- NANOG - lists.nanog.org

RE: KPNQwest ns.eu.net server.
by Neil J. McRae 06 Jun '02

06 Jun '02

Gert, > On Thu, Jun 06, 2002 at 02:59:22PM +0100, Neil J. McRae wrote: > > I suggest that if the RIPE need another provider that they > > take time and issue a proper RFI/P/Q through the European > > Journal. It does ask an interesting question over disaster > > recovery in situations like this. > > Hmmm? As far as I can see, RIPE has enough providers. The problem is > that the ccTLD secondary server hosted at KQ broke - which isn't RIPEs > fault, and doesn't even host anything RIPE is master for (like ripe.net > or the *.in-addr.arpa zones). > Hence why I said "if the RIPE need another provider". Note the part that has "if" in it. Regards, Neil.

1 0

RE: Re: KPNQwest ns.eu.net server.
by Daniska Tomas 06 Jun '02

06 Jun '02

ok, let's suppose that usually provides the most appropriate environment for placing the dns servers and their co-infrastructure. taking it only technically, providing the connectivity for the ixp is a detail (to announce or not to announce). maybe the ixp could allocate a 'stub' subnet - separate from the transit subnet - and provide a voluntary mlpa to all the hosted isps. this would not break the isp policies on announcing the transit ixp subnet. all these are details. i see a space for another topic in this thread - updating the dns infrastrucure a bit. to be more specific: - would the ixp-located tld dns servers server only a small set of tld's each? if so, would it be region-based or agreement-based? - would it be worth the effort starting a project similar to irr that would serve as a common source for dns configurations? it'd be nice to hear your oppinions -- Tomas Daniska systems engineer Tronet Computer Networks Plynarenska 5, 829 75 Bratislava, Slovakia tel: +421 2 58224111, fax: +421 2 58224199 A transistor protected by a fast-acting fuse will protect the fuse by blowing first. > -----Original Message----- > From: Arnold Nipper [mailto:arnold@nipper.de] > Sent: 6. júna 2002 16:29 > To: Daniska Tomas > Cc: Nipper, Arnold; nanog(a)merit.edu > Subject: Re: Re: KPNQwest ns.eu.net server. > > > On Thu, Jun 06, 2002 at 04:13:08PM +0200, Daniska Tomas wrote: > > how would you guarantee connectivity? > > > > as you have a lot of ISPs around you it should be really easy > to get some > connectivity. Very easy: tell some friendly ISP to announce > your prefix/AS > to outside. > > > should each isp present should provide bandwidth as part of > collocation expenses? > > What do you mean by this? If some ISP want to donate bw, > nice. If not also Ok. > > > should the opexes be included in the colo bill? > > Which colo bill? > > > > > and then - this would probably make the colo becoming a > connectivity provider, wouldn't it? > > > > Not necessarily. This much depends on your IXP model. Let's > take DE-CIX. > There is an association running DE-CIX, but InterXion as colo > partner takes > cae for a lot of things. If DE-CIX would offer > infrastructural services, > InterXion still would remain a simple colo provider. > > > Arnold > -- > Arnold Nipper Email: > arnold.nipper(a)de-cix.net > DE-CIX, The German Internet Exchange Mobile: +49 172 2650958 >

1 0

Are you seeing ATM framing errors at Chicago AADS?
by John Kristoff 06 Jun '02

06 Jun '02

The Chicago SBC (formerly AADS) NAP upgraded their Lucent switch code this past Sunday and we suspect we may be having some problems due to that upgrade. If anyone else is there and has been seeing framing errors since then, I'd appreciate a private reply back saying so (or not even). It would be particularly valuable to know what vendor's equipment you have on your side of that link as well. Thanks, John

1 0

RE: Re: KPNQwest ns.eu.net server.
by Daniska Tomas 06 Jun '02

06 Jun '02

how would you guarantee connectivity? should each isp present should provide bandwidth as part of collocation expenses? should the opexes be included in the colo bill? and then - this would probably make the colo becoming a connectivity provider, wouldn't it? -- Tomas Daniska systems engineer Tronet Computer Networks Plynarenska 5, 829 75 Bratislava, Slovakia tel: +421 2 58224111, fax: +421 2 58224199 A transistor protected by a fast-acting fuse will protect the fuse by blowing first. > -----Original Message----- > From: Nipper, Arnold [mailto:arnold.nipper@de-cix.net] > Sent: 6. júna 2002 16:07 > To: Jan-Ahrent Czmok; Sabine Dolderer/Denic > Cc: apnic-talk(a)lists.apnic.net; apops(a)lists.apnic.net; > ddiaz(a)ripe.net; joao(a)ripe.net; lir-wg(a)ripe.net; > nanog(a)merit.edu; randy(a)psg.com; routing-wg(a)ripe.net; tech-l(a)ams-ix.net > Subject: Re: Re: KPNQwest ns.eu.net server. > > > > As a lot of people are offering secondary services: may be > it's a good idea > to place infrastructural services at IXP. IXP seem to be more > stable than > any ISPs and often more neutral than ISPs. > > Comments? > > > Arnold > -- > Arnold Nipper, DE-CIX, the German Internet Exchange > email: arnold.nipper(a)de-cix.net > mobile: +49 172 2650958 > handle: an6695-ripe > > > ----- Original Message ----- > From: "Sabine Dolderer/Denic" <dolderer(a)denic.de> > To: "Jan-Ahrent Czmok" <czmok(a)gatel.net> > Cc: <apnic-talk(a)lists.apnic.net>; <apops(a)lists.apnic.net>; > <ddiaz(a)ripe.net>; > <joao(a)ripe.net>; <lir-wg(a)ripe.net>; <nanog(a)merit.edu>; > <randy(a)psg.com>; > <routing-wg(a)ripe.net>; <tech-l(a)ams-ix.net> > Sent: Thursday, June 06, 2002 9:43 AM > Subject: Re: Re: KPNQwest ns.eu.net server. > > > > Hello, > > DENIC runs currently several secondarys (not only DE but also for some > other TLDs) in different places worldwide. We are willing to offer > secondary service for other ccTLDs. But there will be because of > security/stability reasons a limit on the number of ccTLDs we > want to run > on a single machine. > > Sabine > > -- > Sabine Dolderer > DENIC eG > Wiesenhüttenplatz 26 > D-60329 Frankfurt > > eMail: Sabine.Dolderer(a)denic.de > Fon: +49 69 27235 0 > Fax: +49 69 27235 235 > > > > Jan-Ahrent > Czmok An: Joao Luis Silva Damas > <joao(a)ripe.net> > <czmok@gatel. Kopie: randy(a)psg.com, > ddiaz(a)ripe.net, routing-wg(a)ripe.net, > net> lir-wg(a)ripe.net, > tech-l(a)ams-ix.net, > apops(a)lists.apnic.net, > Gesendet von: nanog(a)merit.edu, > apnic-talk(a)lists.apnic.net > owner-lir-wg@ Thema: Re: KPNQwest > ns.eu.net > server. > ripe.net > > > 06.06.2002 > 01:29 > > > > > > > PostedDate: 06.06.2002 01:29:37 > $MessageID: <20020606012937.2c476312.czmok(a)gatel.net> > From: owner-lir-wg(a)ripe.net > SendTo: Joao Luis Silva Damas <joao(a)ripe.net> > CopyTo: > randy@psg.com;ddiaz@ripe.net;routing-wg@ripe.net;lir-wg@ripe.n > et;tech-l@ams- > ix.net;apops@lists.apnic.net;nanog@merit.edu;apnic-talk@lists. > apnic.net > > Subject: Re: KPNQwest ns.eu.net server. > Received: from smtp.denic.de ([194.246.96.22]) by > notes.denic.de > (Lotus Domino Release 5.0.8) with ESMTP id > 2002060601283597:15602 > ; Thu, 6 Jun 2002 01:28:35 +0200 > Received: from postman.ripe.net (postman.ripe.net [193.0.0.199]) by > smtp.denic.de with smtp id 17FkCg-0004uX-00; Thu, 6 Jun 2002 01:28:34 > +0200 > Received: (qmail 11455 invoked by alias); 5 Jun 2002 23:28:15 -0000 > Received: (qmail 11452 invoked by uid 66); 5 Jun 2002 23:28:15 -0000 > Delivered_To: lists-lir-wg-out(a)lists.ripe.net > PRINCIPAL: Jan-Ahrent Czmok <czmok(a)gatel.net> > In_Reply_To: <p05111700b92449b9ddee(a)[193.0.1.81]> > References: <200206051725.g55HPlA05396(a)birch.ripe.net> > <E17Ff8f-0003So-00(a)roam.psg.com> > <p05111700b92449b9ddee(a)[193.0.1.81]> > Organization: Global Access Telecommunications Inc. > $Mailer: Sylpheed version 0.7.6claws16 (GTK+ 1.2.10; > i386-debian-linux-gnu) > X_Ncc_RegID: de.gatel > MIME_Version: 1.0 > Precedence: bulk > X_Loop_Detect: RIPE NCC > SMTPOriginator: owner-lir-wg(a)ripe.net > RouteServers: CN=notes/O=Denic > RouteTimes: 06.06.2002 01:28:36-06.06.2002 01:28:38 > DeliveredDate: 06.06.2002 01:28:38 > DENICDOCOPENCOUNT: 1 > $MIMETrack: Itemize by SMTP Server on notes/Denic(Release > 5.0.8 |June 18, > 2001) at 06.06.2002 01:28:36;MIME-CD by Notes Client on Sabine > Dolderer/Denic(Release 5.0.6a |January 17, 2001) at 06.06.2002 > 09:32:28;MIME-CD complete at 06.06.2002 09:32:28 > BlindCopyTo: > WebSubject: Re: KPNQwest ns.eu.net server. > > > On Thu, 6 Jun 2002 01:08:46 +0200 > Joao Luis Silva Damas <joao(a)ripe.net> wrote: > > > > > At 11:04 -0700 5/6/02, Randy Bush wrote: > > > > Given the current situation of KPNQwest and the possibility > > >> of its services going offline sometime soon, the RIPE NCC in > > >> agreement with KPNQwest will be temporally hosting this > > >> server (ns.eu.net) in its premises. > > > > > >nice emergency hack and sorry to whine. but i used them both > > >to get diversity. > > > > Hi Randy, > > > > there are 16 ccTLDs for which ns.ripe.net and ns.eu.net are both > > secondary. So we will definitely request those ccTLDs to look for a > > new host as soon as possible. > > Hi Randy, hi Joao, dear routing-wg, > > probably my Company (GATEL, AS13129) is able to host a secondary > server for the ccTLDs. > > The question is rather what are the hardware "requirements" for the > secondary > server. > > We have sufficient bandwidth capacity available and rack > space as well. > > > The rest can take bit more time to think what they want to do since > > ns.eu.net will keep running. > > Well done ! Congrats for the good ideas and coordination work. > > > > > We are offering secondary service on ns.ripe.net for any ccTLD that > > we weren't sencodaring for, as are other people. > > > > The idea is not to have ns.eu.net running for ever, just to enable > > people to have time to take rational decisions, without the fear of > > having the server going away because of some unexpected turn of > > events. > > > > > > > >when in less of a panic, please move it to moscow or something. > > > > Panic? what panic? this is just common sense > > > > right. it's not panic. > > --jan > > -- > Jan Ahrent Czmok - Senior Network Engineer - Access Networks > Global Access Telecommunications, Inc. - Stephanstr. 3 - > 60313 Frankfurt > voice: +49 69 299896-35 - fax: +49 69 299896-66 - email: > czmok(a)gatel.de > > > > >

3 2

Clarification needed on ATM
by Rich Sena 06 Jun '02

06 Jun '02

OK - sorry if this is elementary - however I am dealing with a challenge to the security of some ATM links that we have connecting remote facilities to a main campus. The connections are all PVPs with individual PVCs defined point to point. The concern that is being raised is that although these connections appear point-to-point PVCs to the router interfaces at our sites and our main campus - they are more than likely switched SVCs on the provider backbone... I had thought that a PVC was a nailed up connection between vpi-vci pairs throughout the provider ATM network - is that an incorrect assumption? And if so is the scenario that was raised possible/probable and a concern? Thanks for any info kids... -- Rich Sena - ras(a)thick.net ThickNET Consulting "On the way to understanding; you understand, and forget."

3 2

Niagara Falls cheapie trip
by Simon Lockhart 06 Jun '02

06 Jun '02

All, For those of you going to NANOG25, I'm planning on driving up from the hotel to Niagara Falls for a bit of a tourist on Saturday. A few people have expressed an interest in doing likewise. In the interests of doing a bit of co-ordination, can I suggest we meet at 10am in the hotel foyer, and head off from there. If people want to email me privately, I'll collect a list of who has got cars and who needs a lift, but I can't help resolve mismatch of numbers! Simon -- Simon Lockhart | Tel: +44 (0)1737 839676 Internet Engineering Manager | Fax: +44 (0)1737 839516 BBC Internet Services | Email: Simon.Lockhart(a)bbc.co.uk Kingswood Warren,Tadworth,Surrey,UK | URL: http://support.bbc.co.uk/

1 0

Bogon list
by Rob Thomas 06 Jun '02

06 Jun '02

Hi, folks. For a while folks have asked me to add an aggregated ACL, prefix-list, or black hole routes to the various templates on my site. I've avoided this for a variety of reasons, and decided to create the best of all worlds - the bogon list. :) This list includes the bogons, in both aggregated and non-aggregated form. The list includes bit notation, dotted decimal, and Cisco ACL styles. This is handy for blocking the bogons, egress and ingress, at your borders. Take a peek at it here: http://www.cymru.com/Documents/bogon-list.html Comments and feedback are VERY welcome! Be the first in your ASN to join the CREDITS section. :) Thanks! Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

12 21

Re: KPNQwest ns.eu.net server.
by Jesper Skriver 06 Jun '02

06 Jun '02

On Wed, Jun 05, 2002 at 07:25:47PM +0200, Daniel Diaz wrote: > Dear all, > > > Given the current situation of KPNQwest and the possibility of its > services going offline sometime soon, the RIPE NCC in agreement with > KPNQwest will be temporally hosting this server (ns.eu.net) in its > premises. > > This is to avoid major problems in the Internet as this server is > secondary for a large number of ccTLD's zones, and thousand other > zones. > > We (AS3333) will be soon announcing the 192.16.202.0/24 prefix. TDC is currently secondary for the dk TLD, if any other TLD need a secondary, please contact hostmaster(a)tele.dk and/or tgm(a)tdcinternet.dk best regards /Jesper -- Jesper Skriver, jesper(at)skriver(dot)dk - CCIE #5456 Work: Network manager @ AS3292 (Tele Danmark DataNetworks) Private: FreeBSD committer @ AS2109 (A much smaller network ;-) One Unix to rule them all, One Resolver to find them, One IP to bring them all and in the zone to bind them.

1 0

Re: Bogon list
by smd＠clock.org 06 Jun '02

06 Jun '02

| While on the subject of IXP blocks, we also ended up redistributing the | IXP blocks and sending them to our BGP customers (who do not receive a | default) so that traceroutes and such from Looking Glasses do not break. | They can then choose to filter them as they wish. This is backwards. Do not break the architecture to fix a broken looking glass (or to work around bad interpretations of real-world traceroute results). Spend a few minutes scripting your looking glass software so that if it sees a well-known target, or an expected real-world result (1918 addresses that YOU are using, with expected ttl-distance), it returns a "sanitized" result to a naive looking glass user. I wonder if there exists the possibility of a useful (perhaps open source) generalized expert system to interpret traceroute data? "configure; make; make install" is probably even easier than breaking one's filter lists to leak prefixes all over the place. Sean. (that was a hint. you know who you are.)

3 3

IP renumbering timeframe
by Ralph Doncaster 05 Jun '02

05 Jun '02

We entered into a contract with Cogent for service, and were assigned a /22 for our use. This reassignment was listed in Cogent's rwhois server (they don't SWIP). They also gave written permission to another transit provider (Peer1) to accept our BGP announcements for the /22. We have been announcing them to our Peer1 and over a dozen peers for a few months now. After paying Cogent $11K, a billing dispute developed. On Friday May 3 we terminated our service with Cogent, and on May 5 Cogent contacted our main internet connection provder to stop routing these IPs. Cogent did not contact us first. There is still an RADB entry for this block with our AS21936 as the origin. Under pressure from Cogent Peer1 complied, though I think I have them convinced that a few hours notice on a Sunday evg is not a reasonable amount of time to renumber from a /22. What is the generally accpted timeframe for renumbering? My reading of ARIN policy would seem to imply at least 30 days. Ralph Doncaster principal, IStop.com div. of Doncaster Consulting Inc.

25 51