- NANOG - lists.nanog.org

NTP Server
by Brandon Kim 26 Oct '10

26 Oct '10

Hey guys: I wanted to open up this question regarding NTP server. I recalled someone had created a posting of this quite awhile back. >From a service provider/ISP standpoint, does anyone think that having a local NTP server is really necessary? I've asked some of my fellow engineers at work and many of them gives me the same response, "Can't we just use free ones out on the internet?" 1) How necessary do you believe in local NTP servers? Do you really need the logs to be perfectly accurate? 2) If you do have a local NTP server, is it only for local internal use, or do you provide this NTP server to your clients as an added service? 3) If you do have a local NTP server, do you have a standby local NTP server or do you use the internet as your standby server? Thoughts? Thanks in advance, and this list is such a valuable wealth of resource.... Brandon

29 43

DDOS attack via as702 87.118.210.122
by Serg Shubenkov 26 Oct '10

26 Oct '10

Hello, list. Please send me off-list abuse contact for as702. -- Serg Shubenkov, MAcomnet, Internet Dept., Head of Inet Department phone: +7 495 7969392/9079, +7 916 5316625, mailto:serg@macomnet.net icq uin: 101964103, Skype: serg.v.shubenkov

9 9

Cell sites
by harbor235 26 Oct '10

26 Oct '10

I am hoping someone can guide me to a internet resource that provides information on newly contstructed cell sites and what provider they are affiliated with? I did some google fu and found a couple sites like antennasearch,towersource etc .... still no joy, in all cases this new tower does not exist. thanx in advance, harbor235 ;}

3 2

re: Cell sites
by Nick Olsen 26 Oct '10

26 Oct '10

Well, I'm not sure if there is a database of who is actually colo'ed on a tower. But as for who a tower is owned by, The FCC database works. They also have a cool google earth file that will show you the location of all of them http://www.fccinfo.com/fccinfo_google_earth.php Nick Olsen Network Operations (855) FLSPEED x106 ---------------------------------------- From: "harbor235" <harbor235(a)gmail.com> Sent: Tuesday, October 26, 2010 11:47 AM To: "NANOG list" <nanog(a)nanog.org> Subject: Cell sites I am hoping someone can guide me to a internet resource that provides information on newly contstructed cell sites and what provider they are affiliated with? I did some google fu and found a couple sites like antennasearch,towersource etc .... still no joy, in all cases this new tower does not exist. thanx in advance, harbor235 ;}

1 0

RE: NTP Server
by Brandon Kim 26 Oct '10

26 Oct '10

Wow that is amazing and quite impressive that you even run the antenna lines....interesting......do you have to pay for the GPS service? > Subject: Re: NTP Server > To: brandon.kim(a)brandontek.com > From: jkrejci(a)usinternet.com > Date: Sun, 24 Oct 2010 15:52:03 +0000 > > Internet ntp is not as reliable as local ntp due to either reachability or tampering. We run a pair of GPS ntp servers with antennas ran to the roof of the building. We make them available to our customers as well as for our own use. > > > ------Original Message------ > From: Brandon Kim > To: nanog(a)nanog.org > Subject: NTP Server > Sent: Oct 24, 2010 10:34 AM > > > Hey guys: > > I wanted to open up this question regarding NTP server. I recalled someone had created a posting of this quite awhile back. > >From a service provider/ISP standpoint, does anyone think that having a local NTP server is really necessary? > > I've asked some of my fellow engineers at work and many of them gives me the same response, "Can't we just use free ones out on the internet?" > > 1) How necessary do you believe in local NTP servers? Do you really need the logs to be perfectly accurate? > 2) If you do have a local NTP server, is it only for local internal use, or do you provide this NTP server to your clients as an added service? > 3) If you do have a local NTP server, do you have a standby local NTP server or do you use the internet as your standby server? > > > Thoughts? > > Thanks in advance, and this list is such a valuable wealth of resource.... > > Brandon > > > > > > > Sent via BlackBerry from T-Mobile

3 2

.mil DNS problems?
by Antonio Querubin 25 Oct '10

25 Oct '10

Anyone else having trouble resolving .mil hostnames today? Antonio Querubin 808-545-5282 x3003 e-mail/xmpp: tony(a)lava.net

1 0

Change of dnswl.org operating model
by Matthias Leisi 25 Oct '10

25 Oct '10

Hi, As announced earlier, dnswl.org will change it's operating model. "Heavy users" (defined as those doing > 100'000 queries/24 hours on the public nameservers) and vendors of anti-spam products and services will need a paid subscription. We are now ready to implement the model and will gradually start to enforce it. Since we do not know the current users (all we have are IPs and sometimes hostnames), we will also need to "cut off" users if our attempts at identifying and notifying them fail. The "cut off" may have two of effects: 1) rsync suddenly stops working 2) queries on the public nameservers are refused. We may be able to reinstate access on a case by case basis. As usual, we can be reached at admins/at/dnswl.org (or office/at/dnswl.org for direct access to the people handling the subscriptions). All details are available from http://www.dnswl.org/ -- Matthias

1 0

New and Improved RIPE Registry Global Resource Service
by Mirjam Kuehne 25 Oct '10

25 Oct '10

[Apologies for duplicate emails] Hi, We have redesigned and improved the way we mirror other databases (Thanks to the RIPE NCC Database staff!). We now have a method of translating the operational data from other registries (for instance from other RIRs or the RADb) into the RIPE Database structure. This means the RIPE Database will contain the most complete set of operational data in (RIPE) RPSL format. Read more on RIPE Labs: http://labs.ripe.net/Members/Paul_P_/ripe-registry-global-resource-service Kind Regards, Mirjam Kuehne RIPE NCC

1 0

[WOB] RE: NTP Server
by Joel M Snyder 25 Oct '10

25 Oct '10

Complete WOB, but I whenever people start talking about NTP, I always start trying to figure out how I could justify one of these for the data center: http://www.inovasolutions.com/network-clocks/products/analog-network-clocks… (PoE, SNTP, ANALOG clock) jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 jms(a)Opus1.COM http://www.opus1.com/jms

1 0

Re: NTP Server
by Cutler James R 25 Oct '10

25 Oct '10

Routers are not a good choice for time servers as it complicates configuration and, to some extent, constrains deployment methodology for routers to be effective with time service. We don't run DNS on routers, it is a service. Time service via NTP is a service as well. The NTP daemon in a router is not implemented in hardware and requires CPU resources better dedicated to RIB management. In my experience, a reliable NTP peer group can be implemented on the same set of boxes as DNS (bind, etc.) with little or no impact on DNS performance. If you can count to four or more, you can make a reliable peer group of time servers. On Oct 24, 2010, at 8:15 PM, Brandon Kim wrote: > > Hi Sean: > > By local I meant in-house, on-site in our datacenter. As far as what applications could use our NTP service, I would > leave that up to each client and what they are running. For my own personal purposes, it would just be for log purposes. > (error logs, syslogs, etc etc) > > I have heard that routers don't make good NTP servers since they weren't designed to keep track of time. This, I have read > from a Cisco source. Can't remember where though. Or maybe they were just referring to older less powerful routers like 2500 series... > > Brandon > > > > > > >> Date: Sun, 24 Oct 2010 14:42:24 -0400 >> From: sean(a)donelan.com >> To: nanog(a)nanog.org >> Subject: Re: NTP Server >> >> On Sun, 24 Oct 2010, Brandon Kim wrote: >>> 1) How necessary do you believe in local NTP servers? Do you really >>> need the logs to be perfectly accurate? >>> 2) If you do have a local NTP server, is it only for local internal >>> use, or do you provide this NTP server to your clients as an added >>> service? >>> 3) If you do have a local NTP server, do you have a standby local NTP >>> server or do you use the internet as your standby server? >> >> First terminology. What do you mean by a local NTP server? >> >> Almost any Cisco/Juniper router, Unix server and some recent Windows >> servers have NTP server software and can synchronize clocks in your >> network. So you may already have a NTP server capable device. You just >> need to configure it, and give it a good source of time. It would be a >> Stratum 2 or greater NTP server because the good source of time is >> another NTP server. Left to itself, NTP is pretty good at keeping clocks >> in arbitrary networks synchronized with each other. But most people are >> also interested in synchronizing clocks with some official time source. >> >> The Network Time Protocol doesn't really have the notion of a "standby" >> server. It uses multiple time sources together, and works best with about >> four time sources. But for many end-systems, the Simple Network Time >> Protocol with a single time source may be sufficient. >> >> If you are in a regulated industry (stock broker, electric utility, 9-1-1 >> answering point, etc) there are specific time and frequency standards you >> must follow. >> >> On the other hand, are you are asking about a local clock receiver (radio, >> satellite, etc) for a stratum 1 NTP server? Clock receivers are getting >> cheaper, the problem is usually the antenna location. >> >> Or on the third hand, are you asking about local primary reference clock >> (caesium, rubium, etc) for a stratum 1 NTP server? These are still >> relatively expensive up to extremely expensive. >> >> Or on the fourth hand, are you a time scientist working to improve >> international time standards. If you are one of these folks, you already >> know. >> >> >> Most major ISPs use NTP across their router backbone, and incidently >> provide it to their customers. The local ISP router connected to your >> circuit probably has NTP enabled. >> >> Required accuracy is in the eye of the beholder. NASDAQ requires brokers >> to have their clocks synchronized within 3 seconds of UTC(NIST). 9-1-1 >> centers are required to have their clocks synchronized within 0.5 seconds >> of UTC. Kerberos/Active Directory requires clocks to be synchronized >> within 5 minutes of each other. >> >> If your log files have a resolution of 1 second, you probably won't see >> much benefit of sub-second clock precision or accuracy. If you are >> conducting distributed measurements with sub-microsecond resolution, you >> probably will want something more. >> >> >> > = James R. Cutler james.cutler(a)consultant.com

2 1