- NANOG - lists.nanog.org

Upcoming change to SOA values in .com and .net zones
by Matt Larson 09 Jan '04

09 Jan '04

VeriSign Naming and Directory Services will change the serial number format and "minimum" value in the .com and .net zones' SOA records on or shortly after 9 February 2004. The current serial number format is YYYYMMDDNN. (The zones are generated twice per day, so NN is usually either 00 or 01.) The new format will be the UTC time at the moment of zone generation encoded as the number of seconds since the UNIX epoch. (00:00:00 GMT, 1 January 1970.) For example, a zone published on 9 February 2004 might have serial number "1076370400". The .com and .net zones will still be generated twice per day, but this serial number format change is in preparation for potentially more frequent updates to these zones. This Perl invocation converts a new-format serial number into a meaningful date: $ perl -e 'print scalar localtime 1076370400' At the same time, we will also change the "minimum" value in the .com and .net SOA records from its current value of 86400 seconds (one day) to 900 seconds (15 minutes). This change brings this value in line with the widely implemented negative caching semantics defined in Section 4 of RFC 2308. There should be no end-user impact resulting from these changes (though it's conceivable that some people have processes that rely on the semantics of the .com/.net serial number.) But because these zones are widely used and closely watched, we want to let the Internet community know about the changes in advance. Matt -- Matt Larson <mlarson(a)verisign.com> VeriSign Naming and Directory Services

30 46

interesting new virus, maybe???
by Scott Granados 09 Jan '04

09 Jan '04

I'm not sure if anyone has seen this or if its just to early but. While opening mail, <not with a microsoft outlook product> I found something which looked different. The message was from pgp-public-key and said "Here is my key". When you look at the attachment its called youremail.doc.com obviously something meant to be executed. What struck me as different from the top was it wasn't from a support@microsoft or some such address it specifically mentioned pgp_public_key. Also, I obviously didn't try to run the code or do anything with it, it is 76 K in size and again called youremail.doc.com. I haven't tried a virus scanner against it yet but will later. Thanks Scott

1 0

Verisign CRL single point of failure
by Sean Donelan 09 Jan '04

09 Jan '04

Verisign's Certificate Revocation structure apparently was not designed to handle the load of large numbers of systems using crl.verisign.net. Verisign has introduced a 50% failure mechanism to gap the load on their servers. This is a side effect of the expiration of one of Verisign's Intermediate Root Certificates. Verisign has redirecting traffic to several RFC1918 addresses, which are not routable on the Internet but are frequently used in enterprise networks. It is possible Verisign has created a Denial of Service on Enterprise services using the same RFC1918 addresses as internal systems checking for crl.versign.net are redirected to other RFC1918 addresses. The consolidation of network power in a single company creates its own threat to the critical infrastructure when a single certificate expires instead of being randomly distributed among several different organizations.

4 5

The Cidr Report
by cidr-report＠potaroo.net 09 Jan '04

09 Jan '04

This report has been generated at Fri Jan 9 21:47:31 2004 AEST. The report analyses the BGP Routing Table of an AS4637 (Reach) router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as4637 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 02-01-04 129307 90523 03-01-04 129329 90567 04-01-04 129407 90329 05-01-04 128981 90521 06-01-04 129370 90602 07-01-04 129434 90622 08-01-04 129343 90752 09-01-04 129599 90709 AS Summary 16340 Number of ASes in routing system 6539 Number of ASes announcing only one prefix 1390 Largest number of prefixes announced by an AS AS7018 : ATT-INTERNET4 AT&T WorldNet Services 73459456 Largest address span announced by an AS (/32s) AS568 : SUMNET-AS DISO-UNRRA Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 09Jan04 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 129414 90697 38717 29.9% All ASes AS4134 684 124 560 81.9% CHINANET-BACKBONE No.31,Jin-rong Street AS4323 675 204 471 69.8% TW-COMM Time Warner Communications, Inc. AS6197 773 305 468 60.5% BATI-ATL BellSouth Network Solutions, Inc AS7018 1390 959 431 31.0% ATT-INTERNET4 AT&T WorldNet Services AS701 1377 954 423 30.7% ALTERNET-AS UUNET Technologies, Inc. AS7843 510 119 391 76.7% ADELPHIA-AS Adelphia Corp. AS6198 546 218 328 60.1% BATI-MIA BellSouth Network Solutions, Inc AS22909 327 17 310 94.8% DNEO-OSP1 Comcast Cable Communications, Inc. AS27364 381 77 304 79.8% ACS-INTERNET Armstrong Cable Services AS22773 328 30 298 90.9% CCINET-2 Cox Communications Inc. Atlanta AS1239 945 664 281 29.7% SPRINTLINK Sprint AS4355 380 99 281 73.9% ERMS-EARTHLNK EARTHLINK, INC AS1221 907 653 254 28.0% ASN-TELSTRA Telstra Pty Ltd AS6347 331 83 248 74.9% DIAMOND SAVVIS Communications Corporation AS17676 290 42 248 85.5% GIGAINFRA Softbank BB Corp. AS25844 243 16 227 93.4% SKADDEN1 Skadden, Arps, Slate, Meagher & Flom LLP AS6140 350 126 224 64.0% IMPSAT-USA ImpSat AS209 725 511 214 29.5% ASN-QWEST Qwest AS14654 207 3 204 98.6% WAYPORT Wayport AS11305 232 39 193 83.2% INTERLAND-NET1 Interland Incorporated AS2386 416 226 190 45.7% INS-AS AT&T Data Communications Services AS4519 198 17 181 91.4% MAAS Maas Communications AS6327 204 28 176 86.3% SHAW Shaw Communications Inc. AS6478 227 52 175 77.1% ATT-INTERNET3 AT&T WorldNet Services AS20115 576 408 168 29.2% CHARTER-NET-HKY-NC Charter Communications AS15270 206 39 167 81.1% AS-PAETEC-NET PaeTec.net -a division of PaeTecCommunications, Inc. AS2048 249 84 165 66.3% LANET-1 State of Louisiana AS9929 192 28 164 85.4% CNCNET-CN China Netcom Corp. AS9800 216 57 159 73.6% UNICOM CHINA UNICOM AS4766 393 240 153 38.9% KIX Korea Internet Exchange for "96 World Internet Exposition Total 14478 6422 8056 55.6% Top 30 total Possible Bogus Routes 24.138.80.0/20 AS11260 ANDARA-HSI Andara High Speed Internet c/o Halifax Cable Ltd. 61.12.32.0/24 AS7545 TPG-INTERNET-AP TPG Internet Pty Ltd 61.12.34.0/24 AS7545 TPG-INTERNET-AP TPG Internet Pty Ltd 64.62.64.0/24 AS3549 GBLX Global Crossing 64.62.126.0/23 AS25700 SWIFTDESK SWIFTDESK VENTURE 66.41.192.0/18 AS13367 CCCH-AS3 Comcast Cable Communications Holdings, Inc 66.114.0.0/19 AS16526 BIRCH-TELECOM Birch Telecom, Inc. 66.114.28.0/24 AS15083 INFOLINK-MIA-US Infolink Communication Services, Inc. 66.114.29.0/24 AS15083 INFOLINK-MIA-US Infolink Communication Services, Inc. 66.114.30.0/24 AS15083 INFOLINK-MIA-US Infolink Communication Services, Inc. 66.114.31.0/24 AS15083 INFOLINK-MIA-US Infolink Communication Services, Inc. 69.8.128.0/17 AS7260 NORLIGHT Norlight Telecommunications 132.0.0.0/10 AS568 SUMNET-AS DISO-UNRRA 137.0.0.0/13 AS568 SUMNET-AS DISO-UNRRA 138.136.0.0/13 AS568 SUMNET-AS DISO-UNRRA 158.0.0.0/13 AS568 SUMNET-AS DISO-UNRRA 192.43.230.0/24 AS4738 SAARDNET-AS South Australian Academic Research and Development Network 192.44.0.0/19 AS702 AS702 MCI EMEA 192.64.84.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.16.0/20 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.32.0/19 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.64.0/19 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.96.0/22 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.100.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.119.135.0/24 AS270 PSCNI-AS National Aeronautics and Space Administration 192.124.252.0/22 AS680 AS680 DFN-IP service G-WiN 192.135.50.0/24 AS7018 ATT-INTERNET4 AT&T WorldNet Services 192.136.71.0/24 AS719 AS719 LANLINK autonomous system 192.136.79.0/24 AS719 AS719 LANLINK autonomous system 192.153.144.0/21 AS568 SUMNET-AS DISO-UNRRA 192.172.0.0/19 AS568 SUMNET-AS DISO-UNRRA 192.188.208.0/20 AS568 SUMNET-AS DISO-UNRRA 192.243.32.0/23 AS2044 PALIN-AS Palin Aquisitions Inc. 198.23.26.0/24 AS4390 BELLATLANTIC-COM Bell Atlantic, Inc. 198.41.194.0/24 AS1982 ASN-NWNEXUS Northwest Nexus Inc. 198.97.72.0/21 AS568 SUMNET-AS DISO-UNRRA 198.97.80.0/20 AS568 SUMNET-AS DISO-UNRRA 198.97.88.0/24 AS89 NUSC-CSTLNET-AS Naval Underwater Systems Center 198.97.192.0/20 AS568 SUMNET-AS DISO-UNRRA 198.97.240.0/20 AS568 SUMNET-AS DISO-UNRRA 198.101.4.0/22 AS568 SUMNET-AS DISO-UNRRA 198.136.32.0/20 AS19329 MCNET Martin County Board of County Commissioners 198.144.32.0/19 AS3998 CITY-NET CityNet, Inc. 198.161.87.0/24 AS6539 GROUPTLCOM GT Group Telecom Services Corp. 198.161.165.0/24 AS852 ASN852 Telus Advanced Communications 198.163.155.0/24 AS684 MBNET-AS Manitoba Regional Network 198.167.0.0/16 AS7456 INTERHOP Interhop Network SERVICES Inc. 198.167.163.0/24 AS15290 ALLST-15290 Allstream Corp. Corporation Allstream 198.168.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. 198.169.0.0/16 AS803 SASKTEL SaskTel 198.232.133.0/24 AS23075 SKOTOS-AS Skotos Tech, Inc 199.10.0.0/16 AS568 SUMNET-AS DISO-UNRRA 199.60.0.0/20 AS271 BCNET-AS University of British Columbia 199.84.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. 199.114.0.0/18 AS568 SUMNET-AS DISO-UNRRA 199.114.0.0/21 AS568 SUMNET-AS DISO-UNRRA 199.114.128.0/18 AS568 SUMNET-AS DISO-UNRRA 199.114.130.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.132.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.136.0/24 AS1913 DLA4 Defense Logistics Agency 199.114.138.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.140.0/24 AS3544 ITSDN-U7 DISA/UNRRA 199.114.142.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.144.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.148.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.150.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.152.0/24 AS1913 DLA4 Defense Logistics Agency 199.114.154.0/24 AS1733 CENTAF-SWA AF DDN PMO 199.114.156.0/24 AS1913 DLA4 Defense Logistics Agency 199.114.160.0/24 AS1733 CENTAF-SWA AF DDN PMO 199.120.32.0/19 AS16582 NEXTLEVELINTERNET NEXTLEVEL INTERNET, INC. 199.121.0.0/16 AS568 SUMNET-AS DISO-UNRRA 199.123.0.0/18 AS568 SUMNET-AS DISO-UNRRA 199.123.16.0/20 AS568 SUMNET-AS DISO-UNRRA 199.123.80.0/21 AS568 SUMNET-AS DISO-UNRRA 199.189.32.0/19 AS7332 IQUEST-AS IQuest Internet 199.202.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. 200.120.0.0/16 AS22047 CL-VPNS-LACNIC VTR BANDA ANCHA S.A. 202.4.252.0/22 AS4808 CHINA169-BJ CNCGROUP IP network¡ªChina169 Beijing Province Network 202.4.255.0/24 AS4799 UNSPECIFIED Ji Tong Communications Co., Ltd. 202.47.1.0/24 AS7491 PI-PH-AS-AP PI-PHILIPINES 202.70.0.0/20 AS4658 NETFRONT-AS NETFRONT I.T. LIMITED (HONG KONG) 202.70.16.0/22 AS17888 SINGTEL-HK SingTel Hong Kong Limited 202.70.240.0/20 AS4058 LINKAGENET-AP CPCNet Hong Kong Ltd. 202.72.112.0/22 AS22351 INTELSAT-1 INTELSAT 202.73.128.0/22 AS4058 LINKAGENET-AP CPCNet Hong Kong Ltd. 202.86.128.0/24 AS4755 VSNL-AS Videsh Sanchar Nigam Ltd. Autonomous System 202.86.142.0/24 AS30362 HPT-ASN Hawaii-Pacific Teleport 202.86.171.0/24 AS4755 VSNL-AS Videsh Sanchar Nigam Ltd. Autonomous System 202.86.172.0/23 AS4755 VSNL-AS Videsh Sanchar Nigam Ltd. Autonomous System 202.86.190.0/24 AS4750 loxley-th Loxley Information Co., Ltd. 202.122.76.0/24 AS17553 TIMELESS-AP System Integration provider 202.133.3.0/24 AS9335 CIP-JAPAN-AS-AP ATT IPlus 202.136.254.0/24 AS4808 CHINA169-BJ CNCGROUP IP network¡ªChina169 Beijing Province Network 202.136.255.0/24 AS4808 CHINA169-BJ CNCGROUP IP network¡ªChina169 Beijing Province Network 203.32.4.0/23 AS7617 APNIC-AS-2-BLOCK Asia Pacific Network Information Centre 203.62.0.0/17 AS7572 AARNET-ACT-RNO Australian Academic and Reasearch Network (AARNet) 203.76.224.0/24 AS9549 COMDEK-ISP-AS-AP Comdek ISP 203.86.2.0/23 AS4058 LINKAGENET-AP CPCNet Hong Kong Ltd. 203.101.0.0/17 AS9498 BBIL-AP BHARTI BT INTERNET LTD. 203.132.95.0/24 AS9787 CONCEPT-AU-AP Concept Networks 203.132.97.0/24 AS7652 VIANET-AS-AP Vianet Communications Pty Ltd 203.132.107.0/24 AS10236 FOXGOLD-NET-AU-AP FOXGOLD COMMUNICATIONS 203.132.108.0/24 AS10236 FOXGOLD-NET-AU-AP FOXGOLD COMMUNICATIONS 203.132.111.0/24 AS10236 FOXGOLD-NET-AU-AP FOXGOLD COMMUNICATIONS 203.132.112.0/24 AS10236 FOXGOLD-NET-AU-AP FOXGOLD COMMUNICATIONS 203.132.118.0/24 AS18065 CENTRALDATA-WA Central Data Pty Ltd. 203.132.122.0/24 AS4802 WANTREE-AS-AP Wantree Development 203.132.123.0/24 AS18065 CENTRALDATA-WA Central Data Pty Ltd. 203.132.124.0/24 AS18065 CENTRALDATA-WA Central Data Pty Ltd. 203.132.125.0/24 AS4817 TECHEX1-AS-AP Techex Primary Netblock 203.135.99.0/24 AS2687 IBM-MMD-AS IBM 204.19.224.0/19 AS816 UUNET-AS4 UUNET Technologies, Inc. 204.69.144.0/22 AS5668 AS-5668 CenturyTel Internet Holdings, Inc. 204.154.125.0/24 AS3952 TELLABS-ASN TELLABS Operations, Inc. 204.154.126.0/24 AS3952 TELLABS-ASN TELLABS Operations, Inc. 204.154.127.0/24 AS3952 TELLABS-ASN TELLABS Operations, Inc. 204.194.110.0/23 AS30653 EXOBIT Exobit Networks Inc. 205.150.0.0/15 AS701 ALTERNET-AS UUNET Technologies, Inc. 206.41.32.0/19 AS14824 NEWSOUTH NewSouth Communications Corp. 206.81.187.0/24 AS19194 JOVITA Sentris Network LLC 206.108.34.0/24 AS852 ASN852 Telus Advanced Communications 206.108.35.0/24 AS852 ASN852 Telus Advanced Communications 206.167.57.0/24 AS376 RISQ-AS Reseau Interordinateurs Scientique Quebecois (RISQ) 206.191.64.0/18 AS15290 ALLST-15290 Allstream Corp. Corporation Allstream 206.251.69.0/24 AS27429 TIL Telesat International Ltd. 207.162.192.0/19 AS4589 EASYNET Easynet Group Plc 207.231.96.0/19 AS11194 NUNETPA NuNet Inc 208.81.187.0/24 AS19194 JOVITA Sentris Network LLC 209.87.192.0/20 AS15290 ALLST-15290 Allstream Corp. Corporation Allstream 209.169.219.0/24 AS189 GENUITY-AS189 Genuity 209.169.223.0/24 AS189 GENUITY-AS189 Genuity 209.172.0.0/18 AS7770 TRITON Triton Technologies, Inc. 209.196.192.0/19 AS1784 GNAPS Global NAPs Networks 209.213.32.0/19 AS10629 INTERPAC Inter-Pacific Network Services 209.213.50.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.51.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.55.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.56.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.222.137.0/24 AS27429 TIL Telesat International Ltd. 209.240.96.0/19 AS10815 KCNET KCnet, Inc. 209.251.0.0/19 AS11036 SISCOM SISCOM, Inc 209.251.64.0/19 AS10266 NETWAY-AS MDC, Inc. 210.213.0.0/19 AS6453 GIEUROPE Teleglobe America Inc. 216.18.224.0/21 AS11458 IMBRIS IMBRIS, INC. 216.18.224.0/22 AS11458 IMBRIS IMBRIS, INC. 216.18.228.0/22 AS11458 IMBRIS IMBRIS, INC. 216.36.46.0/24 AS7176 GENUITY-AS7176 Genuity 216.36.47.0/24 AS7176 GENUITY-AS7176 Genuity 216.96.128.0/18 AS7018 ATT-INTERNET4 AT&T WorldNet Services Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Re: GSR, 7600, Juniper M?, oh my!
by neil＠DOMINO.ORG 09 Jan '04

09 Jan '04

> Hardware is probably cheaper on eBay than the maintenance fees anyway. You should be wary of purchasing second user Cisco equipment and their software license. Hardware is transferable but the Cisco software is not. Regards, Neil.

2 1

BGP configuration checking tool: announcement and request for users/feedback
by Nick Feamster 09 Jan '04

09 Jan '04

Hi Nanog, As you may know, I've been developing a tool called "RoLex" (Routing Lexer) that performs various syntactic and conceptual checks on existing BGP configurations. (To refresh your memory, see: http://www.nanog.org/mtg-0310/feamster.html) The checker now parses Cisco and Juniper IOS and represents BGP configuration in an abstract format (in the form of relational database tables); the checks themselves are expressed as perl modules that run SQL queries against these tables. You can get more information about the tool itself, including the tests that the tool currently performs, at: http://nms.lcs.mit.edu/bgp/rolex/ (the code is in pre-release; if you would like to test it on your configurations, please ask me and I'll give you a version.) Part of our motivation for developing this tool is to get a better understanding of errors and anomalies that turn up in real configuration files. A couple of very kind, generous folks at some larger ISPs have given me some initial assistance by letting me run the tool on some of their configuration files, and, in some cases, our checks have allowed operators (and me) to see some interesting things. (read: you might find some things you didn't expect) Nevertheless, our study (and the tool) will benefit tremendously by exposure to configurations from a much wider variety of ASes. (The more, the better.) If you could help me in any of the following ways, I would be extremely grateful: 1. Run the tool on your configuration and let me know what types of errors you find. This will help me in our analysis as far as figuring out what types of problems are most common, etc. If you're feeling extremely helpful, you could let me run the tool on your configuration files for you. This would probably save you time; of course, I'd discuss with you what I found in your configs. (Yes, I am asking to look at your configs; I'm amenable to nondisclosure arrangements regarding keeping keeping your configuration data private, if you like.) 2. Suggest new tests that you would like to see incorporated into the tool. I am eager to provide the tool for you to try on your configuration files. I'm also more than willing to help you set it up in a way that works well for you. In return, I would hope that you would help me better understand the errors/anomalies that the tool turns up or at least give me some suggestions on how to improve the tool (e.g., what types of checks you would like to see added to the tool, personal experience, etc.). Please let me know if you are interested in helping out. Thanks! Nick

1 0

New Statistics Format Available
by Ginny Listman 08 Jan '04

08 Jan '04

On 5 January 2004, the Regional Internet Registries (APNIC, ARIN, LACNIC, and RIPE NCC) implemented a new standard file format for reporting the current state of Internet resource allocations and assignments for: - IPv4 address ranges - IPv6 address ranges - AS numbers The new file format, now available from all RIRs, ensures consistency and makes it easier for users to integrate and analyze data from different sources. The reports contain a snapshot of the status of Internet number resources, without any details of transaction histories. They are produced daily and include: - Information summaries - GPG key signatures - MD5 checksums for verification Statistics files ---------------- The latest statistics files are available from the RIR sites listed below. Each RIR site also mirrors the files of the other RIRs. ARIN ftp://ftp.arin.net/pub/stats/arin/delegated-arin-latest APNIC ftp://ftp.apnic.net/pub/stats/apnic/delegated-apnic-latest LACNIC ftp://ftp.lacnic.net/pub/stats/lacnic/delegated-lacnic-latest RIPE NCC ftp://ftp.ripe.net/pub/stats/ripencc/delegated-ripencc-latest More information ---------------- ARIN ftp://ftp.arin.net/pub/stats/arin/README APNIC http://www.apnic.net/db/rir-stats-format.html LACNIC ftp://ftp.lacnic.net/pub/stats/lacnic/delegated-lacnic-latest RIPE NCC ftp://ftp.ripe.net/pub/stats/ripencc/RIR-Statistics-Exchange-Format.txt Regards, Ginny Listman Director of Engineering ARIN

1 0

RE: GSR, 7600, Juniper M?, oh my!
by Michel Py 08 Jan '04

08 Jan '04

> Richard A Steenbergen wrote: > I already have a very nice empty M160 > chassis for a chair at the colo, I don't like it for a chair, too high (29"); A 7500 is a lot better for that use. It's really nice as a heater too, particularly a dual AC loaded with legacy blades. Other possible uses for a 7500 include a temperature sensor (http://arneill-py.sacramento.ca.us/mrtg/router-temp.html) My views on the original question: Cisco vs. Juniper: Whatever some people might say, everyone that uses both will tell you that the real picture is not Cisco=100% crap and Juniper=100% perfect :-) Besides, if you're a Cisco shop it's hard to find sound arguments to have only one or two Junipers (common business sense: twice the training, each one rejecting responsibility on the other, more difficult to find JunOs experts than IOS experts, etc...). 7600 vs. GSR: These are not the same boxes. There is stuff that the 7600 won't do, but there's also stuff that the GSR won't do in terms of aggregating a bunch of disparate links together. Michel.

8 9

GSR, 7600, Juniper M?, oh my!
by bcm 08 Jan '04

08 Jan '04

Hello all, I'm faced with a difficult decision. I work for a large multi-node regional ISP (and Cisco shop). In our largest nodes we've found the Cisco 7500 series routers to be at the end of their useful life due to the throughput generated by POS OC-3 feeds and 10,000+ broadband users whose traffic needs to be moved out of the node. Short of building a farm of 7500's the need to upgrade seems clear. But where to go? The Cisco GSR platform seems a logical choice, but their new 7600 series units are attractive for their cost. Juniper may also have a place at this end of the processing spectrum. I'd also like to ensure that the new platform supports doing CAR and ACLs at line rate, given the client base. I wanted to see what other operators in this situation have done, so I would appreciate anyone's input or insight into the pros and cons of these platforms or any other ideas as to how I can grow beyond the Cisco 7500.

12 14

Re: Upcoming change to SOA values in .com and .net zones
by Michael.Dillon＠radianz.com 08 Jan '04

08 Jan '04

>I worry especially when I can not clearly see a benifit to either cat >or mice. The current serial number format supports a maximum of 100 changes to the .com zone per day. If you store your zone as text files on a hard drive that is more than enough. But! What if you consider the zone to be a database and maybe even store it in RAM? In that case, you could update the zone every single time one of the .com entries is added or deleted. The performance impact of doing this to a zone stored in RAM is approximately nil. However, the DNS protocol requires a serial number that changes every time the zone changes. So the first step is to change the way a zone serial number is created. Then you deploy a DNS server architecture that runs entirely out of RAM. And then when all of this works smoothly, you start to increase the number of updates per day until you're doing it every 15 minutes or so. Then, finally, you go live with real-time updates. In fact, with the speed of today's hardware and RAID arrays it's probably worthwhile to do this even without holding the whole zone in RAM. Now do you see why changing the serial number would clearly benefit the cat? And can you see how this would even lead to possible future benefits for many of us mice? If you are going to attack Verisign, at least pick a weak point to target with your attack. --Michael Dillon

2 1