- NANOG - lists.nanog.org

Re: mail admins?
by Scott Weeks 27 Apr '20

27 Apr '20

--- mike(a)mtcc.com wrote: From: Michael Thomas <mike(a)mtcc.com> I'm not sure why the admins of nanog's site should particularly care about appeasing the js tinfoil hat set. i mean, computers computing! who will stop this madness! --------------------------------------------- Not the tin foil hat crowd, security. Computers be computing with or without security. Many turn off JS. Especially in this crowd. The only time I wanted to use the site anyway was to find a thread as I can't seem to find them well in search engines. For example, what was the thread about SOHO firewalls and pfsense not too long ago? I can't remember what everyone was saying about a pfsense replacement as pfsense is no longer what it was. I am having to greenfield my home network and want to find a nerdable "dual WAN' firewall. That's off topic, though, as it's just a home network question. scott

7 22

Best way to get foreign ISPs to shut down DDoS reflectors?
by Bottiger 24 Apr '20

24 Apr '20

Is there a guide on how to get foreign ISPs to shut down reflectors used in DDoS attacks? I've tried sending emails listed under abuse contacts for their regional registries. Either there is none listed, the email is full, email does not exist, or they do not reply. Same results when sending to whatever other email they have listed. Example Networks: CLARO S.A. Telefonica China Telecom Korea Telecom

9 12

Weekly Routing Table Report
by cscora＠apnic.net 24 Apr '20

24 Apr '20

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 25 Apr, 2020 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 807324 Prefixes after maximum aggregation (per Origin AS): 306952 Deaggregation factor: 2.63 Unique aggregates announced (without unneeded subnets): 394895 Total ASes present in the Internet Routing Table: 67870 Prefixes per ASN: 11.90 Origin-only ASes present in the Internet Routing Table: 58291 Origin ASes announcing only one prefix: 24322 Transit ASes present in the Internet Routing Table: 9579 Transit-only ASes present in the Internet Routing Table: 301 Average AS path length visible in the Internet Routing Table: 4.4 Max AS path length visible: 45 Max AS path prepend of ASN ( 27978) 31 Prefixes from unregistered ASNs in the Routing Table: 1121 Number of instances of unregistered ASNs: 1124 Number of 32-bit ASNs allocated by the RIRs: 31403 Number of 32-bit ASNs visible in the Routing Table: 25963 Prefixes from 32-bit ASNs in the Routing Table: 119709 Number of bogon 32-bit ASNs visible in the Routing Table: 21 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 745 Number of addresses announced to Internet: 2856567040 Equivalent to 170 /8s, 67 /16s and 193 /24s Percentage of available address space announced: 77.2 Percentage of allocated address space announced: 77.2 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.5 Total number of prefixes smaller than registry allocations: 272367 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 211915 Total APNIC prefixes after maximum aggregation: 62126 APNIC Deaggregation factor: 3.41 Prefixes being announced from the APNIC address blocks: 205110 Unique aggregates announced from the APNIC address blocks: 86548 APNIC Region origin ASes present in the Internet Routing Table: 10538 APNIC Prefixes per ASN: 19.46 APNIC Region origin ASes announcing only one prefix: 2941 APNIC Region transit ASes present in the Internet Routing Table: 1576 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 27 Number of APNIC region 32-bit ASNs visible in the Routing Table: 5605 Number of APNIC addresses announced to Internet: 767134848 Equivalent to 45 /8s, 185 /16s and 140 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-141625 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 236391 Total ARIN prefixes after maximum aggregation: 108750 ARIN Deaggregation factor: 2.17 Prefixes being announced from the ARIN address blocks: 233827 Unique aggregates announced from the ARIN address blocks: 118675 ARIN Region origin ASes present in the Internet Routing Table: 18444 ARIN Prefixes per ASN: 12.68 ARIN Region origin ASes announcing only one prefix: 6722 ARIN Region transit ASes present in the Internet Routing Table: 1918 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 25 Number of ARIN region 32-bit ASNs visible in the Routing Table: 3208 Number of ARIN addresses announced to Internet: 1080555776 Equivalent to 64 /8s, 103 /16s and 249 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-399260 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 229590 Total RIPE prefixes after maximum aggregation: 106028 RIPE Deaggregation factor: 2.17 Prefixes being announced from the RIPE address blocks: 226295 Unique aggregates announced from the RIPE address blocks: 132635 RIPE Region origin ASes present in the Internet Routing Table: 27046 RIPE Prefixes per ASN: 8.37 RIPE Region origin ASes announcing only one prefix: 11735 RIPE Region transit ASes present in the Internet Routing Table: 3836 Average RIPE Region AS path length visible: 4.3 Max RIPE Region AS path length visible: 31 Number of RIPE region 32-bit ASNs visible in the Routing Table: 9128 Number of RIPE addresses announced to Internet: 724445312 Equivalent to 43 /8s, 46 /16s and 40 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 105935 Total LACNIC prefixes after maximum aggregation: 24598 LACNIC Deaggregation factor: 4.31 Prefixes being announced from the LACNIC address blocks: 107257 Unique aggregates announced from the LACNIC address blocks: 46358 LACNIC Region origin ASes present in the Internet Routing Table: 9774 LACNIC Prefixes per ASN: 10.97 LACNIC Region origin ASes announcing only one prefix: 2436 LACNIC Region transit ASes present in the Internet Routing Table: 1839 Average LACNIC Region AS path length visible: 5.1 Max LACNIC Region AS path length visible: 45 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 7344 Number of LACNIC addresses announced to Internet: 174594816 Equivalent to 10 /8s, 104 /16s and 27 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-270748 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 22371 Total AfriNIC prefixes after maximum aggregation: 4717 AfriNIC Deaggregation factor: 4.74 Prefixes being announced from the AfriNIC address blocks: 34090 Unique aggregates announced from the AfriNIC address blocks: 10061 AfriNIC Region origin ASes present in the Internet Routing Table: 1388 AfriNIC Prefixes per ASN: 24.56 AfriNIC Region origin ASes announcing only one prefix: 488 AfriNIC Region transit ASes present in the Internet Routing Table: 269 Average AfriNIC Region AS path length visible: 5.1 Max AfriNIC Region AS path length visible: 23 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 678 Number of AfriNIC addresses announced to Internet: 109410304 Equivalent to 6 /8s, 133 /16s and 120 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7545 5430 684 632 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4751 4192 73 ERX-CERNET-BKB China Education and Rese 7552 3378 1330 22 VIETEL-AS-AP Viettel Group, VN 45899 2806 1763 157 VNPT-AS-VN VNPT Corp, VN 7713 2713 831 505 TELKOMNET-AS-AP PT Telekomunikasi Indon 9808 2552 9043 62 CMNET-GD Guangdong Mobile Communication 4766 2288 11102 561 KIXS-AS-KR Korea Telecom, KR 9498 2263 434 221 BBIL-AP BHARTI Airtel Ltd., IN 4755 2134 441 192 TATACOMM-AS TATA Communications formerl 9394 2040 4914 20 CTTNET China TieTong Telecommunications Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 11492 4263 285 652 CABLEONE, US 7155 4034 280 28 VIASAT-SP-BACKBONE, US 16509 3998 7877 1773 AMAZON-02, US 22773 3533 2968 149 ASN-CXA-ALL-CCI-22773-RDC, US 6327 3364 1324 92 SHAW, CA 16625 3052 1592 2184 AKAMAI-AS, US 209 2420 5077 538 CENTURYLINK-US-LEGACY-QWEST, US 30036 2375 362 94 MEDIACOM-ENTERPRISE-BUSINESS, US 5650 2300 2981 1621 FRONTIER-FRTR, US 26484 2194 137 175 IKGUL-26484, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 5772 1603 138 UNI2-AS, ES 31334 4759 484 13 KABELDEUTSCHLAND-AS, DE 39891 3651 203 20 ALJAWWALSTC-AS, SA 8551 3202 379 45 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 2969 456 2027 AKAMAI-ASN1, EU 12389 2497 2251 725 ROSTELECOM-AS, RU 9009 2170 229 1177 M247, GB 34984 2056 350 561 TELLCOM-AS, TR 9121 1890 1691 18 TTNET, TR 13188 1606 100 36 TRIOLAN, UA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 6497 3316 600 Uninet S.A. de C.V., MX 10620 3360 530 517 Telmex Colombia S.A., CO 11830 2671 369 63 Instituto Costarricense de Electricidad 6503 1687 327 387 Axtel, S.A.B. de C.V., MX 7303 1552 1031 262 Telecom Argentina S.A., AR 28573 1371 2242 203 CLARO S.A., BR 13999 1327 490 326 Mega Cable, S.A. de C.V., MX 6147 1141 379 39 Telefonica del Peru S.A.A., PE 3816 1096 570 139 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 11172 956 112 70 Alestra, S. de R.L. de C.V., MX Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1467 393 22 LINKdotNET-AS, EG 24835 1109 574 25 RAYA-AS, EG 36992 1087 1539 76 ETISALAT-MISR, EG 36903 890 467 88 MT-MPLS, MA 29571 600 68 12 ORANGE-COTE-IVOIRE, CI 6713 566 1863 34 IAM-AS, MA 36935 410 522 44 Vodafone-, EG 37342 404 32 1 MOVITEL, MZ 23889 368 231 15 MauritiusTelecom, MU 15399 349 45 10 WANANCHI-, KE Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 6497 3316 600 Uninet S.A. de C.V., MX 12479 5772 1603 138 UNI2-AS, ES 7545 5430 684 632 TPG-INTERNET-AP TPG Telecom Limited, AU 31334 4759 484 13 KABELDEUTSCHLAND-AS, DE 4538 4751 4192 73 ERX-CERNET-BKB China Education and Rese 11492 4263 285 652 CABLEONE, US 7155 4034 280 28 VIASAT-SP-BACKBONE, US 16509 3998 7877 1773 AMAZON-02, US 39891 3651 203 20 ALJAWWALSTC-AS, SA 22773 3533 2968 149 ASN-CXA-ALL-CCI-22773-RDC, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 12479 5772 5634 UNI2-AS, ES 7545 5430 4798 TPG-INTERNET-AP TPG Telecom Limited, AU 31334 4759 4746 KABELDEUTSCHLAND-AS, DE 4538 4751 4678 ERX-CERNET-BKB China Education and Research Net 7155 4034 4006 VIASAT-SP-BACKBONE, US 39891 3651 3631 ALJAWWALSTC-AS, SA 11492 4263 3611 CABLEONE, US 22773 3533 3384 ASN-CXA-ALL-CCI-22773-RDC, US 7552 3378 3356 VIETEL-AS-AP Viettel Group, VN 6327 3364 3272 SHAW, CA Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 174 COGENT-174, US 62485 UNALLOCATED 8.23.229.0/24 3356 LEVEL3, US 32985 UNALLOCATED 8.28.31.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 174 COGENT-174, US 14109 UNALLOCATED 8.38.252.0/24 3356 LEVEL3, US 23061 UNALLOCATED 8.39.119.0/24 3356 LEVEL3, US 26584 UNALLOCATED 8.42.62.0/23 209 CENTURYLINK-US-LEGACY-QWEST, 395438 UNALLOCATED 8.42.206.0/24 3356 LEVEL3, US 40544 UNALLOCATED 12.0.33.0/24 6461 ZAYO-6461, US Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 27.100.7.0/24 Origin: 56096 UNASSIGNED Transit: 45455 TH-2S1N-AP Two S One N Co Ltd, Internet 27.126.156.0/22 Origin: 55827 UNASSIGNED Transit: 9930 TTNET-MY TIME dotCom Berhad, MY 27.126.156.0/23 Origin: 55827 UNASSIGNED Transit: 9930 TTNET-MY TIME dotCom Berhad, MY 27.126.158.0/23 Origin: 55827 UNASSIGNED Transit: 9930 TTNET-MY TIME dotCom Berhad, MY 41.67.192.0/18 Origin: 15964 CAMNET-AS, CM Transit: 37662 WIOCC-AS, MU Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:10 /9:11 /10:38 /11:99 /12:286 /13:578 /14:1166 /15:1917 /16:13368 /17:8202 /18:13594 /19:25854 /20:40481 /21:47970 /22:100009 /23:82638 /24:469820 /25:1283 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 4775 5772 UNI2-AS, ES 31334 4604 4759 KABELDEUTSCHLAND-AS, DE 11492 3341 4263 CABLEONE, US 6327 3152 3364 SHAW, CA 7155 3125 4034 VIASAT-SP-BACKBONE, US 39891 2801 3651 ALJAWWALSTC-AS, SA 22773 2751 3533 ASN-CXA-ALL-CCI-22773-RDC, US 8551 2660 3202 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 8151 2216 6497 Uninet S.A. de C.V., MX 30036 2122 2375 MEDIACOM-ENTERPRISE-BUSINESS, US Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1586 2:1152 3:30 4:19 5:3346 6:51 8:1406 9:1 11:1 12:1794 13:506 14:2280 15:75 16:9 17:299 18:81 20:83 23:3505 24:2267 25:2 27:2565 31:3067 32:103 34:3 35:41 36:930 37:3299 38:1953 39:389 40:126 41:3598 42:693 43:2114 44:203 45:14112 46:3708 47:286 49:1449 50:1411 51:91 52:1121 54:269 55:673 56:6 57:52 58:1769 59:1176 60:726 61:2249 62:2229 63:1962 64:5090 65:2297 66:4908 67:2848 68:1228 69:3825 70:1429 71:679 72:2882 74:2598 75:1434 76:682 77:2815 78:1870 79:2424 80:1927 81:1623 82:1302 83:1159 84:1204 85:2547 86:552 87:1705 88:1141 89:2738 90:317 91:7908 92:1504 93:2463 94:2673 95:3954 96:1117 97:335 98:938 99:973 100:87 101:974 102:896 103:23584 104:3437 105:378 106:834 107:1991 108:702 109:3669 110:1811 111:1984 112:1601 113:1401 114:1549 115:1822 116:1798 117:2095 118:2163 119:1737 120:820 121:1050 122:2438 123:1994 124:1556 125:2040 128:1347 129:943 130:634 131:1844 132:758 133:300 134:1304 135:295 136:614 137:852 138:2172 139:991 140:642 141:940 142:904 143:1207 144:972 145:330 146:1492 147:1036 148:2128 149:1179 150:816 151:1295 152:1494 153:379 154:4738 155:1044 156:3383 157:1099 158:831 159:1959 160:1940 161:1033 162:3054 163:858 164:1444 165:1284 166:532 167:1625 168:3434 169:526 170:4239 171:773 172:1925 173:2501 174:1012 175:1016 176:2627 177:4217 178:3051 179:1478 180:2320 181:2529 182:3086 183:1132 184:2411 185:16406 186:3792 187:2716 188:4093 189:2260 190:8624 191:1420 192:10347 193:7461 194:6119 195:4377 196:3306 197:1808 198:6100 199:5978 200:7225 201:5224 202:10500 203:10161 204:4521 205:3104 206:3249 207:3292 208:4034 209:4409 210:4016 211:2002 212:3323 213:3127 214:1166 215:61 216:5963 217:2401 218:878 219:612 220:2039 221:896 222:1009 223:1466 End of report

1 0

Present Virtually at NANOG 79 - CFP Extended to May 7th
by Vincent Celindro 24 Apr '20

24 Apr '20

Share your insights at NANOG 79 With a remote presentation that brings your research + ideas to life. Due to the COVID-19 global pandemic, NANOG 79 will now be held as a virtual meeting <https://nanog.org/meetings/nanog-79/> with an abridged program (June 1-3). The in-person meeting in Boston has been canceled to ensure the health and safety of our community. The NANOG Program Committee (PC) is developing a program tailored to the three-day meeting with an online format, and has extended the Call For Presentations to May 7. We encourage anyone interested in sharing their research, ideas, and best practices with the greater NANOG community to submit a proposal for a talk, tutorial, or panel to be presented virtually. Submit Now <https://nanog.org/participate/call-presentations/> View Guidelines <https://www.nanog.org/participate/presentation-guidelines/> In addition to proposals focused on current (or soon-to-be deployed) technologies and industry innovation, we believe our community would also be interested in the following topics: - Impact to Networks & Engineers as a result of COVID-19 - Insights on working from home, VPN, sustained traffic, shifting of resources, application changes, etc. - Online conferencing security, BYOD and desktop security, family and work. - RPKI Deployments - Professional Development - Advice on white boarding, public speaking, negotiating, etc. We look forward to reading your proposals, and connecting online this June! Sincerely, Vincent Celindro NANOG - Program Committee Chair on behalf of the NANOG PC

1 0

FlowSpec
by Colton Conor 24 Apr '20

24 Apr '20

Do any of the large transit providers support FlowSpec to transit customers / other carriers, or is that not a thing since they want to sell DDoS protection services? FlowSpec sounds much better than RTBH (remotely triggered blackhole), but I am not sure if FlowSpec is widely implemented. I see the large router manufacturers support it.

5 6

Re: mail admins?
by Scott Weeks 24 Apr '20

24 Apr '20

--- mike(a)mtcc.com wrote: From: Michael Thomas <mike(a)mtcc.com> To: nanog(a)nanog.org Subject: Re: mail admins? Date: Tue, 21 Apr 2020 17:34:36 -0700 On 4/21/20 5:19 PM, Scott Weeks wrote: > > >> I think you just need to let scripts run in your browser for >> nanog.org. > sad. http://nanog.org used to be the brilliant example of a fully > featured web site sans javascript, flash, ... > --------------------------------------------------- > > > I'm not one to plus-one anything, but this should be plus-infinity. > I whined about it a year or so ago. Crickets. I gave up on doing > anything on the web site because I can't get anything to work > unless I make my computer less secure. Sad trend. More flash and > trash marketing crap and less network engineering acumen. Like > configuring routers from a web browser, rather than a CLI... > this ship left port in the 90's. you might as well be an old man yelling at clouds. oh wait, randy does kind of resemble grandpa simpson :) ---------------------------------------------- So I should just get used to configuring routers with HTTP and Notepad and forget about that nasty, old, 20th century vi crap? :) scott ps. One guy I know claims vi is the spawn of satan.

4 5

Re: mail admins?
by Scott Weeks 23 Apr '20

23 Apr '20

--- mike(a)mtcc.com wrote > So I should just get used to configuring routers with HTTP and > Notepad and forget about that nasty, old, 20th century vi crap? :) No, but complaining about javascript on websites --------------------------------- Just to be clear, I was only complaining about NANOG's site. Well, ARIN's, too. I get what you're saying for the internet in general. It seems NANOG could see javascript being blocked and redirect folks to a non-insecure (javascript) site like others (twitter, for example) do. Then, I could use Lynx! (kidding!) :) scott

2 1

Comcast - Significant v4 vs v6 throughput differences, almost stateful.
by Nick Zurku 23 Apr '20

23 Apr '20

Hello all, I would appreciate if someone from Comcast could contact me about this. We’re having serious throughput issues with our AS20326 pushing packets to Comcast over v4. Our transfers are either the full line-speed of the Comcast customer modem, or they’re seemingly capped at 200-300KB/s. This behavior appears to be almost stateful, as if the speed is decided when the connection starts. As long as it starts fast it will remain fast for the length of the transfer and slow if it starts slow. Traces seem reasonable and currently we’ve influenced the path onto GTT both ways. If we prepend and reroute on our side, the same exact issue with happen on another transit provider. This issue does not affect v6 and that is full speed on every attempt. This may be regionalized to the Comcast Pittsburgh market. This is most widely affecting our linux mirror repository server: http://mirror.pit.teraswitch.com/ Our colocation customers who are hosting VPN systems are also noticing bottlenecks have started recently for their Comcast employees. -- Nick Zurku Systems Engineer TeraSwitch, Inc. nzurku(a)teraswitch.com

6 6

xplornet contact or any experience with their satellite service?
by Brian J. Murrell 23 Apr '20

23 Apr '20

A friend of mine just recently got Xplornet satellite service at his rural home. I'm well aware of the latency issues with satellite although frankly his latency is much better than I had feared it would be and is around 600-700ms. But what seems to be worse than the latency is the "burstiness" of the traffic and I am just wondering if that is normal/expected for satellite service in general, and/or expected from Xplornet's service, or if what I am seeing is not expected at all (i.e. not an artifact of the satellite signal but rather a network management issue). Here's iperf3 for 30 seconds sending data (i.e. upload speed): [ ID] Interval Transfer Bitrate [ 5] 0.00-1.21 sec 12.9 KBytes 87.4 Kbits/sec [ 5] 1.21-2.00 sec 6.47 KBytes 67.2 Kbits/sec [ 5] 2.00-3.00 sec 22.0 KBytes 180 Kbits/sec [ 5] 3.00-4.00 sec 41.4 KBytes 339 Kbits/sec [ 5] 4.00-5.00 sec 41.4 KBytes 339 Kbits/sec [ 5] 5.00-6.00 sec 55.6 KBytes 456 Kbits/sec [ 5] 6.00-7.00 sec 69.9 KBytes 572 Kbits/sec [ 5] 7.00-8.00 sec 89.3 KBytes 731 Kbits/sec [ 5] 8.00-9.00 sec 120 KBytes 986 Kbits/sec [ 5] 9.00-10.00 sec 86.7 KBytes 710 Kbits/sec [ 5] 10.00-11.00 sec 133 KBytes 1.09 Mbits/sec [ 5] 11.00-12.00 sec 184 KBytes 1.51 Mbits/sec [ 5] 12.00-13.00 sec 186 KBytes 1.53 Mbits/sec [ 5] 13.00-14.00 sec 159 KBytes 1.30 Mbits/sec [ 5] 14.00-15.00 sec 0.00 Bytes 0.00 bits/sec [ 5] 15.00-16.00 sec 0.00 Bytes 0.00 bits/sec [ 5] 16.00-17.00 sec 93.2 KBytes 763 Kbits/sec [ 5] 17.00-18.00 sec 264 KBytes 2.16 Mbits/sec [ 5] 18.00-19.00 sec 124 KBytes 1.02 Mbits/sec [ 5] 19.00-20.00 sec 157 KBytes 1.28 Mbits/sec [ 5] 20.00-21.00 sec 120 KBytes 986 Kbits/sec [ 5] 21.00-22.00 sec 86.7 KBytes 710 Kbits/sec [ 5] 22.00-23.00 sec 369 KBytes 3.02 Mbits/sec [ 5] 23.00-24.00 sec 197 KBytes 1.61 Mbits/sec [ 5] 24.00-25.00 sec 90.6 KBytes 741 Kbits/sec [ 5] 25.00-26.00 sec 193 KBytes 1.58 Mbits/sec [ 5] 26.00-27.00 sec 192 KBytes 1.57 Mbits/sec [ 5] 27.00-28.00 sec 189 KBytes 1.55 Mbits/sec [ 5] 28.00-29.00 sec 193 KBytes 1.58 Mbits/sec [ 5] 29.00-30.00 sec 179 KBytes 1.46 Mbits/sec - - - - - - - - - - - - - - - - - - - - - - - - - [ ID] Interval Transfer Bitrate Retr [ 5] 0.00-32.20 sec 4.41 MBytes 1.15 Mbits/sec 388 sender [ 5] 0.00-30.00 sec 3.57 MBytes 998 Kbits/sec receiver which averaged the overall prescribed "upload" speed, but notice that it's not 1Mb/s in any kind of a steady stream but rather bursts of higher than 1Mb/s speed followed by low/no speed. At one point it was 2 seconds with no transfer at all even. and here's receiving (i.e. "download"): [ ID] Interval Transfer Bitrate Retr Cwnd [ 5] 0.00-1.35 sec 46.6 KBytes 283 Kbits/sec 0 12.9 KBytes [ 5] 1.35-2.00 sec 0.00 Bytes 0.00 bits/sec 0 12.9 KBytes [ 5] 2.00-3.00 sec 67.3 KBytes 551 Kbits/sec 0 37.5 KBytes [ 5] 3.00-4.00 sec 46.6 KBytes 382 Kbits/sec 0 40.1 KBytes [ 5] 4.00-5.00 sec 105 KBytes 858 Kbits/sec 0 44.0 KBytes [ 5] 5.00-6.00 sec 88.0 KBytes 721 Kbits/sec 0 54.3 KBytes [ 5] 6.00-7.00 sec 141 KBytes 1.16 Mbits/sec 0 69.9 KBytes [ 5] 7.00-8.00 sec 124 KBytes 1.02 Mbits/sec 0 101 KBytes [ 5] 8.00-9.00 sec 186 KBytes 1.53 Mbits/sec 0 146 KBytes [ 5] 9.00-10.00 sec 248 KBytes 2.04 Mbits/sec 0 206 KBytes [ 5] 10.00-11.00 sec 311 KBytes 2.54 Mbits/sec 0 257 KBytes [ 5] 11.00-12.00 sec 0.00 Bytes 0.00 bits/sec 43 194 KBytes [ 5] 12.00-13.00 sec 0.00 Bytes 0.00 bits/sec 75 199 KBytes [ 5] 13.00-14.00 sec 435 KBytes 3.56 Mbits/sec 0 199 KBytes [ 5] 14.00-15.00 sec 0.00 Bytes 0.00 bits/sec 34 114 KBytes [ 5] 15.00-16.00 sec 0.00 Bytes 0.00 bits/sec 34 140 KBytes [ 5] 16.00-17.00 sec 373 KBytes 3.05 Mbits/sec 0 149 KBytes [ 5] 17.00-18.00 sec 0.00 Bytes 0.00 bits/sec 0 162 KBytes [ 5] 18.00-19.00 sec 373 KBytes 3.05 Mbits/sec 0 168 KBytes [ 5] 19.00-20.00 sec 0.00 Bytes 0.00 bits/sec 0 171 KBytes [ 5] 20.00-21.00 sec 373 KBytes 3.05 Mbits/sec 0 172 KBytes [ 5] 21.00-22.00 sec 0.00 Bytes 0.00 bits/sec 14 141 KBytes [ 5] 22.00-23.00 sec 0.00 Bytes 0.00 bits/sec 0 120 KBytes [ 5] 23.00-24.00 sec 373 KBytes 3.05 Mbits/sec 0 131 KBytes [ 5] 24.00-25.00 sec 0.00 Bytes 0.00 bits/sec 1 146 KBytes [ 5] 25.00-26.00 sec 0.00 Bytes 0.00 bits/sec 14 104 KBytes [ 5] 26.00-27.00 sec 0.00 Bytes 0.00 bits/sec 0 104 KBytes [ 5] 27.00-28.00 sec 373 KBytes 3.05 Mbits/sec 0 107 KBytes [ 5] 28.00-29.00 sec 0.00 Bytes 0.00 bits/sec 0 119 KBytes [ 5] 29.00-30.00 sec 373 KBytes 3.05 Mbits/sec 0 123 KBytes - - - - - - - - - - - - - - - - - - - - - - - - - [ ID] Interval Transfer Bitrate Retr [ 5] 0.00-30.00 sec 3.94 MBytes 1.10 Mbits/sec 215 sender [ 5] 0.00-30.80 sec 3.13 MBytes 853 Kbits/sec receiver Again, very bursty with periods of 1-2 seconds with no transfer. As you can imagine, the bursiness of this makes for horrible video conferencing since that cannot "buffer" the way single-direction streams like streaming video can and the codec ends up using the "worst case" dips as the speed of the connection and encodes for that. Cheers, b.

6 9

Venmo - Geolocation Challenges
by Justin Krejci 23 Apr '20

23 Apr '20

Hello, I am looking for a Venmo network contact that can assist with a geolocation error in their systems. We have customers on a particular IP prefix who are being flagged by Venmo as outside of the USA but they are not outside of the USA. All standard geolocation systems I can find, as well as ARIN, all show the IP prefix as within the USA. Normal Venmo support channels are not fruitful to resolve the issue, they mostly just indicated users need to use their mobile data connection to get a different IP address for Venmo transactions. That is fine as a temporary work around but that is not a solution. Venmo support has expressed they are not going to do anything more for us in this regard. So if anyone has a relevant contact I might reach out to at Venmo or knows if Venmo uses a particular 3rd party geolocation data set and can share that with me that would be appreciated. I don't mind working with any organization to straighten out any stale data, I just need some assistance getting to someone who has the info or access. Thanks!! Justin Krejci

2 1