- NANOG - lists.nanog.org

uPRF strict more
by Randy Bush 01 Oct '21

01 Oct '21

do folk use uPRF strict mode? i always worried about the multi-homed customer sending packets out the other way which loop back to me; see RFC 8704 §2.2 do vendors implement the complexity of 8704; and, if so, do operators use it? clue bat please randy

20 41

Weekly Global IPv4 Routing Table Report
by cscora＠apnic.net 01 Oct '21

01 Oct '21

This is an automated weekly mailing describing the state of the Internet Global IPv4 Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Global IPv4 Routing Table Report 04:00 +10GMT Sat 02 Oct, 2021 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 864928 Prefixes after maximum aggregation (per Origin AS): 327395 Deaggregation factor: 2.64 Unique aggregates announced (without unneeded subnets): 416427 Total ASes present in the Internet Routing Table: 71992 Prefixes per ASN: 12.01 Origin-only ASes present in the Internet Routing Table: 61880 Origin ASes announcing only one prefix: 25516 Transit ASes present in the Internet Routing Table: 10112 Transit-only ASes present in the Internet Routing Table: 339 Average AS path length visible in the Internet Routing Table: 4.4 Max AS path length visible: 38 Max AS path prepend of ASN ( 37447) 35 Prefixes from unregistered ASNs in the Routing Table: 900 Number of instances of unregistered ASNs: 906 Number of 32-bit ASNs allocated by the RIRs: 37393 Number of 32-bit ASNs visible in the Routing Table: 31025 Prefixes from 32-bit ASNs in the Routing Table: 144330 Number of bogon 32-bit ASNs visible in the Routing Table: 34 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 452 Number of addresses announced to Internet: 3068651008 Equivalent to 182 /8s, 231 /16s and 230 /24s Percentage of available address space announced: 82.9 Percentage of allocated address space announced: 82.9 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.5 Total number of prefixes smaller than registry allocations: 287757 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 231738 Total APNIC prefixes after maximum aggregation: 66212 APNIC Deaggregation factor: 3.50 Prefixes being announced from the APNIC address blocks: 227075 Unique aggregates announced from the APNIC address blocks: 91937 APNIC Region origin ASes present in the Internet Routing Table: 11991 APNIC Prefixes per ASN: 18.94 APNIC Region origin ASes announcing only one prefix: 3418 APNIC Region transit ASes present in the Internet Routing Table: 1671 Average APNIC Region AS path length visible: 4.6 Max APNIC Region AS path length visible: 37 Number of APNIC region 32-bit ASNs visible in the Routing Table: 7148 Number of APNIC addresses announced to Internet: 772173696 Equivalent to 46 /8s, 6 /16s and 111 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-147769 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 252764 Total ARIN prefixes after maximum aggregation: 115758 ARIN Deaggregation factor: 2.18 Prefixes being announced from the ARIN address blocks: 252694 Unique aggregates announced from the ARIN address blocks: 120568 ARIN Region origin ASes present in the Internet Routing Table: 18899 ARIN Prefixes per ASN: 13.37 ARIN Region origin ASes announcing only one prefix: 6867 ARIN Region transit ASes present in the Internet Routing Table: 1951 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 28 Number of ARIN region 32-bit ASNs visible in the Routing Table: 4130 Number of ARIN addresses announced to Internet: 1300138752 Equivalent to 77 /8s, 126 /16s and 139 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 241282 Total RIPE prefixes after maximum aggregation: 112897 RIPE Deaggregation factor: 2.14 Prefixes being announced from the RIPE address blocks: 237443 Unique aggregates announced from the RIPE address blocks: 145240 RIPE Region origin ASes present in the Internet Routing Table: 28049 RIPE Prefixes per ASN: 8.47 RIPE Region origin ASes announcing only one prefix: 12068 RIPE Region transit ASes present in the Internet Routing Table: 3898 Average RIPE Region AS path length visible: 4.3 Max RIPE Region AS path length visible: 29 Number of RIPE region 32-bit ASNs visible in the Routing Table: 10427 Number of RIPE addresses announced to Internet: 711382656 Equivalent to 42 /8s, 102 /16s and 214 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 111765 Total LACNIC prefixes after maximum aggregation: 26637 LACNIC Deaggregation factor: 4.20 Prefixes being announced from the LACNIC address blocks: 112683 Unique aggregates announced from the LACNIC address blocks: 47245 LACNIC Region origin ASes present in the Internet Routing Table: 10781 LACNIC Prefixes per ASN: 10.45 LACNIC Region origin ASes announcing only one prefix: 2622 LACNIC Region transit ASes present in the Internet Routing Table: 2123 Average LACNIC Region AS path length visible: 4.9 Max LACNIC Region AS path length visible: 29 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8444 Number of LACNIC addresses announced to Internet: 176435200 Equivalent to 10 /8s, 132 /16s and 48 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-272796 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 26479 Total AfriNIC prefixes after maximum aggregation: 5191 AfriNIC Deaggregation factor: 5.10 Prefixes being announced from the AfriNIC address blocks: 34581 Unique aggregates announced from the AfriNIC address blocks: 11037 AfriNIC Region origin ASes present in the Internet Routing Table: 1546 AfriNIC Prefixes per ASN: 22.37 AfriNIC Region origin ASes announcing only one prefix: 541 AfriNIC Region transit ASes present in the Internet Routing Table: 302 Average AfriNIC Region AS path length visible: 5.1 Max AfriNIC Region AS path length visible: 38 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 876 Number of AfriNIC addresses announced to Internet: 108194560 Equivalent to 6 /8s, 114 /16s and 235 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 9808 8042 9000 57 CMNET-GD Guangdong Mobile Communication 7545 5826 786 677 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4713 4192 74 ERX-CERNET-BKB China Education and Rese 7552 3612 1330 20 VIETEL-AS-AP Viettel Group, VN 7713 3515 1022 56 TELKOMNET-AS-AP PT Telekomunikasi Indon 45899 3012 1897 56 VNPT-AS-VN VNPT Corp, VN 4766 2495 11119 576 KIXS-AS-KR Korea Telecom, KR 9498 2170 472 237 BBIL-AP BHARTI Airtel Ltd., IN 4755 2127 438 203 TATACOMM-AS TATA Communications formerl 45090 2127 1198 75 CNNIC-TENCENT-NET-AP Shenzhen Tencent C Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 5657 9780 2489 AMAZON-02, US 11492 4706 311 750 CABLEONE, US 22773 4028 3042 318 ASN-CXA-ALL-CCI-22773-RDC, US 7155 3947 264 30 VIASAT-SP-BACKBONE, US 16625 3600 1861 2514 AKAMAI-AS, US 6327 3369 1318 66 SHAW, CA 30036 2589 374 168 MEDIACOM-ENTERPRISE-BUSINESS, US 209 2530 5028 450 CENTURYLINK-US-LEGACY-QWEST, US 20115 2242 3032 505 CHARTER-20115, US 7018 2227 24176 1421 ATT-INTERNET4, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 6858 1726 143 UNI2-AS, ES 20940 3848 3348 216 AKAMAI-ASN1, NL 8551 3289 378 39 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 39891 3269 187 23 ALJAWWALSTC-AS, SA 12389 2913 2279 895 ROSTELECOM-AS, RU 9009 2492 259 1310 M247, GB 34984 2229 358 602 TELLCOM-AS, TR 58224 1667 897 579 TCI, IR 61317 1645 256 920 ASDETUK www.heficed.com, GB 13188 1610 100 27 TRIOLAN, UA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8866 3457 570 Uninet S.A. de C.V., MX 10620 3410 520 699 Telmex Colombia S.A., CO 11830 2495 369 62 Instituto Costarricense de Electricidad 13999 1696 358 464 Mega Cable, S.A. de C.V., MX 6503 1516 359 477 Axtel, S.A.B. de C.V., MX 28573 1462 2307 241 CLARO S.A., BR 3816 1241 652 151 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 26615 1148 2351 136 TIM SA, BR 6147 1089 370 22 Telefonica del Peru S.A.A., PE 11172 957 111 70 Alestra, S. de R.L. de C.V., MX Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1639 393 21 LINKdotNET-AS, EG 24835 1549 503 32 RAYA-AS, EG 36992 1283 1417 269 ETISALAT-MISR, EG 36903 1183 537 110 MT-MPLS, MA 29571 799 68 11 ORANGE-COTE-IVOIRE, CI 6713 611 1863 34 IAM-AS, MA 36935 607 522 40 Vodafone-, EG 15399 505 50 30 WANANCHI-, KE 37342 471 32 1 MOVITEL, MZ 2018 338 319 73 TENET-1, ZA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8866 3457 570 Uninet S.A. de C.V., MX 9808 8042 9000 57 CMNET-GD Guangdong Mobile Communication 12479 6858 1726 143 UNI2-AS, ES 7545 5826 786 677 TPG-INTERNET-AP TPG Telecom Limited, AU 16509 5657 9780 2489 AMAZON-02, US 4538 4713 4192 74 ERX-CERNET-BKB China Education and Rese 11492 4706 311 750 CABLEONE, US 22773 4028 3042 318 ASN-CXA-ALL-CCI-22773-RDC, US 7155 3947 264 30 VIASAT-SP-BACKBONE, US 20940 3848 3348 216 AKAMAI-ASN1, NL Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 9808 8042 7985 CMNET-GD Guangdong Mobile Communication Co.Ltd. 12479 6858 6715 UNI2-AS, ES 7545 5826 5149 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4713 4639 ERX-CERNET-BKB China Education and Research Net 11492 4706 3956 CABLEONE, US 7155 3947 3917 VIASAT-SP-BACKBONE, US 22773 4028 3710 ASN-CXA-ALL-CCI-22773-RDC, US 20940 3848 3632 AKAMAI-ASN1, NL 7552 3612 3592 VIETEL-AS-AP Viettel Group, VN 7713 3515 3459 TELKOMNET-AS-AP PT Telekomunikasi Indonesia, ID Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 46887 LIGHTOWER, US 18604 UNALLOCATED 8.25.204.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 174 COGENT-174, US 54338 UNALLOCATED 8.33.241.0/24 6461 ZAYO-6461, US 23061 UNALLOCATED 8.39.119.0/24 3356 LEVEL3, US 1782 UNALLOCATED 8.42.19.0/24 46887 LIGHTOWER, US 395438 UNALLOCATED 8.42.206.0/24 3356 LEVEL3, US 395056 UNALLOCATED 8.45.133.0/24 3356 LEVEL3, US 32306 UNALLOCATED 8.46.80.0/24 33652 CMCS, US Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.132.208.0/24 Origin: 7850 CITYLINKFIBER, US 23.132.208.0/24 Transit: 15164 UPNLLC, US 23.141.0.0/24 Origin: 395350 UNASSIGNED 23.141.0.0/24 Transit: 11426 TWC-11426-CAROLINAS, US 27.100.7.0/24 Origin: 56096 UNASSIGNED 27.100.7.0/24 Transit: 45455 TH-2S1N-AP Two S One N Co Ltd, Internet 41.57.124.0/22 Origin: 37442 UNASSIGNED 41.57.124.0/22 Transit: 174 COGENT-174, US 41.57.124.0/23 Origin: 37442 UNASSIGNED 41.57.124.0/23 Transit: 37204 TELONE, ZW Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:13 /10:41 /11:101 /12:304 /13:597 /14:1213 /15:2040 /16:13596 /17:8317 /18:14098 /19:25517 /20:42653 /21:50989 /22:106842 /23:92430 /24:504709 /25:1452 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 5810 6858 UNI2-AS, ES 11492 3645 4706 CABLEONE, US 8151 3240 8866 Uninet S.A. de C.V., MX 6327 3176 3369 SHAW, CA 7155 3037 3947 VIASAT-SP-BACKBONE, US 22773 2988 4028 ASN-CXA-ALL-CCI-22773-RDC, US 39891 2805 3269 ALJAWWALSTC-AS, SA 8551 2755 3289 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 30036 2242 2589 MEDIACOM-ENTERPRISE-BUSINESS, US 11830 1929 2495 Instituto Costarricense de Electricidad y Telec Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1927 2:1071 3:145 4:20 5:3713 6:85 7:5 8:1546 9:1 11:172 12:1723 13:390 14:2274 15:113 16:24 17:364 18:120 20:126 21:4 22:188 23:5153 24:2447 25:2 27:2544 29:19 31:2347 32:112 34:1 35:47 36:1725 37:3926 38:2259 39:599 40:166 41:3818 42:1015 43:2063 44:288 45:15511 46:3733 47:320 48:5 49:1666 50:1819 51:99 52:1286 54:250 55:738 56:4 57:54 58:1740 59:1183 60:931 61:2291 62:2275 63:1966 64:5368 65:2360 66:4970 67:2873 68:1161 69:4125 70:1361 71:677 72:3150 74:2618 75:1490 76:694 77:2024 78:1700 79:2621 80:1875 81:1546 82:1386 83:1155 84:1291 85:2923 86:716 87:1841 88:1016 89:3002 90:505 91:7385 92:1848 93:2549 94:3165 95:3511 96:1305 97:346 98:975 99:958 100:75 101:1039 102:1701 103:26991 104:4017 105:438 106:821 107:2349 108:727 109:3870 110:2038 111:3124 112:1937 113:1408 114:1466 115:1931 116:1846 117:2412 118:2310 119:1891 120:1561 121:1082 122:2545 123:2164 124:1594 125:2055 128:1366 129:1323 130:893 131:2026 132:778 133:362 134:1861 135:316 136:787 137:855 138:2399 139:1186 140:755 141:1230 142:1204 143:1370 144:1269 145:325 146:1546 147:1412 148:2164 149:1502 150:824 151:1087 152:1644 153:428 154:3109 155:1340 156:1881 157:1239 158:1003 159:2032 160:2376 161:1252 162:3387 163:1102 164:1553 165:1443 166:590 167:1652 168:3659 169:683 170:4347 171:806 172:2743 173:2948 174:1001 175:1118 176:3316 177:4481 178:3003 179:1895 180:2257 181:2663 182:3111 183:2011 184:2423 185:18892 186:4253 187:3146 188:3396 189:2891 190:8654 191:1327 192:10702 193:8351 194:6816 195:4865 196:2897 197:2123 198:6015 199:5939 200:7338 201:5488 202:10514 203:10060 204:4503 205:3368 206:3793 207:3367 208:4020 209:4738 210:4184 211:2359 212:3768 213:3391 214:1168 215:64 216:6373 217:2600 218:1218 219:670 220:1946 221:977 222:855 223:2049 End of report

1 0

Famous operational issues
by John Kristoff 01 Oct '21

01 Oct '21

Friends, I'd like to start a thread about the most famous and widespread Internet operational issues, outages or implementation incompatibilities you have seen. Which examples would make up your top three? To get things started, I'd suggest the AS 7007 event is perhaps the most notorious and likely to top many lists including mine. So if that is one for you I'm asking for just two more. I'm particularly interested in this as the first step in developing a future NANOG session. I'd be particularly interested in any issues that also identify key individuals that might still be around and interested in participating in a retrospective. I already have someone that is willing to talk about AS 7007, which shouldn't be hard to guess who. Thanks in advance for your suggestions, John

65 99

VPNv6 Native Signaling - Nokia (And Solutions to RFC 7439)
by Mark Tinka 01 Oct '21

01 Oct '21

So, I have it on good authority that from release 21.7.R1, Nokia not only introduces LDPv6 to their IXR platform, but also provides native support for l2vpnv6 and l3vpnv6 signaling. AFAIK, Cisco and Juniper only support mpls2ip forwarding for LDPv6, and all other VPN services can only be signaled via LDPv4 only. So Nokia are able to natively signal the following VPN services via LDPv6: - EoMPLS (p2p + p2mp) - VPLS (mp2mp) - l3vpn (BGP) - EVPN (mp2mp) - BGP-LU It's unclear whether this has been tested against their own platforms (IXR and SR), but I'd imagine inter-op should not be an issue since it's the same shared code, despite different chip sets. For me, this is a good solution toward fixing the issues identified in RFC 7439, which bodes well for operators who have had to hold back their IPv6-only ambitions due to this. I hope other vendors can jump onboard, whenever they choose to. Mark.

1 0

IPv6 woes - RFC
by Grant Taylor 01 Oct '21

01 Oct '21

Hi, Does anyone have any recommendation for a viable IPv6 tunnel broker / provider in the U.S.A. /other/ /than/ Hurricane Electric? I reluctantly just disabled IPv6 on my home network, provided by Hurricane Electric, because multiple services my wife uses are objecting to H.E.'s IPv6 address space as so called VPN or proxy provider. Netflix, HBO Max, Pandora, and other services that I can't remember at the moment have all objected to H.E. Disabling IPv6 feels *SO* *WRONG*! But fighting things; hacking DNS, null routing prefixes, firewalling, etc., seems even more wrong. Is there a contemporary option for home users like myself who's ISP doesn't offer native IPv6? Please consider this to be a Request for Comments and suggestions. Thank you and have a nice day / weekend / holiday. -- Grant. . . . unix || die

55 256

Cisco WAE
by Mark Davis 30 Sep '21

30 Sep '21

Is anyone on the list familiar with configuring WAE to exclude specific devices from collection? Thanks -- Mark William Davis mdavis(a)gmail.com

2 2

Register Now for NANOG 83 + VIDEO | Ep.2 w/ Geoff Huston
by Nanog News 29 Sep '21

29 Sep '21

*NANOG Partners with ICANN + Internet Society* *Collaboration of Resources will Better Serve Communities* In addition to our long-standing relationship with the American Registry for Internet Numbers (ARIN), NANOG would like to also announce a new partnership with the Internet Corporation for Assigned Names and Numbers (ICANN) and the Internet Society. These partnerships will help realize common objectives, promote collaboration, and strengthen the outreach efforts of all the organizations involved. *READ MORE <https://www.nanog.org/stories/nanog-signs-a-memorandum-of-understanding-wit…>* *How will You Attend NANOG 83?* *Register Now In-Person or Virtually* Get excited for hybrid NANOG 83! Expect incredible programming, interactive expos, networking events from the comfort of your home and/or in person. The event will take place Nov. 1 - 3 in Minneapolis, MN, and all programming + networking events will stream live for real-time engagement. *REGISTER NOW <https://www.nanog.org/events/nanog-83/>* *INTERNET INNOVATORS - NEW EPISODE * *WATCH EP. 2 w/ Internet Pioneer Geoff Huston* Leave it to Internet Hall of Fame Global Connector + chief scientist for APNIC, Geoff Huston to make the hairy + scary parts of the Internet almost sound charming. Maybe it's his sparkling wit, pleasant demeanor, (or maybe even) the Australian accent that makes all pills a little easier to swallow. Ep.2 of our new web series, "Internet Innovators" Huston explains why we need to continue to address the elephants in the room. Huston also talks about the importance of developing public speaking skills + "how to make an impact on a room full of geeks." We also get to hear more about Huston's childhood in Australia and what made him the man he is today. Overall, Huston will leave you wanting to ask better questions and think more critically of the digital world around you. *WATCH EP. 2 NOW * <https://www.nanog.org/news-stories/nanog-tv/internet-innovators/geoff-husto…>

1 0

RE: uPRF strict more
by Jean St-Laurent 29 Sep '21

29 Sep '21

I understand better why some prefer acl vs uRpf. For sure, forwarding 400 Gbps of 80B frames is a sign that something bad is happening. 😉 Jean -----Original Message----- From: brad dreisbach <bradd(a)ntt.net> Sent: September 29, 2021 4:18 PM To: Jean St-Laurent <jean(a)ddostest.me> Cc: 'brad dreisbach' <bradd(a)us.ntt.net>; 'Phil Bedard' <bedard.phil(a)gmail.com>; 'North American Network Operators' Group' <nanog(a)nanog.org> Subject: Re: uPRF strict more On Wed, Sep 29, 2021 at 04:07:19PM -0400, Jean St-Laurent wrote: >Thanks a lot for sharing. > >So 100 Gbps at line rate with 80B frames is about ~150 Mpps. > >100 Gbps at line rate with 208B frames is about ~60 Mpps. > >It's a significant penalty. and keep in kind the 4x100 card is 1 port per NPU. they make an 8x100 where the NPU's are shared. it gets even worse. not to single out cisco, this is just how urpf works. juniper had similar penalties, i just cant find the numbers. -b > >Jean > >-----Original Message----- >From: brad dreisbach <bradd(a)us.ntt.net> >Sent: September 29, 2021 3:33 PM >To: Jean St-Laurent <jean(a)ddostest.me> >Cc: 'brad dreisbach' <bradd(a)us.ntt.net>; 'Phil Bedard' ><bedard.phil(a)gmail.com>; 'North American Network Operators' Group' ><nanog(a)nanog.org> >Subject: Re: uPRF strict more > >On Wed, Sep 29, 2021 at 02:54:43PM -0400, Jean St-Laurent wrote: >>Hi Brad, >> >>I'd be interested to hear more about this pps penalty. Do we talk about 5% penalty or something closer to 50%? >> >>Let me know if you still have some numbers close to you related to PPS with uRPF loose. > >iirc, strict vs loose doesnt matter, its still an extra lookup which effects the performance. i was able to find some numbers to give an example. > >the 4x100G tomahawk card was able to pass min frame size(which iirc on >ixia is >80B) at line rate with no features enabled. turn on uRPF and it is only able to pass 208B frames at line rate. > >similar results were seen with several generations of cisco and juniper line cards(if i tested nokia i cant recall, we had stopped doing urpf when they were introduced into the network). > >-b >

1 0

Identifying submarine links via traceroute
by PAUL R BARFORD 29 Sep '21

29 Sep '21

Hello, I am a researcher at the University of Wisconsin. My colleagues at Northwestern University and I are studying submarine cable infrastructure. Our interest is in identifying submarine links in traceroute measurements. Specifically, for a given end-to-end traceroute measurement, we would like to be able to identify when two hops are separated by a submarine cable. Our initial focus has been on inter-hop latency, which can expose long links. The challenge is that terrestrial long-haul links may have the same or longer link latencies as short submarine links. So, we're interested in whether there may be other features (e.g., persistent congestion, naming conventions in router interfaces, peering details, etc.) or techniques that would indicate submarine links. Any thoughts or insights you might have would be greatly appreciated - off-list responses are welcome. Thank you. Regards, PB Paul Barford University of Wisconsin - Madison

4 4

Admin for .tk (not a spam/abuse complaint!)
by Tim Harman 29 Sep '21

29 Sep '21

Hi, If anyone has contact details for the operators of the .tk TLD, could you contact me off-list please? We are unable to contact the authoritive NS for this TLD - it seems our range is on a blacklist or they have some odd route back to us that isn't working. Thus our customers can't resolve any .tk names. I've tried mailing a few @dot.tk (from a host that has no trouble resolving the domain!) but have heard nothing back. Specifically after a contact for whoever maintains ;; ADDITIONAL SECTION: a.ns.tk. 172800 IN A 194.0.38.1 b.ns.tk. 172800 IN A 194.0.39.1 c.ns.tk. 172800 IN A 194.0.40.1 d.ns.tk. 172800 IN A 194.0.41.1 {11:58}~ ➭ dig @194.0.41.1 test.tk ; <<>> DiG 9.11.5-P4-5.1+deb10u5-Debian <<>> @194.0.41.1 test.tk ; (1 server found) ;; global options: +cmd ;; connection timed out; no servers could be reached Many Thanks, Tim

2 1