- NANOG - lists.nanog.org

Twitter security team?
by Ken Gilmour 18 Jul '19

18 Jul '19

Anyone on the list know how to contact the Twitter Security team? Seems the new update allows an attacker to modify other people's tweets. The "Hackerone" form for reporting a vulnerability is the wrong form and the "My account has been hacked" form is also the wrong form. The whole site has been compromised, I have evidence and can't contact anyone due to the lack of an appropriate form and the fact that the security@ email address doesn't work. Thanks!

6 8

Cisco wifi signal fluctuations
by Vikash Sorout 18 Jul '19

18 Jul '19

On Cisco wifi, we started seeing signal fluctuations since 1-2 months. The only change that was done to change windows user preference from 2.4 GHz Radio to 5 GHz radio through a windows group policy change. But this was done in response to the problem reported by certain users.We have lately discovered that some of the neighboring APs opt for same frequency band at 5.0 GHz and also at 2.4 GHz. Reboot of these APs have not helped to choose different frequency band by these APs.Channel assignment is set to be auto and we cannot change it to static though we are aware of definitive AP positions at all floors in campus. The reason being that the controller serves APAC and we do not know the definite / relative positions of different APs.The wireless survey conducted before (when there was no complaint on wifi) did show presence of co-channel interferences in certain areas, but SNR was seen to be very good in all areas of all the floors. For skype, we have call drop or call noisy complain from users across the three floors irrespective of if they are connected to wifi or LAN. We are using Cisco WLC 5520 controller. Regards,Vikash SoroutHand-phone : +91-9013866229Email: vikash_sorout(a)yahoo.com

2 1

Colo in Africa
by Ken Gilmour 18 Jul '19

18 Jul '19

Hi Folks, I work for a Security Analytics org and we're looking to build a small POP in Africa. I am pretty clueless about the region so I was wondering if you could help guide me in the right direction for research? The challenges: 1. Network needs to be able to receive millions of small PPS (as opposed to serving smaller numbers of larger files). 2. Can't be cloud (need bare metal servers / colo). We use the full capacity of each server, all the time. 3. Must have good connectivity to most of the rest of Africa 4. We can initially only have one POP This is not like a normal website that we can just host on "any old provider", the requirements are very different. Is there a good location where we could either rent bare metal servers (something like Internap - preferred) or colocate servers within Africa that can serve most of the region? "Good" is defined as an area with stable connectivity and power, no legal restrictions on things like encryption, and good latency (sub 100ms) to the rest of Africa. Our two closest POPs are in Singapore and The Netherlands, so I'd like something closer to the middle that can serve the rest of Africa. Middle East will be deployed after Africa. I hope this is the right place to ask. Thanks! Ken

23 52

Fiber providers - Englewood / Centennial Colorado
by JASON BOTHE 18 Jul '19

18 Jul '19

Hi all Just curious if you know of any fiber providers other than CL or Zayo in the Englewood/Centennial area. Having a really tough time finding routes that avoid the Solarium at Quebec / E Orchard as well as 910 15th St. Seems there are so many single points of failure and collapsed routes that all lead to these two locations to get diverse long haul. Many thanks. J~

3 3

Antennas in the data center
by Robert Webb 18 Jul '19

18 Jul '19

Anyone out there deal with data center design? Looking for any info available which provides guidelines on putting antennas, like LTE booster, in the data center.

8 11

Performance metrics used in commercial BGP route optimizers
by Dimeji Fayomi 17 Jul '19

17 Jul '19

Hi, I'm doing a research on BGP route optimisation and the performance metrics used by commercial route optimizer appliances to select better path to a prefix. I would appreciate any information about the performance metrics used in commercial BGP route optimizers, white papers or any other document that describes how these metrics are measured and collected by commercial route optimizers. Thanks -- Dimeji Fayomi

14 23

Way O/T - but I know you folks are resource-rich..
by Allen Kitchen 17 Jul '19

17 Jul '19

Folks, I work with several people on legal probation for various offenses such that they are completely prohibited from internet access. In a few cases, some of these would benefit educationally from having a copy of old printed Mouser, Digi-Key, Jameco or similar catalog - just for educational purposes. I know it's been almost a decade since most stopped printing the catalogs, but is there a chance that any of you have a stack of oldies around anywhere that you're finally ready to clear out? All I need is one or two to share, and I realize that the selection and prices would be completely obsolete. Still, there is lots to learn from those. I am certainly willing to pay for shipping if anyone wants. Off-line responses preferred for the good of the list - and thanks. Blessings.. Allen Kitchen Several hats worn, but THIS particular hat: Prison-After-Care Ministries (PAC-Min) 404 Franklin St, Butler, PA 16001 412-295-7736 / allenmckinleykitchen(a)gmail.com

1 0

Re: Colo in Africa
by Joel M Snyder 17 Jul '19

17 Jul '19

Ken: >Is there a good location where we could either rent bare metal servers >(something like Internap - preferred) or colocate servers within >Africa that can serve most of the region? Africa is a tough nut to crack. I have been building networks there for clients for decades and the first thing to understand is that Africa is BIG. Geographically, you can fit the US, Europe, and Canada (and have room to spare). Typical Mercator maps make it look much smaller than it really is. Anyway, my point here is that you should not be thinking about Africa as "a region" or "a continent." When a lot of people say "Africa," they really mean "South Africa" (the small country), and there is great connectivity there---but positioning yourself in South Africa doesn't really help you any more to get to Ghana (for example) than being in the Netherlands. If you really are thinking AFRICA as in AFRICA, you probably should use an approach that divides it into regions. You can break it up however you want, but if you start with 4 regions (Southern, Northern, Western, Eastern/Central) you'll have chunks that actually hold together from a telecoms point of view pretty well. My best experiences (and these are about 3 years out of date) have been in Jo'burg (Southern), Nairobi/Addis (Eastern/Central), Ghana (Western), and Egypt (Northern), but there is a lot of interest and a lot of progress so getting some ground knowledge would be a good idea. The real bandwidth is submarine cables that go up and down the coasts --- you can find some maps of these of varying accuracy and quality --- while actual E/W and N/S connectivity in the center of the continent is much more limited. There are a number of Internet-promoting organizations in Africa---you can start with ISOC and Afrinic that sponsor a number of projects aimed at increasing capacity there, but you'll find a bunch of people trying to do good things. If you are mostly interested in South Africa, there's NAPAfrica and SAFNOG (Southern African equivalent of NANOG) as information sources. Anyway: I can get more specific, but it's hard to really offer super-specific advice on a vague question because, you know, Africa. That's a big topic. jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 jms(a)Opus1.COM http://www.opus1.com/jms

2 2

Ztomy.com again?
by Patrick 17 Jul '19

17 Jul '19

Anyone else seeing DNS oddities from info.net / infonet.com ? fwdrev() { for ip in `dig +short A $1 @$2`; do echo $ip `dig +short -x $ip @$2` done } fwdrev smtp.microsoft.com 8.8.8.8 131.107.115.215 smtp.microsoft.com. mailb.microsoft.com. mail2.microsoft.com. 131.107.115.214 mailc.microsoft.com. mail3.microsoft.com. smtp.microsoft.com. 205.248.106.64 ns1327.ztomy.com. 205.248.106.30 ns1327.ztomy.com. 205.248.106.32 ns1327.ztomy.com. 131.107.115.212 smtp.microsoft.com. mail1.microsoft.com. fwdrev smtp.microsoft.com 1.1.1.1 205.248.106.30 ns1327.ztomy.com. 205.248.106.32 ns1327.ztomy.com. 205.248.106.64 ns1327.ztomy.com. 131.107.115.212 smtp.microsoft.com. mail1.microsoft.com. 131.107.115.214 mailc.microsoft.com. smtp.microsoft.com. mail3.microsoft.com. 131.107.115.215 mailb.microsoft.com. smtp.microsoft.com. mail2.microsoft.com. dig +trace -x 205.248.106.30 ... 248.205.in-addr.arpa. 86400 IN NS dns1.info.net. 248.205.in-addr.arpa. 86400 IN NS dns1.infonet.com. 248.205.in-addr.arpa. 86400 IN NS dnseur.info.net. ;; Received 360 bytes from 193.0.9.10#53(arin.authdns.ripe.net) in 179 ms 30.106.248.205.in-addr.arpa. 300 IN PTR ns1327.ztomy.com. ;; Received 86 bytes from 208.91.197.27#53(dns1.infonet.com) in 217 ms Patrick

1 0

Re: Colo in Africa
by Gregoire Ehoumi 16 Jul '19

16 Jul '19

Ken,You can have useful information in AFNOG mailing list (afnog(a)afnog.org).--Gregoire Ehoumi------ Original message------From: Ken GilmourDate: Tue, Jul 16, 2019 6:48 PMTo: C. A. Fillekes;Cc: North Group;Subject:Re: Colo in AfricaWhat matters is whether or not we can get a facility in Africa to provide service to our customers from Bare Metal Servers :)On Tue, 16 Jul 2019 at 16:07, C. A. Fillekes <cfillekes(a)gmail.com> wrote:Are they refreshing data they've already got, though? This is the classic use case for client-side caching. On Tue, Jul 16, 2019 at 5:56 PM Ken Gilmour <ken.gilmour(a)gmail.com> wrote:We have a different use case to traditional analytics - We're aimed at consumers and small businesses, so instead of a SOC with one big screen refreshing 10000 rows of only alert data every 30 seconds, we have thousands of individuals refreshing all of their data every 30 seconds because there are comparatively less alerts for individuals than enterprises.What you "should" do often doesn't translate to what you "do" do.On Tue, 16 Jul 2019 at 11:23, Valdis Kl??tnieks <valdis.kletnieks(a)vt.edu> wrote:On Tue, 16 Jul 2019 10:39:59 -0600, Ken Gilmour said: > These are actual real problems we face. thousands of customers load and > reload TBs of data every few seconds on their dashboards. If they're reloading TBs of data every few seconds, you really should have been doing summaries during data ingestion and only reloading the summaries. (Overlooking the fact that for dashboards, refreshing every few seconds is usually pointless because you end up looking at short-term statistical spikes rather than anything that you can react to at human speeds.?? If you *care* in real time that the number of probes on a port spiked to 457% of average for 2 seconds you need to be doing automated responses.... Custom queries are more painful - but those don't happen "every few seconds".

1 0