- NANOG - lists.nanog.org

Upcoming operational changes to ARIN services (was: Fwd: [arin-announce] Reminder--Upcoming Security Improvements and Change to RDAP URL)
by John Curran 20 Jan '21

20 Jan '21

Folks – Please note upcoming TLS 1.1 deprecation and RDAP URL changes – if you need to update your systems, please start this process sufficiently early to avoid impacts. Thanks! /John John Curran President and CEO American Registry for Internet Numbers Begin forwarded message: From: ARIN <info(a)arin.net<mailto:info@arin.net>> Subject: [arin-announce] Reminder--Upcoming Security Improvements and Change to RDAP URL Date: 20 January 2021 at 10:09:03 AM EST To: "arin-announce(a)arin.net<mailto:arin-announce@arin.net>" <arin-announce(a)arin.net<mailto:arin-announce@arin.net>> This announcement is to remind you of previously-announced changes that ARIN is making, including the following: - security improvements for Whois-RWS, RDAP, and www.arin.net<http://www.arin.net>, scheduled for on or about 19 February 2021 - change of address to the Registration Data Access Protocol (RDAP) bootstrap server, scheduled for on or about 30 June 2021 More information is provided in this announcement. *Security Improvements for WhoWhois-RWS, RDAP, and www.arin.net<http://www.arin.net>* As announced on 22 October 2020 and 2 December 2020, upcoming security improvements for Whois-RWS, RDAP, and www.arin.net<http://www.arin.net> are scheduled to be completed on or around 19 February 2021. The following information is from the previous announcement: Earlier this year, ARIN implemented security enhancements that included ending support for TLS 1.0 for Whois-RWS and RDAP services and improving ciphers used in www.arin.net<http://www.arin.net>. As part of our continuing effort to improve security, on or around 19 February 2021, we will end support for TLS 1.1 and weak Diffie-Hellman (DH) key exchange parameters on www.arin.net<http://www.arin.net>, Whois-RWS, and RDAP. We will also update the ciphers available on Whois-RWS and RDAP to match those on www and reg.arin.net<http://reg.arin.net>. The removal of TLS 1.1 may impact the way you interface programmatically with ARIN to query and retrieve information from Whois-RWS and RDAP. Changes in our supported versions of TLS are due to well-known security issues with this protocol. More information is available at https://datatracker.ietf.org/doc/draft-ietf-tls-oldversions-deprecate/ . ARIN continues to support TLS 1.2. The cipher update satisfies ACSP Suggestion 2015.15: Improvements to SSL Security for whois.arin.net<http://whois.arin.net>. We are providing you advance notice of these changes, as you may need to make configuration or code changes on your clients that interface with Whois-RWS and RDAP services. We encourage you to make these changes so you will have no operational impact when we disable the vulnerable transport protocol version. *RDAP Bootstrap Server Change of Address* As announced on 21 November 2020 and 16 December 2020, the ARIN Registration Data Access Protocol (RDAP) Bootstrap server address is changing. The following information is from the previous announcement: ARIN is changing the address of our Registration Data Access Protocol (RDAP) bootstrap server from https://rdap.arin.net/bootstrap to https://rdap-bootstrap.arin.net/bootstrap. A bootstrap server is used to forward queries from users seeking registration data for Internet resources to another server that can provide more detailed registration information about that resource. The address of the bootstrap server is used in the “query URL” sent from a client application or entered into a command-line query by a user. ARIN has set up a redirect to automatically route queries from the old URL to the new URL when support for the old URL is ended. The old URL will be retired on 30 June 2021, and the redirect will be active. However, it is important to note we can’t guarantee the redirect will be respected by all clients. In order to avoid any problems, queries should be changed to use the new URL, https://rdap-bootstrap.arin.net/bootstrap, as soon as possible. More information about how the bootstrap URL works and this upcoming change can be found on TeamARIN at https://teamarin.net/2020/12/11/buckle-up-change-of-address-coming-for-arin…. If you have questions or comments about this change, please submit an Ask ARIN ticket using your ARIN Online account, or contact the Registration Services Help Desk by phone Monday through Friday, 7:00 AM to 7:00 PM ET at +1.703.227.0660. Regards, Mark Kosters Chief Technology Officer American Registry for Internet Numbers (ARIN) _______________________________________________ ARIN-Announce You are receiving this message because you are subscribed to the ARIN Announce Mailing List (ARIN-announce(a)arin.net<mailto:ARIN-announce@arin.net>). Unsubscribe or manage your mailing list subscription at: https://lists.arin.net/mailman/listinfo/arin-announce Please contact info(a)arin.net if you experience any issues.

1 0

Hosting recommendations ... ?
by Bryan Holloway 20 Jan '21

20 Jan '21

Hey gang ... Looking for a reputable (i.e., no hosting of spammers or other ne'er-do-wells) hosting provider with possibly a global footprint. If not, US is #1 desire; EU #2. Requirements, more or less: * Desire to host 2-3 hypervisors, probably running something akin to Proxmox ... * ~5-10TB storage with the possibility of expansion ... * 1G hand-off / 100 Mbps or less commit ... i.e., low BW, but burstable. * Bringing my own IP space and need to be able to peer BGP with vendor. * Cross-DC redundancy or mirroring or somesuch desirable. * Backups are of interest, although I can do my own if need be. Any recommendations that are non-Amazonian? Feel free to reach out off-list if you prefer. #1 requirement ... the reputability part ... Thank you all in advance! - bryan

16 26

Spectrum Routing Contact
by Robert Blayzor 20 Jan '21

20 Jan '21

I was wondering if someone from Spectrum engineering could hit me out of band. We have a customer in one of our data centers that is having some strange routing issues through Cogent and Spectrum AS's 7843 & 12271. Was wondering if someone could share some insight BGP looking glass type info with me so we can figure this out. TIA -- inoc.net!rblayzor XMPP: rblayzor.AT.inoc.net PGP: https://pgp.inoc.net/rblayzor/

1 0

Revoked AFRINIC block resulting in more than 350 bogon prefixes
by Ostap Efremov 20 Jan '21

20 Jan '21

Hi, 196.52.0.0/14 was recently revoked by AFRINIC. However, more than 350 prefixes inside of this /14 are currently still announced. This is all unallocated and should not be routed at all. Example https://bgp.he.net/net/196.54.129.0/24#_netinfo Here is a full list of them https://pastebin.com/raw/MHaW3nPe Greetings, Ostap Efremov

1 0

Re: Alexandria Ocasio-Cortez' Office is on NANOG?? Or, what is the policy about sharing email offlist?
by Javier J 19 Jan '21

19 Jan '21

you too, why are you emailing me? I didn't ask anyone to contact me off list. On Mon, Jan 18, 2021 at 8:53 PM Sam Silvester <sam.silvester(a)gmail.com> wrote: > Archives are browsable by anybody. How do you expect to keep political > types out of the discussion? > > On Tue, 19 Jan 2021 at 11:36 am, Javier J <javier(a)advancedmachines.us> > wrote: > >> I couldn't agree more. >> If I want to talk politics, I will go to other places. I use this mailing >> list to talk about things relevant to technology and operation of networks >> in North American and other places. >> >> - Javier >> >> >> On Mon, Jan 18, 2021 at 4:19 PM Mel Beckman <mel(a)beckman.org> wrote: >> >>> javier, >>> >>> I concur. What we don’t need on Nanog is outside parties deciding to >>> “reign in” our discussions on political grounds! >>> >>> -mel beckman >>> >>> On Jan 18, 2021, at 12:38 PM, Javier J <javier(a)advancedmachines.us> >>> wrote: >>> >>> >>> I agree 100%. >>> >>> I know the emails on this list are public and that is fine. What I >>> don't appreciate is that now my email address is in some politico's address >>> list because of someone's behavior. >>> >>> - Javier >>> >>> On Mon, Jan 18, 2021 at 3:20 PM Jon Lewis <jlewis(a)lewis.org> wrote: >>> >>>> There's a world of difference between "don't expect list posts to be >>>> private to list members" and "don't forward the list to autoresponders." >>>> The stupidity of the latter, if it can be tracked down to who did it, >>>> should result in their removal from the list, at least until they >>>> explain >>>> what caused them to do that and have undone it. >>>> >>>> On Mon, 18 Jan 2021, Paul Timmins wrote: >>>> >>>> > The list has public archives. Draw your own conclusions on the policy. >>>> > >>>> > https://mailman.nanog.org/pipermail/nanog/ >>>> > >>>> > On 1/18/21 2:40 PM, Anne P. Mitchell, Esq. wrote: >>>> >> Not under that impression at all. That's very different from "what >>>> is the >>>> >> policy" - at least in the groups I run, if the policy is "no sharing >>>> >> offlist" and then someone does, there are consequences for that >>>> someone. >>>> >> Anne >>>> >> >>>> >> -- >>>> >> Anne P. Mitchell, Attorney at Law >>>> >> Dean of Cyberlaw & Cybersecurity, Lincoln Law School >>>> >> Author: Section 6 of the CAN-SPAM Act of 2003 (the Federal >>>> anti-spam law) >>>> >> Board of Directors, Denver Internet Exchange >>>> >> Chair Emeritus, Asilomar Microcomputer Workshop >>>> >> Former Counsel: Mail Abuse Prevention System (MAPS) >>>> >> >>>> > >>>> >>>> ---------------------------------------------------------------------- >>>> Jon Lewis, MCP :) | I route >>>> StackPath, Sr. Neteng | therefore you are >>>> _________ http://www.lewis.org/~jlewis/pgp for PGP public key_________ >>>> >>>

2 2

Paging a TATA person?
by Dan Mahoney 19 Jan '21

19 Jan '21

Someone in TATA networking, if you could please contact me off-list, I'd appreciate it. This relates to my day job doing DNS things for ISC. -Dan -- --------Dan Mahoney-------- Techie, Sysadmin, WebGeek Gushi on efnet/undernet IRC FB: fb.com/DanielMahoneyIV LI: linkedin.com/in/gushi Site: http://www.gushi.org ---------------------------

2 1

Re: Alexandria Ocasio-Cortez' Office is on NANOG?? Or, what is the policy about sharing email offlist?
by Javier J 19 Jan '21

19 Jan '21

Why are you emailing me? On Mon, Jan 18, 2021 at 3:54 PM Jeff P <jeffp(a)jeffp.us> wrote: > SEE!?! > > With no evidence yet publicly acknowledged as to who added the AOC email > to the list now they are just accusing some random "A woman!" > > Words (The Pen) are mightier than any brute force (The Sword). > > And you did it without thought, just piled on. It came as natural to you > as putting on your shoes in the morning. > > JeffP > jeffp(a)jeffp.us > > > > *Please consider the environment before printing this e-mail.* > > NOTICE: > This email and any files transmitted with it are confidential and intended > solely for the use of the individual or entity to whom they are addressed. > Use or dissemination by persons other than the intended recipient(s) is > strictly prohibited. If you have received this message in error, please > notify the sender immediately by reply e-mail to correct our records. > Please then delete the original message (including any attachments) in its > entirety, including any backup processes that your system may perform. > Please note that any views or opinions presented in this email are solely > those of the author. Email transmission cannot be guaranteed to be secure > or error-free as information could be intercepted, corrupted, lost, > destroyed, arrive late or incomplete, or contain viruses. The sender, > therefore, does not accept liability for any errors or omissions in the > contents of this message, which arise as a result of e-mail transmission. > > > > > ---------- Forwarded message --------- > From: Lorell Hathcock <lorell(a)hathcock.org> > Date: Mon, Jan 18, 2021 at 12:43 PM > Subject: Re: Alexandria Ocasio-Cortez' Office is on NANOG?? Or, what is > the policy about sharing email offlist? > To: Javier J <javier(a)advancedmachines.us> > Cc: nanog <nanog(a)nanog.org> > > > A-woman! > > Sincerely, > > Lorell Hathcock > > On Jan 18, 2021, at 1:36 PM, Javier J <javier(a)advancedmachines.us> wrote: > > > I agree 100%. > > I know the emails on this list are public and that is fine. What I don't > appreciate is that now my email address is in some politico's address list > because of someone's behavior. > > - Javier > > On Mon, Jan 18, 2021 at 3:20 PM Jon Lewis <jlewis(a)lewis.org> wrote: > >> There's a world of difference between "don't expect list posts to be >> private to list members" and "don't forward the list to autoresponders." >> The stupidity of the latter, if it can be tracked down to who did it, >> should result in their removal from the list, at least until they explain >> what caused them to do that and have undone it. >> >> On Mon, 18 Jan 2021, Paul Timmins wrote: >> >> > The list has public archives. Draw your own conclusions on the policy. >> > >> > https://mailman.nanog.org/pipermail/nanog/ >> > >> > On 1/18/21 2:40 PM, Anne P. Mitchell, Esq. wrote: >> >> Not under that impression at all. That's very different from "what is >> the >> >> policy" - at least in the groups I run, if the policy is "no sharing >> >> offlist" and then someone does, there are consequences for that >> someone. >> >> Anne >> >> >> >> -- >> >> Anne P. Mitchell, Attorney at Law >> >> Dean of Cyberlaw & Cybersecurity, Lincoln Law School >> >> Author: Section 6 of the CAN-SPAM Act of 2003 (the Federal anti-spam >> law) >> >> Board of Directors, Denver Internet Exchange >> >> Chair Emeritus, Asilomar Microcomputer Workshop >> >> Former Counsel: Mail Abuse Prevention System (MAPS) >> >> >> > >> >> ---------------------------------------------------------------------- >> Jon Lewis, MCP :) | I route >> StackPath, Sr. Neteng | therefore you are >> _________ http://www.lewis.org/~jlewis/pgp for PGP public key_________ >> >

3 2

Call for Volunteers - 2021 IX-Denver Board Election
by Chris Grundemann 19 Jan '21

19 Jan '21

Hail NANOG! IX-Denver will be holding an election at our February 2021 members meeting. The purpose of this election will be selecting three board members for one year terms (2021) and four board members for two year terms (2021-2022). To ensure that IX-Denver has the best possible leadership, we are now calling for volunteers who are willing and able to serve our members as Directors. Seven board seats are up for election in 2021 You can view all of the current board members here: https://ix-denver.org/governance/board-of-directors/ We are seeking volunteers and nominations to fill these seven open board seats. To be considered; please send: Name, email, and a brief biography to peering(a)ix-denver.org. # Responsibilities As an all volunteer organization, IX-Denver relies heavily on its Board of Directors. Some of the various tasks performed by current board members include: * Financial planning and bookkeeping * Setting strategic direction for the organization based on member input * Providing technical leadership to the organization based on industry best practices * Proposing and conducting configuration changes, upgrades, new installs, etc. * Developing new and existing software tools * Configuring member ports, route server sessions, etc. * Communicating with members directly and via mailing lists * Seeking out new members and partners and bringing them on-board * Evangelizing the use of peering * Website and social media updates * Event planning and execution * Accounts payable and accounts receivable * Leading other volunteers Not all members take on all of these tasks and this is not a comprehensive list. You will need to commit at least 10 hours per month to this position (2-4 hours per week), including monthly online board meetings. Twice a year we meet in person (once that is practical again) for about a half a day. Folks who live in Colorado and have Internet technology related experience are preferred. Feel free to share this call with those you think are a great fit. # Important Dates * 19 January 2021 - Call for Volunteers opens * 4 February 2021 - Call for Volunteers closes * 5 February 2021 - Slate of candidates announced * 18 February 2021 - Members meeting and election * 5 March 2021 - New Board announced This information is also posted here: https://ix-denver.org/governance/2021-election/ Thank you, Chris Grundemann Co-Founder, IX-Denver -- @ChrisGrundemann http://chrisgrundemann.com

1 0

Fwd: [apops] APRICOT 2021 call for presentations reminder
by Mark Tinka 19 Jan '21

19 Jan '21

FYI. Mark. -------- Forwarded Message -------- Subject: [apops] APRICOT 2021 call for presentations reminder Date: Tue, 19 Jan 2021 17:59:19 +1000 From: Philip Smith <philip(a)apricot.net> Organization: Asia Pacific Regional Conference on Operational Technologies To: apops(a)apops.net Hi everyone, This is a short reminder that the call for papers for APRICOT 2021 is still open and the PC is eagerly awaiting your presentation or tutorial proposals. Please do not wait until the last minute, as the PC is filling the programme on a first-come first-served basis. Please submit on-line at: http://papers.apricot.net/user/login.php?event=128 Note that APRICOT 2021 is a virtual event, entirely on-line. Because of this, the PC will only accept Peering and IXP Personals prior to the event starting. Submissions must be of a single slide listing the operator's PeeringDB entry. Please use the form at https://2021.apricot.net/program/peering-personals/ to submit your Peering or IXP Personal for APRICOT 2021. Thanks! philip -- _______________________________________________ apops mailing list apops(a)apops.net https://mailman.apnic.net/mailman/listinfo/apops Website: www.apops.net .

1 0

Alexandria Ocasio-Cortez' Office is on NANOG?? Or, what is the policy about sharing email offlist?
by Anne P. Mitchell, Esq. 19 Jan '21

19 Jan '21

Either Alexandria Ocasio-Cortez' office is on the NANOG list or someone is forwarding NANOG email to AOC's press office (in which case either spoofed as the original sender or AOC's office sends an ack to every email address it can find)..as I received this auto-ack in response to my email to to the list. Anyone have any insight into this? And either way, what is the policy about forwarding list email to someone who is not on the list? Anne > Begin forwarded message: > > From: press(a)ocasiocortez.com > Subject: Re: Re: Re Parler and its very underprepared attorney > Date: January 17, 2021 at 12:20:33 PM MST > To: "Anne P. Mitchell, Esq." <amitchell(a)isipp.com> > Reply-To: press(a)ocasio2018.com > > Hi there, > > Thanks very much for your message, and for reaching out to the campaign office of Representative Ocasio-Cortez! > • For press inquiries, please reach out to our Press Secretary, Ivet Contreras, at ivet(a)ocasiocortez.com. We also recommend following Alexandria on Twitter for direct quotes and real-time updates. Sign up for our press advisory list here. > • If you are a resident of New York's 14th Congressional District and are reaching out for assistance, please contact Alexandria's congressional team directly by visiting https://ocasio-cortez.house.gov/contact. > • If you are reaching out to request a meeting or invite Alexandria to an event, please visit https://ocasio-cortez.house.gov/scheduling-request and submit a Scheduling Request for review by Alexandria's congressional schedulers. > • If your inquiry is not press-related, please email us(a)ocasiocortez.com. > > Thank you again for reaching out, and we hope to be able to connect with you soon!

9 10