- NANOG - lists.nanog.org

Anyone from Draftkings.com on here?
by Matthew Crocker 29 Dec '20

29 Dec '20

Hoping someone from Draftkings.com is on this list. If so, please message me directly so I can get a subnet block cleared up. Thanks -Matt

1 0

WP: Nashville bombing is a potent reminder that communications systems remain at risk from attack
by Sean Donelan 29 Dec '20

29 Dec '20

A bunch of quotes from former government officials. Not much from industry. https://www.washingtonpost.com/national-security/nashville-bombing-is-a-pot… Nashville bombing is a potent reminder that communications systems remain at risk from attack [...] Experts applauded the telecommunications giant for responding quickly to the explosion by deploying portable cellular sites to help restore some service. But they were alarmed by the widespread nature of the outages, both in terms of geography as well as the variety of services affected. Key to constructing systems that can withstand attacks and natural disasters — and recover quickly — is avoiding a single point of failure, they said. [...]

1 0

Re: 10g residential CPE
by Aaron Wendel 28 Dec '20

28 Dec '20

One. For an employee. Primarily just to say we had done it. :) Aaron On 12/26/2020 4:15 PM, Lady Benjamin PD Cannon wrote: > Have you done any 100g Residential connections? > > —L.B. > > Lady Benjamin PD Cannon, ASCE > 6x7 Networks & 6x7 Telecom, LLC > CEO > ben(a)6by7.net <mailto:ben@6by7.net> > "The only fully end-to-end encrypted global telecommunications company > in the world.” > FCC License KJ6FJJ > > >> On Dec 26, 2020, at 10:30 AM, Aaron Wendel >> <aaron(a)wholesaleinternet.net <mailto:aaron@wholesaleinternet.net>> wrote: >> >> We run MikroTik RB4011s for residential speeds between 1G and 10G or >> just supply a media converter. For residential 40G and 100G we just >> drop in Arista or Extreme switches. SMBs are normally just a media >> converter or direct fiber handoff. >> >> https://mikrotik.com/product/rb4011igs_5hacq2hnd_in >> <https://mikrotik.com/product/rb4011igs_5hacq2hnd_in> >> >> There are not a lot of options for good, off the shelf 10G CPE >> equipment. The handful of 10G residential customers we have seem to >> be happy with the tik. The couple that don’t use it have rolled >> their own solution. >> >> Like anything, I’m sure once the major home broadband providers start >> to catch up with us smaller guys the vendors will catch up as well. >> >> https://www.kcfiber.com/residential <https://www.kcfiber.com/residential> >> >> Aaron >> >> >>> On Dec 26, 2020, at 11:53 AM, Mel Beckman <mel(a)beckman.org >>> <mailto:mel@beckman.org>> wrote: >>> >>> >>>> i really don't get what the problem is. it's like they're being >>>> deliberately obtuse. >>> >>> Michael, >>> >>> If vendors saw a 10GbE CPE market, they would serve it. Obviously >>> they don’t see a market. Why don’t people insisting vendors build >>> their hobby horse see that? It’s like they’re being deliberately >>> obtuse :) >>> >>> -mel via cell >>> >>>> On Dec 26, 2020, at 9:16 AM, Michael Thomas <mike(a)mtcc.com >>>> <mailto:mike@mtcc.com>> wrote: >>>> >>>> >>>>> On 12/26/20 8:00 AM, Valdis Klētnieks wrote: >>>>> >>>>> Anybody got a feel for what percent of the third-party gear >>>>> currently sold to >>>>> consumers has sane bufferbloat support in 2020, when we've *known* >>>>> that >>>>> de-bufferbloated gear is a viable differentiatior if marketed >>>>> right (consider the >>>>> percent of families that have at least one gamer who cares)? >>>>> >>>> I don't know percentages, but just trying to find cpe that support >>>> it in their specs is depressingly small. considering that they're >>>> all using linux and queuing discipline software is ages old, i >>>> really don't get what the problem is. it's like they're being >>>> deliberately obtuse. given all of the zoom'ing happening now you >>>> think that somebody would hit them with the clue-bat that this is a >>>> marketing opportunity. >>>> >>>> Mike >>>> > -- ================================================================ Aaron Wendel Chief Technical Officer Wholesale Internet, Inc. (AS 32097) (816)550-9030 http://www.wholesaleinternet.com ================================================================

1 0

Re: [External] Re: 10g residential CPE
by Mark Tinka 26 Dec '20

26 Dec '20

On 12/26/20 13:41, Nuno Vieira wrote: > Once upon a time a wise main said “Who in their right mind would ever > need more than 640k of ram?” While everyone will take a chance at using this line at some point in a computing career, it's somewhat disingenuous to compare (or equate) the 640KB of RAM to anything today. There is always bare minimums we must hit before any additional infrastructure does not yield any further value. In economics, I believe it's called the Law of Diminishing Returns. 640KB may not be sufficient for any personal device today. However, what would you do with 256GB of RAM on your computer that you can't do with 64GB, in a home/domestic setting, as an average user? Yes, 1Mbps of bandwidth is likely too small for today's Internet, but what would you do with 10Gbps that you can't with, say, 750Mbps? Maybe we shall have VR on our devices which will make Zoom much more pleasant to use, but for as long as you don't see any 10Gbps CPE or XG-PON roll-outs happening en masse, that should signal something to you. There was a time when the number of megapixels on a phone or camera was the most important thing. That doesn't matter anymore, to the point of actually more megapixels returning poorer image quality. Just compare a photo taken in WhatsApp vs. a photo taken in Apple's native Camera app, same device. The smarts aren't in the hardware anymore. Similarly, while 10Gbps to the home may have sounded completely noteworthy in 2005, surprisingly, perhaps less so in 2020. Likely because the way the Internet works, how data is delivered, how it is stored, the role of the device, e.t.c., all make the case for either more bandwidth (on the provider/backbone side) or less bandwidth (on the consumer side). Mark.

1 0

Re: [External] Re: 10g residential CPE
by Mark Tinka 26 Dec '20

26 Dec '20

On 12/26/20 13:41, Nuno Vieira wrote: > Once upon a time a wise main said “Who in their right mind would ever need more than 640k of ram?” While everyone will take a chance at using this line at some point in a computing career, it's somewhat disingenuous to compare (or equate) the 640KB of RAM to anything today. There is always bare minimums we must hit before any additional infrastructure does not yield any further value. In economics, I believe it's called the Law of Diminishing Returns. 640KB may not be sufficient for any personal device today. However, what would you do with 256GB of RAM on your computer that you can't do with 64GB, in a home/domestic setting, as an average user? Yes, 1Mbps of bandwidth is likely too small for today's Internet, but what would you do with 10Gbps that you can't with, say, 750Mbps? Maybe we shall have VR on our devices which will make Zoom much more pleasant to use, but for as long as you don't see any 10Gbps CPE or XG-PON roll-outs happening en masse, that should signal something to you. There was a time when the number of megapixels on a phone or camera was the most important thing. That doesn't matter anymore, to the point of actually more megapixels returning poorer image quality. Just compare a photo taken in WhatsApp vs. a photo taken in Apple's native Camera app, same device. The smarts aren't in the hardware anymore. Similarly, while 10Gbps to the home may have sounded completely noteworthy in 2005, surprisingly, perhaps less so in 2020. Likely because the way the Internet works, how data is delivered, how it is stored, the roll of the device, e.t.c., all make the case for either more bandwidth (on the provider/backbone side) or less bandwidth (on the consumer side). Mark.

1 0

Weekly Routing Table Report
by cscora＠apnic.net 25 Dec '20

25 Dec '20

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 26 Dec, 2020 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 834627 Prefixes after maximum aggregation (per Origin AS): 319962 Deaggregation factor: 2.61 Unique aggregates announced (without unneeded subnets): 399619 Total ASes present in the Internet Routing Table: 70194 Prefixes per ASN: 11.89 Origin-only ASes present in the Internet Routing Table: 60341 Origin ASes announcing only one prefix: 24973 Transit ASes present in the Internet Routing Table: 9853 Transit-only ASes present in the Internet Routing Table: 301 Average AS path length visible in the Internet Routing Table: 4.4 Max AS path length visible: 203 Max AS path prepend of ASN (396896) 200 Prefixes from unregistered ASNs in the Routing Table: 1050 Number of instances of unregistered ASNs: 1053 Number of 32-bit ASNs allocated by the RIRs: 34527 Number of 32-bit ASNs visible in the Routing Table: 28671 Prefixes from 32-bit ASNs in the Routing Table: 132240 Number of bogon 32-bit ASNs visible in the Routing Table: 23 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 522 Number of addresses announced to Internet: 2863188352 Equivalent to 170 /8s, 168 /16s and 201 /24s Percentage of available address space announced: 77.3 Percentage of allocated address space announced: 77.3 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.5 Total number of prefixes smaller than registry allocations: 284081 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 218461 Total APNIC prefixes after maximum aggregation: 64434 APNIC Deaggregation factor: 3.39 Prefixes being announced from the APNIC address blocks: 214540 Unique aggregates announced from the APNIC address blocks: 87588 APNIC Region origin ASes present in the Internet Routing Table: 11144 APNIC Prefixes per ASN: 19.25 APNIC Region origin ASes announcing only one prefix: 3167 APNIC Region transit ASes present in the Internet Routing Table: 1610 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 31 Number of APNIC region 32-bit ASNs visible in the Routing Table: 6283 Number of APNIC addresses announced to Internet: 777992448 Equivalent to 46 /8s, 95 /16s and 57 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-143673 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 240552 Total ARIN prefixes after maximum aggregation: 111516 ARIN Deaggregation factor: 2.16 Prefixes being announced from the ARIN address blocks: 240984 Unique aggregates announced from the ARIN address blocks: 115437 ARIN Region origin ASes present in the Internet Routing Table: 18692 ARIN Prefixes per ASN: 12.89 ARIN Region origin ASes announcing only one prefix: 6825 ARIN Region transit ASes present in the Internet Routing Table: 1918 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 203 Number of ARIN region 32-bit ASNs visible in the Routing Table: 3631 Number of ARIN addresses announced to Internet: 1092682240 Equivalent to 65 /8s, 33 /16s and 2 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 237678 Total RIPE prefixes after maximum aggregation: 112162 RIPE Deaggregation factor: 2.12 Prefixes being announced from the RIPE address blocks: 233540 Unique aggregates announced from the RIPE address blocks: 137882 RIPE Region origin ASes present in the Internet Routing Table: 27597 RIPE Prefixes per ASN: 8.46 RIPE Region origin ASes announcing only one prefix: 11858 RIPE Region transit ASes present in the Internet Routing Table: 3885 Average RIPE Region AS path length visible: 4.4 Max RIPE Region AS path length visible: 38 Number of RIPE region 32-bit ASNs visible in the Routing Table: 9778 Number of RIPE addresses announced to Internet: 709773952 Equivalent to 42 /8s, 78 /16s and 74 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 112175 Total LACNIC prefixes after maximum aggregation: 26265 LACNIC Deaggregation factor: 4.27 Prefixes being announced from the LACNIC address blocks: 113301 Unique aggregates announced from the LACNIC address blocks: 47952 LACNIC Region origin ASes present in the Internet Routing Table: 10631 LACNIC Prefixes per ASN: 10.66 LACNIC Region origin ASes announcing only one prefix: 2637 LACNIC Region transit ASes present in the Internet Routing Table: 1989 Average LACNIC Region AS path length visible: 4.9 Max LACNIC Region AS path length visible: 33 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8227 Number of LACNIC addresses announced to Internet: 173972736 Equivalent to 10 /8s, 94 /16s and 157 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-272796 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 24709 Total AfriNIC prefixes after maximum aggregation: 4830 AfriNIC Deaggregation factor: 5.12 Prefixes being announced from the AfriNIC address blocks: 31740 Unique aggregates announced from the AfriNIC address blocks: 10335 AfriNIC Region origin ASes present in the Internet Routing Table: 1424 AfriNIC Prefixes per ASN: 22.29 AfriNIC Region origin ASes announcing only one prefix: 485 AfriNIC Region transit ASes present in the Internet Routing Table: 285 Average AfriNIC Region AS path length visible: 5.2 Max AfriNIC Region AS path length visible: 29 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 752 Number of AfriNIC addresses announced to Internet: 108327936 Equivalent to 6 /8s, 116 /16s and 244 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7545 5680 777 659 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4744 4192 73 ERX-CERNET-BKB China Education and Rese 7552 3542 1330 21 VIETEL-AS-AP Viettel Group, VN 7713 3234 952 519 TELKOMNET-AS-AP PT Telekomunikasi Indon 45899 2860 1896 55 VNPT-AS-VN VNPT Corp, VN 9808 2589 9044 57 CMNET-GD Guangdong Mobile Communication 4766 2405 11105 563 KIXS-AS-KR Korea Telecom, KR 9498 2296 466 233 BBIL-AP BHARTI Airtel Ltd., IN 4755 2133 441 189 TATACOMM-AS TATA Communications formerl 45090 2067 1045 63 CNNIC-TENCENT-NET-AP Shenzhen Tencent C Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 11492 4767 316 692 CABLEONE, US 16509 4547 9071 2107 AMAZON-02, US 7155 4022 264 32 VIASAT-SP-BACKBONE, US 22773 3774 3008 211 ASN-CXA-ALL-CCI-22773-RDC, US 6327 3357 1319 83 SHAW, CA 16625 3160 1656 2273 AKAMAI-AS, US 209 2522 5058 508 CENTURYLINK-US-LEGACY-QWEST, US 30036 2489 369 123 MEDIACOM-ENTERPRISE-BUSINESS, US 5650 2336 2984 1643 FRONTIER-FRTR, US 20115 2163 2898 509 CHARTER-20115, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 47331 6258 852 3605 TTNET, TR 12479 6214 1667 141 UNI2-AS, ES 39891 3460 195 23 ALJAWWALSTC-AS, SA 20940 3318 3345 198 AKAMAI-ASN1, NL 8551 3209 379 45 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 12389 2875 2280 887 ROSTELECOM-AS, RU 9009 2238 230 1227 M247, GB 34984 2174 354 578 TELLCOM-AS, TR 13188 1611 100 23 TRIOLAN, UA 58224 1467 857 550 TCI, IR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8140 3400 588 Uninet S.A. de C.V., MX 10620 3389 526 598 Telmex Colombia S.A., CO 11830 2564 369 63 Instituto Costarricense de Electricidad 13999 1605 432 408 Mega Cable, S.A. de C.V., MX 6503 1438 311 475 Axtel, S.A.B. de C.V., MX 7303 1437 911 263 Telecom Argentina S.A., AR 28573 1374 2260 220 CLARO S.A., BR 6147 1147 379 39 Telefonica del Peru S.A.A., PE 3816 1115 537 152 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 11664 1008 213 417 Techtel LMDS Comunicaciones Interactiva Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1566 393 22 LINKdotNET-AS, EG 24835 1287 478 26 RAYA-AS, EG 36992 1162 1526 155 ETISALAT-MISR, EG 36903 970 506 106 MT-MPLS, MA 29571 707 68 12 ORANGE-COTE-IVOIRE, CI 6713 533 1863 34 IAM-AS, MA 36935 466 522 40 Vodafone-, EG 23889 454 232 16 MauritiusTelecom, MU 15399 440 46 16 WANANCHI-, KE 37342 420 32 1 MOVITEL, MZ Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8140 3400 588 Uninet S.A. de C.V., MX 47331 6258 852 3605 TTNET, TR 12479 6214 1667 141 UNI2-AS, ES 7545 5680 777 659 TPG-INTERNET-AP TPG Telecom Limited, AU 11492 4767 316 692 CABLEONE, US 4538 4744 4192 73 ERX-CERNET-BKB China Education and Rese 16509 4547 9071 2107 AMAZON-02, US 7155 4022 264 32 VIASAT-SP-BACKBONE, US 22773 3774 3008 211 ASN-CXA-ALL-CCI-22773-RDC, US 7552 3542 1330 21 VIETEL-AS-AP Viettel Group, VN Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 12479 6214 6073 UNI2-AS, ES 7545 5680 5021 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4744 4671 ERX-CERNET-BKB China Education and Research Net 11492 4767 4075 CABLEONE, US 7155 4022 3990 VIASAT-SP-BACKBONE, US 22773 3774 3563 ASN-CXA-ALL-CCI-22773-RDC, US 7552 3542 3521 VIETEL-AS-AP Viettel Group, VN 39891 3460 3437 ALJAWWALSTC-AS, SA 6327 3357 3274 SHAW, CA 8551 3209 3164 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 174 COGENT-174, US 18604 UNALLOCATED 8.25.204.0/24 3356 LEVEL3, US 32985 UNALLOCATED 8.28.31.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 174 COGENT-174, US 23061 UNALLOCATED 8.39.119.0/24 3356 LEVEL3, US 395438 UNALLOCATED 8.42.206.0/24 3356 LEVEL3, US 46766 UNALLOCATED 8.44.208.0/24 3356 LEVEL3, US 40544 UNALLOCATED 12.0.33.0/24 6461 ZAYO-6461, US 393489 UNALLOCATED 12.7.109.0/24 7018 ATT-INTERNET4, US Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.133.192.0/24 Origin: 16734 UNASSIGNED Transit: 266201 RNV CORP EIRELI, BR 23.141.0.0/24 Origin: 395350 UNASSIGNED Transit: 11426 TWC-11426-CAROLINAS, US 23.142.80.0/24 Origin: 3803 RCN-AS1, US Transit: 398481 REDMERCURY, US 27.100.7.0/24 Origin: 56096 UNASSIGNED Transit: 45455 TH-2S1N-AP Two S One N Co Ltd, Internet 27.126.156.0/22 Origin: 55827 UNASSIGNED Transit: 9930 TTNET-MY TIME dotCom Berhad No. 14, Jala Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:8 /9:13 /10:40 /11:101 /12:292 /13:579 /14:1175 /15:1931 /16:13458 /17:8257 /18:13689 /19:25574 /20:41488 /21:50540 /22:103454 /23:88035 /24:484705 /25:1288 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 47331 5541 6258 TTNET, TR 12479 5184 6214 UNI2-AS, ES 11492 3817 4767 CABLEONE, US 6327 3152 3357 SHAW, CA 7155 3111 4022 VIASAT-SP-BACKBONE, US 22773 2884 3774 ASN-CXA-ALL-CCI-22773-RDC, US 39891 2802 3460 ALJAWWALSTC-AS, SA 8151 2765 8140 Uninet S.A. de C.V., MX 8551 2670 3209 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 30036 2221 2489 MEDIACOM-ENTERPRISE-BUSINESS, US Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1881 2:1167 3:38 4:18 5:3587 6:54 8:1493 9:1 11:1 12:1741 13:350 14:2405 15:75 16:13 17:308 18:93 20:113 23:4147 24:2365 25:3 27:2339 31:2174 32:112 34:1 35:35 36:1141 37:3539 38:2010 39:462 40:150 41:3849 42:880 43:2095 44:235 45:14675 46:3580 47:321 49:1605 50:1688 51:89 52:1126 54:216 55:690 56:6 57:57 58:1683 59:1146 60:817 61:2322 62:2197 63:2005 64:5220 65:2377 66:5109 67:2951 68:1172 69:4097 70:1397 71:685 72:3094 74:2537 75:1457 76:692 77:1982 78:3188 79:2472 80:1918 81:1637 82:1297 83:1094 84:1255 85:3092 86:621 87:1793 88:2418 89:2884 90:396 91:7184 92:1593 93:2555 94:2918 95:4152 96:1228 97:342 98:966 99:976 100:90 101:1054 102:1222 103:25096 104:3620 105:393 106:771 107:2184 108:690 109:3762 110:1998 111:2349 112:1664 113:1560 114:1426 115:1856 116:1864 117:2118 118:2293 119:1872 120:952 121:1052 122:2297 123:2157 124:1631 125:2138 128:1310 129:1266 130:774 131:1989 132:726 133:312 134:1391 135:326 136:687 137:884 138:2293 139:1171 140:736 141:1163 142:1049 143:1231 144:1211 145:340 146:1387 147:1209 148:2162 149:1246 150:757 151:1202 152:1608 153:445 154:2111 155:1263 156:1341 157:1150 158:903 159:2036 160:2053 161:1078 162:3220 163:934 164:1435 165:1318 166:602 167:1731 168:3621 169:632 170:4371 171:757 172:2029 173:2910 174:975 175:1061 176:2918 177:4449 178:2802 179:1878 180:2277 181:2582 182:3163 183:1518 184:2409 185:17616 186:4023 187:3051 188:3224 189:2690 190:9080 191:1423 192:10587 193:7874 194:6424 195:4570 196:3114 197:2207 198:6018 199:5948 200:7313 201:5279 202:10540 203:10180 204:4649 205:3094 206:3286 207:3320 208:3984 209:4621 210:4205 211:2105 212:3608 213:3198 214:1185 215:61 216:6132 217:2481 218:900 219:643 220:2088 221:934 222:987 223:1705 End of report

1 0

Announcing UKNOF46
by James Bensley 23 Dec '20

23 Dec '20

Dear Colleagues, We are pleased to announce UKNOF46, taking place online, on 19th January followed by an online social event. The meeting website is live and both the Call for Presentations and Registrations are now open. [ REGISTRATION ] There are a limited number of Free Registration spaces - 50 in total. Paid tickets are £50 each including VAT and the Eventbrite fee. You may also pay extra as an add-on to your registration. Registration is required to participate in the meeting. A recording of the proceedings will be made available on the UKNOF YouTube channel for viewing at a later time. Please register via: <https://uknof.uk/register46> [ CALL FOR PRESENTATIONS ] The Programme Committee are seeking content for UKNOF46, which takes place online, from the community for this meeting. UKNOF's remit is "distribution of clue", and for our first meeting of 2021, we are looking for content which is both operationally timely and our 'normal' operational remit. The whole session is planned for 3 - 5 hours. We are looking for a mix of formats * 15 or 25 minute presentations (with 5 minutes for Q&A) * 5 minute lightning talks (no Q&A) * 45 minute panel sessions We are keen for talks and panels in these subject areas: * 2020 retrospective and forward looking to 2021 * Confessions & War Stories / Lessons learnt from the field * Data centre design and operations * DNS infrastructure * Impact of public policy of network operations * IPv6 deployment * Network Automation and Tooling including SDN, Open Source initiatives * Network hardware/software/configuration architecture, design and operations * Open protocol standards and best practise initiatives * Peering and interconnection / routing. * Personal/Network security, inclusiveness and abuse prevention Please submit your proposals at <https://uknof.uk/cfp46> **Submissions** are welcome at any time, but for UKNOF46 we would like to have them **no later than 7 January 2021** (We have published an initial set of accepted talks in the "Confirmed Speakers" section on the meeting website <https://uknof.uk/46>. Our expected timeline is: 7 December 2020 - Submissions open via Indico 18 December 2020 - Initial Submission Deadline 22 December 2020 - Initial Contribution list published 7 January 2021 - Final Deadline for submission (23:59 GMT) 12 January 2021 - Full agenda published 13 January 2021- Deadline for slides submission and planned rehearsal date 19 January 2021 - Meeting Information for speakers about presenting and what to expect at UKNOF is available at <https://wiki.uknof.org.uk/Speaker_Information> Additional information for speakers of UKNOF46: * your talk will be live broadcast and recorded for future reference * your presentation slides will be available for delegates and others to download and refer to, before, during and after the meeting * you will be expected to attend a rehearsal in the week running up to the workshop. This has been tentatively scheduled for Wednesday 13 January. It would be very useful to have your slides (even if draft) ready for this. To preserve editorial neutrality, the UKNOF PC does not accept abstract submissions for presentations by commercial organisations that are also sponsors of the same UKNOF event. If you would like one of our sponsored presentation slots, please contact [sponsor(a)uknof.org.uk] UKNOF is run on a non-profit basis and is not in a position to reimburse expenses or time for speakers at its meetings. Regards James UKNOF Programme Committee Member

1 0

Sonicwall GEoIP Database
by Justin Wilson (Lists) 23 Dec '20

23 Dec '20

Does anyone know what GEoIP database sonic wall uses? Their tech support has been horrid. We are not a customer but getting customers who are getting blocked by some sonic walls due to “unknot” country for GeoIP. I have checked the ips against the database providers listed at: https://thebrotherswisp.com/index.php/geo-and-vpn/ <https://thebrotherswisp.com/index.php/geo-and-vpn/> All checkout okay so looking for what SOnicWall uses. Justin Wilson j2sw(a)mtin.net — https://j2sw.com - All things jsw (AS209109) https://blog.j2sw.com - Podcast and Blog

1 0

Telus Technical Network Contact
by Adam Burnworth 21 Dec '20

21 Dec '20

Hello All! I am hoping to find a Technical network contact inside Telus; I have reached out to the listed address on their ARIN records a couple of times, and haven't heard back. If someone can point me in the right direction, it would be much appreciated. Thank you! Adam Burnworth (he/him) Terrestrial Network Engineer adam.burnworth(a)spacex.com<mailto:adam.burnworth@spacex.com> SpaceX Starlink

1 0

Unexplainable router log entries mentioning IPSEC from Yahoo IPs
by Frank Bulk 19 Dec '20

19 Dec '20

Curious if someone can point me in the right direction. In the last three days our core router (Cisco 7609) has logged the following events: Dec 16 19:04:59.027 CST: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=<redacted>, prot=50, spi=0xEF7ED795(4018067349), srcaddr=68.180.160.18, input interface=Vlan20 Dec 16 20:41:47.822 CST: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=<redacted>, prot=50, spi=0xEF7ED795(4018067349), srcaddr=203.84.212.18, input interface=Vlan20 Dec 16 21:28:12.667 CST: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=<redacted>, prot=50, spi=0xEF7ED795(4018067349), srcaddr=68.180.160.36, input interface=Vlan21 Dec 16 22:22:40.558 CST: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=<redacted>, prot=50, spi=0xEF7ED795(4018067349), srcaddr=68.180.160.104, input interface=Vlan21 Dec 16 22:42:17.404 CST: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=<redacted>, prot=50, spi=0xEF7ED795(4018067349), srcaddr=68.180.160.104, input interface=Vlan20 Dec 17 00:04:34.704 CST: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=<redacted>, prot=50, spi=0xEF7ED795(4018067349), srcaddr=68.180.160.34, input interface=Vlan21 Dec 17 00:05:41.656 CST: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=<redacted>, prot=50, spi=0xEF7ED795(4018067349), srcaddr=68.180.160.103, input interface=Vlan20 Dec 17 08:54:29.583 CST: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=<redacted>, prot=50, spi=0x4CF4BE5D(1291107933), srcaddr=68.180.160.104, input interface=Vlan21 Dec 17 09:20:31.881 CST: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=<redacted>, prot=50, spi=0x4CF4BE5D(1291107933), srcaddr=68.180.160.37, input interface=Vlan21 Dec 17 19:45:29.615 CST: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=<redacted>, prot=50, spi=0x4CF4BE5D(1291107933), srcaddr=203.84.212.36, input interface=Vlan20 Dec 17 19:59:52.663 CST: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=<redacted>, prot=50, spi=0x4CF4BE5D(1291107933), srcaddr=203.84.212.24, input interface=Vlan20 Dec 17 23:20:02.869 CST: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=<redacted>, prot=50, spi=0x4CF4BE5D(1291107933), srcaddr=68.180.160.99, input interface=Vlan21 Dec 18 00:15:19.536 CST: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=<redacted>, prot=50, spi=0x4CF4BE5D(1291107933), srcaddr=203.84.212.53, input interface=Vlan21 Dec 18 00:43:00.158 CST: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=<redacted>, prot=50, spi=0x4CF4BE5D(1291107933), srcaddr=68.180.160.101, input interface=Vlan20 Dec 18 00:44:52.018 CST: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=<redacted>, prot=50, spi=0x4CF4BE5D(1291107933), srcaddr=68.180.160.100, input interface=Vlan21 All the destination IP addresses are in one of two categories: - router interface - inactive IP (no ARP entry) Vlans 20 and 21 are the Vlans facing our two edge/border routers. If I do a PTR lookup of each source IP, they're all some kind of cryptographic server in Yahoo's network: 203.84.212.18|18.212.84.203.in-addr.arpa domain name pointer lo301.cry1.sg3.yahoo.com. 203.84.212.24|24.212.84.203.in-addr.arpa domain name pointer lo303.cry2.sg3.yahoo.com. 203.84.212.36|36.212.84.203.in-addr.arpa domain name pointer lo303.cry1.tw1.yahoo.com. 203.84.212.53|53.212.84.203.in-addr.arpa domain name pointer lo300.cry2.tp2.yahoo.com. 68.180.160.100|100.160.180.68.in-addr.arpa domain name pointer lo303.cry1.md2.yahoo.com. 68.180.160.101|101.160.180.68.in-addr.arpa domain name pointer lo300.cry2.md2.yahoo.com. 68.180.160.103|103.160.180.68.in-addr.arpa domain name pointer lo302.cry2.md2.yahoo.com. 68.180.160.104|104.160.180.68.in-addr.arpa domain name pointer lo303.cry2.md2.yahoo.com. 68.180.160.18|18.160.180.68.in-addr.arpa domain name pointer lo301.cry1.ne1.yahoo.com. 68.180.160.34|34.160.180.68.in-addr.arpa domain name pointer lo301.cry1.bf1.yahoo.com. 68.180.160.36|36.160.180.68.in-addr.arpa domain name pointer lo303.cry1.bf1.yahoo.com. 68.180.160.37|37.160.180.68.in-addr.arpa domain name pointer lo300.cry2.bf1.yahoo.com. 68.180.160.99|99.160.180.68.in-addr.arpa domain name pointer lo302.cry1.md2.yahoo.com. Any idea what's going on here? It's as if our 7600 is inspecting this traffic (presumably because it's not transit, it's being processed by the CPU) and seeing something special about it. Even if the router is not behaving correctly, why is Yahoo sending that kind of traffic to those IPs? Frank AS53347

6 5