- NANOG - lists.nanog.org

Spoofer Report for NANOG for Mar 2022
by CAIDA Spoofer Project 08 Apr '22

08 Apr '22

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within usa, can. Inferred improvements during Mar 2022: ASN Name Fixed-By 36289 VALORCHRISTIANHIGHSCHOOL-01 2022-03-11 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Mar 2022: ASN Name First-Spoofed Last-Spoofed 54825 PACKET 2016-04-15 2022-03-14 209 CENTURYLINK-US-LEGACY-QWEST 2016-08-16 2022-03-24 6128 CABLE-NET-1 2016-09-03 2022-03-14 20412 CLARITY-TELECOM 2016-09-30 2022-03-31 6181 FUSE-NET 2016-10-10 2022-03-25 1403 EBOX 2016-11-12 2022-03-17 22898 ATLINK 2016-12-16 2022-03-30 812 ROGERS-COMMUNICATIONS 2017-01-04 2022-03-15 701 UUNET 2017-06-14 2022-03-24 63296 AWBROADBAND 2017-09-01 2022-03-22 33452 RW 2018-09-19 2022-03-26 8047 GCI 2019-04-11 2022-03-10 5078 ONENET-AS-1 2020-04-06 2022-03-22 398836 NP-NETWORKS 2021-03-12 2022-03-25 56207 Converge 2021-03-26 2022-03-31 22191 WILKES-COMM 2021-06-25 2022-03-13 399318 2021-08-29 2022-03-15 63457 EMPIRE-CONNECT 2021-09-08 2022-03-31 212934 AS_POTVIN 2021-10-03 2022-03-22 22773 ASN-CXA-ALL-CCI-22773-RDC 2021-10-24 2022-03-31 394437 PSLIGHTWAVE 2021-12-02 2022-03-12 62887 WHITESKY-COMMUNICATIONS 2021-12-03 2022-03-17 54201 WEWORK-MANAGEMENT-LLC 2021-12-16 2022-03-23 7896 NU 2022-01-12 2022-03-11 31939 GM-ATL 2022-03-03 2022-03-03 36289 VALORCHRISTIANHIGHSCHOOL-01 2022-03-08 2022-03-10 399065 DEFASTLINK 2022-03-12 2022-03-27 19752 HYDROONETELECOM 2022-03-13 2022-03-13 398371 ORANGE-COUNTY-BROADBAND-AUTHOR 2022-03-13 2022-03-13 32035 CCDT 2022-03-14 2022-03-14 47027 SEASIDE-COMM 2022-03-22 2022-03-22 33696 NEXTARRAY-ASN-01 2022-03-30 2022-03-30 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block… Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

"Permanent" DST
by Jay R. Ashworth 08 Apr '22

08 Apr '22

In a unanimous vote today, the US Senate approved a bill which would 1) Cancel DST permanently, and 2) Move every square inch of US territory 15 degrees to the east. My opinion of this ought to be obvious from my rhetoric. Hopefully, it will fail, because it's likely to be the end of rational time worldwide, and even if you do log in UTC, it will still make your life difficult. I'm poleaxed; I can't even decide which grounds to scream about this on... Hopefully, the House or the White House will be more coherent in their decision on this engineering construct. Cheers, -- jra -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://www.bcp38.info 2000 Land Rover DII St Petersburg FL USA BCP38: Ask For It By Name! +1 727 647 1274

53 97

gitlab contact?
by Dave Taht 07 Apr '22

07 Apr '22

Most cloud operations websites are kept internal. gitlab's is not, which is pretty cool. In looking over this issue, today: https://gitlab.com/gitlab-com/gl-infra/production/-/issues/6768 They are tracking tcp syn retransmits, but not drops or other congestion control related info. And also using: sysctl net.ipv4.tcp_notsent_lowat=4294967295; where we've been getting good results with that set as low as 32k. Anyone know anyone at gitlab? -- I tried to build a better future, a few times: https://wayforward.archive.org/?site=https%3A%2F%2Fwww.icei.org Dave Täht CEO, TekLibre, LLC

2 1

Hackathon Registration Opens + Scholarship Applications Available + More
by Nanog News 07 Apr '22

07 Apr '22

*Hackathon Registration is Now Open! * *Hack Your Way into Fun, Networking + More* *NANOG 85 Hackathon Dates* *Intro/Tutorial/Team Formation:* Wed., May 25 *Hacking:* Sat. + Sun., Jun. 4 - 5 *Theme:* Projects that Make a Difference The NANOG 85 Hackathon will make tools work better for ordinary users. For this Hackathon, we are looking to expand the event's reach to bring in non-developers who have an itch to get something fixed. *REGISTER NOW <https://www.nanog.org/events/nanog-85-hackathon/>* *Scholarship Applications are Now Available* NANOG will award two $10,000 scholarships this year (2022) to eligible undergrad and graduate students in network, electrical or computer engineering, computer science, and telecommunications. *The program deadline to submit your application is 3:00 p.m. Central Time on May 18, 2022.* *MORE INFO <https://www.nanog.org/outreach/higher-education/nanog-scholarship-program/>* *2022 Sponsorships Available * *Partner in Building the Internet of Tomorrow * The Internet, as we know it, was invented by a group of young, progressive rebels who dared to think differently. Support NANOG in our mission in the ongoing advancement of an open, secure, and robust Internet. *2022 Sponsorship opportunities are now available! * *MORE INFO <https://www.nanog.org/events/sponsorship/sponsorship-opportunities/>*

1 0

AT& T peering Contact?
by Justin Wilson (Lists) 07 Apr '22

07 Apr '22

Folks, I need an ATT Wireless/ATT Mobility peering contact. The emails on their peeringdb entries bounce back as non existent. Have a problem with a prefix that works everywhere except when folks are on AT&T LTE. Justin Wilson j2sw(a)mtin.net — https://j2sw.com (AS399332) https://blog.j2sw.com - Podcast and Blog

1 0

NANOG 85 Hackathon Call for Projects
by Valerie Wittkop 07 Apr '22

07 Apr '22

We need you! The NANOG Hackathon Committee is calling for project developers/maintainers to participate in the NANOG 85 Hackathon <https://www.nanog.org/events/nanog-85-hackathon/>. Wednesday, May 25, 2022 - Intro/Tutorial/Team Formation (via Zoom) Saturday + Sunday, June 4-5, 2022 - Hacking (via Zoom and/or in Montréal) An essential part of NANOG conferences, our Hackathons are designed to be both fun and engaging, as well as provide a platform that builds community and fosters greater networking and programming knowledge. NANOG Hackathons are hands-on, and educational at their core — directly supporting the most critical aspects of our mission. All levels are welcome to participate, and as always, Hackathon registration <https://www.nanog.org/events/nanog-85-hackathon/registration/> is free. Theme: Projects that Make a Difference The NANOG 85 Hackathon will focus on the theme of making tools work better for ordinary users. For this Hackathon, we are looking to expand the reach of the event to bring in non-developers who have an itch to get something fixed. So this is your opportunity to work with other community members to fix that itch and make life better for everyone. The improvements can include better tutorials, documentation, cookie-cutter templates that people can build on when accessing an API - in short, stuff that you would like to see that enables better use of the tools you use or want to use. Of course, we will welcome our usual range of project proposals if you want to dive deep into the code and hack in a communal environment, so send in those proposals as well. We are asking those who wish to bring a project be prepared to generally cover the items listed here. - Provide an intro/mini-tutorial on the skills needed to successfully hack on said project - Use time between the intro (May 25th) and the Hackathon (June 4-5) to be available for introductions and general questions relating to the project - Create a “ReadMe” file or webpage with the following information - Languages used in the project - Good first issues (if using GitHub on the project) - How to set-up/run tests in the development environment - How to use sandbox environment (if you have one) - Documentation updates/issues that need review/correcting In exchange for your work, NANOG will offer you a complimentary registration for NANOG 85 taking place in Montréal June 6-8, 2022. Learn more about the Hackathon schedule here: https://www.nanog.org/events/nanog-85-hackathon/ If you are interested in bringing a project to the NANOG 85 Hackathon, please send a message to hackathon-support(a)nanog.org. We look forward to working with you! -- *Valerie Wittkop* Program DirectorOn behalf of the NANOG Hackathon Committee

1 0

IP Multicast Persistent Duplicate Packet Issue
by Roman Islam 06 Apr '22

06 Apr '22

Hi Everyone, Has anyone experienced a TETRA Radio application issue if underlying IP multicast transport sends persistent duplicate packets? Here is my scenario as below: PIM is running on the MPLS L3 VPN environment. C multicast is running on a single VRF (TETRA) only. Source is running behind a dual home PE. HSRP, PIM DR path is via PE1 to the source. Anycast RP is configured with PE1 & PE2. On the receiver side there is a single PE. When I check (S,G) route on the receiver side PE default MDT is working as expected. After the threshold exceeds it switches to the data MDT. PIM Assert mechanism winner is PE2 though (Since PE 2 has the highest IP and source is behind dual home PE with equal cost I guess). Can this be a reason for persistent duplicate multicast packets at the receiver side; since the assert winner is PE2 but HSRP, PIM DR path is via PE1 to the source? If this is the case is there any way to manually configure the assert winner to PE1? Roman

2 3

Re: V6 still not supported
by Jared Brown 06 Apr '22

06 Apr '22

Owen DeLong via NANOG wrote: > When your ISP starts charging $X/Month for legacy protocol support Out of interest, how would this come about? - Jared

9 17

Re: Enhance CG-NAT Re: V6 still not supported
by Abraham Y. Chen 06 Apr '22

06 Apr '22

Hi, Bill: 0) Thanks for bringing up the NANOG posting guideline. We now have something tangible to discuss. 1) Section 6. looks most relevant. So, I copy and paste it below for our discussion: A. 6.1.1. "... > relevant excerpt 1 response to excerpt 1 ... ": This seems to be what I have been doing, except maybe how to interpret the keyword "excerpt". Perhaps you are expecting me to cite more text from the message that I am responding to, such as a complete paragraph, instead of only a short phrase or two? If so, I certainly will be glad to do so. B. On the other hand, the leading sentence "When posting to the NANOG list please avoid: Top-posting, i.e., putting your reply right on top of the message you're responding to, ... " seems to discourage threading the messages (keeping a long tail of the earlier texts)? Perhaps there is some kind of optimal trade-off between how much each of these two should be included in a message? 2) The two URLs are kind of odd: A. The first URL led me to a blank webpage. B. The second URL led me to a list of Q&A's that seem to be more humorous than instructive. *************** *6. Posting Conventions* 1. *Format* When posting to the NANOG list please avoid: 1. Top-posting, i.e., putting your reply right on top of the message you're responding to, rather than quoting and responding as follows: > relevant excerpt 1 response to excerpt > relevant excerpt 2 response to excerpt > relevant excerpt 3 response to excerpt 2. Using non-standard methods of quoting prior text; 3. Failing to quote, or to snip, as appropriate; 4. Sending in HTML or other non-standard attachment formats; 5. Starting or participating in flame wars. The linux-kernel mailing list FAQ provides detailed instructions for* quoting prior text*: http://www.tux.org/lkml/#s3-9 "Dear Emily Postnews" at http://www.templetons.com/brad/emily.html makes lots of good suggestions about *signatures* and other items of interest. *************** Please review and advise. Regards, Abe (2022-04-06 17:31) On 2022-04-06 11:33, William Nelson wrote: > <snip...> > > I am still learning the proper eMail etiquette on NANOG. Could you please echo back some of my writings as you received? So that I can see what they got transformed to. > > </snip> > > There is no transforming of your formatting after you send it. It's frustrating in the format you typed it in. > > https://archive.nanog.org/list/faq#posting > > -bn. > > > ******************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************** > Confidentiality Notice: > > This email message, any attachment, and the information therein is confidential, intended only for the named recipient(s), and may contain material that is proprietary, privileged, or otherwise private under applicable law. If you have received this message in error, or are not a named recipient: > > (1) You are advised that any disclosure, copying, distribution or use of this email, or the information in its content, is strictly prohibited; > > (2) We ask you immediately to notify the sender by return email or contact Third Federal at 1-800-THIRD-FED (1-800-844-7333); > > (3) We instruct you to delete this email message and any attachment from your computer. > > Thank you. > ******************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************** > -- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus

1 0

Looking for an Amazon Cloudfront contact
by Eric Kuhnke 06 Apr '22

06 Apr '22

It looks like I may have a range of recently put into use residential symmetric gigabit last mile IP space that's being filtered/blocked at the application level. Please contact me off-list.

1 0