- NANOG - lists.nanog.org

Re: NSI Bulletin 098-010 | Update on Whois
by Dean Anderson 02 Sep '98

02 Sep '98

Actually, I think this issue dates back to when Network Solutions thought they "owned" the database, and had some plans to sell it. There was a lot of pushback to that idea, which they eventually dropped. But they have still resisted letting anyone else have the full database. I don't think they are actually concerned so much with abuse as they are with trying to maintain or establish a proprietary control over the database. Of course, "abuse prevention" is a good cover for proprietary control. --Dean At 11:20 AM 9/2/98 -0500, Derek Balling wrote: >>Who said anything about usage charges? It looks like the proposed work >>mentioned by David Holtzman is to control _abuse_ of the whois service. >>Otherwise, the load on whois will grow without bounds and we'd >>eventually have to pay more in registration fees. Of course, that's just >>my figurin' and nothing official... > >True, that's what his statement appears to say, however, who is to define >"abuse" of the whois service? > >As an example, a company I worked for a while back wanted to generate, on >their statistics reports for their customers' web sites, who each domain >was who was hitting their page, and who it belonged to (e.g. someone >looking just at "ora.com" might not correlate that to "O'Reilly and >Associates"). What we had then asked InterNIC for was a means of getting >that data WITHOUT using whois. (We knew it was readily available, and >publicly accessible, but wanted to avoid beating on the whois server to get >it when it came time to generate reports). The people we talked to at >InterNIC essentially told us to pound salt. My superior at the time had >mentioned that we had two ways of going about this, the "net-friendly" way, >and the "brute-force" way, and that InterNIC was forcing us to use the >brute force way which could cause their servers undue load. > >Was this company "an abuser" because they wanted to do lookups of a useful >nature? (And yes, they put in caching and such so they wouldn't be querying >every domain every time.) Granted, I would define someone harvesting the >whois database for email addresses an abuser, but since I feel the abuse >use had "valid purpose", that it shouldn't be categorized as abuse. I bet >InterNIC would claim it was though. > >It's a customer service issue... We are all (I assume) customers of >InterNIC. We pay them money for domain name registrations, and they are in >turn supposed to provide reliable whois service (among other things, of >course). If they're finding that load on the whois server is higher than >they expect, they might consider (a) finding WHY it is that high? are there >people like my old employer out there doing whois requests to get a single >field from a number of sites, (b) allow others to volunteer to host the >data and serve up requests. > >Just my $0.02 worth, everyone else's mileage is sure to vary. > >Derek > > ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Plain Aviation, Inc dean(a)av8.com LAN/WAN/UNIX/NT/TCPIP http://www.av8.com ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

2 1

NSI Bulletin 098-010 | Update on Whois
by David H. Holtzman 02 Sep '98

02 Sep '98

Network Solutions has been seeing increased traffic on whois in the last few months. The number of queries has approximately doubled each month since June. At this time, 40% of our inbound http traffic is whois related. In an attempt to alleviate some of the load on the servers, we have taken the following steps: - Some of the worst offenders (single site, large number of accesses) will be blocked from access starting this week - Replication of the whois data will be started earlier in the evening to allow for more timely updates - Existing whois hosts have had processor and memory upgrades - Local file storage is now being used vice NFS - Medium-term and long-term development efforts are underway to redesign whois for optimal performance. This includes in-memory searches, better parsing and dynamic updates obviating the need for large daily data movements. _____________________________________ David H. Holtzman (dholtz(a)internic.net) Sr Vice President of Engineering Network Solutions, Inc.

11 15

Check this out
by James B. Slayden Jr. 02 Sep '98

02 Sep '98

Something of interest! And may set some precedence?! ----- Begin Included Message ----- http://www.mercurycenter.com/business/tech/docs/076951.htm ----- End Included Message ----- James S.

4 3

RE: Check this out
by jeyers＠ialn.com 02 Sep '98

02 Sep '98

Any reason why it should be regulated the PUC's at all? Is the usefulness of that beurocratic arm of the industry fading? If so, why would you need them at all in the future world of IP-only communications through a global network (like the internet)? I bet you will see more and more of this type of push by the industry as they lose their death-grip hold on the PSTN, and I predict we will be paying by-the-packet for access into a globally "free" network eventually. Jerry -----Original Message----- From: Dean Anderson [mailto:dean@av8.com] Sent: Tuesday, September 01, 1998 8:36 PM To: Paul Ferguson Cc: nanog(a)merit.edu Subject: Re: Check this out Well, the article also said that charging by the packet is "outrageous", which if I followed some of the BBN/GTE thread, was exactly what some were proposing. I think its only a matter of time before the PSTN and the Internet are one and the same, and regulated by PUC's. So I'd have to think also that either the concept of "long distance" will change, or perhaps something as crazy as per packet, long distance internet charges will come into existance. --Dean

1 0

RE: 56k modems/frame/ptp revisited (LONG)
by Scott, Dan 02 Sep '98

02 Sep '98

A couple of points not brought up (or didn't see in my quick scan). Use of the telephone network for data is on a permissive basis, it is designed for analog voice traffic, no guarantee by the telco that you can obtain any specific rate out of a given phone line. Frame Relay services is a shared system. You can purchase a 56kbps access line and port, but the important parameter is the committed information rate you purchase from the carrier. Most of Sprint's frame relay business may have a 56kbps access line with ZERO committed information rate. Welcome to use it and can peak to 56kbps, but your actual performance may vary anywhere from 0-56kbps. Can purchase 56kbps CIR, but it costs extra, would need to then look at the economics of using a dedicated line instead. Unles your app is to mesh several locations together, then frame relay could be used to set up virtual connections to multiple locations usning one access line, an important economic point. Daniel T. Scott Chief Engineer NASA Integrated Services Network (http://www.nisn.nasa.gov) MSFC Information Systems Services Office ******NOTE NEW AREA CODE FOR MSFC ****** 256.544.0131 voice 256.544.2554 fax dan.scott(a)msfc.nasa.gov > ---------- > From: Tim Wolfe[SMTP:tim@clipper.net] > Sent: Tuesday, September 01, 1998 10:17 AM > To: nanog(a)merit.edu > Cc: ClipperNet Technical Staff > Subject: 56k modems/frame/ptp revisited (LONG) > > 13 people so far have asked me to post a summary to the list on this > subject, so here it is. I have included all responses I received, > with the name of the respondent at the top of their answer. Both > questions are included at the top for continuity purposes. > > Question #1: > > Anyone have a nice layman's terms explanation of the throughput/latency > differences between a 56k modem, a 56k leased line, and a 56k frame relay > circuit? This is assuming a "perfect" lab enviroment, ie. the modem > connects and sustains at maximum capability, the frame cloud is not > overloaded etc.. Please reply off list. > > Question #2: > > I've gotten lot's of responses on my original question, but I'm finding > perhaps I didn't ask the correct one. What I really need to know is what > is > the real world effect of latency on throughput? I know that frame relay > has > a higher latency than a point to point line, and that a point to point is > generally regarded as faster. Would someone mind explaining the specifics > of that relationship a little bit? Again, off list please, unless someone > thinks it's an appropriate topic for this list.. > > **************************************** > Here are the responses I received for both questions in no particular > order. > **************************************** > > David Newman wrote: > > "56K" modems really top out at 53.3 kbit/s because of an FCC regulation (I > believe Canada has a similar rule). They theoretically can hit 56 kbit/s > outside North America, though tests have showed 51-52 kbit/s to be the > upper end for products shipping today. > > Absent congestion both a frame PVC and a leased line really do run at 56 > kbit/s. > > David R. Dick wrote: > > "56K" modems take advantage of the digital nature of much of the > present phone system. Unfortunately, they can only do this in > one direction, so you get 56K down from the Internet to the user > (actually only 53K, or so, because of electrical power limitations > in the signalling method) and 33K from the user to the Internet. > > 56K leased lines are point-to-point connections. The data travels > more or less directly (in electrical terms, anyway) between the > user and the Internet -- 56K in each direction. > > 56K frame relay is a switched service and two point-to-point > connections are involved: one from the user to the switch > and one from the switch to the Internet. You get 56K in each > direction, but there is some delay (latency) because of the > diversion through the switch. In some places there may even > be more than one switch involved, with extra latency, as you > might expect. > > Paul G. Donner wrote: > > Basically, you'd need to look at the framing in each case as well > as any Layer 2 acknowledgement mechanism that might be implemented. > You can get this from a number of textbooks and put together an > explanation yourself if you are so inclined. > > This would only consider up to the L2 overhead on the links (if > applicable -> e.g. Frame Relay) which is probably what you are > asking for. These link types are effectively in different > categories and it would be sort of like comparing apples to > oranges. > > Chris Cappuccio wrote: > > 56K is the low end of the leased line spectrum, with 56K leased line and > 56K frame relay performing almost identically if you are using similar > framing protocols. You will the top 56K performance from these... Lowest > latency (20-40ms) > > 56K modem is at most 53K because of modem-enforced FCC limits, and because > of the analog-digital conversion, you will get high latency (100-200ms) > and lower throughput then a leased line. > > David R. Dick wrote: > > The simplest explanation involves the fact that most networking > is TCP (not UDP) so packets travel in both directions, with > acknowledgements, etc. When an ACK is delayed because of > latency, the movement of the real data packets is also delayed. > So it will just plain take longer to deliver the same data > payload. > > Karl Auerbach wrote: > > As for so-called 56K modems -- they aren't. > > They are only 56K if the FCC allows, which they don't, so top speed is > about > 53K. > > And then it's only 56K in the direction from an ISP who has a digital > ISDN based modem towards your "analog" 56K modem. The return path is > 33Kbits (or worse.) > > If you take a couple of off the shelf "56K" modems and hook 'em up > over a normal POTS line you'll end up with about 33Kbits (or worse) > full duplex. > > I learned all this stuff a few weeks ago when I hooked a couple of > routers together and found that my investment in 56K modems was wasted > -- the best one can get is 33Kbits full duplex unless I invested in an > ISDN link at one end and got the 56K ISP-end gear. > > As far as I know only 3COM makes a single BRI ISP-end 56K modem. It > runs about $250. Usually they come in larger packs to hook to an ISDN > PRI. > > Chris Cappuccio wrote: > > Latency and throughput are NOT related in this case! > > The speed of light itself puts a limit on how fast we can transfer data > globally with fiber optics. Bigger pipes will simply ensure that you can > get more data through at the same time. Once you have maxed out speed > with the most efficient protocol, you are limited by the speed of light ;0 > > Anyways, the latency introduced with a modem connection is much larger > then that of a dedicated line because of the two analog<->digital > conversions. All-digital connections like ISDN, FR, and PTP connections > are very low latency. > > Paul G. Donner wrote: > > FR is effectively frame/packet switched. PT-PT circuits do not have > frame/packet structures (the transport may use T1 type framing but > this is different). The major latency affect in FR is due to buffering > of the packet/frames and and switching them. PT-PT don't go through > this process. So effectively both types FR and PT-PT have propagation > delay (e.g. speed of light limitations) but FR exhibits also processing > delays which are neglible or non-existant with PT-PT circuits. > > Robert Gourley wrote: > > Given that there in no congestion in the frame relay network and > that both the 56Kbps DDS line and the 56Kbpx frame relay PVC follow > exactly the same route and have the same number of route miles, > then the only difference in the latency of the two circuits is > the effect of two serialization delays (one at the ingress and > one at the egress) in the frame relay example. Serialization delay > is = (packet size in bits)/(56,000 bits/sec). > > Blaine Christian wrote: > > Since you want to assume ideal conditions you will remove a significant > difference between the 56k Modem and leased line. You will find that > under ideal conditions both of these should perform equally well. Since > a leased line/modem relies on less telco equipment it should peform > better than the frame circuit. A 56k frame circuit will increase your > latency by virtue of being processed by several frame switches. If the > frame switches have to tag frames they may introduce more latency into > your circuit (even if they do not tag your frames). > > The difference between all of these should be negligible (depending on > switches and the amount of equipment traversed) and throughput should be > equal depending on the equipment you are using (of course). > > > > --------------------------------------------------- > Tim Wolfe, Network Administrator > ClipperNet Internet Access Services > tim(a)clipper.net 541.431.3360 voice 541.431.1176 fax > ...Across the Desktop and around the World... > --------------------------------------------------- >

3 2

Re: Check this out
by Dean Anderson 02 Sep '98

02 Sep '98

Well, the article also said that charging by the packet is "outrageous", which if I followed some of the BBN/GTE thread, was exactly what some were proposing. I think its only a matter of time before the PSTN and the Internet are one and the same, and regulated by PUC's. So I'd have to think also that either the concept of "long distance" will change, or perhaps something as crazy as per packet, long distance internet charges will come into existance. --Dean At 04:28 PM 9/1/98 -0400, you wrote: >I think the operative words in this article are "embarrassingly" >and "stupid". > >- paul > >At 10:32 AM 9/1/98 -0700, James B. Slayden Jr. wrote: > >>Something of interest! And may set some precedence?! >> >>----- Begin Included Message ----- >> >>http://www.mercurycenter.com/business/tech/docs/076951.htm >> >>----- End Included Message ----- >> >>James S. >> >> >> > > ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Plain Aviation, Inc dean(a)av8.com LAN/WAN/UNIX/NT/TCPIP http://www.av8.com ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

2 1

56k modems/frame/ptp revisited (LONG) (fwd)
by MegaZone 01 Sep '98

01 Sep '98

I noticed several people reciting incorrect information in relation to PCM modems. For those who don't know, I worked for Livingston and then Lucent RABU up 'til February of this year. I was very involved with issues such as PCM modems on the PM-3. Simply put there is NO restriction on the SPEED of PCM modems aside from what the PSTN can carry. On a digital line end to end max theoretical is 64K, with RBS and the switch codecs and configurations in use today 56K in North America. The misconception is that there is a 53.3K cap on the speed. This is false. What the FCC limits is the power (db) level you can place on the line in the PSTN. This is to limit crosstalk in copper cable bundles. This power limitation does not equal a speed limitation. This seems to have arisen from the fact that the first PCM modems - USR X2 units - could not go faster than 53.3K without violating the FCC power limitations. All other things being equal, the more power you can use, the faster you can go. To cover their ass USR put the disclaimer on the boxes talking about how X2 was capable of 56K, but limited to 53.3K due to the FCC blah, blah. Many people read this as the FCC having some cap on allowed speed since they didn't explain that the trouble was with X2's inability to go faster in the allowed power band. Now, K56flex did NOT have this limitation. Users regularly reported connect speeds up to 54K, and a few even reported the magical 56K - but that was very rare indeed. How? K56flex was better at using the available power range (in most, but not all cases) and managed to squeeze out the additional throughput. X2 and K56flex both improved with time - X2 users eventually started seeing 54.6K connects, and K56flex saw higher numbers of 54K connects. But it doesn't appear that they removed the warnings from the packaging. And, now this baffles me, some K56flex modem vendors included the same language on their packaging. Which is nutty since 53K isn't a K56flex speed! It goes 52K -> 54K, 2K incriments. Anyway, now we have V.90. And, if you read user groups for the various server HW vendors, as well as USEnet groups, etc, you'll find some people reporting 54.6K connects with V.90. Off hand I don't recall seeing anyone in North America reporting 56K as of yet, which isn't surprising. Please, don't perpetuate the "FCC limits modem speeds to 53.3K" myth. -MZ -- <URL:mailto:megazone@megazone.org> Gweep, Discordian, Author, Engineer, me.. Join ISP/C Internet Service Providers' Consortium <URL:http://www.ispc.org/> "A little nonsense now and then, is relished by the wisest men" 781-788-0130 <URL:http://www.megazone.org/> <URL:http://www.gweep.net/> Hail Discordia! ==================================================================== ISPF, The Forum for ISPs by ISPs. October 26-28, 1998, Atlanta, GA. Three days of clues, news, and views from the industry's best and brightest. http://www.ispf.com/ for information and registration. ====================================================================

1 0

peering@sprint.net
by Brian Horvitz 01 Sep '98

01 Sep '98

Anybody alive here? I've sent mail twice over the last week or so with no answer... Brian Horvitz Shore.Net Network Engineering

1 0

56k modems/frame/ptp revisited (LONG)
by Tim Wolfe 01 Sep '98

01 Sep '98

13 people so far have asked me to post a summary to the list on this subject, so here it is. I have included all responses I received, with the name of the respondent at the top of their answer. Both questions are included at the top for continuity purposes. Question #1: Anyone have a nice layman's terms explanation of the throughput/latency differences between a 56k modem, a 56k leased line, and a 56k frame relay circuit? This is assuming a "perfect" lab enviroment, ie. the modem connects and sustains at maximum capability, the frame cloud is not overloaded etc.. Please reply off list. Question #2: I've gotten lot's of responses on my original question, but I'm finding perhaps I didn't ask the correct one. What I really need to know is what is the real world effect of latency on throughput? I know that frame relay has a higher latency than a point to point line, and that a point to point is generally regarded as faster. Would someone mind explaining the specifics of that relationship a little bit? Again, off list please, unless someone thinks it's an appropriate topic for this list.. **************************************** Here are the responses I received for both questions in no particular order. **************************************** David Newman wrote: "56K" modems really top out at 53.3 kbit/s because of an FCC regulation (I believe Canada has a similar rule). They theoretically can hit 56 kbit/s outside North America, though tests have showed 51-52 kbit/s to be the upper end for products shipping today. Absent congestion both a frame PVC and a leased line really do run at 56 kbit/s. David R. Dick wrote: "56K" modems take advantage of the digital nature of much of the present phone system. Unfortunately, they can only do this in one direction, so you get 56K down from the Internet to the user (actually only 53K, or so, because of electrical power limitations in the signalling method) and 33K from the user to the Internet. 56K leased lines are point-to-point connections. The data travels more or less directly (in electrical terms, anyway) between the user and the Internet -- 56K in each direction. 56K frame relay is a switched service and two point-to-point connections are involved: one from the user to the switch and one from the switch to the Internet. You get 56K in each direction, but there is some delay (latency) because of the diversion through the switch. In some places there may even be more than one switch involved, with extra latency, as you might expect. Paul G. Donner wrote: Basically, you'd need to look at the framing in each case as well as any Layer 2 acknowledgement mechanism that might be implemented. You can get this from a number of textbooks and put together an explanation yourself if you are so inclined. This would only consider up to the L2 overhead on the links (if applicable -> e.g. Frame Relay) which is probably what you are asking for. These link types are effectively in different categories and it would be sort of like comparing apples to oranges. Chris Cappuccio wrote: 56K is the low end of the leased line spectrum, with 56K leased line and 56K frame relay performing almost identically if you are using similar framing protocols. You will the top 56K performance from these... Lowest latency (20-40ms) 56K modem is at most 53K because of modem-enforced FCC limits, and because of the analog-digital conversion, you will get high latency (100-200ms) and lower throughput then a leased line. David R. Dick wrote: The simplest explanation involves the fact that most networking is TCP (not UDP) so packets travel in both directions, with acknowledgements, etc. When an ACK is delayed because of latency, the movement of the real data packets is also delayed. So it will just plain take longer to deliver the same data payload. Karl Auerbach wrote: As for so-called 56K modems -- they aren't. They are only 56K if the FCC allows, which they don't, so top speed is about 53K. And then it's only 56K in the direction from an ISP who has a digital ISDN based modem towards your "analog" 56K modem. The return path is 33Kbits (or worse.) If you take a couple of off the shelf "56K" modems and hook 'em up over a normal POTS line you'll end up with about 33Kbits (or worse) full duplex. I learned all this stuff a few weeks ago when I hooked a couple of routers together and found that my investment in 56K modems was wasted -- the best one can get is 33Kbits full duplex unless I invested in an ISDN link at one end and got the 56K ISP-end gear. As far as I know only 3COM makes a single BRI ISP-end 56K modem. It runs about $250. Usually they come in larger packs to hook to an ISDN PRI. Chris Cappuccio wrote: Latency and throughput are NOT related in this case! The speed of light itself puts a limit on how fast we can transfer data globally with fiber optics. Bigger pipes will simply ensure that you can get more data through at the same time. Once you have maxed out speed with the most efficient protocol, you are limited by the speed of light ;0 Anyways, the latency introduced with a modem connection is much larger then that of a dedicated line because of the two analog<->digital conversions. All-digital connections like ISDN, FR, and PTP connections are very low latency. Paul G. Donner wrote: FR is effectively frame/packet switched. PT-PT circuits do not have frame/packet structures (the transport may use T1 type framing but this is different). The major latency affect in FR is due to buffering of the packet/frames and and switching them. PT-PT don't go through this process. So effectively both types FR and PT-PT have propagation delay (e.g. speed of light limitations) but FR exhibits also processing delays which are neglible or non-existant with PT-PT circuits. Robert Gourley wrote: Given that there in no congestion in the frame relay network and that both the 56Kbps DDS line and the 56Kbpx frame relay PVC follow exactly the same route and have the same number of route miles, then the only difference in the latency of the two circuits is the effect of two serialization delays (one at the ingress and one at the egress) in the frame relay example. Serialization delay is = (packet size in bits)/(56,000 bits/sec). Blaine Christian wrote: Since you want to assume ideal conditions you will remove a significant difference between the 56k Modem and leased line. You will find that under ideal conditions both of these should perform equally well. Since a leased line/modem relies on less telco equipment it should peform better than the frame circuit. A 56k frame circuit will increase your latency by virtue of being processed by several frame switches. If the frame switches have to tag frames they may introduce more latency into your circuit (even if they do not tag your frames). The difference between all of these should be negligible (depending on switches and the amount of equipment traversed) and throughput should be equal depending on the equipment you are using (of course). --------------------------------------------------- Tim Wolfe, Network Administrator ClipperNet Internet Access Services tim(a)clipper.net 541.431.3360 voice 541.431.1176 fax ...Across the Desktop and around the World... ---------------------------------------------------

1 0

open relays at Earthlink
by Adam D. McKenna 01 Sep '98

01 Sep '98

Earthlink has the following open mail relays: gull.prod.itd.earthlink.net snipe.prod.itd.earthlink.net (a couple of other earthlink hosts, I can't remember which now, they were all in the .prod.itd.earthlink.net subdomain.) I know this because I have been getting spammed by someone using them for the past week. I have tried e-mailing abuse(a)earthlink.net several times and have received no response. I'm hoping a clueful Earthlink admin will see this post and take the appropriate action. If not, then maybe Earthlink should be "nominated" for RBL. --Adam --- bash: syntax error near unexpected token `:)' Adam D. McKenna adam(a)flounder.net

19 23