- NANOG - lists.nanog.org

FW: Transparent 1Gig Ethernet over IP/Ethernet?
by chris burri 14 Jun '13

14 Jun '13

Hi all, I need to transparently (especially LACP frames) transport a gigabit Ethernet link with at least 1500 MTU over either IP or Ethernet. Jumbo frames are enabled on the transport backbone. While I need "full" (some encap overhead will be acceptable) GigE wire speed, encryption is unnecessary. Can anyone suggest a product -ideally some low-maintenance, high-reliability, perhaps ASIC-based hardware- that can do this? TIA Chris

1 0

GoDaddy DNS contact
by Erik Levinson 14 Jun '13

14 Jun '13

Hello, Unfortunately we have some domains where GoDaddy is used as the registrar and primary DNS, with secondary DNS provided by another provider. I've been e-mailing back and forth with GoDaddy support for over three days because for the apex of one domain their authoritative name servers are returning an extra A record which is not visible in their zone editor UI. This extra A record causes a GoDaddy "parking" page to be shown when browsing to the root of the domain. I'm sending them something that looks like this: $ dig +short THEDOMAINGOESHERE @pdns01.domaincontrol.com WHAT-I-ACTUALLY-CONFIGURED 50.63.202.40 They refuse to acknowledge that there's a problem and suggest we remove the secondary DNS provider because, according to them, the secondary DNS is what's randomly adding a GoDaddy parking service A record. I'm not including the actual domain above because we have private registration on it and it's used for an unbranded part of our service for resellers. If anyone knows a GoDaddy contact who could help, I'd appreciate getting the info. Thanks -- Erik Levinson CTO, Uberflip 416-900-3830 1183 King Street West, Suite 100 Toronto ON M6K 3C5 www.uberflip.com

1 0

Weekly Routing Table Report
by Routing Analysis Role Account 14 Jun '13

14 Jun '13

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG, TRNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 15 Jun, 2013 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 455698 Prefixes after maximum aggregation: 185776 Deaggregation factor: 2.45 Unique aggregates announced to Internet: 226123 Total ASes present in the Internet Routing Table: 44284 Prefixes per ASN: 10.29 Origin-only ASes present in the Internet Routing Table: 34691 Origin ASes announcing only one prefix: 16153 Transit ASes present in the Internet Routing Table: 5876 Transit-only ASes present in the Internet Routing Table: 150 Average AS path length visible in the Internet Routing Table: 4.6 Max AS path length visible: 55 Max AS path prepend of ASN ( 56484) 51 Prefixes from unregistered ASNs in the Routing Table: 844 Unregistered ASNs in the Routing Table: 367 Number of 32-bit ASNs allocated by the RIRs: 4791 Number of 32-bit ASNs visible in the Routing Table: 3717 Prefixes from 32-bit ASNs in the Routing Table: 10806 Special use prefixes present in the Routing Table: 25 Prefixes being announced from unallocated address space: 229 Number of addresses announced to Internet: 2642097068 Equivalent to 157 /8s, 123 /16s and 51 /24s Percentage of available address space announced: 71.4 Percentage of allocated address space announced: 71.4 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 94.6 Total number of prefixes smaller than registry allocations: 159877 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 109564 Total APNIC prefixes after maximum aggregation: 33495 APNIC Deaggregation factor: 3.27 Prefixes being announced from the APNIC address blocks: 111077 Unique aggregates announced from the APNIC address blocks: 45247 APNIC Region origin ASes present in the Internet Routing Table: 4852 APNIC Prefixes per ASN: 22.89 APNIC Region origin ASes announcing only one prefix: 1226 APNIC Region transit ASes present in the Internet Routing Table: 822 Average APNIC Region AS path length visible: 4.8 Max APNIC Region AS path length visible: 25 Number of APNIC region 32-bit ASNs visible in the Routing Table: 572 Number of APNIC addresses announced to Internet: 725150944 Equivalent to 43 /8s, 56 /16s and 236 /24s Percentage of available APNIC address space announced: 84.7 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 131072-133119 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 158888 Total ARIN prefixes after maximum aggregation: 80309 ARIN Deaggregation factor: 1.98 Prefixes being announced from the ARIN address blocks: 159495 Unique aggregates announced from the ARIN address blocks: 73943 ARIN Region origin ASes present in the Internet Routing Table: 15730 ARIN Prefixes per ASN: 10.14 ARIN Region origin ASes announcing only one prefix: 5982 ARIN Region transit ASes present in the Internet Routing Table: 1647 Average ARIN Region AS path length visible: 4.1 Max ARIN Region AS path length visible: 27 Number of ARIN region 32-bit ASNs visible in the Routing Table: 19 Number of ARIN addresses announced to Internet: 1081940032 Equivalent to 64 /8s, 125 /16s and 24 /24s Percentage of available ARIN address space announced: 57.2 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 393216-394239 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 117300 Total RIPE prefixes after maximum aggregation: 60050 RIPE Deaggregation factor: 1.95 Prefixes being announced from the RIPE address blocks: 120868 Unique aggregates announced from the RIPE address blocks: 78057 RIPE Region origin ASes present in the Internet Routing Table: 17215 RIPE Prefixes per ASN: 7.02 RIPE Region origin ASes announcing only one prefix: 8166 RIPE Region transit ASes present in the Internet Routing Table: 2833 Average RIPE Region AS path length visible: 5.1 Max RIPE Region AS path length visible: 29 Number of RIPE region 32-bit ASNs visible in the Routing Table: 2358 Number of RIPE addresses announced to Internet: 656316516 Equivalent to 39 /8s, 30 /16s and 152 /24s Percentage of available RIPE address space announced: 95.4 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 196608-199679 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 48304 Total LACNIC prefixes after maximum aggregation: 9400 LACNIC Deaggregation factor: 5.14 Prefixes being announced from the LACNIC address blocks: 52699 Unique aggregates announced from the LACNIC address blocks: 24771 LACNIC Region origin ASes present in the Internet Routing Table: 1960 LACNIC Prefixes per ASN: 26.89 LACNIC Region origin ASes announcing only one prefix: 590 LACNIC Region transit ASes present in the Internet Routing Table: 364 Average LACNIC Region AS path length visible: 4.8 Max LACNIC Region AS path length visible: 29 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 762 Number of LACNIC addresses announced to Internet: 131745576 Equivalent to 7 /8s, 218 /16s and 71 /24s Percentage of available LACNIC address space announced: 78.5 LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-62463, 262144-263167 plus ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 10741 Total AfriNIC prefixes after maximum aggregation: 2481 AfriNIC Deaggregation factor: 4.33 Prefixes being announced from the AfriNIC address blocks: 11330 Unique aggregates announced from the AfriNIC address blocks: 3893 AfriNIC Region origin ASes present in the Internet Routing Table: 632 AfriNIC Prefixes per ASN: 17.93 AfriNIC Region origin ASes announcing only one prefix: 189 AfriNIC Region transit ASes present in the Internet Routing Table: 129 Average AfriNIC Region AS path length visible: 4.8 Max AfriNIC Region AS path length visible: 25 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 6 Number of AfriNIC addresses announced to Internet: 46645504 Equivalent to 2 /8s, 199 /16s and 193 /24s Percentage of available AfriNIC address space announced: 46.3 AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4766 2945 11561 922 Korea Telecom (KIX) 17974 2545 855 91 PT TELEKOMUNIKASI INDONESIA 7545 1999 320 108 TPG Internet Pty Ltd 4755 1744 391 191 TATA Communications formerly 9829 1517 1205 40 BSNL National Internet Backbo 9583 1218 91 503 Sify Limited 7552 1162 1080 13 Vietel Corporation 4808 1144 2124 334 CNCGROUP IP network: China169 9498 1129 309 70 BHARTI Airtel Ltd. 24560 1077 394 164 Bharti Airtel Ltd., Telemedia Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3007 3691 75 bellsouth.net, inc. 18566 2065 382 184 Covad Communications 1785 1992 677 124 PaeTec Communications, Inc. 22773 1984 2927 122 Cox Communications, Inc. 20115 1665 1618 615 Charter Communications 4323 1625 1138 406 Time Warner Telecom 701 1535 11143 800 UUNET Technologies, Inc. 30036 1328 297 642 Mediacom Communications Corp 7018 1297 11039 830 AT&T WorldNet Services 11492 1218 216 359 Cable One Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8402 1667 544 16 Corbina telecom 34984 1276 244 222 BILISIM TELEKOM 2118 1069 97 13 EUnet/RELCOM Autonomous Syste 20940 891 312 695 Akamai Technologies European 13188 808 98 82 Educational Network 31148 802 40 25 FreeNet ISP 8551 772 370 44 Bezeq International 6830 766 2376 440 UPC Distribution Services 12479 677 786 59 Uni2 Autonomous System 34744 676 173 59 SC GVM SISTEM 2003 SRL Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 10620 2660 418 208 TVCABLE BOGOTA 28573 2655 1534 167 NET Servicos de Comunicao S.A 7303 1730 1154 225 Telecom Argentina Stet-France 8151 1283 2721 401 UniNet S.A. de C.V. 18881 995 844 20 Global Village Telecom 6503 865 434 65 AVANTEL, S.A. 27947 842 89 106 Telconet S.A 3816 715 306 85 Empresa Nacional de Telecomun 7738 698 1370 35 Telecomunicacoes da Bahia S.A 6147 665 374 25 Telefonica Del Peru Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 36998 1237 80 4 MOBITEL 24863 885 274 31 LINKdotNET AS number 6713 537 617 25 Itissalat Al-MAGHRIB 8452 455 956 9 TEDATA 24835 344 80 8 RAYA Telecom - Egypt 3741 261 922 219 The Internet Solution 15706 222 32 6 Sudatel Internet Exchange Aut 29571 205 17 9 Ci Telecom Autonomous system 12258 192 28 66 Vodacom Internet Company 29975 191 667 21 Vodacom Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3007 3691 75 bellsouth.net, inc. 4766 2945 11561 922 Korea Telecom (KIX) 10620 2660 418 208 TVCABLE BOGOTA 28573 2655 1534 167 NET Servicos de Comunicao S.A 17974 2545 855 91 PT TELEKOMUNIKASI INDONESIA 18566 2065 382 184 Covad Communications 7545 1999 320 108 TPG Internet Pty Ltd 1785 1992 677 124 PaeTec Communications, Inc. 22773 1984 2927 122 Cox Communications, Inc. 4755 1744 391 191 TATA Communications formerly Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 28573 2655 2488 NET Servicos de Comunicao S.A 17974 2545 2454 PT TELEKOMUNIKASI INDONESIA 10620 2660 2452 TVCABLE BOGOTA 4766 2945 2023 Korea Telecom (KIX) 7545 1999 1891 TPG Internet Pty Ltd 18566 2065 1881 Covad Communications 1785 1992 1868 PaeTec Communications, Inc. 22773 1984 1862 Cox Communications, Inc. 8402 1667 1651 Corbina telecom 4755 1744 1553 TATA Communications formerly Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 15132 UNALLOCATED 12.9.150.0/24 7018 AT&T WorldNet Servic 30031 UNALLOCATED 12.27.122.0/24 7018 AT&T WorldNet Servic 13317 UNALLOCATED 12.44.10.0/24 7018 AT&T WorldNet Servic 23502 UNALLOCATED 12.44.44.0/24 7018 AT&T WorldNet Servic 17300 UNALLOCATED 12.45.103.0/24 209 Qwest 17300 UNALLOCATED 12.45.110.0/24 701 UUNET Technologies, 16476 UNALLOCATED 12.46.27.0/24 7018 AT&T WorldNet Servic 14764 UNALLOCATED 12.108.237.0/24 7018 AT&T WorldNet Servic 33649 UNALLOCATED 12.111.112.0/24 19029 New Edge Networks 26064 UNALLOCATED 12.149.37.0/24 7018 AT&T WorldNet Servic Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 128.0.0.0/24 2876 Jump Management SRL 128.0.16.0/21 43568 RIPE Network Coordination Cen 128.0.24.0/21 41794 Altline LLC 128.0.46.0/23 39743 Mobimax Telecom SRL 128.0.53.0/24 60993 Totalsoft SA 128.0.54.0/24 60972 Carpatair SA 128.0.55.0/24 48571 SC efectRO SRL 128.0.57.0/24 60993 Totalsoft SA 128.0.58.0/23 9050 RTD-ROMTELECOM Autonomous Sys 128.0.60.0/24 9050 RTD-ROMTELECOM Autonomous Sys Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 62.61.220.0/24 24974 Tachyon Europe BV - Wireless 62.61.221.0/24 24974 Tachyon Europe BV - Wireless 64.185.224.0/24 27431 JTL Networks Inc. 64.185.225.0/24 27431 JTL Networks Inc. 64.185.226.0/24 27431 JTL Networks Inc. 64.185.227.0/24 27431 JTL Networks Inc. 64.185.228.0/24 27431 JTL Networks Inc. 64.185.229.0/24 27431 JTL Networks Inc. 64.185.230.0/24 27431 JTL Networks Inc. 64.185.231.0/24 27431 JTL Networks Inc. Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:17 /9:11 /10:30 /11:91 /12:250 /13:484 /14:899 /15:1600 /16:12706 /17:6653 /18:11160 /19:22176 /20:32045 /21:34349 /22:47590 /23:42254 /24:239425 /25:1305 /26:1660 /27:851 /28:46 /29:61 /30:18 /31:0 /32:17 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 18566 2016 2065 Covad Communications 6389 1726 3007 bellsouth.net, inc. 8402 1363 1667 Corbina telecom 22773 1292 1984 Cox Communications, Inc. 36998 1231 1237 MOBITEL 30036 1196 1328 Mediacom Communications Corp 11492 1180 1218 Cable One 1785 1062 1992 PaeTec Communications, Inc. 6983 1011 1138 ITC^Deltacom 10620 991 2660 TVCABLE BOGOTA Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:818 2:841 3:3 4:19 5:791 6:12 8:556 12:1923 13:3 14:836 15:11 16:3 17:10 20:17 23:370 24:1765 27:1473 31:1320 32:43 33:2 34:5 36:40 37:1855 38:874 39:2 40:170 41:2693 42:195 44:6 46:1929 47:2 49:660 50:734 52:11 54:35 55:5 57:26 58:1150 59:575 60:314 61:1405 62:1126 63:2022 64:4320 65:2162 66:4178 67:2054 68:1081 69:3264 70:786 71:488 72:1917 74:2475 75:323 76:303 77:1134 78:1051 79:614 80:1273 81:1007 82:654 83:577 84:541 85:1163 86:454 87:994 88:538 89:1748 90:147 91:5526 92:606 93:1667 94:1865 95:1653 96:513 97:346 98:1005 99:42 100:30 101:327 103:2790 105:517 106:146 107:208 108:514 109:1822 110:904 111:1053 112:544 113:813 114:709 115:964 116:963 117:799 118:1093 119:1313 120:379 121:730 122:1798 123:1220 124:1368 125:1377 128:639 129:223 130:326 131:662 132:341 133:148 134:267 135:67 136:222 137:242 138:359 139:193 140:212 141:332 142:538 143:383 144:500 145:93 146:507 147:384 148:686 149:369 150:157 151:506 152:419 153:188 154:42 155:408 156:268 157:396 158:279 159:732 160:343 161:447 162:420 163:221 164:598 165:497 166:273 167:597 168:1018 169:130 170:1052 171:181 172:21 173:1584 174:546 175:469 176:966 177:2057 178:1860 179:29 180:1460 181:465 182:1231 183:387 184:692 185:540 186:2293 187:1289 188:2150 189:1250 190:6835 192:6721 193:5667 194:4590 195:3430 196:1348 197:936 198:4482 199:5338 200:5988 201:2238 202:8827 203:8901 204:4514 205:2578 206:2799 207:2845 208:4046 209:3618 210:2956 211:1506 212:2186 213:1972 214:926 215:98 216:5235 217:1621 218:619 219:335 220:1281 221:557 222:322 223:456 End of report

1 0

Citrix Netscaler Rewrite Issue
by Jason Faraone 14 Jun '13

14 Jun '13

I've been sitting here frustrated for a bit this morning so hopefully someone here can shed some light... I have a Citrix Netscaler appliance (v10.0) and I would like to rewrite a URL - essentially when someone visits www.example.com<http://www.example.com>, I would like to redirect them to www.example.com/pls/apex/f?p=103:1<http://www.example.com/pls/apex/f?p=103:1> This seems to work well enough until I get to the question mark, at which point things fall apart. "The requested URL /pls/apex/f was not found on this server." Typically I would just escape the character and be done with it, but no amount of voodoo I've thrown at this thing can find the right combination of characters. Here is a screencap of what I have in place now: http://i.imgur.com/u4lms3b.png Can anyone shoot a suggestion my way off list? Knowing that I'm a few characters away from victory is maddening... Thanks, Jason

2 3

Bell Aliant- Outage!
by James Smith 14 Jun '13

14 Jun '13

Does anyone have any details on the massive Bell aliant customer internet outage which affected Fiber/DSL/3G/LTE services in New Brunswick, Atlantic Canada ? -- Sincerely; James Smith CEO, CEH, Security Analyst Email: james(a)smithwaysecurity.com CONFIDENTIALITY NOTICE: This communication with its contents may contain confidential and/or legally privileged information. It is solely for the use of the intended recipient(s). Unauthorized interception, review, use or disclosure is prohibited and may violate applicable laws including the Electronic Communications Privacy Act. If you are not the intended recipient, please contact the sender and destroy all copies of the communication. - This communication is confidential to the parties it was intended to serve -

1 0

huawei
by Randy Bush 14 Jun '13

14 Jun '13

we really should not be putting huawei kit into the backbone, there might be backdoors where they can spy on our traffic oh well, so much for that randy

13 15

Re: huawei (ZTE too)
by Bryan Fields 14 Jun '13

14 Jun '13

On 6/13/13 1:35 PM, Warren Bailey wrote: > They are a state controlled company. You think the PRC's party members dont > call the shots? I've been to Beijing for work.. I can assure you the > government has a very known presence through the private community. Often > times, graduates of their state run colleges enter the "private" sector to > help their collective needs. China is an odd place, but in my opinion often > they are underestimated. Look at their stealth plane, that's a good > starting point on their ability to borrow technology and implement it > quickly. It's about numbers over there, not sense. My objection to ZTE/Hauwei when I was at a cellular telco was just this. I said "there was no way I can agree with Chinese nationals having unfettered access to our network". Sure the CLI was crap/nonexistent and full of bugs, but I never thought the product was phoning home. I assumed there was a backdoor, like every other product and this was dealt with via ACL's and bastion boxes. I did not think highly of the product, and did not want to select it. However ZTE made the offer to put 6 support engineers in our main switch office 24/7 for the first year, and open an office down the street. Our SVP creamed himself over this level of "support" and they got the contract. It's an awesome idea, build gear that's cheap enough you can't say no to, and use the support personnel as spies. It provides a perfect cover story to cycle in loads of engineers. Only one or two does the support, the rest can observe/record/share the internal details of everything they see. They are playing our love of "But Wait There's More!". Give us everything at deep discounts or for free and receive direct access to the core of every major telecom company on the planet. For a few hundred million dollars the Chinese government has intelligence on anyone or anything world wide, and their agents are welcomed with open arms. -- Bryan Fields 727-409-1194 - Voice 727-214-2508 - Fax http://bryanfields.net

8 9

Re: huawei (ZTE too)
by Keith Medcalf 14 Jun '13

14 Jun '13

There is more than just y'all's in North America . --- Sent from Samsung Mobile -------- Original message -------- From: Jeroen Massar <jeroen(a)massar.ch> Date: To: david peahi <davidpeahi(a)gmail.com> Cc: NANOG list <nanog(a)nanog.org> Subject: Re: huawei (ZTE too)

2 1

Re: huawei
by Scott Weeks 14 Jun '13

14 Jun '13

--- rsk(a)gsp.org wrote: From: Rich Kulawiec <rsk(a)gsp.org> On Thu, Jun 13, 2013 at 06:10:39PM +0200, Randy Bush wrote: > we really should not be putting huawei kit into the backbone, there > might be backdoors where they can spy on our traffic This paper may be relevant to the topic at hand (h/t to Rob Slade): http://www.scribd.com/doc/95282643/Backdoors-Embedded-in-DoD-Microchips-Fro… <snip> Unfortunately, it doesn't appear possible to download this paper without signing up for scribd. Perhaps it's available elsewhere without such onerous requirements. --------------------------------- http://www.cl.cam.ac.uk/~sps32/ches2012-backdoor.pdf scott

2 1

Re: huawei (ZTE too)
by Scott Weeks 14 Jun '13

14 Jun '13

On 2013-06-13 14:28, david peahi wrote: > > Last I heard NANOG stands for North American Network Operators Group. > Anti-American comments are not welcome here.. --------------------------------------------- Smiley? Smiley? I'm looking for the :-) but I don't see one. How about "crazy eyes"? <8-) scott

2 1