- NANOG - lists.nanog.org

Receive Digest
by Yasir Munir Abbasi 14 Jul '10

14 Jul '10

Dear, I always receive digest with volume number, where number of email correspondence shown. That is very grim for reading. Is there any possibility I can receive individual email correspondence. Thanks Yasir Munir Abbasi Senior Network Engineer Ciklum Pakistan 2nd floor, Software Technology Park II, Evacuee Trust Plaza F-5/1, Islamabad Tel + 92 51 2826114 Fax +92 51 2870756 Mob +92 333 5605512 EMail: yamu(a)ciklum.net<mailto:yamu@ciklum.net>

2 2

Re: Vyatta as a BRAS
by khatfield＠socllc.net 13 Jul '10

13 Jul '10

In that case you are entirely accurate. If you were to use Vyatta (linux-based) systems for this then you would likely need additional infrastructure to firewall or zone it to ensure it can't be hit directly. Depending on what all it has running and the configuration it could be firewalled off locally but you're right it wouldn't withstand like 'hardware-accelerated' as stated before. Sorry for the confusion :) ------Original Message------ From: Dobbins, Roland To: NANOG list Subject: Re: Vyatta as a BRAS Sent: Jul 13, 2010 1:37 PM On Jul 14, 2010, at 1:29 AM, <khatfield(a)socllc.net> wrote: > We were talking about routing though. I was talking about packeting the boxes directly, apologies for being unclear - that's what I meant when I said that the era of software-based edge boxes is long past. ----------------------------------------------------------------------- Roland Dobbins <rdobbins(a)arbor.net> // <http://www.arbornetworks.com> Injustice is relatively easy to bear; what stings is justice. -- H.L. Mencken

2 1

Re: Vyatta as a BRAS
by khatfield＠socllc.net 13 Jul '10

13 Jul '10

Routing. We can route that. If it were targeting the box itself it would depend if the attack were getting through. Certainly iptables can't handle something like that but pf does well with high PPS rates. If it were all 'DROP' traffic then likely higher. If it were hitting the box directly and getting past the firewall, yes it would be substantially lower. We were talking about routing though. ------Original Message------ From: Dobbins, Roland To: NANOG list Subject: Re: Vyatta as a BRAS Sent: Jul 13, 2010 12:56 PM On Jul 14, 2010, at 12:39 AM, <khatfield(a)socllc.net> <khatfield(a)socllc.net> wrote: > I haven't done real world testing with Vyatta but we consistently pass 750KPPS+ without the slightest hiccup on our FreeBSD routing systems. 750kpps packeting the box itself? Also, note that kpps is a small amount of traffic, compared to what even very small botnets can dish out. ----------------------------------------------------------------------- Roland Dobbins <rdobbins(a)arbor.net> // <http://www.arbornetworks.com> Injustice is relatively easy to bear; what stings is justice. -- H.L. Mencken

2 1

Route reflector/server appliance for access router aggregation
by Eric Morin 13 Jul '10

13 Jul '10

Hi I working on a solution to offload my current internet facing, and soon to be backbone, routers from terminating IBGP sessions from aggregation network routers. I currently have 4948s (pizza box version of the cat4500) in place, mostly bridging traffic, but some routing (OSPF, couple dozen SVIs with HSRP). The 4948s surpasses all solution requirements (I think) except when it comes to scaling the number of BGP sessions to 80-100. The obvious solution is to replace with a much larger platform (ASR1k, etc), which I am consider as an option but capital is the killer. A more economical idea is to pair the 4948s with a route reflector or server. I am looking for recommendations on platforms that I should consider. I have seen the presentation from NANOG48 on open source route server applications (Thanks!), and I am considering a home grown solution, but I want to also consider any other commercial appliances that we can drop in (with some lab work of course) and buy support services on. I looked at a Vyatta appliance (2500 looks good, but single power supply is disappointing). At each PoP I would plan on having two reflectors/servers clustered, each paired with one 4948. I have 7206 NPE-G2s coming out of service in the future that could perhaps be used, but the timing wont work. If anyone has a recommendation on a platform, or general criticism of the idea, please advise. Feedback, positive or negative, is always welcome. Thanks in advance Eric RR Morin

4 3

Haiti - Bahama Fiber optic
by Marshall Eubanks 13 Jul '10

13 Jul '10

Does anyone know if the BDSNi fiber from Port-au-Prince, Haiti, to the Bahamas has been restored to service after the Earthquake ? Regards Marshall

2 1

Hunter Newby / ISOC-NY Round 2 - Weds 7pm at NYU - poll for questions
by Joly MacFie 12 Jul '10

12 Jul '10

The Internet Society's New York Chapter (ISOC-NY) held a meeting with Hunter Newby, CEO of Allied Fiber, on Jun 28 2010. This was an interesting and wide ranging roundtable discussion on AF's plans to encircle the entire USA with a dark fiber ring with carrier neutral access at any point. As the meeting was held at short notice, regrettably our two associates with the greatest expertise in such matters Frank Coluccio and NYC Community Fiber's Lou Klepner were not able to be present. After I posted the audio on the ISOC-NY NoticeBoard AF requested that it be taken down pending review - not surprising as the discussion shot off on multiple tangents, mainly on the history of networking. It has now been decided, rather than attempt a coherent edit of 2+ hours of audio, to videotape a follow-up meeting commencing with a more formal presentation. Both Frank and Lou have promised to attend. This meeting will take place on Weds 14 July 2010 at NYU (7pm) – if interested in attending please RSVP to president(a)isoc-ny.org What we'd like to do is to get to the nitty gritty of the AF dark fiber model and it's possible application to the communities it is passing, and to ferret out any catches that are being glossed over. Newby has said he's trying to make an emulatable model - the more we can define it, the better for everyone. Hunter Newby has asked that we advise of him of any technical or other detailed questions in advance, to ensure that he has the answers on tap. Read up some background on http://www.telecomramblings.com/2010/06/industry-spotlight-allied-fibers-hu… I'd like to get those questions to him by end of day Tuesday. j -- --------------------------------------------------------------- Joly MacFie 218 565 9365 Skype:punkcast WWWhatsup NYC - http://wwwhatsup.com http://pinstand.com - http://punkcast.com Secretary - ISOC-NY - http://isoc-ny.org ---------------------------------------------------------------

1 0

Stratogent CoLo/DC Info
by Stefan Molnar 12 Jul '10

12 Jul '10

Anyoneone know anything about Stratogent ( www.stratogent.com )? They look to me as a Internap reseller with SaaS direction. I am being asked to have a meeting with them from one of my VP level guys. Thanks

2 1

Level3 - have they alive abuse team?
by Popov Max 12 Jul '10

12 Jul '10

Hello! I am an owner of the small telecom business in Eastern Europe. We have the provider independent network and own autonomous system number. Due to the financial crisis impact, we was off-line for some time. Now it is possible to return to business. But I found our network is already announced by Level3!!! I have dropped them a letter to abuse(a)level3.com, then got an auto-answer from the robot, after several days have repeat it... Level3 keep silence, and our network is announced now by /24 pieces! What is the good way to push these network hijackers more efficiently? ______________________________ Я пользуюсь почтой на Мете http://webmail.meta.ua

3 2

Contact at RNK Communications
by Nick Newman 12 Jul '10

12 Jul '10

Anyone have a contact at RNK communications? Off-list replies will be greatly appreciated. Cheers, Nick

1 0

U.S. Plans Cyber Shield for Utilities, Companies
by andrew.wallace 12 Jul '10

12 Jul '10

Article: http://online.wsj.com/article/SB10001424052748704545004575352983850463108.h… My opinion: http://online.wsj.com/article/SB10001424052748704545004575352983850463108.h… Andrew http://sites.google.com/site/n3td3v/

28 35