- NANOG - lists.nanog.org

PDU for high amp 48Vdc
by Robert Drake 30 Jan '15

30 Jan '15

For larger DC devices with ~50amps per side, does anyone have a software accessible way to turn off power? I've looked into PDU's but the ones I find have a max of 10amps. I've considered building something with solenoids or a rotary actuator that would turn the switches on or off, but that's a complete one-off and would need to be done for each device we manage (not to mention it involves janky wiring all over the place I've got to explain to the colo) My use case is pretty infrequent so it needs to be remote-hands cheap.. it's for emergencies when you need to completely power cycle a redundantly powered DC device. The last time I needed this it was because a router was stuck in a boot loop due to a bad IOS upgrade and wouldn't break to rommon since it had been >60 seconds. It came up again tonight because we wanted to disable one power supply to troubleshoot something. FWIW, I believe I've seen newer Cisco gear with high-end power supplies that have a console or ethernet port which would possibly let you shut them down remotely. That solves the problem nicely if you're dealing with only one bit of hardware, but I'd like a general solution that worked with any vendor. Possibly a fuse panel with solenoids that could add/remove fuses when needed.. or would that be considered dangerous in code-ways or in telco fire regulation ways?

4 3

Need abuse/postmaster contact for AT&T
by Matthew Black 30 Jan '15

30 Jan '15

Our university just received notice from AT&T that our e-mail is being blocked without much explanation. As all universities send e-mail to the students and employees, it is impossible to tell what triggered AT&T's actions. Does anyone have an AT&T contact? If you are from AT&T, please contact me off-line. Thanks. matthew black e-mail postmaster california state university, long beach -----Original Message----- From: test_reply(a)att.net [mailto:test_reply@att.net] Sent: Wednesday, January 28, 2015 4:58 PM Subject: Blocked Email Notification Dear Postmaster: We are writing to let you know that we are blocking messages addressed to one of our customers at the domain att.net by one of your customers at domain csulb.edu. The stream of messages coming from your system appears to consist mostly of unwanted commercial e-mail (UCE, or "spam"). To protect our system and to ensure that it operates well for all of our customers, we have decided to block all messages originating from your system. Please consult your logs to see what might be causing this situation and how it can be fixed. Then visit http://rbl.att.net/block_inquiry.html to request a removal of the block. Most requests for removal are honored within two days. The specific error message received by your customer was: 550 Error - Blocked for abuse. See http://att.net/blocks Thank you for your assistance in helping our respective customers communicate. Best regards, The AT&T Mail Team.

2 1

Call For Presentations Open-IX AIS-1, deadline 2015-03-01
by Matt Griswold 29 Jan '15

29 Jan '15

Call For Presentations Open-IX Association Americas Interconnection Summit The Americas Interconnection Summit is an annual, open, event where Internet Service Providers, network operators, Internet Exchange Points, Data Center Operators and other interested parties get together to plan interconnection of networks and discuss issues affecting interconnection overall. AIS-1 will take place at the Westin Gaslamp Quarter Hotel from April 7, 2015 through April 9, 2015 in San Diego, CA. The AIS Program Committee “PC” is seeking presentation proposals on relevant topics primarily related to Interconnection strategy, including but not limited to: - Physical layer Interconnection - WDM management - IP or Ethernet Interconnection - Interconnection Automation - Mobile Data Exchange - Interconnection and Peering Internet Governance and Regulatory Topics - Economic and Product Trends; Infrastructure Procurement - Cloud Interconnection - Peering/Interconnection Strategy # Submissions AIS requires presentations to be of a non-commercial nature. Product or marketing heavy talks are strongly discouraged. Submissions of presentations should be made to the PC <ais-pc(a)open-ix.org>, please include: - Author's name(s) - Presentation title - Abstract - Slides (if available) - Time requested # Deadlines Presentation Abstract Deadline March 1st, 2015 Presentation Slides Submission Deadline March 15th, 2015 Final Selection of Speakers March 16th, 2015

1 0

Requesting Consolidated Communications (AS5742) contact
by Christopher Costa 29 Jan '15

29 Jan '15

Requesting a Consolidated Communications (AS5742) engineer contact me regarding routing in Illinois region towards Gaikai (AS33353). Thank you, Chris Costa Gaikai ccosta(a)gaikai.com

1 0

look for BGP routes containing local AS#
by Song Li 29 Jan '15

29 Jan '15

Hi everyone, Recently I studied the BGP AS path looping problem, and found that in most cases, the received BGP routes containing local AS# are suspicious. However, we checked our BGP routing table (AS23910,CERNET2) on juniper router(show route hidden terse aspath-regex .*23910.* ), and have not found such routes in Adj-RIB-In. We believe that the received BGP routes containing local AS# are related to BGP security problem. Hence, we want to look for some real cases in the wild. Could anybody give us some examples of such routes? Thanks! Best Regards! -- Song Li Room 4-204, FIT Building, Network Security, Department of Electronic Engineering, Tsinghua University, Beijing 100084, China Tel:( +86) 010-62446440 E-mail: refresh.lsong(a)gmail.com

5 9

Alerting systems, Logicmonitor and/or alternatives
by Jay Hennigan 29 Jan '15

29 Jan '15

I know that this topic has been kicking around for at least a decade, but wanted to get current opinions of other network operators. Most of us have explored Nagios, MRTG, and several front-ends for MRTG. We are looking into a new player in the space called Logicmonitor. They have a very functional and easy to navigate front end and configuration tool, and I very much like the look-and-feel of their product. What I don't like is that they only offer it as a cloud-based service. Internal probes tie in to a "collector" which we maintain. The collector then phones home over the Internet to their hosted service periodically and they remotely analyze the data and generate alerts, plot graphs, etc. >From a technical standpoint this adds more points of failure in series, will cause missed alerts if their cloud-based service goes down (who is guarding the guards?) will cause false alarms if their service is still up but can't reach the collector, and doesn't give us a full view under the hood. Of course their sales guys are giving us "Our time and energy is dedicated to reliability" and "professionally managed multi-carrier highly secure data centers" language to encourage the warm fuzzies. >From a scalability standpoint we incur ever-increasing recurring costs as we grow and add monitored devices and services. What's the collective opinion here? Is anyone using them or a similar service? Are there non-cloud-based alternatives that are relatively easy to set up and manage? We've explored Zabbix, Nagios, MRTG and its various wrappers, and Intermapper. Anything else new on the horizon that has a GUI front-end that is configurable without a lot of scripting experience, etc.? We would love to buy something that works for us and pay a reasonable price for it, but I'm not particularly interested in the equivalent of renting a time-share in order to monitor our networks. -- Jay Hennigan - CCIE #7880 - Network Engineering - jay(a)impulse.net Impulse Internet Service - http://www.impulse.net/ Your local telephone and internet company - 805 884-6323 - WB6RDV

7 6

Re: DDOS, IDS, RTBH, and Rate limiting
by freedman＠freedman.net 28 Jan '15

28 Jan '15

> > Cisco ASRs and MXs with inline jflow can do hundreds of K flows/second > > without affecting packet forwarding. > > Yes, i agree,those are good for netflow, but when they already exist in > network. > > Does it worth to buy ASR, if L3 switch already doing the job > (BGP/ACL/rate-limit/routing)? Not suggesting that anyone should change out their gear though per my other message, I've seen SPAN make things go wonky on almost every vendor that ISPs use for switching. > Well, if it is available, except hardware limitations, there is second > obstacle, software licensing cost. On latest JunOS, for example on EX2200, > you need to purchase license (EFL), and if am not wrong it is $3000 for > 48port units. > > So if only sFlow feature is on stake, it worth to think, to purchase license, > or to purchase server. Prices for JFlow license on MX, just for 5/10G is way > above cost of very decent server. I believe that smaller MXs can run it for free. Larger providers we've worked with often have magic cookies they can call in to get it enabled, but I understand you're talking about the smaller-provider (or at least ~ 10gig per POP across multiple POPs) case. We see a lot of Brocade for switching in hosting providers, which makes sFlow easy, of course. > > And with the right setup you can run FastNetMon or other tools in > > addition to generating flow that can be of use for other purposes > > as well... > > Technically there is ipt_NETFLOW, that can generate netflow on same box, > for statistical/telemetry purposes. But i am not sure it is possible to > run them together. At frac 10gig you can just open pcap on a 10gig interface on a Linux box getting a tap, of course. What we did was use myricom cards and the myri_snf drivers and take from the single-consumer ring buffers into large in-RAM ring buffers, and make those ring buffers available via LD_PRELOAD or cli tools to allow flow, snort, p0f, tcpdump, etc to all be run at the same time at 10gig. The key for that is not going through the kernel IP stack, though. > > But taps can be difficult or at least time consuming for people to > > put in at scale. Even, we've seen, for folks with 10G networks. > > Often because they can get 90% of what they need for 4 different > > business purposes from just flow :) > > About scaling, i guess it depends on proper deployment strategy and > sysadmins/developers capabilities. For example to deploy new ruleset > for my pcap-based "homemade" analyser to 150 probes across the country - > is just one click. Sounds cool. You should write up that use case. Hopefully you've secured the metadata/command push channel well enough :) > Best regards, > Denys Avi Freedman | Your flow has something to show you; can you see it? | CEO, CloudHelix | (avi at cloudhelix dot com) | my name one word on skype |

5 6

Cisco IOS stable/production safe versions?
by Nick Ellermann 28 Jan '15

28 Jan '15

I have a Cisco IOS specific question for the group and also specifically related to the 6500 platform. We have always been very conservative with our IOS version that we run in production, we are still running a pretty old safe harbor build of 12.2.x on SUP 720 3BXLs with BGP and OSFP routing. Any advice from fellow network operators that are running the 6500 platform in the core still for versions that are considered safe for production? We are stable, but I am really wanting access to features such as Netflow v9, etc. Thanks for any advice! Sincerely, Nick Ellermann - CTO & VP Cloud Services BroadAspect E: nellermann(a)broadaspect.com<mailto:nellermann@broadaspect.com> P: 703-297-4639 F: 703-996-4443 THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers.

2 1

AT&T uVerse blocking SIP?
by Brad Bendy 28 Jan '15

28 Jan '15

Has anyone seen issues where a end user on uVerse trying to connect to either another provider or AT&T non uVerse (in this case DIA) is having SIP blocked? SIP leaving the uVerse network going to another uVerse DSL account is fine, but it appears soon as it leave the uVerse network all SIP traffic is blocked? It appears others have seen this problem, some say it's a modem issue, some say they are truly blocking it. Ive yet to call uVerse support yet as im guessing ill get no where. Thanks for any insight on this. -- This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message, which arise as a result of e-mail transmission. If verification is required please request a hard-copy version. 1st Class Hosting, LLC. 1712 Pioneer Ave, Suite 1854, Cheyenne, WY 82001

5 7

Re: Facebook outage?
by Larry Sheldon 27 Jan '15

27 Jan '15

On 1/27/2015 09:02, Roy wrote: > > According to one joker, the crash was caused by too many pictures of the > Northeast blizzard :-) Cat-picture server went down. -- The unique Characteristics of System Administrators: The fact that they are infallible; and, The fact that they learn from their mistakes. Quis custodiet ipsos custodes

2 1