- NANOG - lists.nanog.org

The NANOG 95 CFP is open through 08-September-2025
by NANOG Program 13 Aug '25

13 Aug '25

NANOG Community at large, The NANOG Program Committee (PC) would like to remind you that we are accepting proposals through Monday, 08 September 2025, for in-person or live remote presentations at all sessions of NANOG 95 taking place in Arlington, TX on 27-29 October 2025. Sometimes, we deal with our own projects so regularly that they no longer seem cool or interesting to us - but they are to other people! Sometimes you want to present, but don’t know what other people want to learn about. During every NANOG Conference we ask everyone to answer the surveys and tell us what they want to hear about at a future conference. Some of the most recent answers are below. If you have a presentation on any of these general or specific topic areas, your community would love to hear from you! AI / Automation Topics - AI vs “traditional” datacenter networks - Automation approaches - Designing networks for AI traffic - Details on how to define and build AI agents - Network automation technologies - Early-career Professional Development topics - Basic hands-on tutorial track - More career development topics - Emerging technologies topics - More on net infra evolution and the drivers around it - New protocols, technologies, IETF work, etc. - Enterprise Topics - Enterprises interacting with ISPs and the Internet - Overlays - Performance - Open source/freely available tools to move data quickly and efficiently - More information about how to measure and improve network performance from hosts. - Routing / BGP Topics - BGP Route Maps - Integrating IPv6 - Interplanetary networking - More on BGP in data centers like the "lightweight traffic engineering" talk - RPKI, Routing - Peering - Residential Broadband - Segment routing - Researcher / Student Topics - Opportunity for students to network - Researcher / operator BoF / forum - Security Topics - AI-driven botnets and residential proxies - DDoS mitigation topics - Security and IOT - Soft skills - Attracting software developers to network development/engineering - Career development - Computing and internet history - Intro to NANOG mailing list and other operational communities - Risk-based financial decision making - Transitioning from technical roles to management - Troubleshooting and best practices - Layer 2 ethernet best practices - Network architecture or on-prem troubleshooting - Provisioning, troubleshooting - Workshops and How-Tos - More in-depth how-tos / more in-depth seminars - Physical hands on labs - Other - Edge computing - Hardware topics such as ASIC or specific software oriented network engineering - How to start an ISP from scratch - More cloud network specific topics - Starlink - - Submit your presentation proposal and abstract via the Program Committee Tool at: https://www.nanog.org/meetings/submit-presentation/ - Sign in with your Profile Account - Select the type of talk you propose to present, and complete the form Timeline for submission and proposal review: NANOG 95 Calendar of Events Date Event/Deadline September 08, 2025 DRAFT Presentation Slides Due September 22, 2025 Meeting Agenda Published October 20, 2025 FINAL Slides Due If you have any questions, please email the PC (nanogpc(a)nanog.org) and a representative will respond to you in a timely manner. Otherwise, submit your talk, tutorial, track, or panel proposal to the Program Committee Tool at your earliest convenience. We look forward to reviewing your submission! Sincerely, Adair Thaxton Program Committee Chair Sent on behalf of the NANOG PC

1 0

Speaking of DNS server software...
by William Herrin 12 Aug '25

12 Aug '25

Can anyone recommend software for an authoritative DNS server where the open source code is clean and well documented? I have an anycast-related experiment I'd like to put together and I want to be able to quickly shoehorn it into existing code. I looked at the source for ISC Bind but the code complexity is far beyond anything I'd want to touch for a casual experiment. Please don't use macros (#defines) to construct your C function _definitions_. I realize C allows it but it turns your code into a meta-language that no one else knows. Regards, Bill Herrin -- William Herrin bill(a)herrin.us https://bill.herrin.us/

20 30

Cloudflare blocking Cogent again
by Miller, Jon 11 Aug '25

11 Aug '25

We are seeing multiple Cloudflare sites blocked on our Cogent circuits. Three Cogent circuits from two clients in two states are blocked. I opened a ticket with Cogent, but the last time this happened, they just shrugged and said "not our fault." Are any other Cogent customers seeing this? Any advice on how to resolve? Here are the sites we see blocked by Cloudflare. https://www.americanbar.org/ https://www.ballys.com/ https://investor.fanatics.com/investor-relations/default.aspx Jon Miller Bose McKinney & Evans LLP This message and any attachments may contain legally privileged or confidential information, and are intended only for the individual or entity identified above as the addressee. If you are not the addressee, or if this message has been addressed to you in error, you are not authorized to read, copy, or distribute this message and any attachments, and we ask that you please delete this message and attachments (including all copies) and notify the sender. Delivery of this message and any attachments to any person other than the intended recipient(s) is not intended in any way to waive confidentiality or a privilege. All personal messages express views only of the individual sender, and may not be copied or distributed without this statement.

6 7

FYI: NANOG Mailing List IPV4 hosts are in Spamhaus RBL
by Lucien Hoydic 11 Aug '25

11 Aug '25

This from one of the mail servers I manage: H=lists.nanog.org [50.31.151.68] F=<nanog-bounces(a)lists.nanog.org> rejected RCPT <[x](mailto:nanog2@adns.net)xxxx@yyyyy.com>: host is listed in sbl.spamhaus.org Not sure anyone cares - mail still comes in via the IPv6 interface, but interesting that the listserv tries IPV4 1st.

4 5

N95 Keynote Announced! + Watch One of Our Most-Viewed Talks + Welcome to the...
by Nanog News 11 Aug '25

11 Aug '25

*** N95 Welcomes XKL CEO, Cisco Co-Founder Len Bosack as a Keynote* ------------------------------------------------------------ *He Will Present: "5G, Fiber, and Wifi. The IP Takeover is (Almost) Complete"* Len Bosack's talk offers both a historical lens and a forward-looking deep dive into how technologies like private 5G, mobile edge computing, and satellite can be layered with fiber and Ethernet to meet modern demands. *LEARN MORE* (https://nanog.org/events/nanog-95/) *** Welcome to the Silicon Prairie: Why Arlington + Dallas Belong on Every Network Builder’s Radar* ------------------------------------------------------------ *And the Best Part? You get to Experience it all Live at N95 in Arlington, TX (Oct 27–29)* Arlington, TX may be famous for stadiums and thrill rides, but just West of Dallas it’s quietly transforming into a next-gen tech powerhouse. In the heart of the “Silicon Prairie,” it’s where affordability, blazing fiber, and future-ready infrastructure collide. *READ MORE *( https://nanog.org/stories/welcome-to-the-silicon-prairie-why-arlington-dall… ) *** Make an Impact. Educate Your Community. Become a N95 Speaker!* ------------------------------------------------------------ Talk submissions will be accepted until Sept. 8. Don't wait! *MORE INFO* (https://nanog.org/program/call-presentations/) *** Video of the Week—A Not So Funny Thing Happened On The Way To Port 22* ------------------------------------------------------------ *Presented by Joel Jaeggli, **Fastly, * In one of our most viewed videos from N94, this two-part presentation recounts an incident in which the control and forwarding planes became misaligned. *WATCH NOW* ( https://www.youtube.com/watch?v=kxPgy_wTD14&list=PLO8DR5ZGla8gr-Hw8obs1A0wg… ) *** Stay Connected* ------------------------------------------------------------ http://www.facebook.com http://www.instagram.com/nanog_org/ http://www.linkedin.com/company/nanog/ https://www.twitter.com/nanog/ http://nanog.org Elizabeth Drolet Multimedia Content Director

1 0

Weekly Global IPv4 Routing Table Report
by Routing Table Analysis Role Account 08 Aug '25

08 Aug '25

This is an automated weekly mailing describing the state of the Global IPv4 Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG UKNOF, TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net. For historical data, please see https://thyme.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. IPv4 Routing Table Report 04:00 +10GMT Sat 09 Aug, 2025 IPv4 BGP Table (Global) as seen at Japan. Report Website: https://thyme.apnic.net Detailed Analysis: https://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 994587 Prefixes after maximum aggregation (per Origin AS): 385540 Deaggregation factor: 2.58 Unique aggregates announced (without unneeded subnets): 489001 Number of IPv4 prefixes with a valid ROA: 555410 Number of IPv4 prefixes with an invalid ROA: 1210 Number of IPv4 prefixes with no ROA: 437967 Total ASes present in the Internet Routing Table: 77222 Prefixes per ASN: 12.88 Origin-only ASes present in the Internet Routing Table: 66053 Origin ASes announcing only one prefix: 26995 Transit ASes present in the Internet Routing Table: 11169 Transit-only ASes present in the Internet Routing Table: 566 Average AS path length visible in the Internet Routing Table: 5.2 Max AS path length visible: 59 Max AS path prepend of ASN ( 37447) 54 Prefixes from unregistered ASNs in the Routing Table: 1100 Number of instances of unregistered ASNs: 1141 Number of 32-bit ASNs allocated by the RIRs: 47097 Number of 32-bit ASNs visible in the Routing Table: 38785 Prefixes from 32-bit ASNs in the Routing Table: 207320 Number of bogon 32-bit ASNs visible in the Routing Table: 111 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 429 Number of addresses announced to Internet: 3108536448 Equivalent to 185 /8s, 72 /16s and 128 /24s Percentage of available address space announced: 84.0 Percentage of allocated address space announced: 84.0 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.6 Total number of prefixes smaller than registry allocations: 324530 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 264899 Total APNIC prefixes after maximum aggregation: 78932 APNIC Deaggregation factor: 3.36 Prefixes being announced from the APNIC address blocks: 255770 Unique aggregates announced from the APNIC address blocks: 104966 APNIC Region origin ASes present in the Internet Routing Table: 14795 APNIC Prefixes per ASN: 17.29 APNIC Region origin ASes announcing only one prefix: 4514 APNIC Region transit ASes present in the Internet Routing Table: 1981 Average APNIC Region AS path length visible: 5.5 Max APNIC Region AS path length visible: 36 Number of APNIC region 32-bit ASNs visible in the Routing Table: 10305 Number of APNIC addresses announced to Internet: 750337024 Equivalent to 44 /8s, 185 /16s and 60 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-155961 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 292325 Total ARIN prefixes after maximum aggregation: 132618 ARIN Deaggregation factor: 2.20 Prefixes being announced from the ARIN address blocks: 293841 Unique aggregates announced from the ARIN address blocks: 141819 ARIN Region origin ASes present in the Internet Routing Table: 19268 ARIN Prefixes per ASN: 15.25 ARIN Region origin ASes announcing only one prefix: 7041 ARIN Region transit ASes present in the Internet Routing Table: 2002 Average ARIN Region AS path length visible: 4.6 Max ARIN Region AS path length visible: 36 Number of ARIN region 32-bit ASNs visible in the Routing Table: 5285 Number of ARIN addresses announced to Internet: 1349499136 Equivalent to 80 /8s, 111 /16s and 185 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-402332 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 54/8, 55/8, 56/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 277135 Total RIPE prefixes after maximum aggregation: 136618 RIPE Deaggregation factor: 2.03 Prefixes being announced from the RIPE address blocks: 276130 Unique aggregates announced from the RIPE address blocks: 178665 RIPE Region origin ASes present in the Internet Routing Table: 29004 RIPE Prefixes per ASN: 9.52 RIPE Region origin ASes announcing only one prefix: 12073 RIPE Region transit ASes present in the Internet Routing Table: 4043 Average RIPE Region AS path length visible: 5.2 Max RIPE Region AS path length visible: 49 Number of RIPE region 32-bit ASNs visible in the Routing Table: 12633 Number of RIPE addresses announced to Internet: 732113280 Equivalent to 43 /8s, 163 /16s and 41 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-216475 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 53/8, 57/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 124501 Total LACNIC prefixes after maximum aggregation: 29853 LACNIC Deaggregation factor: 4.17 Prefixes being announced from the LACNIC address blocks: 120811 Unique aggregates announced from the LACNIC address blocks: 49031 LACNIC Region origin ASes present in the Internet Routing Table: 11280 LACNIC Prefixes per ASN: 10.71 LACNIC Region origin ASes announcing only one prefix: 2657 LACNIC Region transit ASes present in the Internet Routing Table: 2556 Average LACNIC Region AS path length visible: 5.9 Max LACNIC Region AS path length visible: 56 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 9250 Number of LACNIC addresses announced to Internet: 171209728 Equivalent to 10 /8s, 52 /16s and 116 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-274844 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 34627 Total AfriNIC prefixes after maximum aggregation: 6793 AfriNIC Deaggregation factor: 5.10 Prefixes being announced from the AfriNIC address blocks: 47606 Unique aggregates announced from the AfriNIC address blocks: 14142 AfriNIC Region origin ASes present in the Internet Routing Table: 1950 AfriNIC Prefixes per ASN: 24.41 AfriNIC Region origin ASes announcing only one prefix: 710 AfriNIC Region transit ASes present in the Internet Routing Table: 382 Average AfriNIC Region AS path length visible: 6.1 Max AfriNIC Region AS path length visible: 59 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 1312 Number of AfriNIC addresses announced to Internet: 105135360 Equivalent to 6 /8s, 68 /16s and 61 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 9808 12672 8762 117 CHINAMOBILE-CN China Mobile Communication 7545 6140 837 623 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4812 4192 76 ERX-CERNET-BKB China Education and Resear 9498 4468 536 312 BBIL-AP BHARTI Airtel Ltd., IN 7552 3941 1332 27 VIETEL-AS-AP Viettel Group, VN 7713 3693 1044 66 TELKOMNET-AS-AP PT Telekomunikasi Indones 45899 3302 1869 101 VNPT-AS-VN VNPT Corp, VN 56046 2971 812 181 CMNET-JIANGSU-AP China Mobile communicati 24560 2921 864 513 AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., 4766 2308 11519 605 KIXS-AS-KR Korea Telecom, KR Complete listing at https://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 13769 41094 5298 AMAZON-02, US 11492 4795 318 661 CABLEONE, US 7155 3859 286 85 VIASAT-SP-BACKBONE, US 6327 3644 1320 82 SHAW, CA 174 3527 8769 850 COGENT-174, US 22773 3336 3029 165 ASN-CXA-ALL-CCI-22773-RDC, US 749 3222 54766 2473 DNIC-AS-00749, US 396982 3204 3858 436 GOOGLE-CLOUD-PLATFORM, US 16625 2927 1232 2174 AKAMAI-AS, US 4155 2911 227 1734 USDA-1, US Complete listing at https://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 7568 1711 153 UNI2-AS, ES 39891 4798 293 63 ALJAWWALSTC-AS, SA 20940 3913 3395 127 AKAMAI-ASN1, NL 9009 3858 366 2175 M247, RO 12389 3118 2315 867 ROSTELECOM-AS PJSC Rostelecom. Technical 34984 2404 361 584 TELLCOM-AS, TR 212238 2327 164 1692 CDNEXT, GB 13188 1605 100 37 TRIOLAN, UA 8452 1584 1852 14 TE-AS TE-AS, EG 203020 1519 191 670 HOSTROYALE, IN Complete listing at https://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 12321 3271 574 UNINET, MX 10620 3475 472 1052 Telmex Colombia S.A., CO 13999 2527 511 354 Mega Cable, S.A. de C.V., MX 11830 1986 369 64 Instituto Costarricense de Electricidad y 28573 1371 2433 261 Claro NXT Telecomunicacoes Ltda, BR 3816 1351 788 208 COLOMBIA TELECOMUNICACIONES S.A. ESP BIC, 11664 1210 278 33 Techtel LMDS Comunicaciones Interactivas 6147 1181 371 22 Telefonica del Peru S.A.A., PE 22884 1063 68 369 TOTAL PLAY TELECOMUNICACIONES SA DE CV, M 26615 1017 2487 55 TIM SA, BR Complete listing at https://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24835 1770 660 28 RAYA-AS, EG 29571 1484 94 32 ORANGE-COTE-IVOIRE, CI 36992 1417 1494 373 ETISALAT-MISR, EG 36903 1249 554 96 MT-MPLS, MA 24863 1239 389 20 LINKdotNET-AS, EG 37069 1086 1112 11 MOBINIL, EG 36935 972 520 43 Vodafone-, EG 36914 573 82 3 KENET-AS, KE 20011 568 154 212 INTERNET-SOLUTIONS, ZA 15399 537 57 59 WANANCHI-, KE Complete listing at https://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 13769 41094 5298 AMAZON-02, US 9808 12672 8762 117 CHINAMOBILE-CN China Mobile Communication 8151 12321 3271 574 UNINET, MX 12479 7568 1711 153 UNI2-AS, ES 7545 6140 837 623 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4812 4192 76 ERX-CERNET-BKB China Education and Resear 39891 4798 293 63 ALJAWWALSTC-AS, SA 11492 4795 318 661 CABLEONE, US 9498 4468 536 312 BBIL-AP BHARTI Airtel Ltd., IN 7552 3941 1332 27 VIETEL-AS-AP Viettel Group, VN Complete listing at https://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 9808 12672 12555 CHINAMOBILE-CN China Mobile Communications Grou 8151 12321 11747 UNINET, MX 12479 7568 7415 UNI2-AS, ES 7545 6140 5517 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4812 4736 ERX-CERNET-BKB China Education and Research Net 39891 4798 4735 ALJAWWALSTC-AS, SA 9498 4468 4156 BBIL-AP BHARTI Airtel Ltd., IN 11492 4795 4134 CABLEONE, US 7552 3941 3914 VIETEL-AS-AP Viettel Group, VN 20940 3913 3786 AKAMAI-ASN1, NL Complete listing at https://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 33123 UNALLOCATED 8.10.69.0/24 174 COGENT-174, US 46639 UNALLOCATED 8.17.66.0/24 701 UUNET, US 53775 UNALLOCATED 8.20.88.0/24 7029 WINDSTREAM, US 393266 UNALLOCATED 8.23.52.0/24 46887 CROWNCASTLE-AS46887, US 398074 UNALLOCATED 8.28.115.0/24 32787 PROLEXIC-TECHNOLOGIES-D 396894 UNALLOCATED 8.28.201.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 22442 HOU-PHONOSCOPE, US 54338 UNALLOCATED 8.33.241.0/24 3356 LEVEL3, US 46639 UNALLOCATED 8.38.73.0/24 3356 LEVEL3, US 395195 UNALLOCATED 8.38.115.0/24 3356 LEVEL3, US Complete listing at https://thyme.apnic.net/current/data-badAS Prefixes from the Special Purpose Address Registry (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at https://thyme.apnic.net/current/data-spar Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 14.192.20.0/22 Origin: 26658 HENGTONG-IDC-LLC, US 14.192.20.0/22 Transit: 21859 ZEN-ECN, US 23.140.216.0/24 Origin: 27176 DATAWAGON, US 23.140.216.0/24 Transit: 20278 NEXEON, US 23.141.0.0/24 Origin: 395350 RESERVED, ZZ 23.141.0.0/24 Transit: 11426 TWC-11426-CAROLINAS, US 23.142.24.0/24 Origin: 62164 HEYMMAN-2, CA 23.142.24.0/24 Transit: 64236 UNREAL-SERVERS, US 23.147.224.0/24 Origin: 27392 639-DATACENTERS, US 23.147.224.0/24 Transit: 3356 LEVEL3, US Complete listing at https://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:14 /10:41 /11:92 /12:298 /13:579 /14:1200 /15:2132 /16:13815 /17:8294 /18:13582 /19:24778 /20:44797 /21:52311 /22:112532 /23:103109 /24:616205 /25:792 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 8151 6544 12321 UNINET, MX 12479 6529 7568 UNI2-AS, ES 11492 3595 4795 CABLEONE, US 39891 3489 4798 ALJAWWALSTC-AS, SA 6327 3440 3644 SHAW, CA 7155 2818 3859 VIASAT-SP-BACKBONE, US 22773 2489 3336 ASN-CXA-ALL-CCI-22773-RDC, US 16509 2341 13769 AMAZON-02, US 30036 2295 2637 MEDIACOM-ENTERPRISE-BUSINESS, US 10620 2195 3475 Telmex Colombia S.A., CO Complete listing at https://thyme.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1779 2:1504 3:874 4:10 5:4702 6:157 7:6 8:1565 9:2 11:172 12:1336 13:468 14:2622 15:368 16:286 17:379 18:898 20:563 21:4 22:188 23:7766 24:2655 25:2 27:2734 29:19 31:3369 32:38 33:1 34:80 35:262 36:4222 37:4581 38:9535 39:967 40:251 41:4256 42:938 43:2675 44:377 45:18636 46:5086 47:340 49:1892 50:2049 51:589 52:1550 54:324 55:1111 56:11 57:274 58:2103 59:1349 60:1174 61:2890 62:3015 63:1786 64:5565 65:2147 66:4766 67:3090 68:1072 69:3897 70:1039 71:627 72:2861 74:2815 75:1506 76:610 77:2789 78:1898 79:1735 80:2220 81:2072 82:3221 83:1440 84:1925 85:3463 86:1109 87:2391 88:1314 89:4436 90:774 91:8417 92:2749 93:2956 94:4118 95:4429 96:1451 97:311 98:955 99:702 100:71 101:1221 102:3895 103:32238 104:5278 105:758 106:876 107:2654 108:1265 109:4195 110:2239 111:3575 112:2420 113:1579 114:1981 115:2154 116:2073 117:2680 118:2454 119:1944 120:2202 121:1382 122:2813 123:2242 124:1723 125:2913 126:91 128:1592 129:976 130:1305 131:2039 132:784 133:450 134:1589 135:355 136:1471 137:1189 138:2812 139:1595 140:1629 141:1531 142:1923 143:1954 144:1186 145:575 146:2181 147:2065 148:2703 149:2946 150:1280 151:2307 152:2099 153:526 154:7636 155:1863 156:3090 157:1929 158:1374 159:2529 160:3581 161:1905 162:3884 163:2246 164:1879 165:2453 166:1536 167:2025 168:3876 169:782 170:5189 171:999 172:4227 173:3400 174:913 175:1316 176:3737 177:4752 178:3970 179:2313 180:2587 181:4156 182:3589 183:2003 184:2074 185:21601 186:5213 187:4665 188:4269 189:4379 190:9516 191:1495 192:11362 193:9484 194:7787 195:5615 196:3288 197:3188 198:6242 199:8618 200:8211 201:6382 202:10604 203:10609 204:4614 205:3663 206:4559 207:3648 208:4283 209:5165 210:4912 211:2744 212:4595 213:3837 214:1028 215:50 216:6783 217:3275 218:1476 219:566 220:2150 221:1209 222:873 223:2796 End of report

1 0

Spoofer Report for NANOG for Jul 2025
by CAIDA Spoofer Project 08 Aug '25

08 Aug '25

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within usa, can. Inferred improvements during Jul 2025: none inferred Source Address Validation issues inferred during Jul 2025: ASN Name First-Spoofed Last-Spoofed 40676 AS40676 2016-08-29 2025-07-31 27364 ACS-INTERNET 2016-09-27 2025-07-18 63296 AWBROADBAND 2017-09-01 2025-07-31 22883 CONDENAST 2019-05-29 2025-07-30 21804 ACCESS-SK 2019-06-09 2025-07-30 22773 ASN-CXA-ALL-CCI-22773-RDC 2021-10-24 2025-07-30 26231 SFIA-ASN 2021-10-27 2025-07-26 12183 TALKIE-COMMUNICATIONS 2022-12-10 2025-07-30 400282 2023-04-27 2025-07-30 393577 SCCNET 2023-05-03 2025-07-31 61461 Airtek Solutions C.A. 2023-05-13 2025-07-31 20119 ARROW 2023-10-19 2025-07-25 394684 WISPERNET 2024-01-17 2025-07-25 27425 ASN-IDK-27425 2024-02-21 2025-07-17 393530 TLU 2024-05-22 2025-07-26 19935 CRRS 2024-05-29 2025-07-21 27523 DMB-ASN 2024-11-15 2025-07-30 54334 ROYA 2025-03-13 2025-07-30 273843 2025-04-02 2025-07-30 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block… Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Cisco ASR9902 SNMP polling ... is interesting
by Drew Weaver 08 Aug '25

08 Aug '25

Hello, We purchased an ASR9902 I think almost 2 years ago now intending to replace 4 routers with them. We had a history of lets just say design decision quirks with the router that prevented us from deploying it until recently. Then when we finally were able to implement it we've noticed something strange about how SNMP polling works in the router. If we poll SNMP on any interface that isn't one of the built in management ethernet interfaces the response takes 8x-16x longer to respond and exactly 62% of the polls time out. If we poll SNMP on the built-in MGMT interfaces the responses are still slower than the ASR9001s that we used to use but they don't seem to time out. I've had a TAC case with Cisco open over this for weeks now and they are now saying that the slow responses and the 62% poll timeouts are intentional and that they don't see any problem with the design. I understand the security implications of having control plane stuff responding on all interfaces but the part I don't understand is why bind the SNMP daemon to the non MGMT* interfaces at all if they are making a moral or ethical decision to not allow SNMP to work on non MGMT interfaces. Shouldn't it just not work at all then? Who came up with 62% timeout as the right number? The larger implication is that I still can't find another router from another vendor that does this. Has anyone else run into this or did you guys all avoid the ASR 9902 like we should have? Thanks, -Drew

23 62

While we're complaining about wacky wild Cisco ASR Stuff?
by Dan Mahoney (Gushi) 07 Aug '25

07 Aug '25

Note: This is an attempt at Humor that I hope to make my fellow graybeards go "wait, really?". It gave me a fun story to tell. But it may just read as old-man-yells-at-cloud-hardware-vendor. While we're posting fun problems about SNMP polling, where the "S" stands for "Simple" (?), and we're trying to walk 10's of megs of data out of a system, but the protocol only ever uses UDP, even though TCP is totally in the spec... Can someone please tell me which engineer at Cisco decided that the serial ports on some of their ASR920 would be: * not in an RJ45 shell (as we've seen since the C2501 days)... * nor a USB-micro that presents PL2032 serial port controller internally, that connects with a micro-to-usb-A (like everyone has lying around to charge their old stuff?), and like every other cisco device has had for 10 years. But instead, would be your choice of: * A usb "A" port, that presents a virtual serial port to the host PC, but which then requires a USB-A-TO-USB-A cable that nobody has, and is next to, and identical to, (but distinct from) the USB port where one can plug in flash drives... OR * A totally different port on the other side of the main ports that has the usual TXD, RXD, GND, CTS, RTS -- but ALSO inside a USB-A header, so you need some special kind of unobtanium breakout box (And another of those for the AUX connector.) === WHAT? If you don't believe me, go look up pictures of the Cisco ASR-920-24TZ-M I've had to walk people on the datacenter floor through splicing a serial console together with twisted wires, (stripped with the teeth as the lord intended), because of this, over a bad facetime connection -- because of course that's where the cellular and wifi signal's worst, inside the building with thousands of 10G connections to the internet. By cutting these corners, Cisco saved space for the RJ45 sitting right there for an "ALARM" connector, I'm sure that's a crucial thing that everyone who needs a small router like this will use. (My ASR9000's had it, my ASR1001X's didn't, but a 920...sure?) Clearly Cisco hired someone from the iPhone headphone port division (let's be "brave" and delete it!). Or the APC UPS DE-9 port division, where connecting a straight-through cable would cause it to drop the load. This is as bad as the ham radio a friend sent me, that has a USB charger that puts out 12V. (That one got some hot glue to make it a perma-cable, it's an otherwise fine radio). i've known some awesome people who worked at Cisco (including one of dayjob's board members, who just passed away. We miss you, Fred!). Jim Houts in the TME lab and Xander Thujis have been incredibly kind and helpful to us, in a bygone era. But this here, this is some temu-level stuff. I'll be here all week, try the veal. -Dan/W3ZUL -- --------Dan Mahoney-------- Techie, Sysadmin, WebGeek Gushi on efnet/undernet IRC FB: fb.com/DanielMahoneyIV LI: linkedin.com/in/gushi Site: http://www.gushi.org ---------------------------

4 3

Source Address Validation (SAV) Deployment and Operational Practices
by Amir Herzberg 04 Aug '25

04 Aug '25

Friends: uRPF and similar SAV techniques have been around for long, with new variants recently/being standardized by the IETF (eFP-uRPF, BAR-SAV). We have done simulations to evaluate the impacts of these variants. To improve our research, we set up a short, quick survey for network managers and administrators of ASNs. In this study, we want to understand the deployment challenges, operational considerations, adoption trends and operator concerns in this area. It would be amazing if you could respond to the survey, available in: https://forms.gle/3rRtCTa2xk217tyd6 We really appreciate your help. The form also contains an option to leave your email for us to send you our research results (paper, simulations, survey). Thanks a lot!! -- Amir Herzberg Comcast professor of Security Innovations, Computer Science and Engineering, University of Connecticut Homepage: https://sites.google.com/site/amirherzberg/home `Applied Introduction to Cryptography and Cybersecurity' textbook: https://sites.google.com/site/amirherzberg/crypto-cyber-book

1 1