- NANOG - lists.nanog.org

Linux router network cards
by micah anderson 23 Oct '20

23 Oct '20

I'm looking around for networking cards to build a linux based router. It needs to be able to do XDP, multiqueues, have good in-kernel driver support and be able to handle 10Gbe with good offloading for dealing with high packets per second. What features should I be looking for to really optimize things for a three transit setup, with full tables. Something like the Intel XL710-QDA2 card maybe? -- micah

11 15

AS33132 / Crown Castle pulling a Lumen
by Adam Korab 23 Oct '20

23 Oct '20

If anybody that can help with CCF continuing to announce a prefix four hours after the originating session was shutdown, please contact me unicast. A ticket has been opened with their NOC but progress is not forthcoming. Thanks, Adam

1 0

APOLOGIES: QB server hiccups
by Paul Nash 22 Oct '20

22 Oct '20

Autocorrect changed a misspelled recipient to “nanog”. paul (grovelling for forgiveness)

2 1

QB server hiccups
by Paul Nash 22 Oct '20

22 Oct '20

After an outage yesterday, I am trying to streamline and simplify the St Felix QB setup to make it more reliable and easier to administer. The most critical factor that influences the overall design is the realistic maximum number of simultaneous users. If we can live with a maximum of two users logged on at any one time, I can simplify the system dramatically, which will streamline operations and improve reliability. If we need to have more than two users logged at any time, then we need the current setup, with its various woes. The problem are not insurmountable, but the system is more complex. FWIW, a quick check looks like Shan has been the only active user for the past couple of months, but I may be wrong. Either way, I need to overhaul some parts of the current setup, which was thrown together in an enormous rush. Once I know what parts we are going to follow, I will make appropriate plans and let everyone know. Yesterday’s problems were caused by the combination of Techsoup and Microsoft. Licenses that I ordered and paid for were not delivered correctly, leading to the QB server shutting down at an inopportune time. After restoring the server, reverting to trial licenses, I spoke to MS tech support, who suggested that we start all over again purchasing the TS licenses. They also suggested that we just buy them directly from MS at full retail price, which is not much more that the Techsoup price. Right now, we should be good for a couple of months, but I want to prevent any similar issues in future, and even the regular jumping-through-hoops that I have been doing up until now to keen the current system running. The first issue to resolving this and improving long-term reliability, is to decide how many simultaneous users we realistically need. The rest will flow from that. Regards paul

1 1

Amazon Prime Video Contact?
by Ryan Gard 22 Oct '20

22 Oct '20

Hello, I'm looking to catch someone off list who could look into some issues we're noticing since yesterday evening with some of our residential IP blocks being marked as a VPN or Proxying service. Unfortunately, our old contact for this may no longer be with the company. Alternatively, if anybody has dealt with this more recently and has had success in resolving this issue quickly, I'm all ears! Regards, -- Ryan Gard

2 1

Vint Cerf & Interplanetary Internet
by Rod Beck 22 Oct '20

22 Oct '20

https://www.quantamagazine.org/vint-cerfs-plan-for-building-an-internet-in-… Roderick Beck VP of Business Development United Cable Company www.unitedcablecompany.com<http://www.unitedcablecompany.com> New York City & Budapest rod.beck(a)unitedcablecompany.com Budapest: 36-70-605-5144 NJ: 908-452-8183 [1467221477350_image005.png]

11 12

AS203 (CenturyLink/Qwest/Level3/Lumen) hijack report
by Töma Gavrichenkov 22 Oct '20

22 Oct '20

Peace, Following up on the today's massive partial network outage, here's the analysis of what actually happened with the AS203's hijack, which is the first one for the newly founded Lumen Technologies. https://blog.qrator.net/en/lumen-aka-centurylink-generating-routing-inciden… -- Töma

1 1

Final day of ARIN 46 to be held tomorrow Friday 23 October!
by John Curran 22 Oct '20

22 Oct '20

NANOGers - ARIN 46’s third and final day will occur tomorrow, and consists of our member meeting including our Board and ARIN AC candidate forums and reports on how the organization is doing. Please feel free to join if you are interested - it’s open to all and there’s no fee involved (but you do need to register - see details in the message below.) Best wishes! /John John Curran President and CEO American Registry for Internet Numbers Begin forwarded message: From: ARIN <info(a)arin.net<mailto:info@arin.net>> Subject: [arin-announce] Don’t Forget to Attend the Third and Final Day of ARIN 46 Date: 20 October 2020 at 9:59:52 AM EDT To: "arin-announce(a)arin.net<mailto:arin-announce@arin.net>" <arin-announce(a)arin.net<mailto:arin-announce@arin.net>> In just a few days, we will reconvene for the third and final day of ARIN 46. Join us from 12:00 – 3:00 PM ET on Friday, 23 October for the ARIN 46 Members Meeting, where we’ll discuss the 2020 ARIN Elections and hear from the candidates themselves during the Advisory Council and Board Forums. We’ll also hear updates on ARIN financials, the Board of Trustees, and the Advisory Council. Candidate videos will be published on 22 October, so stay tuned and make sure to watch for those! Videos will be available at: https://www.arin.net/elections As you know, ARIN 46 is being held via Zoom. For more details about attending this virtual meeting, visit: https://www.arin.net/ARIN46_remote One hour before the meeting starts each day, registered attendees will receive an email from “ARIN no-reply(a)zoom.us<mailto:no-reply@zoom.us>“ with the URL for that day’s session. These links are not identical, so be sure you use the correct one for each day. Although we try to stay on schedule as much as we can, note that all times are subject to change. View the ARIN 46 agenda and check for updates and any time changes at: https://www.arin.net/ARIN46_agenda Slides from each session will be posted online at: https://www.arin.net/ARIN46_materials Join in the conversation about ARIN 46 by using #ARIN46: https://twitter.com/hashtag/ARIN46 Please give us feedback on your experience at ARIN 46 by completing the meeting survey at: https://www.surveymonkey.com/r/ARIN46participantsurvey All entries received by Friday, 30 October will be entered into a raffle to win an iPad Air! Regards, American Registry for Internet Numbers (ARIN) _______________________________________________ ARIN-Announce You are receiving this message because you are subscribed to the ARIN Announce Mailing List (ARIN-announce(a)arin.net) Unsubscribe or manage your mailing list subscription at: https://lists.arin.net/mailman/listinfo/arin-announce Please contact info(a)arin.net if you experience any issues.

1 0

Circuit ordering software
by Oliver Rothschild 22 Oct '20

22 Oct '20

For those that have circuit ordering mechanisms in their environment, what sort of software do you use? respectfully, OIiver Network Engineer

4 3

Re: A study on community-triggered updates in BGP
by Jakob Heitz (jheitz) 22 Oct '20

22 Oct '20

Thomas, I confirmed your case and took a look at the code. The outbound duplicate suppression function tries to detect duplicates without actually storing or recreating the previously sent update, so it misses some cases. Your use case is a good one. We will check to see if we can detect it without compromising significantly on resource usage. Thank you for raising the issue. Regards, Jakob. -----Original Message----- Date: Tue, 20 Oct 2020 04:48:37 -0700 From: Thomas Krenc <tkrenc(a)nps.edu> Hi Jakob. The simple configuration below allows communities to be forwarded (send-community-ebgp), but are cleaned at egress (using route-policy and community-set). In the experiment, the router receives announcements with altering community attributes only, from the internal peer. After the filter is applied, the router sends duplicates to the external peer. Also, In a slightly different setup, the router sends duplicates due to changes in the next-hop only. best regards Thomas --- RP/0/0/CPU0:ios(config)#show running-config Tue Oct 20 02:56:24.230 UTC Building configuration... !! IOS XR Configuration 6.0.1 !! Last configuration change at Tue Oct 20 02:56:02 2020 by cisco ! interface MgmtEth0/0/CPU0/0 ?shutdown ! interface GigabitEthernet0/0/0/0 ?ipv4 address 10.12.0.2 255.255.255.252 ! interface GigabitEthernet0/0/0/1 ?ipv4 address 10.20.0.1 255.255.255.252 ! community-set all ? *:* end-set ! route-policy nofilter ? pass end-policy ! route-policy egressfilter ? delete community in all ? pass end-policy ! router bgp 65002 ?bgp router-id 10.12.0.2 ?address-family ipv4 unicast ! ?neighbor 10.12.0.1 ? remote-as 65001 ? address-family ipv4 unicast ?? send-community-ebgp ?? route-policy egressfilter out ! ?neighbor 10.20.0.2 ? remote-as 65002 ? address-family ipv4 unicast ! end On 10/17/20 3:59 PM, Jakob Heitz (jheitz) via NANOG wrote: > IOS-XR has duplicate update suppression logic for EBGP sessions, > not for IBGP sessions. > > If you are using EBGP and seeing a fault in the duplicate update > suppression logic in IOS-XR, please let me know configs and details > of the experiment. > > Regards, > Jakob. > > -----Original Message----- > Date: Thu, 15 Oct 2020 18:35:58 -0700 > From: Thomas Krenc <tkrenc(a)nps.edu> > > Dear NANOG, > > As a team of researchers from NPS and TU Berlin, we are investigating > the impact of BGP community attributes on the update behavior between ASes. > > We find that when a route is associated with multiple distinct community > attributes it does not only lead to multiple announcement at the tagging > AS, but also at neighboring ASes, if communities are not filtered > properly. This behavior is wide-spread. > > In order to better understand our observations, we have performed a > series of laboratory experiments using Cisco IOS, Junos OS, as well as > the BIRD daemon. > > We find that - by default - all tested routers generate announcements > with changing community attributes, even when other attributes do not > change. In addition, when communities are filtered at egress, Cisco und > BIRD send duplicate announcements (Juniper does not). > > Since our findings are limited to observations in public data as well as > few router implementations, we would like to share our research and > kindly ask you to have a look at: > > ??? https://www.cmand.org/communityexploration/ > > There, we provide some resources documenting our research, as well as > open questions. We greatly appreciate any feedback and insights you can > offer. Also, please don't hesitate to contact us directly: > > ??? communityexploration AT cmand DOT org > > best regards > > Thomas Krenc > Postdoctoral Researcher > Naval Postgraduate School

3 2