- NANOG - lists.nanog.org

.ARPA Zone DNSSEC Operational Update -- ZSK length change
by Wessels, Duane 10 Jul '19

10 Jul '19

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 All, Verisign is in the process of increasing the size and strength of the DNSSEC Zone Signing Keys (ZSKs) for the top-level domains that it operates. As part of this process, the ZSK for the .ARPA zone will be increased in size from 1024 to 2048 bits. On July 11, 2019 the 2048 bit ZSK will be pre-published in the .ARPA zone. On July 21, the .ARPA zone will be signed with the 2048 bit ZSK. On August 10, the 1024 bit ZSK will be removed from the zone. We do not anticipate any problems from this upgrade. In accordance with our normal operating procedures we have a rollback process should it become necessary to revert to the 1024 bit ZSK. DW -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQEcBAEBCAAGBQJdJQifAAoJEGyZpGmowJiNxjcH/3a+ox9KyGAT5vnrcxfEYYIQ X2iQ0dSEBCv9JPNwTnKkV2U2xzG3uZb6LHjq9tihtA4M04IaMvlLnZMUFUyGgzrl ACvn6j9qCE0q7sgDGo/RNWXBsAd58mKgBVMMRCBR6AklDHVA+grEH2CwDwP0eGYZ 8dy6Cf94jqXqiVDQIxoK31YhYFqNVRhZE4f72V+6lh1fg4GrsfXKeErYwQooxdYT 91H9TmffWmEpG+eYdgWMOPPS+nsrDr/MAuSVD0t5hT8H/HrCo45MNxxskmwLg0Ni QAHgy5Ao2jgJj6MkzZdwjldM8mn5YzMegiHUF9R5W5TRlnNm7uGTU32Irzu7b/8= =lJK6 -----END PGP SIGNATURE-----

1 0

.NET Zone DNSSEC Operational Update -- ZSK length change
by Wessels, Duane 10 Jul '19

10 Jul '19

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 All, Verisign is in the process of increasing the size and strength of the DNSSEC Zone Signing Keys (ZSKs) for the top-level domains that it operates. As part of this process, the ZSK for the .NET zone will be increased in size from 1024 to 1280 bits. On July 10, 2019 the 1280 bit ZSK will be pre-published in the .NET zone. On July 15, the .NET zone will be signed with the 1280 bit ZSK. On July 20, the 1024 bit ZSK will be removed from the zone. We do not anticipate any problems from this upgrade. In accordance with our normal operating procedures we have a rollback process should it become necessary to revert to the 1024 bit ZSK. DW -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQEcBAEBCAAGBQJdJQifAAoJEGyZpGmowJiNVEsH/2T8Qm/ZZiM7K1G+6XN4wMSR oqyuzY/0AiqXpw0C2aL3sE3VhYPZWTY+H5wwbvU+ZoAbiMfcOygBv/JTLizpjLLK NJD+Gh51Z6cQn5yk9cPjRtoxdQrV83T0gRQIlPeFW3sm9GrXgropfQ/Dw7O0lHkZ x2oiGwC0HF5npi6OWEHpETemtSMWl5HpFfmYZhzXoBSzEbzHgXQwr0Fie9wtNkDm qPjwaeq3drENOoum4egpAFxQZM7FclLtyqqT24h0m5GeunHIcXRRcfoOAEnEmjRJ b5ePCKxHqNY2Iz6MpiedTCpD2RIbI51wVhNGfmCiwyyl3500oqjvcmtYh00gCIU= =XP9d -----END PGP SIGNATURE-----

1 0

rVRRPd - A new open source VRRPv2 daemon
by Nicolas Chabbey 09 Jul '19

09 Jul '19

Hello, I released the first major version of rVRRPd, an open source and RFC3768-compliant VRRPv2 daemon. It actually only supports Linux but I will soon be adding support for additional operating systems and platforms. rVRRPd was born from my desire to develop skills in system development. I also wanted to provide another open and secure implementation of a FHRP to the network community. Here's a summary of what rVRRPd (v0.1.0) is: - Implemented almost entirely in Rust - Interoperable with RFC3768 compliant devices - Support for RFC2338 simple password authentication - Support for additional proprietary authentication methods - Easily configurable using TOML - Multithreaded operations - Fast, secure and scalable This implementation is aimed to be fast and secure, however please keep in mind, it is still in its infancy. It is not yet ready for production use but should be fairly stable. I'm the only developer at this time, and my resources are limited. However, I took the time to fuzz the latest version, and to do some interoperability testing. So far, the results have been great. Of course, I'm open to any suggestions and feedback. Anything that can improve the project constructively is more than welcome. I am also open to contributors. You can find the latest development version of rVRRPd at https://github.com/e3prom/rVRRPd Regards

1 0

Google Fiber
by Robert DeVita 09 Jul '19

09 Jul '19

Does anyone have a sales contact at Google Fiber, looking for Dark fiber in Pflugerville, TX back to Datafoundry TX1 Thanks Rob [photo] [https://s3.amazonaws.com/images.wisestamp.com/symbols/frames/frame_bubble_l…] Robert DeVita Managing Director, Mejeticks [https://dn3tzca2xtljm.cloudfront.net/social_icons/24px/linkedin.png]<http://www.linkedin.com/company/mejeticks> [https://dn3tzca2xtljm.cloudfront.net/social_icons/24px/twitter.png]<http://twitter.com/mejeticks> [https://s3.amazonaws.com/images.wisestamp.com/symbols/grey/small/phone2.png] 214-305-2444<tel:214-305-2444> [https://s3.amazonaws.com/images.wisestamp.com/symbols/grey/small/mobile.png] 469-441-8864<tel:469-441-8864> [https://s3.amazonaws.com/images.wisestamp.com/symbols/grey/small/email1.png] radevita(a)mejeticks.com<mailto:radevita@mejeticks.com> [https://s3.amazonaws.com/images.wisestamp.com/symbols/grey/small/website.png] www.mejeticks.com<http://www.mejeticks.com/> [https://s3.amazonaws.com/images.wisestamp.com/symbols/grey/small/address1.p…] 1919 McKinney Ave, Dallas, TX 75201

2 1

Must have ISP Open Source & tools
by Mehmet Akcin 08 Jul '19

08 Jul '19

Hey there We are a growing ISP in Colombia and Latin America. I am interested in hearing from others regarding tools and software they recommend we must have such as LibreNMS, Rancid etc. It’s greenfieldish now ;-) so feel free to recommend A-Z anything! ;-) Hope this thread is useful others too! Mehmet -- Mehmet +1-424-298-1903

8 9

NANOG 77 call for presentations is open
by Benson Schliesser 08 Jul '19

08 Jul '19

NANOG Community, The NANOG Program Committee (PC) is excited to announce that we are now accepting proposals for all sessions at NANOG 77 in Austin, Texas, October 28-30, 2019. Below is a summary of key details and dates from the Call For Presentations on the NANOG website, which can be found at https://nanog.org/meetings/nanog-77/. Given by many of the industry’s top minds, presentations at NANOG meetings are meant to spark the imagination, encourage dialog, and drive new solutions to our greatest networking challenges. The PC is currently seeking proposals, and also welcomes suggestions for speakers and topics. Presentations may cover current technologies, soon-to-be deployed technologies, and industry innovation. Vendors are welcome to submit talks which cover relevant technologies and capabilities, but presentations should not be promotional, or discuss proprietary solutions. The primary speaker, moderator, or author should submit a presentation proposal and abstract via the PC Tool at: https://pc.nanog.org - Select “Propose Talk” from the “Talks” menu - Select NANOG 77 from the Meeting menu - Select the appropriate *Session* the talk will be presented in - General Session (30-45 minutes) - Tutorial (90-120 minutes) - Track (90-120 minutes) Timeline for submission and proposal review: - Submitter enters abstract (and draft slides if possible) in PC Tool prior to the deadline for slide submission. - PC performs initial review and assigns a “shepherd” to help develop the submission — within 2 weeks. - Submitter develops draft slides of talk if not already submitted with the initial proposal. Please submit initial draft slides early — the PC does not evaluate submissions until draft slides are available for review. NANOG Staff is available to assist with slide templates upon request from the submitter. - Panel and Track submissions should provide a topic list and intended/confirmed participants in the abstract. - PC reviews the slides and continues to work with Submitter as needed to develop the topic. - Draft presentation slides should be submitted prior to the published deadline for slides (Aug. 19, 2019). - PC evaluates submissions to determine presentations for the agenda (posted on Sep 30, 2019). - Agenda assembled and posted. - Submitters notified. - Final presentation slides must be submitted prior to the published deadline for slides (Oct. 21, 2019). If you think you have an interesting topic but want feedback or suggestions for developing an idea into a presentation, please email the PC ( nanogpc(a)nanog.org) and a representative will respond to you in a timely manner. Otherwise, submit your talk, keynote, track, or panel proposal to the PC Tool at your earliest convenience. We look forward to reviewing your submission! Key dates for NANOG 77: Date Event/Deadline Jul. 1, 2019 CFP Opens & Agenda Outline Posted, Early Registration Begins Jul. 22, 2019 Standard Registration Begins Aug. 19, 2019 CFP Deadline: Presentation Slides Due Sep. 23, 2019 CFP Topic List & NANOG Meeting HIghlights Page posted, Late Registration Begins Sep. 30, 2019 NANOG 77 Agenda Posted Oct. 21, 2019 Speaker FINAL presentations DUE (NO CHANGES accepted after this date) Oct. 27, 2019 Lightning Talk Submissions Open, Onsite Registration Begins Final slides must be submitted by Monday, October 21, 2019, and no changes will be accepted between that date and the conference. Materials received after that date may be updated on the website after the completion of the conference. We look forward to seeing you in October in Austin, Texas! Sincerely, Benson Schliesser On behalf of the NANOG PC

1 0

Level3/CenturyLink IRR Contact
by Joe Nelson 08 Jul '19

08 Jul '19

Does anyone know who to contact to have old information removed from Level3/CenturyLink's IRR. My ASN still shows in their registry with stale information from an old customer of theirs but I can't seem to find anyone at CenturyLink that even knows what an IRR is so I'm just going in circles. I'd like to just have the stale info removed so when I add my info to Merit, there isn't a conflict. Thanks, Joe

4 3

DNSSEC implementation for Office365
by Joe Yabuki 08 Jul '19

08 Jul '19

Hi, Please is anyone aware of DNSSEC implementation for Office365 ? This information seems to be hard to get from Microsoft... and it's hard for me to think that they don't support it. Thanks, Joe

2 1

Spoofer Report for NANOG for Jun 2019
by CAIDA Spoofer Project 08 Jul '19

08 Jul '19

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within usa, can. Inferred improvements during Jun 2019: ASN Name Fixed-By 7849 CROCKERCOM 2019-06-06 19230 NANOG 2019-06-08 11427 SCRR-11427 2019-06-26 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Jun 2019: ASN Name First-Spoofed Last-Spoofed 6939 HURRICANE 2016-02-22 2019-06-29 209 CENTURYLINK-US-LEGACY-QWEST 2016-08-16 2019-06-26 6128 CABLE-NET-1 2016-09-03 2019-06-06 27364 ACS-INTERNET 2016-09-27 2019-06-28 20412 CLARITY-TELECOM 2016-09-30 2019-06-24 20001 ROADRUNNER-WEST 2016-10-08 2019-06-25 6181 FUSE-NET 2016-10-10 2019-06-28 25787 ROWE-NETWORKS 2016-10-21 2019-06-29 174 COGENT-174 2016-10-21 2019-06-28 30341 SCTA-ASN 2016-10-31 2019-06-18 32440 LONI 2016-11-03 2019-06-25 12083 WOW-INTERNET 2016-11-09 2019-06-30 13427 SOFTCOM-INTERNET-COMMUNICATION 2016-11-14 2019-06-26 21832 KELLINCOM-1 2017-02-03 2019-06-26 18451 LESNET 2017-02-22 2019-06-26 6327 SHAW 2017-03-24 2019-06-16 852 ASN852 2017-04-16 2019-06-18 19624 SERVERROOM 2017-06-02 2019-06-06 701 UUNET 2017-06-14 2019-06-04 63296 AMARILLO-WIRELESS 2017-09-01 2019-06-27 546 PARSONS-PGS-1 2017-11-20 2019-06-17 4201 ORST 2018-04-19 2019-06-26 225 VIRGINIA 2018-06-18 2019-06-20 33509 CASCADE-ACCESS-LLC-CA-ESTOR1 2018-06-22 2019-06-27 33452 RW 2018-09-19 2019-06-29 20448 VPNTRANET-LLC 2018-09-20 2019-06-26 63275 RADIOWIRE 2019-02-07 2019-06-11 8047 GCI 2019-04-11 2019-06-26 10745 ARIN-ASH-CHA 2019-04-29 2019-06-25 6058 NORTHWESTEL-INC 2019-05-06 2019-06-25 138576 2019-05-21 2019-06-29 6428 CDM 2019-06-04 2019-06-04 19751 CCRTC 2019-06-06 2019-06-25 33387 DATASHACK 2019-06-06 2019-06-28 21804 ACCESS-SK 2019-06-09 2019-06-11 16787 CHARTER-16787 2019-06-17 2019-06-17 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block… Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

CDN question
by Tim Wilson 08 Jul '19

08 Jul '19

Hi, folks, I have a question to you as experienced auditory. What is the advantages and disadvantages of building your own CDN (mainly, in USA, Brazil and Australia)? We are running a website and using CDNs for a while to delivery static content. Few guys brought this question for a tech review. And I'm curious of opinion of people who maybe did that. So far one of the bit advantages I see is distribution of authoritative DNS. But it is a bit too low for building and running CDN. Will appreciate any opinion shared privately or on this list. Thanks. Tim

2 1