- NANOG - lists.nanog.org

Re: maximum ipv4 bgp prefix length of /24 ?
by Mark Andrews 12 Oct '23

12 Oct '23

> On 13 Oct 2023, at 08:31, scott <surfer(a)mauigateway.com> wrote: > > > > > On 10/11/23 7:47 PM, Mark Andrews wrote: >> Virtually no home network on the planet has fully functional IPv4 available to it. > > > Hawaiian Telcom customers have it. No blocks at all. So they don’t use NAT? The internet is a peer-to-peer network. NAT breaks that. But I can’t reach IPv6 devices on the Internet from my IPv4 device without a transition box is no different to I can’t reach IPv4 devices on the Internet from my IPv4 device because PNAT *is* a transition device. It’s a bogus complaint and I’m calling it out. > scott -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: marka(a)isc.org

2 2

Re: maximum ipv4 bgp prefix length of /24 ?
by Willy Manga 12 Oct '23

12 Oct '23

Hi. On 06/10/2023 16:00, nanog-request(a)nanog.org wrote: > From: Matthew Petach<mpetach(a)netflight.com> >[...] >> The IPv6 FIB is under the same pressure from more specifics. Its taken 20 >> years to get there, but the IPv6 FIB is now looking stable at 60% opf the >> total FIB size [2]. For me, thats a very surprising outcome in an >> essentially unmanaged system. >> >> >> Were you expecting it to be lower than IPv4? >> >> Mark. >> > I've dug through the mailman mirror on nanog.org, and there's currently no > post by Geoff Huston saying that: > https://community.nanog.org/search?q=geoff%20huston%20order%3Alatest I read (and send) NANOG emails through the digest emails sent once a day. I noticed the same thing . I assumed it was sent directly to Mark (or the mail will enter my next digest...) > But I'll play along. > > There's significantly less pressure to deaggregate IPv6 space right now, > because we don't see many attacks on IPv6 number resources. > Once we start to see v6 prefix hijackings, /48s being announced over /32 > prefixes to pull traffic, then I think we'll see IPv6 deaggregation > completely swamp IPv4 deaggregation. How about we educate each other to not assume you must deaggregate your prefix especially with IPv6? I see 'some' (it's highly relative) networks on IPv4, they 'believe' they have to advertise every single /24 they have. And when they start with IPv6, they replicate the same mindset with a tons of /48 . You can imagine what will happen of course. A better alternative IMHO is to take advantage to the large prefix range and advertise a sub-aggregate when necessary. But absolutely not each end-node or customer prefix. -- Willy Manga @ongolaboy https://ongola.blogspot.com/

6 16

constraining RPKI Trust Anchors
by Job Snijders 12 Oct '23

12 Oct '23

Dear all, Two weeks ago AFRINIC was placed under receivership by the Supreme Court of Mauritius. This event prompted me to rethink the RPKI trust model and associated risk surface. The RPKI technology was designed to be versatile and flexible to accommodate a myriad of real-world deployment scenarios including multiple trust anchors existing, inter-registry transfers, multiple transports, and permissionless innovation for signed objects, for example. All good and well ... but ofcouse there is a fine print. :-) Over the years various people have expressed astonishment about each RIR having issued so-called 'all-resources' (0.0.0.0/0 + ::/0) trust anchor certificates, but this aspect often is misunderstood: the risk is not necessarily in the listing of 'all-resources' itself, it is in the RIR being able to issue an 'all-resources' certificate in the first place. RPKI trust anchor operators indeed can voluntarily reduce the scope of subordinate Internet Number Resources, but just as easily increase the scope of their authority. In other words, a trust anchor cannot truly constrain itself. Upon reconsideration on how exactly RPKI hooks into the real world; I concluded trust anchors do not require unbounded trust in order to provide constructive services in the realm of BGP routing security. Some examples: ARIN does not support inter-RIR IPv6 transfers, so it would not make any sense to see a ROA subordinate to ARIN's trust anchor covering RIPE-managed IPv6 space. Conversely, it wouldn't make sense to observe a ROA covering ARIN-managed IPv6 space under APNIC's, LACNIC's, or RIPE's trust anchor - even if a cryptographically valid certificate path existed. Along these lines AFRINIC doesn't support inter-RIR transfers of any kind; and none of the RIRs have authority over private resources like 10.0.0.0/8 or AS 65535. It seems feasible to paint constraints around RPKI trust anchors in broad strokes. Over the last two weeks I've diligently worked with Theo Buehler to research RIR transfer policies, untangle the history of the IANA->RIR and RIR->RIR allocation spaghetti, design & implement a maintainable constraints mechanism for rpki-client(8), and publicly document the concept of applying operator-defined policy to derived trust arcs. Please take a moment to read https://www.ietf.org/archive/id/draft-snijders-constraining-rpki-trust-anch… Your feedback is appreciated. Kind regards, Job

7 8

xfinity not working
by William Herrin 11 Oct '23

11 Oct '23

Howdy, Wondering if any of the folks from Xfinity have tried activating internet service with their own modem and without installing a mobile phone app any time in the recent past. It doesn't work. It just doesn't work. http://www.xfinity.net/activate -> https://idm.xfinity.com/myaccount/account-selector?execution=e4s1 -> https://login.xfinity.com/login Access Denied You don't have permission to access "http://login.xfinity.com/login?" on this server. Regards, Bill Herrin -- William Herrin bill(a)herrin.us https://bill.herrin.us/

5 11

Lumen Seattle Contact
by Brendan Carlson 11 Oct '23

11 Oct '23

Hello All, I have a client in Seattle, they've been hard down since Sunday due to a replaced CL/Lumen switch in the building telephone room. They never got hooked up after the switch was replaced. Can someone please contact me off list about this? Thanks!

2 2

NANOG 89 Socials + More - There is Still Time to Register! Join Us Virtually!
by Nanog News 11 Oct '23

11 Oct '23

*NANOG 89 Socials * *Network + Meet Community Members * NANOG Socials are an incredible opportunity to get to know your peers in the industry + foster important relationships in a relaxed, casual environment. They are also a lot of FUN! 😎 Check out full details below. *MORE INFO * <https://nanog.org/events/nanog-89/socials/> *Engage With Us On Social * *We Are YOUR Community * Please help spread the word about how awesome NANOG is *by engaging *with us on Linkedin, Facebook, Instagram, and Twitter. Social media algorithms are dependent on community engagement. By simply "liking" or commenting on our social media posts, you will promote content in our newsfeed and ensure our voice is seen. *NANOG 89 attendees:* Tag us in your favorite NANOG 89 pictures at #NANOG89 or #WeAreNANOG! *Where to Watch NANOG 89* NANOG 89 attendees can stream any presentation from Commodore CDE live starting Monday, 16 October. 👉 Link here - nanog.org/events/nanog-89/watch-n89-webcast/ *Have You Checked Out our N89 Keynote Speakers? * *Don't Miss Out — Sync Your Calendars Now * *Monday Keynote: *The Expanding Landscape of Internet Governance: Why Network Operators Need a Global View w/ President and CEO of ARIN, John Curran. * Tuesday Keynote:* Fireside Chat with COO of Arista Networks, Anshul Sadana + NANOG Producer Elizabeth Drolet. Get to know the man behind the tech and learn more about how to stay successful in today's rapidly changing environment. *MORE INFO <https://nanog.org/events/nanog-89/>* *Enjoy the Best of San Diego On-Site* *N89 Venue Offers Incredible Beaches, Activities + Award-Winning Dining * Devour delicious seafood, locally grown products, and enjoy award-winning chefs without ever leaving the hotel. Loews features four distinct restaurants with a variety of food options. Check out more hotel highlights + helpful information. *READ MORE * <https://nanog.org/stories/articles/n89-attendees-taste-the-best-of-san-dieg…>

1 0

U.S. test of national alerts on Oct. 4 at 2:20pm EDT (1820 UTC)
by Sean Donelan 11 Oct '23

11 Oct '23

This year's test of the U.S. national emergency alert includes something for ISPs and network operators. The wireless portion of the national test is scheduled 2 minutes (2:18pm EDT or 1818 UTC) before the main broadcast test at 2:20. Mobile phones usually receive the alert about a minute later. Radio and TV will receive the national alert a few minutes after 2:20pm. iPhone iOS 17 added a new feature for Wireless Emergency Alerts. When iOS 17 iPhones get a wireless emergency alert (WEA), it will trigger a data network query for additional information. Its a small query and response, but there are a lot of iPhones making the query at the same time (I'm assuming Apple engineer's have built in some time skew). Apple has assured FEMA that Apple's CDN and servers will be able to handle the triggered load. The iOS 17 triggered query will either be a tiny blip in the network graphs around 2:18pm to 2:22pm which no one will notice, or some CDNs and ISP operators will be wondering what that heck that spike was. If your phone is configured with Spanish, it will display the alert in both English and Spanish. “THIS IS A TEST of the National Wireless Emergency Alert System. No action is needed.” “ESTA ES UNA PRUEBA del Sistema Nacional de Alerta de Emergencia. No se necesita acción.” You'll know your iOS17 device did an extra data query, if it displays a longer message (extra sentences) in addition to the messages above. "This is only a test. No action is required by the public." https://www.fema.gov/press-release/20230803/fema-and-fcc-plan-nationwide-em…

22 39

APRICOT 2024: Call for Presentations
by Mark Tinka 11 Oct '23

11 Oct '23

APRICOT 2024 21st February - 1st March, Bangkok, Thailand https://2024.apricot.net CALL FOR PRESENTATIONS ================= The APRICOT 2024 Programme Committee is now seeking contributions for Presentations and Tutorials for the APRICOT 2024 Conference. We are looking for presenters who would: - Offer a technical tutorial on an appropriate topic; - Participate in the technical conference sessions as a speaker; - Convene and chair panel sessions of relevant topics; - Lead informal Birds of Feather break out sessions. Please submit on-line at: https://papers.apricot.net/user/login.php?event=186 CONFERENCE MILESTONES ---------------------------------- Call for Papers Opens: Now Outline Programme Published: As Papers Confirmed Final Deadline for Submissions: 29th January 2024 Final Program Published: 5th February 2024 Final Slides Received: 19th February 2024 *SLOTS ARE FILLED ON A FIRST COME, FIRST SERVED BASIS, REGARDLESS OF PUBLISHED DEADLINES* PROGRAMME CONTENT ----------------------------- The APRICOT Conference Programme consists of three parts, these being Tutorials, the Peering Forum, and Conference Sessions. Topics proposed must be relevant to Internet Operations and Technologies, for example: - IPv4 / IPv6 Routing and Operations - Routing Security, including RPKI and MANRS - Internet backbone operations - Peering, Interconnects and IXPs - Content Distribution Network technology & operations - Research on Internet Operations and Deployment - Network Virtualisation - Network Automation/Programming - Network Infrastructure security - IPv6 deployment on fixed and Wireless/Cellular networks - DNS / DNSSEC and KINDNS - Access and Transport Technologies - Technical application of Web 3.0, public blockchains and cryptocurrency - Content & Service Delivery and "Cloud Computing" - 400G ZR, ZR+ & Open ROADM - Submarine cables - ChatGPT CfP SUBMISSION --------------------- Draft slides for both tutorials and conference sessions MUST be provided with CfP submissions otherwise the submission will be rejected immediately. For work in progress, the most current information available at the time of submission is acceptable. All draft and complete slides must be submitted in PDF format only. Slides must be of original work, with all company confidential marks removed. Any marketing, sales and vendor proprietary content in a presentation is against the spirit of APRICOT and it is strictly prohibited. Note that proper credit must be given for all content taken from other sources. Evidence of plagiarism is grounds for rejection. Final slides are to be provided by the specified deadline for publication on the APRICOT website. Prospective presenters should note that the majority of speaking slots will be filled well before the final submission deadline. The PC may, at their discretion, retain a limited number of slots up to the final submission deadline for presentations that are exceptionally timely, important, or of critical operational importance. Every year we turn away submissions, due to filling up all available programme slots before the deadline. Presenters should endeavour to get material to the PC sooner rather than later. Any questions or concerns should be addressed to the Programme Committee Chairs by e-mail at: pc-chairs at apricot.net We look forward to receiving your presentation proposals. Mark Tinka, Achie Atienza & Mark Duffell APRICOT 2024 Programme Committee Chairs --

1 0

AT&T Business Center completely broken for months - is it the norm?
by Mirai Azayaka 10 Oct '23

10 Oct '23

Hi NANOG, Maybe this topic is better suited for the complaint department of AT&T but I just want to confirm if it's just me or it's just AT&T... So I'm a new customer of AT&T's DIA network and I haven't been able to make a payment since day one. (And it has been several months.) Just wondering if a completely broken internal billing system is normal... I only have limited experience with Hurricane Electric and Equinix before. Wondering if Verizon or Comcast is also broken like AT&T. Here are the issues I had with their system: - Clicking random links around the portal will give you HTTP 400 errors, sometimes. - I'm unable to add payment methods even after following the payment tutorial exactly. The portal consistently gives HTTP 413 errors. - Live chat doesn't work at all. Clicking the button returns HTTP 404 in my debugging console. - Extremely slow for some tasks which may result in a HTTP 408. The system feels like a collection of HTTP error codes... How can it be so broken? Are other ISP's internal billing systems broken like this? Looking for anecdotes / experiences. Azayaka

4 4

Re: Low to Mid Range DWDM Platforms
by Thomas Croghan 09 Oct '23

09 Oct '23

I did some work with their passive DWDM equipment. Everything was within spec and seemed to work fine for the year I was there after we deployed it. Actually being honest, we did all our light loss math based on FS's specs and we ended up having to use attenuators in one instance. So be certain to check the certification sheets when you get your product. On Oct 9, 2023 09:13, michael brooks - ESC <michael.brooks(a)adams12.org> wrote: >On the same topic, anyone have experience with the stuff from fs.com<https://urldefense.com/v3/__http://fs.com__;!!IR39LLzvxw!PGJ97ToHx5NZWWby4L…>? We use their patch cables, both SM and MM. Solid product, and good to work with (we have had them build custom-length cables). michael brooks Sr. Network Engineer Adams 12 Five Star Schools michael.brooks(a)adams12.org<mailto:michael.brooks@adams12.org> :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: "flying is learning how to throw yourself at the ground and miss" On Fri, Oct 6, 2023 at 8:04 AM David Bass <davidbass570(a)gmail.com<mailto:davidbass570@gmail.com>> wrote: On the same topic, anyone have experience with the stuff from fs.com<https://urldefense.com/v3/__http://fs.com__;!!IR39LLzvxw!PGJ97ToHx5NZWWby4L…>? This is a staff email account managed by Adams 12 Five Star Schools. This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the sender.

1 0