- NANOG - lists.nanog.org

RE: Newbie x Cisco IOS-XR x ROV: BCP to not harassing peer(s)
by Jakob Heitz (jheitz) 24 May '22

24 May '22

This attack will work very well until the victim starts advertising its prefix. The victim may not notice the fake advertisement because the fake advertisement will not reach the victim AS due to AS-path loop checking. So potential victims must advertise all prefixes that they register in RPKI or subscribe to an Internet monitoring service to detect the fake advertisements. And don't forget maxlen. You must advertise in BGP every prefix covered by maxlen. Regards, Jakob. -----Original Message----- From: Saku Ytti <saku(a)ytti.fi> On Tue, 24 May 2022 at 11:23, Max Tulyev <maxtul(a)netassist.ua> wrote: > To make a working hijack of the routed prefix (for sniffing traffic, > DDoS or something similar), you have to announce a more specific > prefix(es). It can be denied by RPKI. > > If you signed RPKI prefix is still unannounced - yes, somebody can > hijack it by forging the origin ASN - that's quite easy. This axiomatically assumes first come, first serve, which is obviously not complete understanding of BGP best path algorithm. -- ++ytti

2 1

Question re prevention of enumeration with DNSSEC (NSEC3, etc.)
by Amir Herzberg 24 May '22

24 May '22

Hi NANOGers, I have a small question re DNSSEC `proof of non-existence' records: NSEC, NSEC3 and the (dead?) NSEC5 proposal. <begin background (probably known to all/most):> NSEC3 was motivated as a method to prevent Zone enumeration, then Berenstein showed its defense is pretty weak. RFC7129 (White Lies) prevents this enumeration attack but requires online signing with the zone's key, which introduces another vulnerability and, of course, overhead of online-signing. NSEC5 was proposed to prevent enumeration without online signing, so arguably more secure than RFC7129, but has comparable online overhead and appears `dead'; the I-D expired (last update July'17). Note that NSEC3 also supports `opt-out', which reduces overhead for adoptions in domains with many non-adopting ASes, and I believe is not supported by NSEC. <end background> Questions: - Do you find zone enumeration a real concern? - Do you think the white-lies countermeasure is sufficient and fine, or do you have security and/or performance concern (or just think it's pointless)? - and the final question... would you think an alternative to NSEC5 which will be more efficient and simpler would be of potential practical importance, or just a nice academic `exercise'? I'm really unsure about these questions - esp. the last one - and your feedback may help me decide on the importance of this line of research. Just fun or of possible practical importance? thanks and peace, Amir -- Amir Herzberg Comcast professor of Security Innovations, Computer Science and Engineering, University of Connecticut Homepage: https://sites.google.com/site/amirherzberg/home `Applied Introduction to Cryptography' textbook and lectures: https://sites.google.com/site/amirherzberg/applied-crypto-textbook <https://sites.google.com/site/amirherzberg/applied-crypto-textbook>

14 25

RE: Newbie x Cisco IOS-XR x ROV: BCP to not harassing peer(s)
by Jakob Heitz (jheitz) 24 May '22

24 May '22

To address the risk of somebody exhausting your memory by dumping a ton of routes on you, we added two new options to "soft-reconfiguration inbound" in IOS-XR. RPKI-dropped-only Saves a copy of only the routes dropped by an RPKI validation-state test in neighbor-in route-policy. RPKI-tested-only Saves a copy of only the routes tested in an RPKI validation-state test in neighbor-in route-policy. This was released in 7.3.1 in Feb 2021. The bug CSCwb17937 was fixed in 7.5.2, just released. Fixed a few other things in 7.5.2 also. Tomoya, apologies that you had a terrible time with it. Regards, Jakob. -----Original Message----- Date: Wed, 11 May 2022 14:31:28 -0700 From: Randy Bush <randy(a)psg.com> To: Pirawat WATANAPONGSE via NANOG <nanog(a)nanog.org> Subject: Re: Newbie x Cisco IOS-XR x ROV: BCP to not harassing peer(s) and upstream(s) Message-ID: <m2lev7kb7z.wl-randy(a)psg.com> Content-Type: text/plain; charset=US-ASCII > Is setting 'Soft Reconfiguration' enough for me to keep ROV running? yes, should be. > If not, is there any other solution? yes. jakob says he has implemented https://datatracker.ietf.org/doc/draft-ietf-sidrops-rov-no-rr/, though i do not known in what xr image(s) randy

7 11

Weekly Global IPv4 Routing Table Report
by Routing Table Analysis Role Account 20 May '22

20 May '22

This is an automated weekly mailing describing the state of the Global IPv4 Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net. For historical data, please see https://thyme.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. IPv4 Routing Table Report 04:00 +10GMT Sat 21 May, 2022 BGP Table (Global) as seen in Japan. Report Website: https://thyme.apnic.net Detailed Analysis: https://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 898401 Prefixes after maximum aggregation (per Origin AS): 338496 Deaggregation factor: 2.65 Unique aggregates announced (without unneeded subnets): 432821 Total ASes present in the Internet Routing Table: 73208 Prefixes per ASN: 12.27 Origin-only ASes present in the Internet Routing Table: 62857 Origin ASes announcing only one prefix: 25798 Transit ASes present in the Internet Routing Table: 10351 Transit-only ASes present in the Internet Routing Table: 379 Average AS path length visible in the Internet Routing Table: 4.4 Max AS path length visible: 66 Max AS path prepend of ASN (267602) 58 Prefixes from unregistered ASNs in the Routing Table: 920 Number of instances of unregistered ASNs: 925 Number of 32-bit ASNs allocated by the RIRs: 39435 Number of 32-bit ASNs visible in the Routing Table: 32698 Prefixes from 32-bit ASNs in the Routing Table: 154112 Number of bogon 32-bit ASNs visible in the Routing Table: 234 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 550 Number of addresses announced to Internet: 3065123456 Equivalent to 182 /8s, 178 /16s and 18 /24s Percentage of available address space announced: 82.8 Percentage of allocated address space announced: 82.8 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.6 Total number of prefixes smaller than registry allocations: 305118 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 235350 Total APNIC prefixes after maximum aggregation: 66814 APNIC Deaggregation factor: 3.52 Prefixes being announced from the APNIC address blocks: 230530 Unique aggregates announced from the APNIC address blocks: 94912 APNIC Region origin ASes present in the Internet Routing Table: 12666 APNIC Prefixes per ASN: 18.20 APNIC Region origin ASes announcing only one prefix: 3622 APNIC Region transit ASes present in the Internet Routing Table: 1747 Average APNIC Region AS path length visible: 4.7 Max APNIC Region AS path length visible: 32 Number of APNIC region 32-bit ASNs visible in the Routing Table: 7862 Number of APNIC addresses announced to Internet: 774272768 Equivalent to 46 /8s, 38 /16s and 119 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-151865 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 261942 Total ARIN prefixes after maximum aggregation: 120183 ARIN Deaggregation factor: 2.18 Prefixes being announced from the ARIN address blocks: 261791 Unique aggregates announced from the ARIN address blocks: 126089 ARIN Region origin ASes present in the Internet Routing Table: 19046 ARIN Prefixes per ASN: 13.75 ARIN Region origin ASes announcing only one prefix: 6916 ARIN Region transit ASes present in the Internet Routing Table: 1938 Average ARIN Region AS path length visible: 3.8 Max ARIN Region AS path length visible: 35 Number of ARIN region 32-bit ASNs visible in the Routing Table: 4503 Number of ARIN addresses announced to Internet: 1292504064 Equivalent to 77 /8s, 10 /16s and 12 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 257788 Total RIPE prefixes after maximum aggregation: 117753 RIPE Deaggregation factor: 2.19 Prefixes being announced from the RIPE address blocks: 255188 Unique aggregates announced from the RIPE address blocks: 151009 RIPE Region origin ASes present in the Internet Routing Table: 28148 RIPE Prefixes per ASN: 9.07 RIPE Region origin ASes announcing only one prefix: 12033 RIPE Region transit ASes present in the Internet Routing Table: 3967 Average RIPE Region AS path length visible: 4.3 Max RIPE Region AS path length visible: 40 Number of RIPE region 32-bit ASNs visible in the Routing Table: 10708 Number of RIPE addresses announced to Internet: 713994624 Equivalent to 42 /8s, 142 /16s and 177 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 114731 Total LACNIC prefixes after maximum aggregation: 27608 LACNIC Deaggregation factor: 4.16 Prefixes being announced from the LACNIC address blocks: 114561 Unique aggregates announced from the LACNIC address blocks: 48615 LACNIC Region origin ASes present in the Internet Routing Table: 10950 LACNIC Prefixes per ASN: 10.46 LACNIC Region origin ASes announcing only one prefix: 2666 LACNIC Region transit ASes present in the Internet Routing Table: 2195 Average LACNIC Region AS path length visible: 4.9 Max LACNIC Region AS path length visible: 66 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8664 Number of LACNIC addresses announced to Internet: 176484608 Equivalent to 10 /8s, 132 /16s and 241 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-273820 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 27670 Total AfriNIC prefixes after maximum aggregation: 5449 AfriNIC Deaggregation factor: 5.08 Prefixes being announced from the AfriNIC address blocks: 35781 Unique aggregates announced from the AfriNIC address blocks: 11747 AfriNIC Region origin ASes present in the Internet Routing Table: 1632 AfriNIC Prefixes per ASN: 21.92 AfriNIC Region origin ASes announcing only one prefix: 561 AfriNIC Region transit ASes present in the Internet Routing Table: 326 Average AfriNIC Region AS path length visible: 5.1 Max AfriNIC Region AS path length visible: 34 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 961 Number of AfriNIC addresses announced to Internet: 107563520 Equivalent to 6 /8s, 105 /16s and 74 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 9808 9166 8884 43 CHINAMOBILE-CN China Mobile Communicati 7545 5898 789 695 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4709 4192 75 ERX-CERNET-BKB China Education and Rese 7552 3591 1330 19 VIETEL-AS-AP Viettel Group, VN 7713 3491 1039 53 TELKOMNET-AS-AP PT Telekomunikasi Indon 45899 3426 1880 56 VNPT-AS-VN VNPT Corp, VN 4766 2494 11121 601 KIXS-AS-KR Korea Telecom, KR 9498 2408 499 237 BBIL-AP BHARTI Airtel Ltd., IN 45090 2169 1438 79 TENCENT-NET-AP Shenzhen Tencent Compute 4755 2120 438 204 TATACOMM-AS TATA Communications formerl Complete listing at https://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 6414 10351 2772 AMAZON-02, US 11492 4510 299 660 CABLEONE, US 22773 3913 3067 353 ASN-CXA-ALL-CCI-22773-RDC, US 7155 3901 264 31 VIASAT-SP-BACKBONE, US 16625 3539 1821 2534 AKAMAI-AS, US 6327 3438 1318 62 SHAW, CA 749 2881 50795 2138 DNIC-AS-00749, US 30036 2634 374 120 MEDIACOM-ENTERPRISE-BUSINESS, US 209 2466 4961 421 CENTURYLINK-US-LEGACY-QWEST, US 20115 2250 3050 492 CHARTER-20115, US Complete listing at https://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 6799 1730 150 UNI2-AS, ES 9121 6720 1692 17 TTNET, TR 8551 3996 374 39 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 3973 3360 201 AKAMAI-ASN1, NL 39891 3819 220 34 ALJAWWALSTC-AS, SA 12389 2949 2273 908 ROSTELECOM-AS, RU 6849 2927 355 21 UKRTELNET, UA 9009 2489 249 1295 M247, GB 34984 2242 357 627 TELLCOM-AS, TR 47331 2087 328 1598 TTNET, TR Complete listing at https://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 10596 3396 568 Uninet S.A. de C.V., MX 10620 3472 518 743 Telmex Colombia S.A., CO 11830 2437 369 63 Instituto Costarricense de Electricidad 13999 1823 300 468 Mega Cable, S.A. de C.V., MX 6503 1447 355 527 Axtel, S.A.B. de C.V., MX 28573 1382 2333 255 CLARO S.A., BR 3816 1257 671 148 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 6147 1079 369 21 Telefonica del Peru S.A.A., PE 11664 1022 192 445 Techtel LMDS Comunicaciones Interactiva 11172 958 133 61 Alestra, S. de R.L. de C.V., MX Complete listing at https://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1653 393 21 LINKdotNET-AS, EG 24835 1441 497 29 RAYA-AS, EG 36992 1313 1519 263 ETISALAT-MISR, EG 36903 1199 545 114 MT-MPLS, MA 29571 947 65 57 ORANGE-COTE-IVOIRE, CI 36935 619 520 42 Vodafone-, EG 6713 611 1863 34 IAM-AS, MA 15399 516 51 36 WANANCHI-, KE 37342 465 32 1 MOVITEL, MZ 23889 423 232 16 MauritiusTelecom, MU Complete listing at https://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 10596 3396 568 Uninet S.A. de C.V., MX 9808 9166 8884 43 CHINAMOBILE-CN China Mobile Communicati 12479 6799 1730 150 UNI2-AS, ES 9121 6720 1692 17 TTNET, TR 16509 6414 10351 2772 AMAZON-02, US 7545 5898 789 695 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4709 4192 75 ERX-CERNET-BKB China Education and Rese 11492 4510 299 660 CABLEONE, US 8551 3996 374 39 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 3973 3360 201 AKAMAI-ASN1, NL Complete listing at https://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 9808 9166 9123 CHINAMOBILE-CN China Mobile Communications Grou 9121 6720 6703 TTNET, TR 12479 6799 6649 UNI2-AS, ES 7545 5898 5203 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4709 4634 ERX-CERNET-BKB China Education and Research Net 8551 3996 3957 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 7155 3901 3870 VIASAT-SP-BACKBONE, US 11492 4510 3850 CABLEONE, US 39891 3819 3785 ALJAWWALSTC-AS, SA 20940 3973 3772 AKAMAI-ASN1, NL Complete listing at https://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 65454 PRIVATE 1.9.206.0/24 4788 TMNET-AS-AP TM Net, Internet 398083 UNALLOCATED 5.133.124.0/24 399587 UT, US 33123 UNALLOCATED 8.10.69.0/24 11168 SCC, US 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 46887 LIGHTOWER, US 18604 UNALLOCATED 8.25.204.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 22442 HOU-PHONOSCOPE, US 54338 UNALLOCATED 8.33.241.0/24 6461 ZAYO-6461, US 395438 UNALLOCATED 8.42.206.0/24 3356 LEVEL3, US 395056 UNALLOCATED 8.45.133.0/24 3356 LEVEL3, US Complete listing at https://thyme.apnic.net/current/data-badAS Prefixes from the Special Purpose Address Registry (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at https://thyme.apnic.net/current/data-spar Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.129.40.0/24 Origin: 6461 ZAYO-6461, US 23.129.40.0/24 Transit: 2516 KDDI KDDI CORPORATION, JP 23.129.56.0/24 Origin: 6461 ZAYO-6461, US 23.129.56.0/24 Transit: 2516 KDDI KDDI CORPORATION, JP 23.129.136.0/24 Origin: 6461 ZAYO-6461, US 23.129.136.0/24 Transit: 2516 KDDI KDDI CORPORATION, JP 23.131.8.0/24 Origin: 3257 GTT-BACKBONE GTT, US 23.131.8.0/24 Transit: 2516 KDDI KDDI CORPORATION, JP 23.131.88.0/24 Origin: 3257 GTT-BACKBONE GTT, US 23.131.88.0/24 Transit: 2516 KDDI KDDI CORPORATION, JP Complete listing at https://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:13 /10:41 /11:100 /12:303 /13:590 /14:1210 /15:2059 /16:13526 /17:8287 /18:13889 /19:25188 /20:43913 /21:52216 /22:108436 /23:96172 /24:531636 /25:806 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 9121 5876 6720 TTNET, TR 12479 5775 6799 UNI2-AS, ES 8151 4323 10596 Uninet S.A. de C.V., MX 8551 3462 3996 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 11492 3415 4510 CABLEONE, US 6327 3250 3438 SHAW, CA 39891 3131 3819 ALJAWWALSTC-AS, SA 7155 2991 3901 VIASAT-SP-BACKBONE, US 22773 2918 3913 ASN-CXA-ALL-CCI-22773-RDC, US 6849 2778 2927 UKRTELNET, UA Complete listing at https://thyme.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1937 2:1021 3:154 4:6 5:3789 6:104 7:5 8:1566 9:1 11:173 12:1711 13:296 14:2382 15:201 16:41 17:384 18:161 20:212 21:4 22:188 23:5668 24:2315 25:6 27:2602 29:19 31:2424 32:95 34:4 35:78 36:1757 37:4424 38:2882 39:698 40:152 41:3966 42:1092 43:2175 44:291 45:16047 46:4139 47:322 49:1701 50:2158 51:108 52:1427 54:369 55:747 56:8 57:59 58:1812 59:1213 60:948 61:2259 62:2513 63:1946 64:5524 65:2313 66:4865 67:2975 68:1193 69:4172 70:1330 71:685 72:3052 74:2651 75:1392 76:579 77:2164 78:3914 79:3112 80:1989 81:1742 82:1494 83:1209 84:1357 85:3666 86:709 87:1959 88:2744 89:3280 90:531 91:7639 92:2017 93:2590 94:3488 95:4773 96:1309 97:349 98:993 99:736 100:76 101:1044 102:2050 103:29071 104:4387 105:463 106:874 107:2517 108:832 109:4258 110:2032 111:3287 112:2031 113:1553 114:1487 115:1976 116:1915 117:2510 118:2330 119:1839 120:1696 121:1076 122:2580 123:2120 124:1586 125:2127 128:1231 129:1104 130:976 131:2063 132:769 133:378 134:1900 135:290 136:880 137:862 138:2443 139:1504 140:861 141:1403 142:1288 143:1441 144:1201 145:346 146:1811 147:1491 148:2217 149:1729 150:851 151:1081 152:1849 153:459 154:3472 155:1418 156:1839 157:1234 158:1045 159:2168 160:2514 161:1275 162:3462 163:1273 164:1650 165:1605 166:721 167:1708 168:3781 169:840 170:4489 171:828 172:3175 173:3144 174:1021 175:1129 176:3589 177:4649 178:3545 179:2034 180:2284 181:3008 182:3250 183:1954 184:2375 185:19492 186:4295 187:3748 188:3882 189:3272 190:8860 191:1307 192:10993 193:8616 194:7000 195:4978 196:2954 197:2375 198:5999 199:6035 200:7496 201:5726 202:10490 203:10033 204:4546 205:3450 206:3764 207:3381 208:4019 209:4652 210:4324 211:2458 212:4056 213:3444 214:1149 215:67 216:6474 217:2668 218:1267 219:571 220:1940 221:979 222:843 223:2154 End of report

1 0

Any sign of supply chain returning to normal?
by Drew Weaver 20 May '22

20 May '22

I'm not sure if this is the right place for this discussion but I can't think of anywhere better to ask. Has anyone seen any progress whatsoever on supply chain issues with networking hardware? I've noticed that primary market lead times have been increasing and at the same time secondary market pricing has also been going higher at the same time, still. What have you seen?

22 29

MSA’s and network architecture
by Martin Hannigan 20 May '22

20 May '22

All, Why do MSA’s matter as related to network architecture? Thanks all — -M<

4 11

APNIC 54 Call for Presentations
by Muhammad Moinur Rahman 20 May '22

20 May '22

_____________________________________________________________________ APNIC 54 Conference - Call for Papers _____________________________________________________________________ The APNIC Program Committee is seeking presentations for the APNIC 54 Conference in Singapore (13-15 September 2022). We are looking for content that would suit technical sessions, tutorials, lightning talks, and panel discussions. Please note, the program committee is working to early deadlines so the APNIC 54 conference program can be announced. Speakers may present on stage in Singapore or remotely. APNIC 54 conference registration is free for all, however speakers must fund their own travel if presenting in-person. Key Dates Call for Presentations Opens 20 May 2022 First Round Acceptance 10 June 2022 Final Deadline for Submissions 01 July 2022 Final Round Acceptance 29 July 2022 Topics for conference sessions must be relevant to Internet operations and technologies. For possible areas of topics and submission details, please visit: https://conference.apnic.net/54/program/call-for-papers/ Prospective presenters should note that the majority of speaking slots will be filled well before the final submission deadline. The PC will retain a limited number of slots up to the final submission deadline for presentations that are exceptionally timely, important, or of critical operational importance. If you have any other ideas or proposals for panel or BoF sessions, please feel free to submit your ideas via the submission system. If you have any questions, please email the Program Committee at: apnic-pc(a)apnic.net The Program Committee members are: - Afifa Abbas, Banglalink - Achie Atienza, Globe Telecom - Cong Jen Ooi, MyNOG - Dave Phelan, APNIC - GZ Kabir, BDCOM - Kittinan Sriprasert, BKNIX - Masataka Matawari, JPIX - Minh Lay, KHNOG - Muhammad Moinur Rahman - Rahul Makhija, Esto Internet - Sanjeev Gupta, IPv6 Forum - Saqib Ali, University of Agriculture Faisalabad - Seung Lee, NTT Ltd. Australia - Sheryl (Shane) Hermoso, APNIC - Terence Sweetser, IO Networks, QUT, ISOC For more information about APNIC 54, please visit: https://conference.apnic.net/54 Regards, Muhammad Moinur Rahman, Chair Sheryl Hermoso, Co-Chair On behalf of APNIC 54 Program Committee

1 0

N85 Agenda + Swag + New Ep. of Internet Innovators w/ Perlman + More
by Nanog News 19 May '22

19 May '22

*NANOG 85 Agenda Now LIVE! * *Register Now for N85, Happening 6 - 8 JUN in Montréal* Save your favorite talks and download them into your calendars TODAY! Click on any talk title in the agenda to view the full abstract and speaker info. Then "💚" to save and download talks into your calendar. *VIEW AGENDA <https://www.nanog.org/events/nanog-85/nanog-85-agenda/>* *Coming Soon: New Episode of "Internet Innovators" * *Candid Interview w/ Iconic "Mother of the Internet" Radia Perlman * *"I would like more people to realize that if you are different in some way, you have some sort of skill that other people don't; you can probably figure out a way to make that useful." * Known as the "Mother of the Internet," this Internet icon is no stranger to standing out in a crowd in a heavily male-dominated industry. Perlman's dynamic, warm personality and fearless ability "to be different" has changed the digital landscape for the world. Watch a short clip now and then watch the full episode on NANOG TV, premiering, next Wed. 25 MAY 2022. *WATCH NOW <https://www.youtube.com/watch?v=sDHPTvDftTs>* *High-Speed Internet for All * *New Initiative will Provide Reduced Cost for Internet * *"We're bringing high-speed internet to everyone in America. Because everyone needs a connection to stay connected."* $45 billion will be invested to provide affordable, reliable, high-speed internet for everyone in America by the end of the decade. *LEARN MORE <https://www.internetforall.gov>* *Get your N85 Swag On!* Show off your NANOG pride with a t-shirt, sweatshirt, polo, cap, or laptop stickers. And don’t forget to tag us in your NANOG pics on Facebook, Instagram, Twitter, and LinkedIn so we can follow along! #WeAreNANOG *SHOP NOW <https://nanog.itemorder.com/shop/sale/> * *In-Person Attendees: Are you Ready to Cross the Border? * We will require that everyone attending NANOG 85 be fully vaccinated against COVID-19 no later than 23, MAY 2022. To enter or return to Canada as a fully vaccinated traveler, here are the things you need to know. *TRAVEL GUIDELINES <https://www.nanog.org/events/nanog-85/safety-travel/> *

1 0

Verizon NJ <-> Hetzner DE, routes via LA?
by Tomas Jonsson 19 May '22

19 May '22

Since yesterday, I've started to see an increase in latency between my self in NJ on Verizon FIOS and Hetzner in DE. Even using Verizon:s looking glass is giving me 250ms. This is an increase of about 150ms (Seems to be true for most of the US East Coast) A traceroute seems to tell me that the traffic is routed via LA, which could explain the increase in latency. Traceroute from Verizon looking glass page, sourcing Newark https://www.verizon.com/business/why-verizon/looking-glass/ traceroute to 144.76.94.10 (144.76.94.10), 30 hops max, 52 byte packets 1 0.et-10-3-0.GW7.LAX15.ALTER.NET (140.222.235.147) 61.052 ms 61.522 ms 61.063 ms 2 152.179.21.22 (152.179.21.22) 158.708 ms 158.683 ms 158.681 ms 3 * * pd900ccde.dip0.t-ipconnect.de (217.0.204.222) 263.187 ms 4 62.157.248.138 (62.157.248.138) 249.071 ms 248.570 ms 248.737 ms 5 * * * 6 ex9k2.dc10.fsn1.hetzner.com (213.239.229.62) 250.333 ms 252.488 ms 250.232 ms Does anyone have any more insight? (Verizon status pages says everything is fine, ofc)

2 1

Wave/Astound (AS11404) contact?
by Jessica Litwin 18 May '22

18 May '22

Hi list, If anyone has a valid contact for or is lurking from Wave/Astound (AS11404), would you please contact me off list? I'm having trouble getting a response from any of the ARIN addresses about stale PTR records causing issues, which I'd really like to get resolved. Thanks in advance // jkl

1 0