- NANOG - lists.nanog.org

** Sneak Peek at N95 Agenda! + More
by Nanog News 22 Aug '25

22 Aug '25

*** Sneak Peek at N95 Agenda!* ------------------------------------------------------------ *Submit by Sept. 8 + Explore Confirmed Talks Today!* Catch a sneak preview of what's to come for our upcoming conference, NANOG 95 (Oct.27-29). Scroll to the bottom of the overview webpage to see confirmed talks. *VIEW NOW* (https://nanog.org/events/nanog-95/) *** “What I Wished I Knew Before Attending NANOG”* ------------------------------------------------------------ *Community Shares Insight on How to be Successful at a NANOG Conference* Even veteran network operators can find their first NANOG intimidating. We tapped our community for advice on making it easier, and more rewarding. *READ MORE* ( https://nanog.org/stories/articles/what-i-wished-i-knew-before-attending-na… ) *** Beer N' Gear Sponsorships Available!* ------------------------------------------------------------ Special Perk for Beer ’N Gear Sponsors 🍻✨ Planning to sponsor Beer ’n Gear at NANOG 95? All BnG sponsors receive complimentary use of a private meeting room for a half-day in Arlington. It’s the perfect way to connect with clients, partners, and colleagues during the conference. *EMAIL NOW* (sponsorship(a)nanog.org) *** Video of the Week—NANOG 94 Recap!* ------------------------------------------------------------ *Experience the Best of NANOG 94 – In Minutes!* Missed NANOG 94 (9-11 June, Denver, CO)? Whether you’re a longtime attendee or curious first-timer, this is your chance to see why NANOG conferences are the premier event for technologists. Watch now and get inspired for NANOG 95! *WATCH NOW* ( https://www.youtube.com/watch?v=qfD8ZPC6elE&list=PLO8DR5ZGla8gr-Hw8obs1A0wg… ) *** Stay Connected* ------------------------------------------------------------ http://www.facebook.com http://www.instagram.com/nanog_org/ http://www.linkedin.com/company/nanog/ https://www.twitter.com/nanog/ http://nanog.org

1 0

Re: Digital Element, Neustar (Transunion) & ipinsight.io
by Rina Tajvar 22 Aug '25

22 Aug '25

I realized I never updated my email address with mailman so it rejected my email to the list - resending for everyone else's benefit. Also, now that I'm on a computer - Mike Hammett's reference ( https://thebrotherswisp.com/index.php/geo-and-vpn) suggests william(a)ipinsight.io. On Fri, Aug 22, 2025 at 1:57 AM Rina Tajvar <rina(a)tajvar.io> wrote: > Digital Element: ip-data(a)digitalenvoy.net > Neustar: ms(a)transunion.com > > Ipinsight idk sorry. My employer (in Pennsylvania) bought an IP block from > China of all places, so I have a lot of experience with this problem. > > On Fri, Aug 22, 2025 at 1:53 AM Mike Lyon via NANOG <nanog(a)lists.nanog.org> > wrote: > >> One would think that if you are in the business of selling data, >> specifically, location data, that you would have a link on your website for >> people to contact you in regards to updating that data so that the data you >> are selling is accurate data. Or do you prefer to sell inaccurate data or >> do you just not care about the accuracy of your product? >> >> Anyways, i’ll get off of my soap box… >> >> ***ATTENTION*** Digital Element, Neustar and ipinsight.io folks…. >> >> How does one report to you inaccurate geolocation data? >> >> Anyone on list that could possibly help a brother out? >> >> Thank You, >> Mike >> _______________________________________________ >> NANOG mailing list >> >> https://lists.nanog.org/archives/list/nanog@lists.nanog.org/message/PFBC3O4… > >

1 0

beware: being old sucks
by Randy Bush 22 Aug '25

22 Aug '25

warning if you have old kit in strange corners i woke to this on an antique C3750G diff --git a/configs/sw0.psg.com b/configs/sw0.psg.com index d0fbb88c..a8e15f25 100644 - -- a/configs/sw0.psg.com @@ -357,6 +357,7 @@ access-list 99 permit 192.168.0.0 0.0.3.255 access-list 99 permit 189.108.156.0 0.0.0.255 access-list 99 permit 189.108.159.0 0.0.0.255 ! + tftp-server nvram:startup-config <<<<<<====== snmp-server community cMm4-b4D RO 98 snmp-server trap-source Vlan1 snmp-server location Ashburn VA US and here is the talos report, thanks joe https://blog.talosintelligence.com/static-tundra/ set `no vstack` in config. no, that is not the default. randy

1 0

Worsening google service reputation and abuse
by Jared Mauch 21 Aug '25

21 Aug '25

Is there anyone at Google that is able to address the ongoing abuse problems that are coming out of your services like classroom, groups and otherwise? Wanting me to create a google account for the addresses that are receiving the abuse does not scale and as the reputation continues to get worse, I don't want to block all google services - but getting someone to work with on the issues would be appreciated. X-Notifications: COURSE_INVITATION:792026619952-1755166651116 X-Google-Group-Id: 1087901814827 X-Google-Group-Id: 328755863 X-Google-Group-Id: 864553705765 X-Google-Group-Id: 295922276390 X-Google-Group-Id: 534760014314 Decade+ old mailman has the end-user accept invitations to lists, but google seems to not even use it's own tools so isn't really meeting what would be a general standard. I saw others complain about this as well, and i've had to configure various blocking of different google services which is a moving target of abuse. It's fair to say that a human should be able to send e-mail to an owner alias for a mailing list, but not subscribe that to a group or classroom. - jared -- Jared Mauch | pgp key available via finger from jared(a)puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine.

24 73

Anyone on the list from Hulu?
by Mike Lyon 21 Aug '25

21 Aug '25

Looks like Hulu dropped the record they had for one of our netblocks that has been working fine for years and now suddenly, it's causing issues for our customers. I sent an email into ipadmin(a)hulu.com on Sunday but haven't heard anything back. Anyone on the list that could help? Thank You, Mike -- Mike Lyon mike.lyon(a)gmail.com http://www.linkedin.com/in/mlyon

1 0

Breaking the Sorting Barrier for Directed Single-Source Shortest Paths
by Ryan Hamel 21 Aug '25

21 Aug '25

I was scrolling LinkedIn and came across a post that mentioned a research paper: Breaking the Sorting Barrier for Directed Single-Source Shortest Paths TLDR: Dijkstra got defeated after 40 years. It will be interesting to see what convergence times will look like with this implemented. Different formats of the same research paper: * https://arxiv.org/pdf/2504.17033 * https://dl.acm.org/doi/pdf/10.1145/3717823.3718179 Kind regards, Ryan Hamel

5 9

Multi-WAN link aggregation / multi-path VPNs…
by Mike Lyon 21 Aug '25

21 Aug '25

Let’s talk multi-WAN Link Aggregation / Multipath VPNs… Theres ZeroTier, Speedify (commercial offering), kinda-sorta Wireguard, PepLink Speedfusion, etc… Use case is bonding a bunch of WAN devices like Starlink, FWA, Cellular, DSL, avian carrier, etc to have one big fat pipe. What have you used successfully and liked? Any problems you’ve run into? Thank you, Mike

2 1

Recommended DNS server for a medium 20-30k users isp
by DurgaPrasad - DatasoftComnet 21 Aug '25

21 Aug '25

Hello all, Do you have any recommendations for recursive DNS servers for a medium sized (20-30k users) ISP. We have used powerdns and unbound but sometimes find the caching times a bit on upper side. Any suggestions between these two or anything new? Also need points on how much we tune the settings pros and cons if any. Thank you /DP

35 62

Re: : Can a prefix be never routed on Internet but used only for source address in IP packets?
by Jakob Heitz (jheitz) 20 Aug '25

20 Aug '25

ICMP packets from internal devices. Example “unreachable”. Kind Regards, Jakob ---------------------------- Question: Can a prefix be never routed on the Internet but used only one-way for source address in IP packets? That is. a user owns an IP prefix. They never advertise a route to it in BGP on the Internet. But they use the prefix solely for source address in IP traffic from a source to a destination (sink). In this set up, the destination server obviously cannot/doesn't return any acknowledgements etc. to the source. Anyone aware if there is any such known application in use on the Internet - even if it is rare? Thanks. Sriram

4 3

Can a prefix be never routed on Internet but used only for source address in IP packets?
by Sriram, Kotikalapudi (Fed) 20 Aug '25

20 Aug '25

Question: Can a prefix be never routed on the Internet but used only one-way for source address in IP packets? That is. a user owns an IP prefix. They never advertise a route to it in BGP on the Internet. But they use the prefix solely for source address in IP traffic from a source to a destination (sink). In this set up, the destination server obviously cannot/doesn't return any acknowledgements etc. to the source. Anyone aware if there is any such known application in use on the Internet - even if it is rare? Thanks. Sriram

9 10