- NANOG - lists.nanog.org

FYI: An Easy way to build a server cluster without top of rack switches (MEMO)
by NAOTO MATSUMOTO 20 Feb '15

20 Feb '15

Hi all! We wrote up TIPS memo "an easy way to build a server cluster without top of rack switches" concept. This model have a reduce switches and cables costs and high network durability by lightweight and simple configuration. if you interest in, please try to do yourself this concept ;-) An Easy way to build a server cluster without top of rack switches (MEMO) http://slidesha.re/1EduYXM Best regards, -- Naoto MATSUMOTO

3 4

Re: v6 deagg
by Brandon Butterworth 20 Feb '15

20 Feb '15

> From: Saku Ytti <saku(a)ytti.fi> > Is deaggregation inherently undesirable? I'd say yes when the only limit to deaggregation is /48. Given the opportunity people will do whatever they see fit at everyone elses expense > What is the correct solution here? Deaggregate or allocate space you don't > need? Whichever comes with sensible deagg control. The desired effect is people advertise exactly sufficient prefixes and, I'd say, a simple universal mechanism for everyone else to limit them to that so they don't feel the need to advertise more to prevent hijacks etc. > Or some others solution, should route object creation be limited to LIR > and be controlled by specific policy? It would allow inject information about > the reason for it. There is always a good reason to the person doing it. > Correct solution is not to use some so called 'strict' ipv6 filters, which > break Internet, by not allowing discontinuous pops having connectivity. Yes, strict would be best if based on good data. With no prefix length police there is no good data, RIPE gave up and said /48 everywhere removing the simpler mechanism to do this (I've not noticed what the others are doing) brandon

1 0

RE: OT - Small DNS "appliances" for remote offices.
by Robert Webb 20 Feb '15

20 Feb '15

What I do not like about the Pi is the network port is on the USB bus and thus limited to USB speeds. <div>-------- Original message --------</div><div>From: Maxwell Cole <mcole.mailinglists(a)gmail.com> </div><div>Date:02/18/2015 4:30 PM (GMT-05:00) </div><div>To: "nanog(a)nanog.org >> 'NANOG list'" <nanog(a)nanog.org> </div><div>Subject: Re: OT - Small DNS "appliances" for remote offices. </div><div> </div>

15 22

Call For Presentations RIPE 70, submission deadline 1 March 2015
by Benno Overeinder 20 Feb '15

20 Feb '15

Dear colleagues, Please find the CFP for RIPE 70 below. The deadline for submissions is 1 March 2015. Please also note that speakers do not receive any extra reduction or funding towards the meeting fee at the RIPE Meetings. Kind regards, Benno Overeinder for the RIPE Programme Committee http://www.ripe.net/ripe/meetings/ripe-meetings/pc ---------------------------------------- Call for Presentations A RIPE Meeting is an open event where Internet Service Providers, network operators and other interested parties get together. Although the meeting is mostly technical, it is also a chance for people to meet and network with others in their field. RIPE 70 will take place from 11-15 May 2015 in Amsterdam, The Netherlands. The RIPE Programme Committee (PC) is now seeking content proposals from the RIPE community for the plenary session presentations, BoFs (Birds of a Feather sessions), panels, workshops, tutorials and lightning talks at RIPE 70. The PC is looking for presentations covering topics of network engineering and operations, including but not limited to: - IPv6 deployment - Managing IPv4 scarcity in operations - Commercial transactions of IPv4 addresses - Data centre technologies - Network and DNS operations - Internet governance and regulatory practices - Network and routing security - Content delivery - Internet peering and mobile data exchange Submissions RIPE Meeting attendees are quite sensitive to keeping presentations non-commercial, and product marketing talks are strongly discouraged. Repeated audience feedback shows that the most successful talks focus on operational experience, research results, or case studies. For example, presenters wishing to describe a commercial solution should focus on the underlying technology and not attempt a product demonstration. The RIPE PC accepts proposals for different presentation formats, including plenary session presentations, tutorials, workshops, BoFs (Birds of a Feather sessions) and lightning talks. See the full descriptions of these formats at https://ripe70.ripe.net/submit-topic/presentation-formats/ Presenters who are proposing a panel or BoF are encouraged to include speakers from several (perhaps even competing) companies and/or a neutral facilitator. In addition to presentations selected in advance for the plenary, the RIPE PC also offers several time slots for "lightning talks", which are selected immediately before or during the conference. The following general requirements apply: - Proposals for plenary session presentations, BoFs, panels, workshops and tutorials must be submitted for full consideration no later than 1 March 2015, using the meeting submission system at https://ripe70.ripe.net/submit-topic/submission-form/. Proposals submitted after this date will be considered on a space-available basis. Important Dates regarding RIPE 70 can be found at: https://ripe70.ripe.net/programme/important-dates/ - Lightning talks should also be submitted using the meeting submission system (https://ripe70.ripe.net/submit-topic/submission-form/) and can be submitted just days before the RIPE Meeting starts or even during the meeting week. The allocation of lightning talk slots will be announced in short notice – in some cases on the same day but often one day prior to the relevant session. - Presenters should indicate how much time they will require. See more information on time slot allocations per presentation format at https://ripe70.ripe.net/submit-topic/presentation-formats/. - Proposals for talks will only be considered by the PC if they contain at least draft presentation slides (slides may be updated later on). For panels, proposals must contain a clear description, as well as the names of invited panellists, presenters and moderators. - Due to potential technical issues, it is expected that most, if not all, presenters/panellists will be physically present at the RIPE Meeting. If you have any questions or requests concerning content submissions, please email pc [at] ripe [dot] net. -- Benno J. Overeinder NLnet Labs http://www.nlnetlabs.nl/

2 1

FW: HTTPv6 access to www.centurylink.com and www.qwest.com are down
by Frank Bulk 19 Feb '15

19 Feb '15

Emails to what I thought were CenturyLink's NOC have gone unanswered, and the other email address resulted in an automated "you're not allowed to send emails to that group". Frank -----Original Message----- From: Frank Bulk Sent: Thursday, February 12, 2015 8:22 AM To: network(a)centurytel.net; 'noc(a)qwest.net' Subject: HTTPv6 access to www.centurylink.com and www.qwest.com are down According to our monitoring system, HTTPv6 access to www.centurylink.com and www.qwest.com have been down since 12:05 am U.S. Central, responding with a "Connection refused". I've tested from two vantage points to confirm that it's not just our prefix. Diagnostic output can be found below. Regards, Frank Bulk Premier Communications root@nagios:~/tmp/ipv6# wget -6 www.centurylink.com --2015-02-12 08:18:22-- http://www.centurylink.com/ Resolving www.centurylink.com... 2001:428:b21:1::20 Connecting to www.centurylink.com|2001:428:b21:1::20|:80... failed: Connection refused. root@nagios:~/tmp/ipv6# root@nagios:~/tmp/ipv6# tcptraceroute6 www.centurylink.com traceroute to www.centurylink.com (2001:428:b21:1::20) from 2607:fe28:0:1000::5, port 80, from port 60661, 30 hops max, 60 bytes packets 1 router-core.mtcnet.net (2607:fe28:0:1000::1) 0.555 ms 19.811 ms 1.632 ms 2 sxct.sxcy.mtcnet.net (2607:fe28:11:1002::197) 0.185 ms 0.196 ms 0.115 ms 3 v6-premier.sxcy-mlx.fbnt.netins.net (2001:5f8:7f0a:2::1) 1.641 ms 1.617 ms 1.585 ms 4 v6-ins-db4-te-0-6-0-4-219.desm.netins.net (2001:5f8:1:1::1) 8.146 ms 8.003 ms 8.051 ms 5 v6-ins-dc1-te-7-4.desm.netins.net (2001:5f8::26:2) 8.035 ms 7.954 ms 7.928 ms 6 2610:18:18b:c000::11 (2610:18:18b:c000::11) 12.925 ms 12.941 ms 12.896 ms 7 mcr1.minneapolis-mn.us.xo.net (2610:18::30b8) 22.254 ms 22.234 ms 22.238 ms 8 2610:18::5802 (2610:18::5802) 32.891 ms 25.156 ms 22.868 ms 9 2610:18::2072 (2610:18::2072) 23.894 ms 22.264 ms 22.759 ms 10 2610:18:16:3000::da (2610:18:16:3000::da) 18.543 ms 18.513 ms 18.569 ms 11 2001:428::205:171:2:52 (2001:428::205:171:2:52) 28.482 ms 28.512 ms 28.549 ms 12 2001:428:1c02:2::2 (2001:428:1c02:2::2) 28.254 ms 28.277 ms 28.238 ms 13 * 2001:428:b21:fc03::2 (2001:428:b21:fc03::2) 28.871 ms 28.608 ms 14 * * * 15 * * * 16 * * * 17 * * * 18 * * * 19 * * * 20 * * * 21 * * * 22 * * * 23 * * * 24 * * * 25 * * * 26 * * * 27 * * * 28 * * * 29 * * * 30 * * * root@nagios:~/tmp/ipv6#

1 1

Intrusion Detection recommendations
by Andy Ringsmuth 19 Feb '15

19 Feb '15

NANOG'ers, I've been tasked by our company president to learn about, investigate and recommend an intrusion detection system for our company. We're a smaller outfit, less than 100 employees, entirely Apple-based. Macs, iPhones, some Mac Mini servers, etc., and a fiber connection to the world. We are protected by a FreeBSD firewall setup, and we stay current on updates/patches from Apple and FreeBSD, but that's as far as my expertise goes. Initially, what do people recommend for: 1. Crash course in intrusion detection as a whole 2. Suggestions or recommendations for intrusion detection hardware or software 3. Other things I'm likely overlooking Thank you all in advance for your wisdom. ---- Andy Ringsmuth andy(a)newslink.com News Link – Manager Technology & Facilities 2201 Winthrop Rd., Lincoln, NE 68502-4158 (402) 475-6397 (402) 304-0083 cellular

17 27

Re: Intrusion Detection recommendations
by Randy Bush 19 Feb '15

19 Feb '15

> I've been tasked by our company president to learn about, investigate and > recommend an intrusion detection system for our company. > > We're a smaller outfit, less than 100 employees, entirely Apple-based. > Macs, iPhones, some Mac Mini servers, etc., and a fiber connection to the > world. We are protected by a FreeBSD firewall setup, and we stay current > on updates/patches from Apple and FreeBSD, but that's as far as my > expertise goes. > > Initially, what do people recommend for: > > 1. Crash course in intrusion detection as a whole > 2. Suggestions or recommendations for intrusion detection hardware or > software > 3. Other things I'm likely overlooking if you were comfortable enough with freebsd to use it as a firewall, you can run your traffic through, or mirror it to, a freebsd box running https://www.bro.org/ or https://www.snort.org/ two quite reasonable and powerful open source systems randy

6 6

Access switch for small business recommendation
by Manuel Marín 19 Feb '15

19 Feb '15

Dear nanog community I'm looking for a cost effective access switch for FTTB active fiber deployments. We are currently using Accedian demarcation devices but it's probably an overkill for customers that only require a basic internet service. The basic requirements we are looking for are: * Vlan support in order to deploy multiple services * 1 or 2 SFP ports * 4 10/100/1000 * Dying gasp (in order to identify if the equipment is down because power issue) * Rate limit per port * SNMP support to check SFP DDM values * Rack mountable I would appreciate if you can share what you use for these type of requirements. Thank you and have a great day Regards

1 0

OT - Small DNS "appliances" for remote offices.
by Ray Van Dolson 18 Feb '15

18 Feb '15

Hopefully not too far off topic for this list. Am looking for options to deploy DNS caching resolvers at remote locations where there may only be minimal infrastructure (FW and Cisco equipment) and limited options for installing a noisier, more power hugnry servers or appliances from a vendor. Stuff like Infoblox is too expensive. We're BIND-based and leaning to stick that way, but open to other options if they present themselves. Am considering the Soekris net6501-50. I can dump a Linux image on there with our DNS config, indudstrial grade design, and OK performance. If the thing fails, clients will hopefully not notice due to anycast which will just hit another DNS server somewhere else on the network albeit with additional latency. We ship out a replacement device rather than mucking with trying to repair. There's also stuff like this[1] which probably gives me more horsepower on my CPU, but maybe not as reliable. Maybe I'm overengineering this. What do others do at smaller remote sites? Also considering putting resolvers only at "hub" locations in our MPLS network based on some latency-based radius. Ray [1] http://www.newegg.com/Mini-Booksize-Barebone-PCs/SubCategory/ID-309

23 24

[NANOG-announce] Don't Forget: ARIN+NANOG On The Road - Orlando
by Valerie Wittkop 18 Feb '15

18 Feb '15

The next On The Road event is just a few short days away… We invite you to join us at: ARIN+NANOG On The Road - Orlando Tuesday, 24 February 2015 9:00 AM – 5:00 PM; Reception: 5:00 PM – 6:30 PM Eastern Time Register at: https://www.nanog.org/meetings/road5/registration <https://www.nanog.org/meetings/road5/registration> ARIN + NANOG On The Road is hosted by the American Registry for Internet Numbers (ARIN <https://www.arin.net/>) and the North American Network Operators’ Group (NANOG <https://www.nanog.org/>). If you are, or will be, in the Orlando area, we invite you to attend this meeting <https://www.nanog.org/meetings/road5/home>. The agenda <https://nanog.org/meetings/road5/agenda> features an “Open Internet Debate” keynote address; sessions will include an ARIN Overview along with policies under discussion, DNSSEC & RPKI, presentations on IPv6, Traceroute, updates on local IX activities, and an introduction to BGP. This free event, held <https://nanog.org/meetings/road5/hotel> at the Holiday Inn Resort Orlando-Lake Buena Vista, will also feature interactive discussions and networking opportunities. Lunch will be provided and there will be two drawings for $100 Amazon gift cards. Please register <https://nanog.org/meetings/road5/registration> today! Make ARIN+NANOG On The Road your first step toward learning how you can take the wheel and steer the future of the Internet. Please share this invitation with anyone you feel may benefit from attending this meeting. Learn more about On The Road events here <https://www.nanog.org/meetings/road/home>. Feel free to contact us at nanog-support(a)nanog.org <mailto:nanog-support@nanog.org> if you have any questions. Regards, Valerie Valerie Wittkop NANOG Program Director 48377 Fremont Boulevard, Suite 117 Fremont, CA 94538 Tel: +1 510 492 4030 _______________________________________________ NANOG-announce mailing list NANOG-announce(a)mailman.nanog.org http://mailman.nanog.org/mailman/listinfo/nanog-announce

1 0