- NANOG - lists.nanog.org

Bogon filtering (don't ban me)
by J. Oquendo 03 Dec '04

03 Dec '04

Considering the talk of banning going on, I was reluctant to post this, anyhow, I wondered how many (if any) have ever thought about the aspect of vendors deciding to implement some form of default bogon filtering on their products. With all of the talk about DoS botnets, and issues surrounding allocated address ranges (for whatever the purpose), I'm curious to know why a vendor like Juniper, or Cisco, or whomever doesn't implement a mechanism to automatically do the filtering. Wouldn't this minimize a vast amount of issues surrounding DoS attacks? >From an admin/user perspective, I would not mind having my equipment implement this as long as it was manageable to add/remove addresses on the fly. Perhaps a command line syntax: ip bogon add add.res.s/8 or ip bogon remove add.res.s/8 How much would easier would it be for a NAP (per-se) to have their entire network configured properly to avoid having their network send malicious traffic out of their net. I thought about it over and over, and wonder why this hasn't been done. Any care to beat me with a clue stick or two. I can understand the arguments of not wanting a vendor to have control of some aspect of my business, or control over my network, but correct me if I am wrong, wouldn't this solve a heck of a lot of issues concerning network based attacks, spam, scumware/spyware/fooware/$*something? =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ J. Oquendo GPG Key ID 0x51F9D78D Fingerprint 2A48 BA18 1851 4C99 CA22 0619 DB63 F2F7 51F9 D78D http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x51F9D78D sil @ politrix . org http://www.politrix.org sil @ infiltrated . net http://www.infiltrated.net "How can we account for our present situation unless we believe that men high in this government are concerting to deliver us to disaster?" Joseph McCarthy "America's Retreat from Victory"

11 11

RE: Load balancing outgoing connections automatically.
by Chris Ranch 03 Dec '04

03 Dec '04

> Drew Weaver wrote: > | Howdy. We?re looking at upgrading our border router(s) > | from 7500s to (something) yet undetermined. I love my 7304-G100's as a nice step up from the 7500's, and short of the GSR or J-vendor. Be sure to get the G100's and not the NSE-100 (no PXF). Order of magnitude less horsepower, same cost, don't know why they even sell them. > | I?ve also heard of gear from companies like route > | science that could possibly achieve the same thing. But I?ve heard > | that it runs like $300,000 for a box, is there anything a > bit smaller > | for companies within the oc-3 range? That could accompany my router? Drew mentioned InterNAP's Sockeye and NetVMG stuff, and Bruce pointed out OER: > Cisco Optimized Edge Routing (OER) > http://www.cisco.com/en/US/netsol/ns471/networking_solutions_w > hite_paper09186a008022dbfa.shtml > http://www.cisco.com/en/US/netsol/ns471/netqa0900aecd800f5584.html > http://www.cisco.com/en/US/netsol/ns471/networking_solutions_p > ackage.html There's also Infiniroute, formerly Proficient Networks. (couldn't he'p mahself, Bruce) In any event, unless you're running your links at near capacity, I would say that occasional manual balancing (an hour once every few weeks or so) is a LOT less effort than implementing and caring for all the above new moving parts. Chris Affinity Internet

1 0

Weekly Routing Table Report
by Routing Table Analysis 03 Dec '04

03 Dec '04

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. Daily listings are sent to bgp-stats(a)lists.apnic.net If you have any comments please contact Philip Smith <pfs(a)cisco.com>. Routing Table Report 04:00 +10GMT Sat 04 Dec, 2004 Analysis Summary ---------------- BGP routing table entries examined: 151752 Prefixes after maximum aggregation: 89448 Unique aggregates announced to Internet: 72679 Total ASes present in the Internet Routing Table: 18567 Origin-only ASes present in the Internet Routing Table: 16109 Origin ASes announcing only one prefix: 7563 Transit ASes present in the Internet Routing Table: 2458 Transit-only ASes present in the Internet Routing Table: 75 Average AS path length visible in the Internet Routing Table: 4.5 Max AS path length visible: 17 Prefixes from unregistered ASNs in the Routing Table: 17 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 15 Number of addresses announced to Internet: 1358526564 Equivalent to 80 /8s, 249 /16s and 120 /24s Percentage of available address space announced: 36.7 Percentage of allocated address space announced: 59.2 Percentage of available address space allocated: 61.9 Total number of prefixes smaller than registry allocations: 70095 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 29464 Total APNIC prefixes after maximum aggregation: 14549 Prefixes being announced from the APNIC address blocks: 27528 Unique aggregates announced from the APNIC address blocks: 14403 APNIC Region origin ASes present in the Internet Routing Table: 2168 APNIC Region origin ASes announcing only one prefix: 653 APNIC Region transit ASes present in the Internet Routing Table: 332 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 16 Number of APNIC addresses announced to Internet: 168559616 Equivalent to 10 /8s, 12 /16s and 4 /24s Percentage of available APNIC address space announced: 76.9 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 23552-24575 APNIC Address Blocks 58/7, 60/7, 202/7, 210/7, 218/7, 220/7 and 222/8 ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 85877 Total ARIN prefixes after maximum aggregation: 52068 Prefixes being announced from the ARIN address blocks: 65712 Unique aggregates announced from the ARIN address blocks: 23613 ARIN Region origin ASes present in the Internet Routing Table: 9751 ARIN Region origin ASes announcing only one prefix: 3525 ARIN Region transit ASes present in the Internet Routing Table: 961 Average ARIN Region AS path length visible: 4.3 Max ARIN Region AS path length visible: 16 Number of ARIN addresses announced to Internet: 236361216 Equivalent to 14 /8s, 22 /16s and 150 /24s Percentage of available ARIN address space announced: 70.4 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647,29695-30719, 31744-33791 ARIN Address Blocks 24/8, 63/8, 64/6, 68/7, 70/7, 72/8, 198/7, 204/6, 208/7 and 216/8 RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 28470 Total RIPE prefixes after maximum aggregation: 19719 Prefixes being announced from the RIPE address blocks: 25326 Unique aggregates announced from the RIPE address blocks: 16552 RIPE Region origin ASes present in the Internet Routing Table: 6076 RIPE Region origin ASes announcing only one prefix: 3244 RIPE Region transit ASes present in the Internet Routing Table: 1039 Average RIPE Region AS path length visible: 5.1 Max RIPE Region AS path length visible: 17 Number of RIPE addresses announced to Internet: 181555968 Equivalent to 10 /8s, 210 /16s and 83 /24s Percentage of available RIPE address space announced: 63.7 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-34815 RIPE Address Blocks 62/8, 80/5, 88/8, 188/8, 193/8, 194/7, 212/7 and 217/8 LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 6688 Total LACNIC prefixes after maximum aggregation: 2409 Prefixes being announced from the LACNIC address blocks: 6518 Unique aggregates announced from the LACNIC address blocks: 4012 LACNIC Region origin ASes present in the Internet Routing Table: 407 LACNIC Region origin ASes announcing only one prefix: 121 LACNIC Region transit ASes present in the Internet Routing Table: 80 Average LACNIC Region AS path length visible: 5.0 Max LACNIC Region AS path length visible: 15 Number of LACNIC addresses announced to Internet: 16800512 Equivalent to 1 /8s, 0 /16s and 91 /24s Percentage of available LACNIC address space announced: 50.1 LACNIC AS Blocks 26592-26623, 27648-28671 LACNIC Address Blocks 200/7 Emerging AfriNIC Region Analysis Summary ---------------------------------------- Prefixes being announced by AfriNIC Region ASes: 1237 Total AfriNIC prefixes after maximum aggregation: 703 Prefixes being announced from the AfriNIC address blocks: 851 Unique aggregates announced from the AfriNIC address blocks: 670 AfriNIC Region origin ASes present in the Internet Routing Table: 93 AfriNIC Region origin ASes announcing only one prefix: 20 AfriNIC Region transit ASes present in the Internet Routing Table: 12 Average AfriNIC Region AS path length visible: 4.5 Max AfriNIC Region AS path length visible: 12 Number of AfriNIC addresses announced to Internet: 2088704 Equivalent to 0 /8s, 31 /16s and 223 /24s Percentage of available AfriNIC address space announced: 12.4 AfriNIC AS Blocks <none> AfriNIC Address Blocks 196/8 APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4134 862 4405 164 Data Communications Bureau 1221 792 1182 569 Telstra Pty Ltd 9583 557 47 40 Satyam Infoway Ltd., 4766 548 3409 270 Korea Internet Exchange for " 4755 397 134 71 Videsh Sanchar Nigam Ltd. Aut 17676 391 5868 57 XTAGE CORPORATION 9443 356 69 80 Primus Telecommunications 2907 354 1857 328 SINET Japan 9929 347 162 34 China Netcom Corp. 17557 323 23 158 Pakistan Telecom 703 322 350 247 UUNET 2764 284 272 232 connect.com.au pty ltd 7474 273 268 203 Optus Communications Pty Ltd 4802 233 28 141 Wantree Development 9800 232 381 71 CHINA UNICOM 9498 228 81 53 BHARTI BT INTERNET LTD. 7563 227 48 164 Korea Internet Infrastructure 10036 217 20 198 C&M Communication Co. Ltd. 17974 216 62 10 PT TELEKOMUNIKASI INDONESIA 4814 213 232 6 China Telecom (Group) ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7018 1424 6633 987 AT&T WorldNet Services 701 1067 8383 881 UUNET Technologies, Inc. 721 1040 21084 305 DLA Systems Automation Center 1239 949 2883 625 Sprint 2386 849 530 613 AT&T Data Communications Serv 6197 814 381 352 BellSouth Network Solutions, 4323 810 672 221 Time Warner Telecom 18566 754 208 6 Covad Communications 209 659 3426 510 Qwest 3356 636 10961 462 Level 3 Communications, LLC 20115 593 462 317 Charter Communications 3561 546 2368 414 Cable & Wireless USA 852 522 1142 403 Telus Advanced Communications 7843 478 726 88 Adelphia Corp. 7132 453 8292 385 SBC Internet Services 6198 445 378 203 BellSouth Network Solutions, 27364 443 36 19 Armstrong Cable Services 6478 442 782 95 AT&T Worldnet Services 5668 417 87 18 Century Telephone 22909 416 897 60 Comcast Cable Corporation RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 702 631 2024 522 UUNET - Commercial IP service 3320 303 2997 237 Deutsche Telekom AG 8220 280 464 265 COLT Internet - International 3301 279 1098 270 TeliaNet Sweden 21502 272 40 3 NUMERICABLE is a cabled netwo 680 251 2025 239 DFN-IP service G-WiN 3246 223 481 219 Song Networks 13083 217 51 8 Mannesmann Datenverarbeitung 1257 210 722 175 SWIPnet Swedish IP Network 8708 205 116 187 Romania Data Systems S.A. 5515 193 842 140 Sonera Solution Autonomous Sy 786 176 1794 176 The JANET IP Service 3215 163 972 78 France Telecom Transpac 8866 160 20 7 Bulgarian Telecommunication C 719 159 322 104 LANLINK autonomous system 6746 158 46 128 Dynamic Network Technologies, 3269 155 1329 69 TELECOM ITALIA 3300 155 167 79 AUCS Communications Services 25186 146 154 102 France Telecom Transpac's Tra 3303 132 611 128 Swisscom Ltd LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6140 350 139 79 ImpSat 8151 311 471 137 UniNet S.A. de C.V. 16814 218 14 6 NSS, S.A. 11172 214 99 55 Servicios Alestra S.A de C.V 6147 192 94 20 Telefonica Del Peru 11664 158 12 31 Keytech SA 7303 145 67 24 Telecom Argentina Stet-France 6505 139 90 96 Global One Communicaoes Ltda 6503 128 148 85 AVANTEL, S.A. 11992 103 9 31 Integrated Systems 14117 98 6 4 Telefonica del Sur S.A. 11556 97 48 3 Cable-Wireless Panama 11311 86 8 23 Sinectis S.A. 6535 83 5 24 Chilesat Servicios Empresari 13999 83 52 9 Mega Cable S.A. de C.V. 10481 82 32 7 Prima S.A. 14420 81 5 43 ANDINATEL S.A. 4270 80 18 9 Red de Interconexion Universi 5639 77 8 8 Telecommunications Services o 15311 77 23 37 Telefonica Empresas AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 3741 269 636 226 The Internet Solution 5536 111 16 4 Internet Egypt Network 2018 102 297 98 Tertiary Education Network 2905 84 273 76 The Internetworking Company o 20928 54 16 1 Noor Advanced Technologies AS 24835 42 34 7 RAYA Telecom - Egypt 6713 32 38 9 Itissalat Al-MAGHRIB 9129 30 3 2 UUNET Kenya 5713 28 141 25 Telkom SA Ltd 12455 22 6 4 Jambonet Autonomous system 16637 22 10 19 Johnnic e-Ventures 8524 18 1 5 AUCEGYPT Autonomous System 10798 18 1 12 Standard Bank of South Africa 12258 18 3 12 Vodacom Internet Company 8452 17 20 5 TEDATA 21280 16 2 3 Swift Global Kenya Ltd.Is an 8346 15 7 14 SONATEL-AS Autonomous System 15706 15 4 2 Sudatel Internet Exchange Aut 21491 14 1 3 UTL On-line is RF broadband I 15808 13 1 2 Communication Solutions Ltd i Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 18566 754 748 Covad Communications 721 1040 735 DLA Systems Automation Center 4134 862 698 Data Communications Bureau 4323 810 589 Time Warner Telecom 9583 557 517 Satyam Infoway Ltd., 6197 814 462 BellSouth Network Solutions, 27364 443 424 Armstrong Cable Services 5668 417 399 Century Telephone 7843 478 390 Adelphia Corp. 22773 406 385 Cox Communications, Inc. Atla 22909 416 356 Comcast Cable Corporation 6467 380 349 E.Spire Communications, Inc. 6478 442 347 AT&T Worldnet Services 17676 391 334 XTAGE CORPORATION 4755 397 326 Videsh Sanchar Nigam Ltd. Aut 1239 949 324 Sprint 9929 347 313 China Netcom Corp. 4355 392 293 EarthLink, Inc. 4766 548 278 Korea Internet Exchange for " 13609 312 278 Choice One Communications Inc List of Unregistered ASNs (Global) ---------------------------------- Bad AS Designation Network Transit AS Description 1877 UNALLOCATED 192.108.199.0/24 1876 Southern Methodist U 65512 PRIVATE 198.202.65.0/24 195 San Diego Supercompu 65512 PRIVATE 198.202.66.0/24 195 San Diego Supercompu 65512 PRIVATE 198.202.67.0/24 195 San Diego Supercompu 65512 PRIVATE 198.202.68.0/24 195 San Diego Supercompu 65512 PRIVATE 198.202.69.0/24 195 San Diego Supercompu 65512 PRIVATE 198.202.70.0/24 195 San Diego Supercompu 65512 PRIVATE 199.165.16.0/24 195 San Diego Supercompu 65512 PRIVATE 199.165.16.0/20 195 San Diego Supercompu 65512 PRIVATE 199.165.17.0/24 195 San Diego Supercompu 64512 PRIVATE 199.213.17.0/25 15296 Netera Alliance Inc. 64512 PRIVATE 199.213.17.128/25 15296 Netera Alliance Inc. 64512 PRIVATE 199.216.97.0/28 15296 Netera Alliance Inc. 65529 PRIVATE 216.21.199.0/24 14697 VDot.Net 33507 UNALLOCATED 216.94.118.0/24 701 UUNET Technologies, 65529 PRIVATE 216.152.237.0/24 14697 VDot.Net 65000 PRIVATE 217.68.56.0/22 29263 HAAGnet, municipalit Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 132.0.0.0/10 721 DLA Systems Automation Center 137.0.0.0/13 721 DLA Systems Automation Center 158.0.0.0/13 721 DLA Systems Automation Center 192.44.0.0/19 702 UUNET - Commercial IP service 192.70.164.0/24 25689 National Research Council of 192.83.16.0/20 5515 Sonera Solution Autonomous Sy 192.83.32.0/19 5515 Sonera Solution Autonomous Sy 192.83.96.0/22 5515 Sonera Solution Autonomous Sy 192.83.100.0/24 5515 Sonera Solution Autonomous Sy 192.84.205.0/24 719 LANLINK autonomous system 192.119.135.0/24 270 NASA 192.135.50.0/24 7018 AT&T WorldNet Services 192.136.79.0/24 719 LANLINK autonomous system 192.172.0.0/19 721 DLA Systems Automation Center 192.172.11.0/24 721 DLA Systems Automation Center Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:19 /9:3 /10:7 /11:15 /12:60 /13:139 /14:314 /15:559 /16:8181 /17:2291 /18:3990 /19:9932 /20:10519 /21:8105 /22:11184 /23:12768 /24:82780 /25:264 /26:240 /27:119 /28:60 /29:39 /30:120 /31:0 /32:44 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 18566 739 754 Covad Communications 6197 662 814 BellSouth Network Solutions, 2386 612 849 AT&T Data Communications Serv 7018 582 1424 AT&T WorldNet Services 27364 428 443 Armstrong Cable Services 9583 388 557 Satyam Infoway Ltd., 1239 387 949 Sprint 702 386 631 UUNET - Commercial IP service 4766 368 548 Korea Internet Exchange for " 5668 360 417 Century Telephone 6198 326 445 BellSouth Network Solutions, 6467 289 380 E.Spire Communications, Inc. 6517 281 304 Yipes Communications, Inc. 9929 277 347 China Netcom Corp. 20115 271 593 Charter Communications 13609 270 312 Choice One Communications Inc 21502 269 272 NUMERICABLE is a cabled netwo 4323 260 810 Time Warner Telecom 11456 256 301 Carolina Online, Inc. 3320 248 303 Deutsche Telekom AG Number of /24s announced per /8 block (Global) ---------------------------------------------- 4:4 8:10 12:1433 13:1 15:5 16:2 17:3 18:4 20:5 24:735 32:71 33:3 38:87 40:55 44:3 47:2 52:3 55:1 56:3 57:23 60:8 61:650 62:512 63:1852 64:2492 65:2078 66:2492 67:464 68:521 69:810 70:44 72:12 80:520 81:583 82:362 83:205 84:64 85:3 128:120 129:164 130:89 131:193 132:29 134:188 135:30 136:187 137:81 138:189 139:36 140:222 141:108 142:135 143:120 144:164 145:40 146:282 147:96 148:263 149:112 150:93 151:63 152:122 153:69 154:2 155:131 156:62 157:70 158:136 159:162 160:61 161:59 162:378 163:84 164:219 165:168 166:122 167:221 168:354 169:124 170:313 171:9 192:5672 193:2979 194:2204 195:1557 196:583 198:3894 199:3304 200:3876 201:28 202:4948 203:5784 204:3567 205:2078 206:2273 207:2591 208:2100 209:3063 210:1525 211:647 212:1168 213:1233 214:227 215:31 216:3725 217:1068 218:179 219:88 220:289 221:73 222:31 End of report

1 0

16-bit ASN kludge
by Edward B. Dreger 03 Dec '04

03 Dec '04

Perhaps transit networks should receive 16-bit ASNs. Leaf networks would use { a special ASN | I'm still brainstorming | who knows } and carry an "available upstreams" BGP tag for each upstream. Metrics are calculated for each transit AS. Those metrics are then combined with <as yet unspecified intelligence in "available upstreams" tag> for each leaf ASN. BGP loop detection might present a problem if all leaf ASNs use, say, 16-bit AS65535. If existing allowas-in is too coarse, refer to "32-bit ASN" BGP attribute for fine-grained control. In short: I'm trying to think up a mechanism that performs full Dijkstra calculations _only_ for transit networks, and uses some cheaper version for the degenerate case of a leaf network. Eddy -- Everquick Internet - http://www.everquick.net/ A division of Brotsman & Dreger, Inc. - http://www.brotsman.com/ Bandwidth, consulting, e-commerce, hosting, and network building Phone: +1 785 865 5885 Lawrence and [inter]national Phone: +1 316 794 8922 Wichita ________________________________________________________________________ DO NOT send mail to the following addresses: davidc(a)brics.com -*- jfconmaapaq(a)intc.net -*- sam(a)everquick.net Sending mail to spambait addresses is a great way to get blocked.

1 0

Load balancing outgoing connections automatically.
by Drew Weaver 03 Dec '04

03 Dec '04

Howdy. We're looking at upgrading our border router(s) from 7500s to (something) yet undetermined. What we would like to do is perhaps find a platform that is smart enough to not route more outgoing traffic across a circuit than it can handle. We have 4 outgoing links to the net at the moment. They all have the same amount of bandwidth, BGP tends to want to send all of the traffic out to the same two, so usually those two will carry 80-90% of our traffic while the other two will carry like 20-30% combined. So if the first two connections burst up a little bit, sometimes it can cause congestion its fairly rare; but any congestion is unacceptable as you all know. I know the way BGP works, it will use it rules to determine the way traffic will go. I was wondering if anyone has heard of any good ways to handle this becoming more well known within the last year or so I researched this last year and found that prepending and doing things manually is pretty much the only way to load balance it. (i.e. manually setting routes based on the best paths through our upstreams for each connected network) I really just want to tell my router to load balance it; since that is kind of what I'm paying $100,000 for in the first place, no? I've also heard of gear from companies like route science that could possibly achieve the same thing. But I've heard that it runs like $300,000 for a box, is there anything a bit smaller for companies within the oc-3 range? That could accompany my router? Any advice is greatly appreciated. Thanks, -Drew

2 1

Lycos pulls anti-spam screensaver from site
by Fergie (Paul Ferguson) 03 Dec '04

03 Dec '04

"Lycos Europe appeared to have pulled a controversial anti-spam screensaver program from its site on Friday, after coming under fire from both security experts and the spammers themselves." http://www.infoworld.com/article/04/12/03/HNlycospullsscreensaver_1.html - ferg -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net

2 1

RE: Load balancing outgoing connections automatically.
by kwallace＠pcconnection.com 03 Dec '04

03 Dec '04

Internap's (Sockeye/netVmg's) "FCP" Flow Contorl Platform might do the trick for you- Keith Wallace _____ From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] Sent: Friday, December 03, 2004 9:53 AM To: nanog(a)merit.edu Subject: Load balancing outgoing connections automatically. Howdy. We're looking at upgrading our border router(s) from 7500s to (something) yet undetermined. What we would like to do is perhaps find a platform that is smart enough to not route more outgoing traffic across a circuit than it can handle. We have 4 outgoing links to the net at the moment. They all have the same amount of bandwidth, BGP tends to want to send all of the traffic out to the same two, so usually those two will carry 80-90% of our traffic while the other two will carry like 20-30% combined. So if the first two connections burst up a little bit, sometimes it can cause congestion its fairly rare; but any congestion is unacceptable as you all know. I know the way BGP works, it will use it rules to determine the way traffic will go. I was wondering if anyone has heard of any good ways to handle this becoming more well known within the last year or so I researched this last year and found that prepending and doing things manually is pretty much the only way to load balance it. (i.e. manually setting routes based on the best paths through our upstreams for each connected network) I really just want to tell my router to load balance it; since that is kind of what I'm paying $100,000 for in the first place, no? I've also heard of gear from companies like route science that could possibly achieve the same thing. But I've heard that it runs like $300,000 for a box, is there anything a bit smaller for companies within the oc-3 range? That could accompany my router? Any advice is greatly appreciated. Thanks, -Drew

1 0

VeriSign Releases Domain Name Data
by Fergie (Paul Ferguson) 03 Dec '04

03 Dec '04

December 1, 2004 -- (WEB HOST INDUSTRY REVIEW) -- Internet security company and domain registry operator VeriSign Inc. (verisign.com) announced on Wednesday tiat it has released the Domain Name Industry Brief for the third quarter of 2004, noting the registration of 5.1 million new domain names during the quarter, the highest quarterly growth in Internet history. http://thewhir.com/marketwatch/ver120104.cfm - ferg -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net

2 1

Any additional info. on BT DDoS?
by Fergie (Paul Ferguson) 03 Dec '04

03 Dec '04

It would be interesting to know if anyone has any additional information (other than what was reported on CNet) on the reported DDoS on the BitTorrent servers on Wednesday.... http://news.com.com/BitTorrent+servers+under+attack/2100-7349_3-5473754.htm… - ferg -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net

1 0

RE: How many backbones here are filtering the makelovenotspam scr eensaver site?
by Chad Skidmore 03 Dec '04

03 Dec '04

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 > -----Original Message----- > From: Justin Ryburn [mailto:justin@ryburn.org] > Sent: Thursday, December 02, 2004 4:18 PM > To: Chad Skidmore; nanog(a)merit.edu > Subject: Re: How many backbones here are filtering the > makelovenotspam scr eensaver site? > > This is what scares me. Who determines the "bad guys?" I > don't know anyone over at Lycos so I have no trust (or lack > there of) in Lycos. Who is to say that Lycos won't decide > next month that Yahoo, Google, MSN, _insert your own network > here_ are "bad guys" and point the screen saver at them. Are > they likely to do it? Probably not; it would be a PR > nightmare for them. But who is to stop them? What if they > don't go so extreme and just point the screen saver at "gray > hat" hosts who are open relays or something? I agree 100%. I believe that I get to decide what is or is not "ok" traffic on my network. I define that in my AUP and customers agree to and understand that when they buy service from me. > My opinion (not that anyone asked) is retaliation is childish > and unprofessional. I remember the Internet before Spam, Also agree 100%. If there is traffic hitting my network that I don't believe is "ok" then I can choose not to carry that traffic on my network. It doesn't give me the right to attack the originator of that traffic or the person that I "believe" to be the originator of that traffic. That's why I am a very firm believer in the power of "ip route x.x.x.x y.y.y.y null0" command. :) Makes the problem go away for me (for the most part) and doesn't cause anyone else any pain as a result except my customers, who agreed to let me use that power when they purchased service from me. > botnets, DDOS, etc. > and dream of a day when these are "under control" again just > as much as the next geek. However, stooping to the level of > the miscreant is not the answer to the problem in my opinion. > > Justin Ryburn > justin(a)ryburn.org > > "Dance like nobody's watching; love like you've never been > hurt. Sing like nobody's listening; live like it's heaven on > earth." > -- Mark Twain - ---------------------------- Chad E Skidmore One Eighty Networks, Inc. http://www.go180.net 509-688-8180 -----BEGIN PGP SIGNATURE----- Version: PGP 8.1 iQA/AwUBQa+yXU2RUJ5udBnvEQLX1gCglUjYXtQXyrSMFdfsQeZg9beq/xsAoI/C jOJ77EI+PIQs01sPNEnBphWK =ZScz -----END PGP SIGNATURE-----

6 6