- NANOG - lists.nanog.org

DPDK/VPP router
by Craig Smith 03 Mar '25

03 Mar '25

Hello, Is anyone using a routing solution based on DPDK and VPP? I'd like to use commodity server/appliance hardware to build a router capable of 10g+ bandwidth and near maximum pps routing. Looking to have: Bird / FRR (BGP and BFD) LLDP VPN (IPSec or Wireguard) VRRP Thanks.

8 7

Re: [NANOG]Re: Hardware for MPLS/SR network
by Jason Iannone 03 Mar '25

03 Mar '25

If "smart" means both good and cheap then I'll answer your question with another question: is anyone doing merchant with comparable feature depth and lower pricing to broadcom? I think the most affordable good, read smart, choices are sprayed across Jericho and trident. On Mon, Mar 3, 2025, 1:51 AM john doe via NANOG <nanog(a)lists.nanog.org> wrote: > > > > ---------- Forwarded message ---------- > From: john doe <johan.borch(a)gmail.com> > To: North American Network Operators Group <nanog(a)lists.nanog.org> > Cc: > Bcc: > Date: Mon, 3 Mar 2025 07:50:36 +0100 > Subject: [NANOG] Re: [NANOG]Re: Hardware for MPLS/SR network > Full tables are not needed, this will mainly be used for L3VPNs and > L2-transport. Mikrotik was only one of the options, we have looked at > Juniper for example and this was more to check if there are other smart > solutions out there, other than the traditional vendors :) > > Johan > > On Sun, Mar 2, 2025 at 10:42 PM Tony Wicks <tony(a)wicks.co.nz> wrote: > > > Do you need full tables? Will merchant silicon (switch/routers) be > > sufficient (if you are only transporting L2 for example) or do you need > > full capability of a custom silicon (Nokia/Juniper) router. You mention > > Mikrotik, you would not get a single vendor silicon box (like a Nokia > SR-1) > > for the cost of Mikrotik and there is a good reason for that. It really > > comes down to what the budget/use case is. > > > > > > > > -----Original Message----- > > From: john doe <johan.borch(a)gmail.com> > > Sent: Monday, 3 March 2025 10:17 am > > To: nanog(a)lists.nanog.org > > Subject: [NANOG]Hardware for MPLS/SR network > > > > Hi! > > > > I’m looking for equipment to build a 100G MPLS/SR network. This won’t be > a > > large setup—likely around six PE routers connected in a 100G ring, with > > distances ranging from 100 km to 400 km. These routers will also need to > > aggregate local links from 10G up to 100G. They don't need to carry a > full > > table. > > > > Given that I’m aiming to keep costs down (an impossible equation? 😊), > > what manufacturers would be worth considering today? > > > > Is refurbished hardware still a viable option, considering licensing and > > other factors? > > > > Mikrotik’s CCR line is quite affordable, but would it be capable of > > handling a PE role while aggregating multiple link speeds? Buffering? > > > > Other options? > > > > Br > > Johan > > _______________________________________________ > > NANOG mailing list > > > > > https://lists.nanog.org/archives/list/nanog@lists.nanog.org/message/B7LKQ2E… > > > > _______________________________________________ > > NANOG mailing list > > > > > https://lists.nanog.org/archives/list/nanog@lists.nanog.org/message/Y22HT4R… > > > > ---------- Forwarded message ---------- > From: john doe via NANOG <nanog(a)lists.nanog.org> > To: North American Network Operators Group <nanog(a)lists.nanog.org> > Cc: john doe <johan.borch(a)gmail.com> > Bcc: > Date: Mon, 3 Mar 2025 07:50:36 +0100 > Subject: [NANOG] Re: [NANOG]Re: Hardware for MPLS/SR network > _______________________________________________ > NANOG mailing list > > https://lists.nanog.org/archives/list/nanog@lists.nanog.org/message/TMVDNTN…

2 1

Inquiry About Publicly Available RPKI-Invalid Route Information
by 石佳一 03 Mar '25

03 Mar '25

Greetings! I am a researcher working on BGP security in Tsinghua University, specifically focusing on ROV deployment and its effectiveness against prefix hijacking attacks. Now I am seeking information about ASes that have received or observed RPKI-Invalid routes in the wild. I'm wondering if anyone or any organization has shared or is willing to share such information? I understand that such data might be sensitive, so all these data will be used carefully and kept private. Thanks! Best regards, Jiayi

2 1

[NANOG]Hardware for MPLS/SR network
by john doe 03 Mar '25

03 Mar '25

Hi! I’m looking for equipment to build a 100G MPLS/SR network. This won’t be a large setup—likely around six PE routers connected in a 100G ring, with distances ranging from 100 km to 400 km. These routers will also need to aggregate local links from 10G up to 100G. They don't need to carry a full table. Given that I’m aiming to keep costs down (an impossible equation? 😊), what manufacturers would be worth considering today? Is refurbished hardware still a viable option, considering licensing and other factors? Mikrotik’s CCR line is quite affordable, but would it be capable of handling a PE role while aggregating multiple link speeds? Buffering? Other options? Br Johan

6 7

Re: [NANOG]Re: Request to Reinstate Feeless BGP Sessions with Enhanced Security Measures
by Volkan SALiH 03 Mar '25

03 Mar '25

he owns content-heavy (mostly outbound) network , as6939 is not eyeball. so he has to do peering for their own good... they gained tier 1.5 position thanks to their peering links. they are not in position to change peering policy to selective or restrictive until they convince cogentCO to peer them feeless (hopefully never! thanks to god!) think big, think wide-open. dont be a fanatic of freeloaders of IXPs/ISPs... most datacenters peer for free, as they are/would be happy with ratios. sincerely.

1 0

DNS and subdomains
by Harry Hoffman 03 Mar '25

03 Mar '25

Hi Folks, Feel free to tell me this isn't the proper place for my question but given that networking and DNS are hand in hand I thought it might be reasonable to ask here. In working with several OSINT sources for domain processing it seems like the way domains and subdomains are processed essentially equates subdomains with FQDNs. For example, several APIs (and even ChatGPT) classify the following: access.api.bbc.com account-api.api.bbc.com account-api.int.api.bbc.com account-api.stage.api.bbc.com account-api.test.api.bbc.com account-cdn.test.api.bbc.com with subdomains as either: all subdomains as api.bbc.com or as subdomains of access.api, account-api.api, account-api.int.api, etc. instead of classifying as: api.bbc.com int.api.bbc.com stage.api.bbc.com test.api.bbc.com Has this become common practice? Is there a definitive way to determine subdomains? I seem to recall that "older" dns server software wouldn't allow this but it could be that my memory is faulty. Thanks! Cheers, Harry

11 18

Re: DKIM and list policies
by Bryan Fields 03 Mar '25

03 Mar '25

On 3/3/25 04:38, Niels Bakker via NANOG wrote: > Agreed on both counts. Look at this monstrosity: > > Subject: [NANOG] Re: [NANOG]Re: Hardware for MPLS/SR network That happened since the "[NANOG]" was changed to "[NANOG] " and mailman will only catch the current prefix. Mailman will find any instance of "[NANOG] " in the header, remove it and a "Re: " if at the start of the subject. Currently the list is configured to rewrite the from as being from the list, ex: "From: Bryan Fields via NANOG <nanog(a)lists.nanog.org>". It is possible to see if the signature on the inbound message was valid by looking at the "Authentication-Results: lists.nanog.org" header, as DKIM-Filter is running on the mailserver. -- Bryan Fields 727-409-1194 - Voice http://bryanfields.net

3 2

[NANOG]testing 25
by Bryan Fields 01 Mar '25

01 Mar '25

-- Bryan Fields 727-409-1194 - Voice http://bryanfields.net

1 0

[NANOG]testing fix
by Bryan Fields 01 Mar '25

01 Mar '25

-- Bryan Fields 727-409-1194 - Voice http://bryanfields.net

2 6

[NANOG]Testing456
by Valerie Wittkop 01 Mar '25

01 Mar '25

*Valerie Wittkop* Program Directorvwittkop(a)nanog.org | +1 734-730-0225 <+17347300225> (mobile) | www.nanog.org NANOG | 305 E. Eisenhower Pkwy, Suite 100 | Ann Arbor, MI 48108, USA ASN 19230

3 2