server that is centrally located. DHCPv6 will be relayed from each customer access segment. We have been looking at using ISC dhcpd, as that is what we use for v4. However, it currently does not support any redundancy. It also does not do very much useful logging for DHCPv6 requests. Certainly not enough to keep track of users and devices. So, my questions are: How are you doing DHCPv6 with Prefix Delegation? What software are you using? When DHCPv6 with Prefix Delegation seems to be about the only way to deploy IPv6 to end users in a generic device-agnostic fashion, I am wondering why it is so difficult to find a working solution. thanks, -Randy -- | Randy Carpenter | Vice President - IT Services | Red Hat Certified Engineer | First Network Group, Inc. | (800)578-6381, Opt. 1 ----

13 37

Fwd: Holborn fire is still burning under the pavement - BBC News
by Colin Johnston 02 Apr '15

02 Apr '15

Will take a lot of water to clear this up if gone into main tunnels :( Colin > >> http://www.bbc.co.uk/news/uk-england-london-32157618 <http://www.bbc.co.uk/news/uk-england-london-32157618> >> >> Holborn fire is still burning under the pavement >> >> >> Local road closures are in place but Holborn Tube station is open >> A road in central London remains closed as an electrical fire continues to burn under the pavement. >> >> Some 5,000 people were evacuated from nearby buildings after smoke was seen coming out of an inspection cover on Kingsway, in Holborn, on Wednesday. >> >> London Fire Brigade (LFB) said the fire has been contained but has been "technically difficult" to tackle. >> >> More than 20 firefighters and officers are still at the scene and local road closures are in place. >> >> LFB Assistant Commissioner Peter Cowup said: "This has been a technically difficult incident to tackle. >> >> "The reason that the fire is still burning is because the service tunnel is hard to reach. >> >> "Although firefighters have been applying water through access points throughout the night, the complexity of the tunnel layout means that it will be some time until the fire is fully extinguished." >> >> He added LFB, the Met Police and utility companies were making steady progress to try and resolve the situation. >> >> 'Not an overnight job' >> >> Speaking to BBC London 94.9 <http://www.bbc.co.uk/radio/player/bbc_london>, Insp Neil Johnson, from the Met Police, said: "The fire is still live in the subway. The problem at the moment is there is a gas pipe underneath and we are all in agreement that it is ok and if we can keep it contained it will be fine. >> >> "All we need to do is keep people out of the area and let the fire brigade and utilities do their job." >> >> >> The view from the London Eye on Thursday night highlighted the area affected by the power cut >> >> Firefighters were called to the fire at about 12:30 BST on Wednesday >> "I imagine this road will be closed a long time after this is finished because of damage the heat does to the road," Mr Johnson said. >> >> "It will have to remain closed until a structural engineer examines it properly and either he or she says what work has to be done and that work is completed - this is not an overnight job." >> >> On Thursday onlookers reported struggling to breathe and "chaos" in and around Holborn. The cause of the fire is still unknown. >> >> UK Power Networks said the number of customers currently affected by the power cuts stood at about 1,000 and they had restored power to 2,000. >> >> Apologising to customers Matt Rudling, from UK Power Networks, said: "The gas is still burning under there and until we can gain access to that particular area we won't understand what's caused it and what we can do." >> >> >> Smoke was seen coming out of an inspection cover on Kingsway on Wednesday >> >> "We want to try and restore [power to] all those remaining customers by the end of day today." >> >> He apologised for the disruption and added that emergency generators were being used to supply power to the area. >> >> UK Power Networks' engineers are also trying and connect some of the damaged cables to unaffected ones. >> >> Kingsway is closed between Holborn and Aldwych, the Strand Underpass, Waterloo Bridge northbound and Southampton Row southbound between Vernon Place and High Holborn, which is causing delays. >> >> Holborn station is open, however nine bus routes are being diverted <http://www.twitlonger.com/show/n_1slhjq1>. >>

1 0