- NANOG - lists.nanog.org

Hulu-Disney IP Problems
by Romeo Czumbil 05 Mar '20

05 Mar '20

Came to my attention that most of my Data Centers in the US are having problems using Hulu, Disney+ and not as much but also Netflix. What criteria do these providers use to make sure that the IPs are legit and not proxys/VPNs All the IPs I checked on number of GEO sites are registered to an address in the US. Now I do get different answers on some of the blocks where that address registered to the actual Data Center address and other GEO services provides show the corporate billing address. Some example IPs are: 66.45.167.10 (Spokane WA) 199.96.248.1 (Bethlehem PA) Disney+ was kind enough to whitelist some subnets, but I would like to fix my problem vs manually whitelist them. I know registering the blocks to the proper address is important and that is already being address but what else am I missing? Why do the content providers thinks were a proxy? Thank you in advance for all assistance. -Romeo

2 2

Google peering in LAX
by Seth Mattinen 04 Mar '20

04 Mar '20

Anyone know why Google announces only aggregates via peering and disaggregate prefixes over transit? For example, I had a customer complaining about a path that was taking the long way instead of via peering and when I looked I saw: Only 172.217.0.0/16 over Any2 LAX That plus 172.217.14.0/24 over transit Any inquiries to Google just get a generic "we're not setting up any new peering but we're on route servers" response for almost a year now. Or is it because they don't send the /24's to route servers and I'm stuck until they finish their forever improvement project to turn up a direct neighbor?

9 15

RADB account deletions
by Clinton Work 04 Mar '20

04 Mar '20

It looks like the former Allstream RADB account (MAINT-AS15290) and all associated route objects were removed from RADB today. The deletion mainly impacts Canadian route objects registered by the former Allstream (now Zayo). Q9 Networks MAINT-AS12188 was deleted at the same time. -- Clinton Work

5 7

Anybody on list from CenturyLink IP network?
by Drew Weaver 04 Mar '20

04 Mar '20

Please contact me =) -Drew

1 0

RE: China’s Slow Transnational Network
by Jakob Heitz (jheitz) 03 Mar '20

03 Mar '20

I can corroborate that. I visited China in August 2019 and had terrible internet performance to sites outside of China. This was both with mobile and wifi at the homes of two friends, one in Heilongjiang and the other in Beijing. When I visited in February 2015, it was much better. Both times, I was using VNC on the company VPN. This does not use much bandwidth, but is quite latency sensitive. -----Original Message----- Date: Sun, 1 Mar 2020 21:00:05 -0800 From: Pengxiong Zhu <pzhu011(a)ucr.edu> Hi all, We are a group of researchers at University of California, Riverside who have been working on measuring the transnational network performance (and have previously asked questions on the mailing list). Our work has now led to a publication in Sigmetrics 2020 and we are eager to share some interesting findings. We find China's transnational networks have extremely poor performance when accessing foreign sites, where the throughput is often persistently low (e.g., for the majority of the daytime). Compared to other countries we measured including both developed and developing, China's transnational network performance is among the worst (comparable and even worse than some African countries). Measuring from more than 400 pairs of mainland China and foreign nodes over more than 53 days, our result shows when data transferring from foreign nodes to China, 79% of measured connections has throughput lower than the 1Mbps, sometimes it is even much lower. The slow speed occurs only during certain times and forms a diurnal pattern that resembles congestion (irrespective of network protocol and content), please see the following figure. The diurnal pattern is fairly stable, 80% to 95% of the transnational connections have a less than 3 hours standard deviation of the slowdown hours each day over the entire duration. However, the speed rises up from 1Mbps to 4Mbps in about half an hour. We are able to confirm that high packet loss rates and delays are incurred in the foreign-to-China direction only. Moreover, the end-to-end loss rate could rise up to 40% during the slow period, with ~15% on average. There are a few things noteworthy regarding the phenomenon. First of all, all traffic types are treated equally, HTTP(S), VPN, etc., which means it is discriminating or differentiating any specific kinds of traffic. Second, we found for 71% of connections, the bottleneck is located inside China (the second hop after entering China or further), which means that it is mostly unrelated to the transnational link itself (e.g., submarine cable). Yet we never observed any such domestic traffic slowdowns within China. Assuming this is due to congestion, it is unclear why the infrastructures within China that handles transnational traffic is not even capable to handle the capacity of transnational links, e.g., submarine cable, which maybe the most expensive investment themselves. Here is the link to our paper: https://www.cs.ucr.edu/~zhiyunq/pub/sigmetrics20_slowdown.pdf We appreciate any comments or feedback. -- Best, Pengxiong Zhu Department of Computer Science and Engineering University of California, Riverside

3 2

NANOG 79 Call For Presentations
by Vincent Celindro 03 Mar '20

03 Mar '20

Vincent Celindro <vcelindro(a)nanog.org> Thu, Nov 21, 2019, 5:57 PM to NANOG-announce, nanog Dear NANOG Community, In NANOG tradition - The NANOG Program Committee (PC) is excited to announce that we are accepting proposals for all sessions at NANOG 79 in Boston, Massachusetts, June 1st - 3rd, 2020. As mentioned during the community meeting at NANOG 78 in San Francisco, the Call For Presentations, CFP, is now open all year round, for current and future meetings. Below is a summary of key details and dates for the CFP, which can also be found at https://www.nanog.org/meetings/nanog-79/submit-presentation/ Given by many of the industry’s top minds, presentations at NANOG meetings are meant to spark the imagination, encourage dialog, and drive new solutions to our greatest networking challenges. The PC is currently seeking proposals, and also welcomes suggestions for speakers and topics. Presentations may cover current technologies, soon-to-be deployed technologies, and industry innovation. Vendors are welcome to submit talks which cover relevant technologies and capabilities, but presentations should not be promotional, or discuss proprietary solutions. We understand you may have concerns regarding the COVID 19 coronavirus. To date, the areas of the world most impacted by the virus are outside the North American region, which NANOG serves. The NANOG Board of Directors and executive team are closely watching the latest news reports as information about the virus rapidly changes, and how this may or may not impact the upcoming conference. There is no information at this time that suggests we should cancel NANOG 79, but we assure you we'll keep the entire NANOG community up to date as information changes, and we learn more. The primary speaker, moderator, or author should submit a presentation proposal and abstract via the Program Committee Tool at: https://www.nanog.org/meetings/submit-presentation/ - Sign in with your Profile Account - Select the type of talk you propose to present, and complete the title and abstract Timeline for submission and proposal review: - Submitter enters abstract (and draft slides if possible) in Program Committee Tool prior to the deadline for slide submission. - PC performs initial review and assigns a “shepherd” to help develop the submission — within 2 weeks. - Submitter develops draft slides of talk if not already submitted with the initial proposal. Please submit initial draft slides early — the PC does not evaluate submissions until draft slides are available for review. A NANOG slide template as well as presentation guidelines are available here. https://www.nanog.org/participate/presentation-guidelines/ - Panel and Track submissions should provide a topic list and intended/confirmed participants in the abstract. - PC reviews the slides and continues to work with Submitter as needed to develop the topic. - Draft presentation slides should be submitted prior to the published deadline for slides (April 13th, 2020). - PC evaluates submissions to determine presentations for the agenda (posted by May 18th, 2020). - Agenda assembled and posted. - Submitters notified. - Final presentation slides must be submitted prior to the published deadline for slides (May 25th, 2020). If you think you have an interesting topic but want feedback or suggestions for developing an idea into a presentation, please email the PC ( nanogpc(a)nanog.org) and a representative will respond to you in a timely manner. Otherwise, submit your talk, keynote, track, or panel proposal to the Program Committee Tool at your earliest convenience. We look forward to reviewing your submission! Key dates for NANOG 79: Date Event/Deadline March 2, 2020 CFP Opens March 30, 2020 Standard Registration Begins April 13, 2020 CFP Deadline: Presentation Slides Due May 4, 2020 CFP Topic List & NANOG Meeting HIghlights Page posted May 11, 2020 Late Registration Begins May 18, 2020 NANOG 78 Agenda Posted May 25, 2020 Speaker FINAL presentations DUE (NO CHANGES accepted after this date) May 31, 2020 Lightning Talk Submissions Open, Onsite Registration Begins Final slides must be submitted by Monday, May 25th, 2020, and no changes will be accepted between that date and the conference. Materials received after that date may be updated on the website after the completion of the conference. We look forward to seeing you in Boston in June! Sincerely, Vincent Celindro - PC Chair On behalf of the NANOG Program Committee

1 0

Equinix IX Dallas Legacy Route Servers Decommissioning - Subnet Expansion
by David Miller 03 Mar '20

03 Mar '20

PSA: For anyone on the Equinix IX in Dallas who may have missed the announcements - The subnet in Dallas was expanded to a /23 and there are new MLPE route servers. The old route servers will be decommissioned this week. >From Equinix: "IBX(s): DA1,DA10,DA2,DA3,DA4,DA6,DA7,DA9,DA99 DESCRIPTION:NOTICE: THE LEGACY MLPE AND ROUTE COLLECTOR SERVERS WILL BE DECOMMISSIONED 5-MAR-2020 Equinix expanded the DA IX subnet from a /24 to a /23 on 25-JUN-2019. Equinix engineers also updated the MLPE and Route Collector IPs and subnet mask from /24 to /23. Customers that have not already done so, will need to update their subnet mask and peering IP address for the MLPE/RC servers to reflect the newly expanded subnet of 206.223.118.NNN/23. BGP Sessions are preconfigured for all MLPE/RC participants on the new servers, but if you have issues bringing up your sessions please contact us. A Status page is published at the following link https://ix.equinix.com/home/ip-migration/da/ " -- ______________________ David Miller dmiller(a)tiggee.com

1 0

Take-Two Interactive Software NOC Contact
by Tim Nowaczyk 03 Mar '20

03 Mar '20

Network Engineer for a small ISP here. Our customers seem to be having connectivity issues with Take-Two Software, specifically NBA 2k20. Traceroute makes it to Akamai Prolexic before being dropped. Does anyone have contact info for someone at Take-Two? Thanks, Tim Nowaczyk -- Timothy Nowaczyk | Senior Network Manager office 703.554.6622 <tel:703.554.6622> | mobile 571.318.9434 <tel:571.318.9434> <http://www.allpointsbroadband.com/>

2 1

Legacy Concentric/XO Web Services Blocking?
by James Breeden 03 Mar '20

03 Mar '20

NANOG, Looking for anyone from XO or Legacy Concentric web hosting services (now VDMS). I have a mutual customer that is getting caught at some form of Web App firewall coming from a specific IP range. Thank you! James W. Breeden Managing Partner [logo_transparent_background] Arenal Group: Arenal Consulting Group | Atheral | Ceteris Coin | Acilis Telecom | Pines Events and Media | BlueNinja Corporate: PO Box 1063 | Smithville, TX 78957 Email: james(a)arenalgroup.co<mailto:james@arenalgroup.co> | office 512.360.0000 | www.arenalgroup.co<http://www.arenalgroup.co/>

1 0

Re: China’s Slow Transnational Network
by Scott Weeks 02 Mar '20

02 Mar '20

In fact, Great Canon (GC) [55] is such an in-path system. But it is known for intercepting a subset of traffic (based on protocol type) only. What’s more, GC has been activated only twice in history (the last one in 2015 [55]). ----------------------------------- AT&T security says otherwise: https://cybersecurity.att.com/blogs/labs-research/the-great-cannon-has-been… The Great Cannon is a distributed denial of service tool (“DDoS”) that operates by injecting malicious Javascript into pages served from behind the Great Firewall." "The Great Cannon was the subject of intense research after it was used to disrupt access to the website Github.com in 2015. Little has been seen of the Great Cannon since 2015. However, we’ve recently observed new attacks..." "On August 31, 2019, the Great Cannon initiated an attack against a website (lihkg.com) used by members of the Hong Kong democracy movement to plan protests." scott

1 0