- NANOG - lists.nanog.org

Integra Telecom BGP contact
by Joseph Jackson 01 Nov '13

01 Nov '13

Anyone from Integra Telecom who knows their BGP routing on list? I have an open ticket but can't get past the noc techs and the issue is a weird one. Thanks!

2 1

Re: large scale ipsec
by Scott Weeks 01 Nov '13

01 Nov '13

--- morrowc.lists(a)gmail.com wrote: From: Christopher Morrow <morrowc.lists(a)gmail.com> One good reason to not do link encryption is: "the problem is that whackadoodle box you put outside the router!" :( most often those boxes can't do light-level monitoring, loopbacks, etc... all the stuff your NOC wants to do when 'link flapped,doh!' happens. ----------------------------------------------------- Yes! It is really hard to work with those things for the reasons you mention and they tend to be the culprit quite often. Also, a lot of times it adds more finger pointing as there tends to be a different group taking care of just the bulk encryptors. Last, I have seen some strange behaviors, such as not passing BPDUs. That makes VLANing *phun*. Not! scott

1 0

large scale ipsec
by Jan Schaumann 01 Nov '13

01 Nov '13

Hello, Who here on this list has deployed IPSec or other comparable lower layer encryption in a large scale environment, or attempted to do so? I've repeatedly heard claims that doing so is not feasible (either operationally or financially), but I have not seen any specific studies, reports, numbers or anything else to support this. Of course I haven't seen anything proving the opposite, either, which is why I'm reaching out here on this list. What was your experience, and what alternatives have you considered? If your findings were made longer than, say, 5 years ago, what might have changed to change the results? -Jan

4 5

Weekly Routing Table Report
by Routing Analysis Role Account 01 Nov '13

01 Nov '13

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG, TRNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 02 Nov, 2013 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 470880 Prefixes after maximum aggregation: 189231 Deaggregation factor: 2.49 Unique aggregates announced to Internet: 233598 Total ASes present in the Internet Routing Table: 45368 Prefixes per ASN: 10.38 Origin-only ASes present in the Internet Routing Table: 35324 Origin ASes announcing only one prefix: 16267 Transit ASes present in the Internet Routing Table: 5954 Transit-only ASes present in the Internet Routing Table: 161 Average AS path length visible in the Internet Routing Table: 4.6 Max AS path length visible: 35 Max AS path prepend of ASN ( 55644) 31 Prefixes from unregistered ASNs in the Routing Table: 720 Unregistered ASNs in the Routing Table: 194 Number of 32-bit ASNs allocated by the RIRs: 5284 Number of 32-bit ASNs visible in the Routing Table: 4090 Prefixes from 32-bit ASNs in the Routing Table: 12675 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 889 Number of addresses announced to Internet: 2653744084 Equivalent to 158 /8s, 44 /16s and 235 /24s Percentage of available address space announced: 71.7 Percentage of allocated address space announced: 71.7 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 95.1 Total number of prefixes smaller than registry allocations: 164648 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 111522 Total APNIC prefixes after maximum aggregation: 33881 APNIC Deaggregation factor: 3.29 Prefixes being announced from the APNIC address blocks: 113638 Unique aggregates announced from the APNIC address blocks: 47281 APNIC Region origin ASes present in the Internet Routing Table: 4884 APNIC Prefixes per ASN: 23.27 APNIC Region origin ASes announcing only one prefix: 1214 APNIC Region transit ASes present in the Internet Routing Table: 836 Average APNIC Region AS path length visible: 4.6 Max APNIC Region AS path length visible: 35 Number of APNIC region 32-bit ASNs visible in the Routing Table: 721 Number of APNIC addresses announced to Internet: 729894080 Equivalent to 43 /8s, 129 /16s and 76 /24s Percentage of available APNIC address space announced: 85.3 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-63999, 131072-133631 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 162649 Total ARIN prefixes after maximum aggregation: 81501 ARIN Deaggregation factor: 2.00 Prefixes being announced from the ARIN address blocks: 163562 Unique aggregates announced from the ARIN address blocks: 75922 ARIN Region origin ASes present in the Internet Routing Table: 15916 ARIN Prefixes per ASN: 10.28 ARIN Region origin ASes announcing only one prefix: 6011 ARIN Region transit ASes present in the Internet Routing Table: 1668 Average ARIN Region AS path length visible: 4.1 Max ARIN Region AS path length visible: 24 Number of ARIN region 32-bit ASNs visible in the Routing Table: 32 Number of ARIN addresses announced to Internet: 1073461888 Equivalent to 63 /8s, 251 /16s and 186 /24s Percentage of available ARIN address space announced: 56.8 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 393216-394239 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 119308 Total RIPE prefixes after maximum aggregation: 61150 RIPE Deaggregation factor: 1.95 Prefixes being announced from the RIPE address blocks: 122943 Unique aggregates announced from the RIPE address blocks: 78932 RIPE Region origin ASes present in the Internet Routing Table: 17520 RIPE Prefixes per ASN: 7.02 RIPE Region origin ASes announcing only one prefix: 8296 RIPE Region transit ASes present in the Internet Routing Table: 2844 Average RIPE Region AS path length visible: 5.1 Max RIPE Region AS path length visible: 30 Number of RIPE region 32-bit ASNs visible in the Routing Table: 2453 Number of RIPE addresses announced to Internet: 656599396 Equivalent to 39 /8s, 34 /16s and 233 /24s Percentage of available RIPE address space announced: 95.5 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 196608-200191 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 52561 Total LACNIC prefixes after maximum aggregation: 9998 LACNIC Deaggregation factor: 5.26 Prefixes being announced from the LACNIC address blocks: 57608 Unique aggregates announced from the LACNIC address blocks: 26745 LACNIC Region origin ASes present in the Internet Routing Table: 2032 LACNIC Prefixes per ASN: 28.35 LACNIC Region origin ASes announcing only one prefix: 548 LACNIC Region transit ASes present in the Internet Routing Table: 388 Average LACNIC Region AS path length visible: 4.8 Max LACNIC Region AS path length visible: 35 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 878 Number of LACNIC addresses announced to Internet: 142306864 Equivalent to 8 /8s, 123 /16s and 110 /24s Percentage of available LACNIC address space announced: 84.8 LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 262144-263679 plus ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 11584 Total AfriNIC prefixes after maximum aggregation: 2566 AfriNIC Deaggregation factor: 4.51 Prefixes being announced from the AfriNIC address blocks: 12240 Unique aggregates announced from the AfriNIC address blocks: 3973 AfriNIC Region origin ASes present in the Internet Routing Table: 672 AfriNIC Prefixes per ASN: 18.21 AfriNIC Region origin ASes announcing only one prefix: 198 AfriNIC Region transit ASes present in the Internet Routing Table: 137 Average AfriNIC Region AS path length visible: 4.7 Max AfriNIC Region AS path length visible: 24 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 6 Number of AfriNIC addresses announced to Internet: 48064000 Equivalent to 2 /8s, 221 /16s and 102 /24s Percentage of available AfriNIC address space announced: 47.7 AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4766 2937 11558 943 Korea Telecom (KIX) 17974 2711 903 89 PT TELEKOMUNIKASI INDONESIA 7545 2101 319 111 TPG Internet Pty Ltd 4755 1787 391 188 TATA Communications formerly 9829 1539 1242 48 BSNL National Internet Backbo 9498 1210 309 74 BHARTI Airtel Ltd. 9583 1187 90 513 Sify Limited 4808 1158 2128 342 CNCGROUP IP network: China169 7552 1158 1080 13 Vietel Corporation 24560 1092 380 165 Bharti Airtel Ltd., Telemedia Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3056 3688 56 BellSouth.net Inc. 22773 2188 2939 138 Cox Communications, Inc. 18566 2058 379 179 MegaPath Corporation 1785 2036 684 130 PaeTec Communications, Inc. 20115 1679 1653 610 Charter Communications 4323 1627 1102 420 Time Warner Telecom 701 1507 11145 782 MCI Communications Services, 30036 1382 312 580 Mediacom Communications Corp 7018 1333 17779 869 AT&T WorldNet Services 6983 1293 755 578 ITC^Deltacom Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8402 1835 544 17 OJSC "Vimpelcom" 34984 1363 244 223 TELLCOM ILETISIM HIZMETLERI A 20940 1113 406 847 Akamai Technologies European 31148 1005 44 18 FreeNet ISP 13188 888 99 49 TOV "Bank-Inform" 6849 861 356 30 JSC UKRTELECOM, 6830 771 2327 423 UPC Distribution Services 8551 759 370 41 Bezeq International 12479 675 798 55 Uni2 Autonomous System 35228 542 246 16 Avatar Broadband Limited Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 28573 3436 1783 83 NET Servicos de Comunicao S.A 10620 2640 428 242 TVCABLE BOGOTA 7303 1722 1144 233 Telecom Argentina Stet-France 18881 1538 844 20 Global Village Telecom 8151 1348 2840 416 UniNet S.A. de C.V. 11830 866 364 15 Instituto Costarricense de El 27947 846 93 92 Telconet S.A 6147 792 373 27 Telefonica Del Peru 6503 788 434 61 AVANTEL, S.A. 7738 780 1498 36 Telecomunicacoes da Bahia S.A Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 36998 1854 112 5 Sudanese Mobile Telephone (ZA 24863 884 338 30 LINKdotNET AS number 6713 554 633 26 Itissalat Al-MAGHRIB 8452 386 956 9 TEDATA 24835 294 144 9 RAYA Telecom - Egypt 3741 259 921 216 The Internet Solution 36992 227 501 29 Etisalat MISR 29571 224 17 12 Ci Telecom Autonomous system 15706 219 32 6 Sudatel Internet Exchange Aut 29975 192 668 21 Vodacom Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 28573 3436 1783 83 NET Servicos de Comunicao S.A 6389 3056 3688 56 BellSouth.net Inc. 4766 2937 11558 943 Korea Telecom (KIX) 17974 2711 903 89 PT TELEKOMUNIKASI INDONESIA 10620 2640 428 242 TVCABLE BOGOTA 22773 2188 2939 138 Cox Communications, Inc. 7545 2101 319 111 TPG Internet Pty Ltd 18566 2058 379 179 MegaPath Corporation 1785 2036 684 130 PaeTec Communications, Inc. 36998 1854 112 5 Sudanese Mobile Telephone (ZA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 6389 3056 3000 BellSouth.net Inc. 17974 2711 2622 PT TELEKOMUNIKASI INDONESIA 10620 2640 2398 TVCABLE BOGOTA 22773 2188 2050 Cox Communications, Inc. 4766 2937 1994 Korea Telecom (KIX) 7545 2101 1990 TPG Internet Pty Ltd 1785 2036 1906 PaeTec Communications, Inc. 18566 2058 1879 MegaPath Corporation 36998 1854 1849 Sudanese Mobile Telephone (ZA 8402 1835 1818 OJSC "Vimpelcom" Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 62734 UNALLOCATED 8.31.128.0/24 6939 Hurricane Electric 62773 UNALLOCATED 8.35.180.0/22 3356 Level 3 Communicatio 15132 UNALLOCATED 12.9.150.0/24 7018 AT&T WorldNet Servic 62719 UNALLOCATED 12.27.130.0/24 4323 Time Warner Telecom 13317 UNALLOCATED 12.44.10.0/24 7018 AT&T WorldNet Servic 23502 UNALLOCATED 12.44.44.0/24 7018 AT&T WorldNet Servic 17300 UNALLOCATED 12.45.103.0/24 209 Qwest Communications 17300 UNALLOCATED 12.45.110.0/24 701 MCI Communications S 16476 UNALLOCATED 12.46.27.0/24 7018 AT&T WorldNet Servic 14764 UNALLOCATED 12.108.237.0/24 7018 AT&T WorldNet Servic Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 100.100.0.0/24 4847 China Networks Inter-Exchange Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 23.90.128.0/18 27418 OUTOFWALL INC. 23.90.192.0/18 36086 Broad Communications Technolo 23.91.0.0/19 40676 Psychz Networks 23.91.14.0/24 40676 Psychz Networks 23.91.32.0/19 36315 Servpac Inc. 23.91.80.0/20 21560 Capital Technology Services G 23.91.96.0/20 40676 Psychz Networks 23.91.112.0/21 32475 MidPhase Inc. 23.91.160.0/19 36493 3757277 Canada Inc. (oa 295.c 23.91.160.0/22 36493 3757277 Canada Inc. (oa 295.c Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:11 /10:31 /11:92 /12:254 /13:474 /14:920 /15:1628 /16:12847 /17:6742 /18:11318 /19:22981 /20:32664 /21:35483 /22:50123 /23:43756 /24:249089 /25:832 /26:988 /27:467 /28:50 /29:79 /30:21 /31:0 /32:14 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 18566 2012 2058 MegaPath Corporation 36998 1819 1854 Sudanese Mobile Telephone (ZA 6389 1709 3056 BellSouth.net Inc. 8402 1533 1835 OJSC "Vimpelcom" 22773 1454 2188 Cox Communications, Inc. 30036 1230 1382 Mediacom Communications Corp 11492 1200 1241 Cable One 1785 1086 2036 PaeTec Communications, Inc. 6983 1034 1293 ITC^Deltacom 22561 968 1245 Digital Teleport, Inc Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:878 2:829 3:3 4:17 5:1007 6:21 8:615 12:1893 13:3 14:891 15:11 16:3 17:18 18:19 20:21 23:510 24:1741 27:1608 31:1488 32:45 33:2 34:5 36:81 37:1886 38:921 39:4 40:181 41:3186 42:246 44:14 46:2029 47:10 49:682 50:844 52:12 54:42 55:4 56:2 57:26 58:1154 59:576 60:373 61:1468 62:1209 63:1985 64:4371 65:2345 66:4137 67:2100 68:1103 69:3299 70:873 71:489 72:2036 74:2561 75:328 76:306 77:1166 78:1069 79:644 80:1294 81:1017 82:673 83:632 84:587 85:1252 86:420 87:1008 88:562 89:1598 90:150 91:5647 92:611 93:1599 94:2015 95:1593 96:509 97:342 98:1045 99:42 100:31 101:621 103:3520 105:528 106:142 107:214 108:535 109:1914 110:958 111:1103 112:595 113:810 114:752 115:1057 116:998 117:836 118:1160 119:1286 120:365 121:751 122:1874 123:1255 124:1353 125:1432 128:649 129:229 130:333 131:666 132:359 133:157 134:553 135:67 136:279 137:269 138:350 139:177 140:193 141:336 142:540 143:398 144:496 145:87 146:513 147:397 148:771 149:367 150:158 151:587 152:413 153:205 154:51 155:491 156:285 157:424 158:282 159:771 160:359 161:459 162:817 163:225 164:630 165:583 166:258 167:632 168:1047 169:127 170:1131 171:182 172:25 173:1605 174:687 175:517 176:1275 177:2359 178:1939 179:195 180:1587 181:791 182:1345 183:455 184:664 185:987 186:2643 187:1481 188:1845 189:1267 190:7238 192:7088 193:5413 194:4035 195:3350 196:1322 197:1014 198:4750 199:5480 200:6093 201:2532 202:8963 203:8921 204:4527 205:2641 206:2843 207:2831 208:4006 209:3618 210:3010 211:1569 212:2123 213:1983 214:897 215:92 216:5389 217:1685 218:626 219:321 220:1280 221:567 222:327 223:509 End of report

1 0

Re: latest Snowden docs show NSA intercepts all Google and Yahoo DC-to-DC traffic
by Scott Weeks 01 Nov '13

01 Nov '13

On Wed, Oct 30, 2013 at 1:46 PM, Jacque O'Lantern < jacque.olantern(a)yandex.com> wrote: > http://www.washingtonpost.com/world/national-security/nsa-infiltrates-links… --- brandon.galbraith(a)gmail.com wrote: From: Brandon Galbraith <brandon.galbraith(a)gmail.com> Google is speeding up its initiative to encrypt all DC to DC traffic, as this was suspected a short time ago. http://www.informationweek.com/security/government/nsa-fallout-google-speed… --------------------------------------------------------- This goes back to our conversation last June: http://mailman.nanog.org/pipermail/nanog/2013-June/thread.html#59352 now $189K may not seem as 'big'! ;-) (http://mailman.nanog.org/pipermail/nanog/2013-June/059371.html) scott

6 6

Re: Happy Birthday, ARPANET!
by Scott Weeks 30 Oct '13

30 Oct '13

--- dougb(a)dougbarton.us wrote: From: Doug Barton <dougb(a)dougbarton.us> lo ---------------------------------------- Just in case some folks thought this was a typo... https://en.wikipedia.org/wiki/ARPANET#ARPANET_deployed :-) scott

1 0

Happy Birthday, ARPANET!
by Jay Ashworth 30 Oct '13

30 Oct '13

The Paley Center for Media reminds us that on this day in 1969 at 2230 PST, the first link was turned up between UCLAs Sigma 7 and SRIs 940. A photo of the laboratory logbook is included in the Wikipedia article: en.m.wikipedia.org/wiki/ARPANET Cheers, - jra -- Sent from my Android phone with K-9 Mail. Please excuse my brevity.

7 8

DDoS Prevention for a Transit Provider
by Jack Stonebraker 30 Oct '13

30 Oct '13

I'm looking to pick the brain of any Engineers out there who have deployed a DDoS Prevention strategy for an MSO that also runs their own transport network. Recently, we have been seeing increasingly large spikes of traffic traversing our core. We have determined the destination to be arbitrary, but often it is some host (A Customer CPE) south of one of our CMTS's. While we enforce ingress and egress rate limits facing the customers, the core facing network is pretty wide open, allowing the BGP mesh to steer traffic as needed. Initially, we've been trying to do root analysis of the traffic makeup via JFLOW data to see if simple ACL's might be a temporary stop gap, but I also want to explore a more elegant, long term solution. The introduction of IPS's feels cost prohibitive, especially since they would need to performing control at the core, as we provide wholesale transport services on top of our enterprise services and that makes for a huge amount of homogenized traffic to be inspected. Generally, the core can weather these spikes. Instead, it's the edge end corresponding L3 to L2 Trunks that becomes saturated. Any thoughts or comments would be greatly appreciated. Thanks. JJ Stonebraker IP Network Engineering Grande Communications

2 1

NFSen plugin - ddd
by Andrew Jones 29 Oct '13

29 Oct '13

Hi All, Does anyone have a copy of the DDoS detection plugin for NFSen called ddd that they could send to me? According to a blog article [1] I read, it used to be available at [2]. It's not there, and I haven't had any luck trying to track it down the usual ways. If anyone is able to provide a copy, I'd appreciate it. Thanks, Jonesy [1] http://www.ccieflyer.com/2010-01-JasonRowley.php [2] http://www.synacknetworks.com/ddd/ddd.zip

3 3

VZ FIOS SoCo traceroute plea
by Jim Popovitch 29 Oct '13

29 Oct '13

Hello, A desperate plea, since apparently VZ still doesn't have a public routeserver. :-( I need a trace from a VZ FIOS connection in Southern California, to 96.44.148.54 (Quadranet, DFW). Private replies are welcome and encouraged. Thank you, sorry for the noise. -Jim P.

5 4