- NANOG - lists.nanog.org

Re: Question about DNS naming conventions
by nanog＠fleish.org 13 Feb '25

13 Feb '25

Please tell the guy whose website says "Internet security & antispam” to fix HTTPS/TLS on his site: * Host enemieslist.com:443 was resolved. * IPv6: (none) * IPv4: 45.33.12.228 * Trying 45.33.12.228:443... * Connected to enemieslist.com (45.33.12.228) port 443 * ALPN: curl offers h2,http/1.1 * (304) (OUT), TLS handshake, Client hello (1): * CAfile: /etc/ssl/cert.pem * CApath: none * LibreSSL/3.3.6: error:1404B42E:SSL routines:ST_CONNECT:tlsv1 alert protocol version * Closing connection curl: (35) LibreSSL/3.3.6: error:1404B42E:SSL routines:ST_CONNECT:tlsv1 alert protocol version On a lighter note, my favorite custom DNS PTRs are found on the route to bad.horse: https://pastebin.com/raw/4GSUHRy6 9 bad.horse (162.252.205.130) 171.987 ms 171.961 ms 172.387 ms 10 bad.horse (162.252.205.131) 177.009 ms 176.570 ms 177.807 ms 11 bad.horse (162.252.205.132) 182.312 ms 181.682 ms 181.581 ms 12 bad.horse (162.252.205.133) 186.254 ms 186.723 ms 186.896 ms 13 he.rides.across.the.nation (162.252.205.134) 191.581 ms 191.995 ms 192.539 ms 14 the.thoroughbred.of.sin (162.252.205.135) 196.768 ms 196.683 ms 197.056 ms 15 he.got.the.application (162.252.205.136) 201.184 ms 201.550 ms 201.829 ms 16 that.you.just.sent.in (162.252.205.137) 226.084 ms 206.611 ms 209.440 ms 17 it.needs.evaluation (162.252.205.138) 214.950 ms 211.952 ms 212.041 ms 18 so.let.the.games.begin (162.252.205.139) 216.997 ms 216.730 ms 217.574 ms 19 a.heinous.crime (162.252.205.140) 222.739 ms 313.316 ms 221.550 ms 20 a.show.of.force (162.252.205.141) 227.455 ms 226.936 ms 227.003 ms 21 a.murder.would.be.nice.of.course (162.252.205.142) 232.136 mse 232.144 ms 231.795 ms ie22 bad.horse (162.252.205.143) 237.418 ms 320.457 ms^U 237.265 ms 23 bad.horse (162.252.205.144) 282.589 ms 241.483 ms 299.596 ms 24 bad.horse (162.252.205.145) 313.476 ms 246.855 ms 292.823 ms 25 he-s.bad (162.252.205.146) 313.384 ms 277.220 ms 345.561 ms 26 the.evil.league.of.evil (162.252.205.147) 327.858 ms 256.816 ms 279.833 ms 27 is.watching.so.beware (162.252.205.148) 313.327 ms 261.990 ms 287.819 ms 28 the.grade.that.you.receive (162.252.205.149) 267.278 ms 267.262 ms 267.032 ms 29 will.be.your.last.we.swear (162.252.205.150) 352.531 ms 304.294 ms 271.968 ms 30 so.make.the.bad.horse.gleeful (162.252.205.151) 282.465 ms 278.175 ms 276.852 ms 31 or.he-ll.make.you.his.mare (162.252.205.152) 297.755 ms 281.298 ms 282.081 ms 32 o_o (162.252.205.153) 288.199 ms 286.632 ms 286.601 ms 33 you-re.saddled.up (162.252.205.154) 389.436 ms 327.868 ms 296.183 ms 34 there-s.no.recourse (162.252.205.155) 333.364 ms 328.371 ms 300.595 ms 35 it-s.hi-ho.silver (162.252.205.156) 326.765 ms 327.759 ms 313.318 ms 36 signed.bad.horse (162.252.205.157) 311.141 ms 330.010 ms 419.000 ms -T > On Feb 12, 2025, at 07:00, nanog-request(a)nanog.org wrote: > > Message: 6 > Date: 11 Feb 2025 20:30:47 -0500 > From: "John Levine" <johnl(a)iecc.com> > To: nanog(a)nanog.org > Subject: Re: Question about DNS naming conventions > Message-ID: <20250212013047.B06A6BC2C5F9(a)ary.qy> > Content-Type: text/plain; charset=utf-8 > > Right. The names are usually created with BIND's $GENERATE extension or the > equivalent in other DNS software. > > There is a great deal of variation in the details of the names beyond the fact > that they embed all or part of the IP address. I know a guy who has collected > a lot of regular expressions to match them. See http://enemieslist.com > > R's, > John

4 6

Question about DNS naming conventions
by Joel Sommers 13 Feb '25

13 Feb '25

Hello all - I am a researcher at Colgate University, working with colleagues at the University of Wisconsin and Boston University on studying aspects of the DNS. We are wondering what insights anyone here may be willing to share about naming convention patterns that we’ve observed. There are many FQDNs with (full or partial) embedded IPv4 addresses in A records, with many variations on padding, order, whether decimal or hex, etc. There are also a number of providers that use some alphanumeric sequence (seemingly unrelated to IP address) embedded in names. We assume that these names are generated either from a commercial IPAM system or some other set of management tools or scripts. Some of our questions are: What kinds of knobs are available in commercial IPAM systems for crafting hostname patterns? What are some of the key use cases for having an A record (or AAAA for that matter) in which part or all of the address is embedded in the name? Thanks so much for any thoughts you’re willing to share -- please feel free to respond off-list. Regards, Joel Sommers

6 6

Eero
by Dennis Burgess - LTI Support 11 Feb '25

11 Feb '25

Anyone here from eero, the router/ap company.. Hit me off-list, I doubt it, but never know. [LTI-Full_175px] Dennis Burgess MikroTik : Trainer, Network Associate, Routing Engineer, Wireless Engineer, Traffic Control Engineer, Inter-Networking Engineer, Security Engineer, Enterprise Wireless Engineer Hurricane Electric: IPv6 Sage Level Cambium: ePMP Author of "Learn RouterOS- Second Edition" Link Technologies, Inc -- Mikrotik & WISP Support Services Office: 314-735-0270 Website: http://www.linktechs.net<http://www.linktechs.net/> Create your own Tickets via https://hd.linktechs.net<https://hd.linktechs.net/> Create Wireless Coverage's with www.towercoverage.com Need MikroTik Cloud Management: https://cloud.linktechs.net<https://cloud.linktechs.net/> Admiral MikroTik Services: http://admiral.linktechs.net

1 0

2025 NANOG Committee Appointments
by Valerie Wittkop 10 Feb '25

10 Feb '25

NANOG Community, I am excited to announce that 43 NANOG members accepted appointments to a committee. So many highly-qualified volunteers from the NANOG membership were nominated for this year’s committee selection, and we personally thank each NANOG member who offered their time. As an organization, NANOG was founded by volunteers who developed a quality forum for North America’s operator community. Despite the growth in NANOG’s programs, volunteers greatly outnumber professional staff. The volunteer-only committees drive many of the ideas for growth and development in the organization and community as a whole. Please join me in congratulating the appointed committee members: *Audit Committee* Tom Beecher, Tim Burke, and Marlin Martes *Community Engagement Committee* Kate Gerry, T. Marc Jones, Darren Kara, Marlin Martes, Giulia Reading, Larissa Santos, Kelly Sieben, Clara Wade, and Les Williams *Elections Committee* Frank Basso, Tom Beecher, Dave Friant, Courtney Hooglander, Tony Tauber, and Michael Voity *Hackathon Committee* Barrie Cook and Saim Khan *Mentorship Committee* Hosein Badran and Alex Latzko *Moderation Committee* Tim Burke, Kate Gerry, Ryan Hamel, Jeremy Johns, and Darren Kara *Program Committee* Naveen Achyuta, Jeff Bartig, Phil Bedard, Nick Bogle, Daniel Chioreanu, Mikael Holmberg, Tom Kacprzynski, Nimrod Levy, Michael Long, Sergey Myasoedov, Tim Nowaczyk, Adair Thaxton, Krassi Tzvetanov, Les Williams, Ron Winward, and Chris Woodfield *Workshop Committee* Jeff Bartig, Yolandi Cloete, John Kristoff, Fearghas McKay, Stevan Plote, Saju Salahudeen, Steve Ulrich, and Clara Wade We are truly excited to see what develops for NANOG over the next year working with these volunteers. Please also join me in thanking and recognizing the many contributions of committee alumni who have termed out: *Audit Committee* Charles Rumford *Community Engagement Committee* Stephen Hartmen, Louie Lee, Alejandro Silvestre, and Akeyla Wallace *Education Committee* Alex Bortok, Ron Kovac, and Reddy Urmindi *Elections Committee* Leif Sawyer *Hackathon Committee* Kate Gerry, Toni Kalombo, Dhairyasheel Patil, and Charles Rumford *Program Committee* Alex Latzko, Nagendra Nainar, Stevan Plote, and Michael Voity Volunteer participation from these members on NANOG committees developed new programs, brought new ideas and new methods into practice, and helped to evolve the NANOG organization. We would not be where we are without their time and contributions. We look forward to continuing working together to build the Internet of tomorrow, and hope to see you at a NANOG conference soon! Sincerely, Valerie Wittkop (On behalf of the NANOG Board of Directors) Valerie Wittkop Program Directorvwittkop(a)nanog.org | www.nanog.org NANOG | 305 E. Eisenhower Pkwy, Suite 100 | Ann Arbor, MI 48108, USA ASN 19230

1 0

Spoofer Report for NANOG for Jan 2025
by CAIDA Spoofer Project 08 Feb '25

08 Feb '25

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within usa, can. Inferred improvements during Jan 2025: ASN Name Fixed-By 4922 SHENTEL 2025-01-03 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Jan 2025: ASN Name First-Spoofed Last-Spoofed 40676 AS40676 2016-08-29 2025-01-27 27364 ACS-INTERNET 2016-09-27 2025-01-31 63296 AWBROADBAND 2017-09-01 2025-01-30 6360 UNIVHAWAII 2019-02-25 2025-01-18 22883 CONDENAST 2019-05-29 2025-01-30 21804 ACCESS-SK 2019-06-09 2025-01-28 11525 HRTC 2020-06-27 2025-01-18 12183 TALKIE-COMMUNICATIONS 2022-12-10 2025-01-30 3701 NERONET 2023-04-18 2025-01-26 400282 2023-04-27 2025-01-30 393577 SCCNET 2023-05-03 2025-01-31 202400 2023-05-08 2025-01-28 61461 Airtek Solutions C.A. 2023-05-13 2025-01-31 20119 ARROW 2023-10-19 2025-01-30 394684 WISPERNET 2024-01-17 2025-01-26 398182 BLN 2024-06-17 2025-01-22 57308 Rossvyazinform 2024-08-10 2025-01-17 3801 MISNET 2024-09-09 2025-01-30 40959 HOSTMASTER 2024-09-16 2025-01-27 30083 AS-30083-GO-DADDY-COM-LLC 2024-12-09 2025-01-27 19530 NDIN-STATE 2024-12-20 2025-01-03 271814 2025-01-16 2025-01-16 273143 2025-01-22 2025-01-30 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block… Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Weekly Global IPv4 Routing Table Report
by Routing Table Analysis Role Account 07 Feb '25

07 Feb '25

This is an automated weekly mailing describing the state of the Global IPv4 Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG UKNOF, TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net. For historical data, please see https://thyme.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. IPv4 Routing Table Report 04:00 +10GMT Sat 08 Feb, 2025 IPv4 BGP Table (Global) as seen at Japan. Report Website: https://thyme.apnic.net Detailed Analysis: https://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 974584 Prefixes after maximum aggregation (per Origin AS): 372726 Deaggregation factor: 2.61 Unique aggregates announced (without unneeded subnets): 474029 Number of IPv4 prefixes with a valid ROA: 524224 Number of IPv4 prefixes with an invalid ROA: 1352 Number of IPv4 prefixes with no ROA: 449008 Total ASes present in the Internet Routing Table: 76593 Prefixes per ASN: 12.72 Origin-only ASes present in the Internet Routing Table: 65558 Origin ASes announcing only one prefix: 26854 Transit ASes present in the Internet Routing Table: 11035 Transit-only ASes present in the Internet Routing Table: 529 Average AS path length visible in the Internet Routing Table: 5.2 Max AS path length visible: 204 Max AS path prepend of ASN (273039) 200 Prefixes from unregistered ASNs in the Routing Table: 1055 Number of instances of unregistered ASNs: 1073 Number of 32-bit ASNs allocated by the RIRs: 46091 Number of 32-bit ASNs visible in the Routing Table: 37785 Prefixes from 32-bit ASNs in the Routing Table: 199032 Number of bogon 32-bit ASNs visible in the Routing Table: 53 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 496 Number of addresses announced to Internet: 3112894848 Equivalent to 185 /8s, 139 /16s and 1 /24s Percentage of available address space announced: 84.1 Percentage of allocated address space announced: 84.1 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.6 Total number of prefixes smaller than registry allocations: 319231 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 256699 Total APNIC prefixes after maximum aggregation: 77049 APNIC Deaggregation factor: 3.33 Prefixes being announced from the APNIC address blocks: 248253 Unique aggregates announced from the APNIC address blocks: 102703 APNIC Region origin ASes present in the Internet Routing Table: 14516 APNIC Prefixes per ASN: 17.10 APNIC Region origin ASes announcing only one prefix: 4435 APNIC Region transit ASes present in the Internet Routing Table: 1950 Average APNIC Region AS path length visible: 5.5 Max APNIC Region AS path length visible: 39 Number of APNIC region 32-bit ASNs visible in the Routing Table: 9993 Number of APNIC addresses announced to Internet: 753985024 Equivalent to 44 /8s, 240 /16s and 230 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-153913 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 286902 Total ARIN prefixes after maximum aggregation: 127280 ARIN Deaggregation factor: 2.25 Prefixes being announced from the ARIN address blocks: 288620 Unique aggregates announced from the ARIN address blocks: 135030 ARIN Region origin ASes present in the Internet Routing Table: 19217 ARIN Prefixes per ASN: 15.02 ARIN Region origin ASes announcing only one prefix: 7008 ARIN Region transit ASes present in the Internet Routing Table: 2004 Average ARIN Region AS path length visible: 4.6 Max ARIN Region AS path length visible: 34 Number of ARIN region 32-bit ASNs visible in the Routing Table: 5143 Number of ARIN addresses announced to Internet: 1343884544 Equivalent to 80 /8s, 26 /16s and 13 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-402332 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 54/8, 55/8, 56/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 271648 Total RIPE prefixes after maximum aggregation: 131870 RIPE Deaggregation factor: 2.06 Prefixes being announced from the RIPE address blocks: 268848 Unique aggregates announced from the RIPE address blocks: 171675 RIPE Region origin ASes present in the Internet Routing Table: 28850 RIPE Prefixes per ASN: 9.32 RIPE Region origin ASes announcing only one prefix: 12057 RIPE Region transit ASes present in the Internet Routing Table: 3999 Average RIPE Region AS path length visible: 5.3 Max RIPE Region AS path length visible: 43 Number of RIPE region 32-bit ASNs visible in the Routing Table: 12257 Number of RIPE addresses announced to Internet: 732486784 Equivalent to 43 /8s, 168 /16s and 220 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-216475 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 53/8, 57/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 123590 Total LACNIC prefixes after maximum aggregation: 29144 LACNIC Deaggregation factor: 4.24 Prefixes being announced from the LACNIC address blocks: 120924 Unique aggregates announced from the LACNIC address blocks: 48864 LACNIC Region origin ASes present in the Internet Routing Table: 11197 LACNIC Prefixes per ASN: 10.80 LACNIC Region origin ASes announcing only one prefix: 2662 LACNIC Region transit ASes present in the Internet Routing Table: 2509 Average LACNIC Region AS path length visible: 5.9 Max LACNIC Region AS path length visible: 204 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 9127 Number of LACNIC addresses announced to Internet: 177910272 Equivalent to 10 /8s, 154 /16s and 178 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-274844 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 34690 Total AfriNIC prefixes after maximum aggregation: 6721 AfriNIC Deaggregation factor: 5.16 Prefixes being announced from the AfriNIC address blocks: 47443 Unique aggregates announced from the AfriNIC address blocks: 15343 AfriNIC Region origin ASes present in the Internet Routing Table: 1905 AfriNIC Prefixes per ASN: 24.90 AfriNIC Region origin ASes announcing only one prefix: 692 AfriNIC Region transit ASes present in the Internet Routing Table: 378 Average AfriNIC Region AS path length visible: 6.0 Max AfriNIC Region AS path length visible: 65 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 1265 Number of AfriNIC addresses announced to Internet: 104363264 Equivalent to 6 /8s, 56 /16s and 117 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 9808 10342 8754 93 CHINAMOBILE-CN China Mobile Communication 7545 6209 843 664 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4808 4192 76 ERX-CERNET-BKB China Education and Resear 9498 4211 529 272 BBIL-AP BHARTI Airtel Ltd., IN 7552 3918 1331 25 VIETEL-AS-AP Viettel Group, VN 7713 3672 1036 72 TELKOMNET-AS-AP PT Telekomunikasi Indones 45899 3266 1869 102 VNPT-AS-VN VNPT Corp, VN 24560 2843 854 534 AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., 4766 2296 11521 598 KIXS-AS-KR Korea Telecom, KR 4755 2219 434 193 TATACOMM-AS TATA Communications formerly Complete listing at https://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 12731 38946 3724 AMAZON-02, US 11492 4698 312 553 CABLEONE, US 7155 4180 287 86 VIASAT-SP-BACKBONE, US 6327 3623 1320 81 SHAW, CA 174 3577 8757 874 COGENT-174, US 22773 3381 3033 186 ASN-CXA-ALL-CCI-22773-RDC, US 749 3260 54879 2507 DNIC-AS-00749, US 16625 2965 1271 2169 AKAMAI-AS, US 396982 2922 3659 447 GOOGLE-CLOUD-PLATFORM, US 30036 2579 359 275 MEDIACOM-ENTERPRISE-BUSINESS, US Complete listing at https://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 7739 1713 145 UNI2-AS, ES 39891 4797 293 62 ALJAWWALSTC-AS, SA 20940 3928 3395 129 AKAMAI-ASN1, NL 9009 3734 321 1916 M247, RO 12389 2994 2302 892 ROSTELECOM-AS, RU 34984 2370 361 581 TELLCOM-AS, TR 212238 1922 139 1417 CDNEXT, GB 8452 1614 1852 14 TE-AS TE-AS, EG 13188 1607 100 26 TRIOLAN, UA 62240 1495 98 747 CLOUVIDER Clouvider - Global ASN, GB Complete listing at https://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 11714 3224 604 UNINET, MX 10620 3543 492 951 Telmex Colombia S.A., CO 13999 2510 539 366 Mega Cable, S.A. de C.V., MX 11830 1992 369 64 Instituto Costarricense de Electricidad y 28573 1335 2437 265 Claro NXT Telecomunicacoes Ltda, BR 3816 1328 777 210 COLOMBIA TELECOMUNICACIONES S.A. ESP BIC, 11664 1160 278 33 Techtel LMDS Comunicaciones Interactivas 6503 1134 374 163 Axtel, S.A.B. de C.V., MX 6147 1105 371 22 Telefonica del Peru S.A.A., PE 22884 1075 98 373 TOTAL PLAY TELECOMUNICACIONES SA DE CV, M Complete listing at https://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24835 1682 601 30 RAYA-AS, EG 24863 1645 389 16 LINKdotNET-AS, EG 29571 1538 97 99 ORANGE-COTE-IVOIRE, CI 36992 1425 1518 286 ETISALAT-MISR, EG 36903 1249 554 96 MT-MPLS, MA 36935 1018 523 45 Vodafone-, EG 20011 978 180 282 INTERNET-SOLUTIONS, ZA 37069 843 1083 15 MOBINIL, EG 6713 557 1861 35 IAM-AS, MA 36914 555 82 3 KENET-AS, KE Complete listing at https://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 12731 38946 3724 AMAZON-02, US 8151 11714 3224 604 UNINET, MX 9808 10342 8754 93 CHINAMOBILE-CN China Mobile Communication 12479 7739 1713 145 UNI2-AS, ES 7545 6209 843 664 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4808 4192 76 ERX-CERNET-BKB China Education and Resear 39891 4797 293 62 ALJAWWALSTC-AS, SA 11492 4698 312 553 CABLEONE, US 9498 4211 529 272 BBIL-AP BHARTI Airtel Ltd., IN 7155 4180 287 86 VIASAT-SP-BACKBONE, US Complete listing at https://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 8151 11714 11110 UNINET, MX 9808 10342 10249 CHINAMOBILE-CN China Mobile Communications Grou 12479 7739 7594 UNI2-AS, ES 7545 6209 5545 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 4797 4735 ALJAWWALSTC-AS, SA 4538 4808 4732 ERX-CERNET-BKB China Education and Research Net 11492 4698 4145 CABLEONE, US 7155 4180 4094 VIASAT-SP-BACKBONE, US 9498 4211 3939 BBIL-AP BHARTI Airtel Ltd., IN 7552 3918 3893 VIETEL-AS-AP Viettel Group, VN Complete listing at https://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 400866 UNALLOCATED 2.59.148.0/23 21859 ZEN-ECN, US 22542 UNALLOCATED 8.7.205.0/24 3356 LEVEL3, US 33123 UNALLOCATED 8.10.69.0/24 174 COGENT-174, US 12169 UNALLOCATED 8.15.207.0/24 32787 PROLEXIC-TECHNOLOGIES-D 40493 UNALLOCATED 8.17.26.0/24 3356 LEVEL3, US 46639 UNALLOCATED 8.17.66.0/24 701 UUNET, US 53775 UNALLOCATED 8.20.88.0/24 7029 WINDSTREAM, US 393266 UNALLOCATED 8.23.52.0/24 46887 CROWNCASTLE-AS46887, US 396894 UNALLOCATED 8.28.201.0/24 46887 CROWNCASTLE-AS46887, US 394936 UNALLOCATED 8.33.224.0/24 22442 HOU-PHONOSCOPE, US Complete listing at https://thyme.apnic.net/current/data-badAS Prefixes from the Special Purpose Address Registry (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at https://thyme.apnic.net/current/data-spar Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 14.192.20.0/22 Origin: 26658 HENGTONG-IDC-LLC, US 14.192.20.0/22 Transit: 6939 HURRICANE, US 23.133.205.0/24 Origin: 23506 TMW, US 23.133.205.0/24 Transit: 215828 TMW-GLOBAL-NETWORKS TMW Global Networks, 23.140.16.0/24 Origin: 63371 RESERVED, ZZ 23.140.16.0/24 Transit: 10796 TWC-10796-MIDWEST, US 23.140.48.0/24 Origin: 63371 RESERVED, ZZ 23.140.48.0/24 Transit: 7018 ATT-INTERNET4, US 23.140.216.0/24 Origin: 27176 DATAWAGON, US 23.140.216.0/24 Transit: 20278 NEXEON, US Complete listing at https://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:16 /10:42 /11:93 /12:307 /13:585 /14:1215 /15:2148 /16:13941 /17:8325 /18:13786 /19:24767 /20:44696 /21:52482 /22:112560 /23:101036 /24:597878 /25:691 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 6700 7739 UNI2-AS, ES 8151 5924 11714 UNINET, MX 11492 3555 4698 CABLEONE, US 39891 3489 4797 ALJAWWALSTC-AS, SA 6327 3418 3623 SHAW, CA 7155 3128 4180 VIASAT-SP-BACKBONE, US 22773 2516 3381 ASN-CXA-ALL-CCI-22773-RDC, US 16509 2264 12731 AMAZON-02, US 30036 2239 2579 MEDIACOM-ENTERPRISE-BUSINESS, US 10620 2183 3543 Telmex Colombia S.A., CO Complete listing at https://thyme.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1666 2:1514 3:570 4:9 5:4587 6:165 7:6 8:1550 9:1 11:172 12:1382 13:354 14:2538 15:346 16:270 17:358 18:916 20:451 21:4 22:188 23:7265 24:2736 25:2 27:2663 29:19 31:3119 32:41 34:77 35:200 36:2419 37:4604 38:8591 39:897 40:152 41:4166 42:955 43:2504 44:347 45:18243 46:4954 47:295 49:1995 50:1878 51:590 52:1573 54:307 55:1147 56:9 57:239 58:2153 59:1246 60:1164 61:2796 62:2938 63:1824 64:5492 65:2201 66:4630 67:3028 68:1122 69:4004 70:1113 71:608 72:2855 74:2794 75:1639 76:632 77:2617 78:1852 79:1696 80:2230 81:2044 82:2268 83:1414 84:1796 85:3299 86:1028 87:2438 88:1281 89:4327 90:754 91:8344 92:2797 93:2862 94:3930 95:4169 96:1290 97:308 98:972 99:734 100:71 101:1145 102:3509 103:32294 104:4666 105:757 106:1019 107:2607 108:1168 109:4083 110:2220 111:3402 112:2047 113:1528 114:1940 115:2135 116:2041 117:2741 118:2424 119:1931 120:1890 121:1407 122:2762 123:2163 124:1607 125:2900 126:94 128:1564 129:963 130:1273 131:1865 132:791 133:450 134:1528 135:322 136:1332 137:1148 138:2891 139:1580 140:1551 141:1471 142:1825 143:1606 144:1058 145:461 146:2145 147:2059 148:2590 149:2858 150:1196 151:1643 152:2027 153:504 154:7935 155:1601 156:3518 157:1872 158:1255 159:2436 160:3527 161:1851 162:3651 163:1792 164:1701 165:2174 166:1326 167:1875 168:4085 169:795 170:5051 171:1002 172:4306 173:3232 174:920 175:1265 176:3603 177:4798 178:3786 179:2216 180:2548 181:3988 182:3372 183:1823 184:2258 185:21459 186:5074 187:4300 188:4215 189:4164 190:9519 191:1526 192:11181 193:9383 194:7742 195:5487 196:3204 197:3584 198:6188 199:8298 200:8084 201:6302 202:10560 203:10523 204:4558 205:3682 206:4651 207:3581 208:4192 209:5154 210:4787 211:2633 212:4524 213:3738 214:1058 215:42 216:6572 217:3105 218:1388 219:538 220:2108 221:1052 222:848 223:2337 End of report

1 0

Reliable GeoIP database
by Scott Q. 05 Feb '25

05 Feb '25

What are you guys using as a reliable GeoIP database ? I've tried Maxmind and a few others, also checking against ARIN but there's tons of differences. For example: 1.2.9.0/24 . ARIN says it belongs to China Telecom but others say it's part of Russia: https://ipregistry.co/1.2.9.0 How to handle such cases ? Thanks! Scott

10 9

Use of NPTv6 in a mobile service provider network
by Amos Rosenboim 04 Feb '25

04 Feb '25

Hi, We are implementing an CGNAT + IPv6 firewall project for a mobile service provider. One of the project goals is to support scale out all active deployment of the stateful devices. One of the challenges of inserting these stateful devices into the network is the requirement that all packets of the same flow will be routed through the same device, while maintaining multi homing of the stateful device. There are few ways to achieve this in the network, but there is also an option to work around this requirement by using NPTv6 on each device or even NAPT66 on each device. I’m trying to understand if this option is deployed anywhere. I’m trying to get feedback on possible technical issues with this approach. Please no “NAT is bad and should be avoided with IPv6” argument, but if you have solid technical objections I’m very interested. Cheers, Amos If you have received this e-mail in error, please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the content of this information is strictly prohibited.

7 11

NANOG Discord
by Ryan Hamel 03 Feb '25

03 Feb '25

NANOG Community, I am excited to announce the official NANOG Discord! Everyone can join by visiting https://discord.nanog.org<https://discord.nanog.org/>. In the Discord, you will find groups of channels related to the conferences, NANOG committees, technology (#bgp, #hardware, #ix, and more), and official + unofficial affinity groups. There is also a voice channel to communicate in real-time via audio, video, and screenshare. When you join, please read the #welcome and #rules channels, and tell us a little bit about yourself in the #general channel. Discord roles can be requested in the #role-request channel by providing your name, and letting us know if you are either a NANOG member, a committee member, board member, or staff. While it is not a requirement, we highly recommend you set your Discord Server Nickname to your First and Last Name, and (optional) include your AS number and/or business name (example “Ryan Hamel - Zayo (AS6461)”) to help members of the community find you. The Discord is managed and moderated by the newly formed Moderation Committee (https://nanog.org/about/who-we-are/committees/moderation-committee/) using similar guidelines to the mailing list which also includes the Code of Conduct (https://nanog.org/about/code-conduct/) If you have any feedback or questions about the NANOG Discord, please let us know! Kind regards, Ryan Hamel

1 0

Re: network simulator for service provider
by Tim Raphael 01 Feb '25

01 Feb '25

There’s also a recently added vscode plugin that needs testers and suggestions! Tim On Sun, Feb 2, 2025, at 05:57, André Dias wrote: > Wait, GUI for containerlabs? Holy, I suggested it without even knowing that it exists! > > ContainerLabs rulez > >> On 1 Feb 2025, at 12:27, Thomas Scott <tscott(a)coreweave.com> wrote: >> >> +1 for containerlab. The ability to commit everything for the topology (including images) to a git repo is incredibly useful for sharing, study and analysis. >> >> There's also a gui floating around for it and klabernetes for labs that need more resources than a single server. >> >> Tim's too modest to toot his own horn, but he also did an awesome presentation on using clab + netbox for network testing a few years ago. Highly recommended if you want to see what's possible with it. >> >> On Sat, Feb 1, 2025 at 7:57 AM Tim Raphael <raphael.timothy(a)gmail.com> wrote: >>> __ >>> Containerlab is also one of the newest and fastest evolving options as well (https: //containerlab. dev/) - Tim On Wed, Apr 3, 2024, at 13: 13, aun Joe wrote: is there anysi network simulator for carrier networks ? well, from 2023 to 2024 there >>> >>> Containerlab is also one of the newest and fastest evolving options as well (https://containerlab.dev/ <https://urldefense.com/v3/__https://containerlab.dev/__;!!I6uDfDBXfA!0elFF7…>) >>> >>> >>> - Tim >>> >>> On Wed, Apr 3, 2024, at 13:13, aun Joe wrote: >>>> is there anysi network simulator for carrier networks ? >>>> >>>> well, from 2023 to 2024 there happes so many carrier network outage caused by network operation. >>>> >>>> to my limited knowledge , SP guru from riverbed could simulate carrier network. but I just checked >>>> riverbed website, SP guru stop updating in 2014. >>>> >>>> joe >>>> >>>> >>>

1 0