- NANOG - lists.nanog.org

public consultation on root zone KSK rollover
by Joe Abley 08 Mar '13

08 Mar '13

Hi all, The following ICANN public comment period opened today: http://www.icann.org/en/news/public-comment/root-zone-consultation-08mar13-… The questions relate to DNSSEC rollover in the root zone, and hence are relevant to anybody doing DNSSEC validation. Your responses to the questions presented above would be most welcome. Please feel very free to pass on the link to anybody you think might be interested in this topic. Joe

1 0

RE: What Should an Engineer Address when 'Selling' IPv6 to Executives?
by Jerry Klonaper 08 Mar '13

08 Mar '13

Not sure how to avoid the legal entanglements my employer has placed in the IT teams path but I'll try to provide a real-world example without breaking confidentially agreements we all were required to sign for continued employment at a very large US-based bank. Our senior IT team had proposed a multi-year upgrade to v6 for our existing internal network, external services and connectivity to partner companies in 2009. It was fully funded in 2010, with staffing, vendor reqs and milestones set. At the end of 2012 our companies senior finance team reviewed the benefits and progress. They came away with a very simple view but alas one which could not be overcome. They held that our bank did not gain any strategic advantage by rolling out v6 but instead now had two entire security and software profiles to maintain. Hence our company has "mothballed" the project and has reassigned the entire team to other business needs. So, our globally known brand will only keep a nominal amount of ongoing public statements of being in support of v6 when in reality we are no longer going to deploy it until the market demands it. I have been employed here through two mergers and thought very hard about leaving, as did several of us that put a lot of effort into the project. But in the end, the job is secure, it is not my company to tell them they are wrong and I can't fault the logic no matter how much I wish. Upon reading this thread I'm dumbstruck at each of the arguments. None really matter. I had to agree, there was zero gain to be found for my company, today or in the immediate future, to proceed but there is plenty of downside. I read the zealots comments and know that they will claim we are fools. We, as a team, thought so too. But now several months removed, we all actually agree with the business/finance group. So there it is. I cannot give specifics, but a well-known global bank has turned out the lights for now on the v6 deployment. It wasn't due to the lack of selling to executives, as this thread contends can be done, but due to the lack of any business case that could be found. Jerry

7 7

What Should an Engineer Address when 'Selling' IPv6 to Executives?
by Mukom Akong T. 07 Mar '13

07 Mar '13

Dear experts, I've found myself thinking about what ground an engineer needs to cover in order to convince the executives to approve and commit to an IPv6 Deployment project. I think such a presentation (15 slides max in 45 minutes) should cover the following aspects: a) Set the strategic context: how your organisation derives value from IP networks and the Internet. b) Overview of the problem: IPv4 exhaustion c) Implications of IPv4 Exhaustion to your organization’s business model. d) Introduction of IPv6 as a solution to IPv4 exhaustion. e) Understanding the risks involved. f) How much will deploying IPv6 will cost. g) Call to action. I've detailed my thinking into each of these items at <How to ‘Sell’ IPv6 to Executive Management – Guidance for Engineers<http://techxcellence.net/2013/03/05/v6-business-case-for-engineers/> > My question and this is where I'd appreciate some input: a) To all you engineers out there who have convinced managers - what else did you have to address? b) To you who are managers, what else do you need your engineers to address in order for you to be convinced? Regards. As always, all opinions expressed are mine and do not necessarily represent the views of my employers, past or present. -- Mukom Akong T. http://about.me/perfexcellence | twitter: @perfexcellent ------------------------------------------------------------------------------------------------------------------------------------------ “When you work, you are the FLUTE through whose lungs the whispering of the hours turns to MUSIC" - Kahlil Gibran ------------------------------------------------------------------------------------------------------------------------------------------- -- Mukom Akong T. http://about.me/perfexcellence | twitter: @perfexcellent ------------------------------------------------------------------------------------------------------------------------------------------ “When you work, you are the FLUTE through whose lungs the whispering of the hours turns to MUSIC" - Kahlil Gibran -------------------------------------------------------------------------------------------------------------------------------------------

21 43

Comcast NOC Contact
by R W 07 Mar '13

07 Mar '13

Could someone from Comcast's NOC contact me off-list? We're seeing some traffic take a strange route on its way back to some Comcast prefixes from several of our systems. Thank you! -Rob

10 13

AT&T AM Director for New York
by Jason Lixfeld 07 Mar '13

07 Mar '13

To any AT&T sales folks listening, my account manager has not been very good at following up on multiple requests to quote increases in my IP transit commits. If any account manager directors or other tiers who these AMs might report to could contact me, I'd love to give you their name so you can light a fire under their ass. Thanks in advance.

1 0

Time Warner Cable YouTube throttling
by Randy Carpenter 07 Mar '13

07 Mar '13

We have recently been having some serious speed issues with YouTube on our home connections, which are all Time Warner Cable. Some searching on forums and such revealed a work around: Block 206.111.0.0/16 at the router. This makes speeds go from ~1 Mb/s to the full connection speed (30 Mb/s in my case). It appears that TWC is forcing traffic to this netblock over a congested link, or otherwise throttling it. Trying to communicate this to tech support results in the typical "Derrr, what?" Does anyone at Time Warner care to comment on WTF? thanks, -Randy

9 16

Re: Time Warner Cable YouTube throttling
by John Zettlemoyer 07 Mar '13

07 Mar '13

I've been seeing the same thing and was thinking it was me. Just to add to some of the results here... Verizon FIOS 1 32 ms 3 ms 5 ms l100.cmdnnj-vfttp-27.verizon-gni.net [98.110.113.1] 2 33 ms 6 ms 7 ms g0-3-3-7.cmdnnj-lcr-22.verizon-gni.net [130.81.183.186] 3 22 ms 22 ms 21 ms xe-4-1-8-0.ny5030-bb-rtr2.verizon-gni.net [130.81.209.84] 4 22 ms 21 ms 21 ms 0.so-0-0-0.xt2.nyc4.alter.net [152.63.17.21] 5 58 ms 24 ms 24 ms tengige0-5-4-0.gw8.nyc4.alter.net [152.63.18.206] 6 * 76 ms 76 ms google-gw.customer.alter.net [152.179.72.62] 7 25 ms 21 ms 24 ms 209.85.255.68 8 21 ms 34 ms 34 ms 209.85.252.242 9 30 ms 28 ms 31 ms 209.85.249.11 10 31 ms 29 ms 29 ms 72.14.236.149 11 38 ms 36 ms 36 ms 72.14.238.173 12 31 ms 29 ms 31 ms iad23s05-in-f8.1e100.net [74.125.228.8] Comcast 1 33 ms 15 ms 25 ms 68.38.220.1 2 8 ms 10 ms 15 ms xe-11-3-0-0-sur01.burlington.nj.panjde.comcast.net [68.85.128.237] 3 10 ms 9 ms 9 ms xe-13-0-0-0-ar03.audubon.nj.panjde.comcast.net [68.85.62.89] 4 14 ms 15 ms 15 ms pos-3-6-0-0-cr01.ashburn.va.ibone.comcast.net [68.86.92.161] 5 15 ms 13 ms 14 ms pos-0-0-0-0-pe01.ashburn.va.ibone.comcast.net [68.86.86.26] 6 * 23 ms 25 ms 75.149.231.62 7 17 ms 15 ms 14 ms 209.85.252.46 8 17 ms 16 ms 15 ms 72.14.238.173 9 17 ms 15 ms 16 ms iad23s05-in-f8.1e100.net [74.125.228.8] Our datacenter 1 <1 ms <1 ms <1 ms static.razorinc.net [70.34.208.101] 2 <1 ms <1 ms <1 ms 70.34.251.9 3 <1 ms <1 ms <1 ms xe-0-2-0.phi10.ip4.tinet.net [199.168.63.233] 4 2 ms 3 ms 2 ms xe-7-2-1.was14.ip4.tinet.net [89.149.181.174] 5 3 ms 3 ms 3 ms 72.14.213.61 6 4 ms 4 ms 4 ms 216.239.46.248 7 5 ms 5 ms 5 ms 72.14.238.173 8 5 ms 5 ms 5 ms iad23s05-in-f8.1e100.net [74.125.228.8] It would be nice if the ISPs and content providers could work out something when dealing with this much traffic and clearly needing to add capaicty. It's nice to dream too... John

6 6

Need a Level3 Contact
by Brian 07 Mar '13

07 Mar '13

Hi, I have a prefix that isn't being accepted by Level3. Can someone from Level3 could contact. Off list is fine. -brian

1 0

Dreamhost/AS26347 unauthorized bgp announcement
by Matsuzaki Yoshinobu 07 Mar '13

07 Mar '13

According to RIPE RIS, AS26347 announced a bunch of prefixes again. - http://www.ris.ripe.net/dashboard/26347 First suspicious announcement was started 2013-03-06 07:52:40 UTC, and last seen 2013-03-06 08:33:56 UTC. 195 prefixes total. It seems these unauthorized announcements have the same profile as before - AS26347 shrinks the prefix lenght of their received prefix somehow upto /20, and re-originates the prefix with origin AS26347. Any known bugs? Regards, ----- Matsuzaki Yoshinobu <maz(a)iij.ad.jp> - IIJ/AS2497 INOC-DBA: 2497*629

5 6

Re: Time Warner Cable YouTube throttling
by Derek Ivey 07 Mar '13

07 Mar '13

On Mar 6, 2013, at 10:30 PM, "Robert M. Enger" <enger(a)enger.us> wrote: > > 1) You can use wireshark or other monitor to determine the IP address that your video stream is originating from. I just used the Developer Tools in Google Chrome to figure this out. > > 2) Upstream traceroutes to that address are probably not of that much interest. The downstream path (carrying the video from the server to your house) can follow a different path. Downstream traceroute is what is needed. Good point. > > 3) Before pointing fingers at anyone, you need to get your own house (literally) in order. Get off wifi, that is just muddying the water. Shutdown wifi so there are no other users. Get off MocA. You need to be all hard-wired and totally error free and reliable in your local LAN before you can cast stones at carriers and/or inter-carrier interconnection Agreed. My trace routes were straight from my pfsense firewall, which is connected to my ONT via ethernet (I specifically asked Verizon to turn the ethernet port on instead of MoCA when I had it setup over 2 years ago). Derek

1 0