- NANOG - lists.nanog.org

Fwd: RADb will migrate to IRRdv4 on October 30, 2023
by Job Snijders 28 Sep '23

28 Sep '23

Dear all, Please see the below announcement, I think this is really good news! RPKI-based filtering at large databases and mirror services like RADB really helps take the sting out of potentially harmful RPKI-invalid IRR route objects. This will positively impact operators who use bgpq3, irrpt, or irrtoolset/peval to generate filters, because those tools use whois.radb.net by default. Kind regards, Job ---------- Forwarded message --------- From: Merit RADb <radb(a)merit.edu> Date: Thu, 28 Sep 2023 at 21:00 Subject: RADb will migrate to IRRdv4 on October 30, 2023 To: <job(a)fastly.com> RADB will switch to IRRdv4 on October 30 [image: RADb blue logo-tagline] <https://d2tTpN04.na1.hubspotlinks.com/Ctc/2N+113/d2tTpN04/VVpYl230vYh0W6PgX…> Dear RADb Community, As originally announced in March 2023, RADb is transitioning to IRRd (Internet Routing Registry daemon) version 4. On October 30th, 2023, we will migrate RADb over from IRRdv3, which you are currently using, to IRRDv4. Below are links to demo servers that will allow you to interact with the new service prior to the migration. As you start planning for the transition, here are some key things to note: - We will import the current database into IRRDv4 on October 30th. - We will work to maintain the current serial numbers for NRTM. If we are unable to you will need to update your mirror before NRTM can continue. - We will enable RPKI. - The rpki-ov-state RPSL field notes the RPKI status (valid, invalid, or not-found) - whois will hide RPKI invalid objects unless you use !fno-rpki-filters - IRRDv4 is more strict, but we are starting with most of this strictness disabled initially. - IRRDv4 may output RPSL objects differently. - The RADb API is the same, but may return different error messages, or similar error messages with different wording. For example, it will now report RPKI errors. - Existing mntner objects will be imported even with invalid admin-c/tech-c handler. Any updates will require at least one person or role object associated with it. We will be updating our registration process to create these objects for you. - New mntner objects must also have at least one person or role object associated with it. We will initially handle this for you the the customer portal, but you should check the created person or role for correctness. - New mntner objects will use bcrypt for passwords. This will happen automatically for you through the customer portal The following demo environments are available for your testing (please use your existing credentials): - whois2.radb.net <#m_-1278871392211290094_m_-2351897707799796429_> - IRRdv4 with current RADb objects and live mirroring of other RIRs - whois2demo.radb.net <#m_-1278871392211290094_m_-2351897707799796429_> - IRRdv4 with sample data (v4 version of whoisdemo.radb.net <#m_-1278871392211290094_m_-2351897707799796429_>) - wwwdemo.radb.net <https://d2tTpN04.na1.hubspotlinks.com/Ctc/2N+113/d2tTpN04/VVpYl230vYh0W6PgX…> - demo web portal backed by whois2.radb.net <https://d2tTpN04.na1.hubspotlinks.com/Ctc/2N+113/d2tTpN04/VVpYl230vYh0W6PgX…> - apidemo2.radb.net <https://d2tTpN04.na1.hubspotlinks.com/Ctc/2N+113/d2tTpN04/VVpYl230vYh0W6PgX…> - demo API (available October 1st) This move to IRRDv4 will bring many benefits to you, including: - Improved RADb data quality - Prevention of RPKI-invalid objects from being created in RADb - Prevention of object creation for invalid prefixes (such as RFC 1918 space) - as-set and route-set object creation will be limited to the account that maintains the aut-num object extending and protecting the ASN of the resource holder from misrepresentation (requires use of hierarchical naming conventions) - Improved extensibility and maintainability We thank you for subscribing to Merit’s RADb service - the contributions of this community make the internet a better place to learn, work and share data. *Questions? *Please contact us at support(a)radb.net *We also welcome your feedback - please take our brief customer satisfaction survey: **https://radb.net/survey* <https://d2tTpN04.na1.hubspotlinks.com/Ctc/2N+113/d2tTpN04/VVpYl230vYh0W6PgX…> Our sincerest thanks, The RADb Team [image: merit_network1] [image: Facebook] <https://d2tTpN04.na1.hubspotlinks.com/Ctc/2N+113/d2tTpN04/VVpYl230vYh0W6PgX…> [image: Twitter] <https://d2tTpN04.na1.hubspotlinks.com/Ctc/2N+113/d2tTpN04/VVpYl230vYh0W6PgX…> [image: LinkedIn] <https://d2tTpN04.na1.hubspotlinks.com/Ctc/2N+113/d2tTpN04/VVpYl230vYh0W6PgX…> [image: YouTube] <https://d2tTpN04.na1.hubspotlinks.com/Ctc/2N+113/d2tTpN04/VVpYl230vYh0W6PgX…>

1 0

Test Lab Best Practices
by Kenneth Vedder 28 Sep '23

28 Sep '23

Hello NANOG, We have been struggling with firmware bugs from a specific router vendor. I am looking to set up a test lab of our core network and a few remote site routers. Protocols would include SR-MPLS, ISIS, EVPN MPLS and L3VPN with a little OSPF sprinkled in. I'd be grateful for any tips or resources anyone has that might cover testing strategies and/or best practices. Thanks, Ken

8 7

Contact for Hulu
by Brad Bendy 28 Sep '23

28 Sep '23

Can anyone at Hulu contact me off list? Have issues with some new subnets we have and our end users cannot access the Hulu service with various error messages. Thanks

2 1

Re: Contact for Hulu
by Kenneth Vedder 28 Sep '23

28 Sep '23

I would also be thankful for a contact at Hulu, we've been having similar issues to what Brad described. Ken V Amplex Internet On Thu, Sep 28, 2023 at 8:00 AM <nanog-request(a)nanog.org> wrote: > Send NANOG mailing list submissions to > nanog(a)nanog.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://mailman.nanog.org/mailman/listinfo/nanog > or, via email, send a message with subject or body 'help' to > nanog-request(a)nanog.org > > You can reach the person managing the list at > nanog-owner(a)nanog.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of NANOG digest..." > > > Today's Topics: > > 1. RE: SMTP-friendly VPS provider where I can also get a BGP > feed (Tim Burke) > 2. OARC 42 - Call for Contributions (co-located with NANOG 90) > (John Todd) > 3. Re: SMTP-friendly VPS provider where I can also get a BGP > feed (Christopher Munz-Michielin) > 4. Contact for Hulu (Brad Bendy) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Wed, 27 Sep 2023 13:58:11 +0000 > From: Tim Burke <tim(a)mid.net> > To: Tony Wicks <tony(a)wicks.co.nz>, 'Daniel Corbe' <daniel(a)corbe.net>, > "nanog(a)nanog.org" <nanog(a)nanog.org> > Subject: RE: SMTP-friendly VPS provider where I can also get a BGP > feed > Message-ID: > < > PH7P221MB09647C6E57CBE701CF45B6A3BBC2A(a)PH7P221MB0964.NAMP221.PROD.OUTLOOK.COM > > > > Content-Type: text/plain; charset="us-ascii" > > Unfortunately, Racknerd provides a majority of their services using a > dedicated server hosting company (Colo Crossing) that is known for > harboring spam and other malicious activity, so their IP space is generally > either blacklisted, of very poor reputation, or in many cases, completely > dropped at firewalls. Case in point, your message that originated from one > of these IPs tripped up my workstation's local spam filtering plugin from > ESET. > > V/r > Tim > > -----Original Message----- > From: NANOG <nanog-bounces+tim=mid.net(a)nanog.org> On Behalf Of Tony Wicks > Sent: Tuesday, September 26, 2023 1:39 PM > To: 'Daniel Corbe' <daniel(a)corbe.net>; nanog(a)nanog.org > Subject: [SPAM] RE: SMTP-friendly VPS provider where I can also get a BGP > feed > > I can't speak to the bgp feed as this seems like unnecessary complication > to me, but I use https://www.racknerd.com/ for personal email/web hosting > KVM VM's and have found them to be excellent. They have yearly black Friday > specials (last years - https://www.racknerd.com/BlackFriday/ ) that are > very attractive. They don't block any ports on their US/Europe VM's. I use > a primary pair in one city and rsync everything to a backup pair in another > city (as well as home just to make sure). Not all cities can get V6 but > most do. > > > > -----Original Message----- > From: NANOG <nanog-bounces+tony=wicks.co.nz(a)nanog.org> On Behalf Of > Daniel Corbe > Sent: Tuesday, September 26, 2023 11:09 PM > To: nanog(a)nanog.org > Subject: SMTP-friendly VPS provider where I can also get a BGP feed > > Hey all, > > I apologize if this isn't the right place to post this; however, I thought > maybe the NANOG community would be able to point me in the right direction. > > I'm looking for a place that I can host a mailer. My primary use case is > a Mailman-style technical discussion list; much like NANOG but software > related instead of network related: READ: non-commercial in nature. > > I'm currently a vultr customer, but they're refusing to unblock port 25 on > my account. I've tried explaining my use case but no matter who I talk to > over there they just keep pointing me to their spam policy. > > Thanks! > -Daniel > > > > ------------------------------ > > Message: 2 > Date: Wed, 27 Sep 2023 07:51:01 -0700 > From: John Todd <jtodd(a)quad9.net> > To: list <nanog(a)nanog.org> > Subject: OARC 42 - Call for Contributions (co-located with NANOG 90) > Message-ID: <176AEAE1-D6DA-46A9-9EAB-CF0E250550CC(a)quad9.net> > Content-Type: text/plain; charset="us-ascii"; Format="flowed" > > OARC 42 will be a two-day hybrid meeting and the dates are 8th and 9th > February to be co-located with NANOG 90 in Charlotte, North Carolina, > USA. > > The Programme Committee is seeking contributions from the community. > > All DNS-related subjects and suggestions for discussion topics are > welcome. For inspiration, we provide a non-exhaustive list of ideas: > Operations: Any operational gotchas, lessons learned from an outage, > details/reasons for a recent outage (how to improve TTR, tooling). > Deployment: DNS config management and release process. > Monitoring: Log ingestion pipeline, analytics infrastructure, anomaly > detection. > Scaling: DNS performance management and metrics. Increasing DNS Server > Efficiency > Security/Privacy: DNSSEC signing and validation, key storage, rollovers, > qname minimization, DoH/DoT > > The presentations can be either 10 or 20 minutes in length (plus 5 > minutes for Q&A). Proposals for in-person lightning presentations will > be opened closer to the Workshop dates. > > Workshop Milestones: > > 2023-09-07 Submissions open via Indico > 2023-11-22 Deadline for submission (23:59 UTC) > 2023-11-29 Preliminary list of contributions published > 2023-12-13 Full agenda published > 2024-01-10 Deadline for slideset submission and Rehearsal > 2024-02-08 OARC 42 Workshop - Day1 > 2024-02-09 OARC 42 Workshop - Day2 > > The Registration page and details for presentation submission are > published at: > <https://www.dns-oarc.net/oarc42> > > To allow the Programme Committee to make objective assessments of > submissions, so as to ensure the quality of the workshop, submissions > SHOULD include slides. Draft slides are acceptable on submission. > Example guidelines for presentation slides: > https://www.grammarly.com/blog/presentation-tips/ > > Additional information for speakers of OARC 42 > - your talk will be broadcast live and recorded for future reference > - your presentation slides will be available for delegates and others > to download and refer to, before, during and after the meeting > - remote speakers have mandatory rehearsal (Date and Time TBD). It > would be very useful to have your slides (even if draft) ready for this > > Note: DNS-OARC provides registration fee waivers for the workshop to > support those who are part of underrepresented groups to speak at and/or > attend DNS-OARC. More details will be provided when registration opens. > > If you have questions or concerns you can contact the Programme > Committee: > https://www.dns-oarc.net/oarc/programme > via submissions(a)dns-oarc.net > > OARC depends on sponsorship to fund its workshops and associated social > events. Please contact sponsor(a)dns-oarc.net if your organization is > interested in becoming a sponsor. > > (Please note that OARC is run on a non-profit basis, and is not in a > position to reimburse expenses or time for speakers at its meetings.) > > John Todd, for the DNS-OARC Programme Committee > > -- > John Todd - jtodd(a)quad9.net > General Manager - Quad9 Recursive Resolver > >

1 0

SMTP-friendly VPS provider where I can also get a BGP feed
by Daniel Corbe 27 Sep '23

27 Sep '23

Hey all, I apologize if this isn't the right place to post this; however, I thought maybe the NANOG community would be able to point me in the right direction. I'm looking for a place that I can host a mailer. My primary use case is a Mailman-style technical discussion list; much like NANOG but software related instead of network related: READ: non-commercial in nature. I'm currently a vultr customer, but they're refusing to unblock port 25 on my account. I've tried explaining my use case but no matter who I talk to over there they just keep pointing me to their spam policy. Thanks! -Daniel

17 21

OARC 42 - Call for Contributions (co-located with NANOG 90)
by John Todd 27 Sep '23

27 Sep '23

OARC 42 will be a two-day hybrid meeting and the dates are 8th and 9th February to be co-located with NANOG 90 in Charlotte, North Carolina, USA. The Programme Committee is seeking contributions from the community. All DNS-related subjects and suggestions for discussion topics are welcome. For inspiration, we provide a non-exhaustive list of ideas: Operations: Any operational gotchas, lessons learned from an outage, details/reasons for a recent outage (how to improve TTR, tooling). Deployment: DNS config management and release process. Monitoring: Log ingestion pipeline, analytics infrastructure, anomaly detection. Scaling: DNS performance management and metrics. Increasing DNS Server Efficiency Security/Privacy: DNSSEC signing and validation, key storage, rollovers, qname minimization, DoH/DoT The presentations can be either 10 or 20 minutes in length (plus 5 minutes for Q&A). Proposals for in-person lightning presentations will be opened closer to the Workshop dates. Workshop Milestones: 2023-09-07 Submissions open via Indico 2023-11-22 Deadline for submission (23:59 UTC) 2023-11-29 Preliminary list of contributions published 2023-12-13 Full agenda published 2024-01-10 Deadline for slideset submission and Rehearsal 2024-02-08 OARC 42 Workshop - Day1 2024-02-09 OARC 42 Workshop - Day2 The Registration page and details for presentation submission are published at: <https://www.dns-oarc.net/oarc42> To allow the Programme Committee to make objective assessments of submissions, so as to ensure the quality of the workshop, submissions SHOULD include slides. Draft slides are acceptable on submission. Example guidelines for presentation slides: https://www.grammarly.com/blog/presentation-tips/ Additional information for speakers of OARC 42 - your talk will be broadcast live and recorded for future reference - your presentation slides will be available for delegates and others to download and refer to, before, during and after the meeting - remote speakers have mandatory rehearsal (Date and Time TBD). It would be very useful to have your slides (even if draft) ready for this Note: DNS-OARC provides registration fee waivers for the workshop to support those who are part of underrepresented groups to speak at and/or attend DNS-OARC. More details will be provided when registration opens. If you have questions or concerns you can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via submissions(a)dns-oarc.net OARC depends on sponsorship to fund its workshops and associated social events. Please contact sponsor(a)dns-oarc.net if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.) John Todd, for the DNS-OARC Programme Committee -- John Todd - jtodd(a)quad9.net General Manager - Quad9 Recursive Resolver

1 0

Paramount+ anyone here? Please contact off list
by Norman Jester 27 Sep '23

27 Sep '23

Looking for some connectivity help with routing, a unique problem. Please contact me off-list. Norman Jester 619-319-7055 (I prefer WhatsApp or Text if you do too.)

1 0

NANOG 89 Agenda is LIVE! + "Network Automation Could Save Your Life" + More
by Nanog News 26 Sep '23

26 Sep '23

*NANOG 89 Agenda is LIVE! * *Sync Your Calendars Now + Never Miss a Talk! * *Have you registered yet for NANOG 89?* Check out the full agenda with talk date/time, abstract, + speaker info to create your personal NANOG 89 schedule. *VIEW AGENDA * <https://nanog.org/events/nanog-89/nanog-89-agenda/> *Guest Columnist: Scott Robohn* *"Network Automation Could Save Your Life — Maybe Not Your Life, but Probably Your Career"* *Network Automation* is receiving a much-needed boost in attention, partly due to the efforts of NANOG, the Network Automation Forum (NAF), and other organizations. Why this boost? Network Automation is moving slower than we thought it should and perhaps slower than we need it to move. *READ MORE <https://nanog.org/stories/articles/network-automation-could-save-your-life/>* *Video of the Week* *NANOG 87 Recap * NANOG 89 is less than three short weeks away! Get into the NANOG spirit + take a trip down memory lane. Watch the NANOG 87 recap video now — meeting location: Atlanta. *WATCH NOW <https://www.youtube.com/watch?v=fejIBHzKU14&t=53s>* *Attend NANOG Virtually!* *Can't make it to our next meeting in San Diego? Join us virtually!* Stream live presentations, participate in real-time chat forums, enjoy 360 views of General Session + more. *REGISTER NOW! * <https://nanog.org/events/nanog-89/>

1 0

Latest NETSCOUT DDoS Threat Intelligence Report published, no registration required.
by Dobbins, Roland 26 Sep '23

26 Sep '23

This issue covers 1H2023, and the full report is available online: <https://www.netscout.com/threatreport> We make these findings freely available as a service to the operational community; feedback welcome. Again, no registration is required to view the full report online. A .pdf summary is available for download; registration is required to download the .pdf. [Full disclosure: I am employed by NETSCOUT and am a contributor to this report.] -------------------------------------------- Roland Dobbins <roland.dobbins(a)netscout.com<mailto:roland.dobbins@netscout.com>>

1 0

Comcast contact sought
by Al Whaley 25 Sep '23

25 Sep '23

I am looking for a senior contact at Comcast. I have been trying to assist someone with a business connection that runs a server farm. Recently the business cable modem started to short-stop port 53 for UDP and TCP. Apparently, a transparent DNS proxy somehow got activated and all outbound traffic to any IPv4 or IPv6 address is intercepted and handled by the modem – or not handled. Sadly, the proxy is stupid and a) ignores the intended destination address, and b) drops things it doesn’t know about, including any AXFR / IXFR and other more esoteric traffic, normal for DNS server installations, but not used by the public. The DNS servers are not able to do work, e.g. act as secondaries. I know others in the same configuration with servers that have been lucky and not had this ‘feature’ activated, but I have found several references on forums where people have been caught by this and unsuccessful in reaching anyone in management, so it is a known problem. Comcast doesn’t allow customer supplied DOCSIS modems with multiple fixed IPs. Other avenues exhausted as well. I’m hoping someone at Comcast can disable this. Attempts to go through customer service… well we all know where that ends up. Escalations just don’t go to anyone technical or interested. regards Al Whaley Sunnyside Computing, Inc.

5 4