- NANOG - lists.nanog.org

Re: Implementing Decentralized RPKI with Blockchain Technology
by Jakob Heitz (jheitz) 15 Nov '24

15 Nov '24

The great innovation of blockchain is that once a Bitcoin is transferred, the previous owner can’t take it back. A distinguishing feature of RPKI is that the issuer of the EE certificate can revoke it to take back ownership of the IP address. Imagine if stale entries in the IRR could not be cleaned up because they were locked up in a blockchain. Kind Regards, Jakob

1 0

Implementing Decentralized RPKI with Blockchain Technology
by Brandon Z. 13 Nov '24

13 Nov '24

Hi there, Currently, due to political factors, some countries are not particularly proactive in deploying RPKI. Imagine if the RIR of a region were forced to revoke all IP resources of a particular country from RPKI, effectively isolating that country from the global internet. To address this, one approach is for autonomous networks within a region to establish two trusted RPKI CA servers: one from the major RIRs and another locally managed. The locally managed CA would take precedence, allowing autonomous networks to submit their IP resources to the RPKI server of their peers (and potentially backed by a national mandate to trust this CA). This setup could prevent a scenario where an entire country’s IP resources are revoked, leading to all IPs being marked as invalid. Another concept is to use blockchain technology. While cryptocurrencies use computational power to verify ownership, BGP could use peer count. If an IP resource is marked as valid by a majority of high-influence networks (with many peers), it could be trusted by the entire internet. Could this approach work? Perhaps there’s existing research on similar methods? *Brandon Z.* HUIZE LTD www.huize.asia <https://huize.asia/>| www.ixp.su | Twitter This e-mail and any attachments or any reproduction of this e-mail in whatever manner are confidential and for the use of the addressee(s) only. HUIZE LTD can’t take any liability and guarantee of the text of the email message and virus.

3 2

Re: [manrs-community] Implementing Decentralized RPKI with Blockchain Technology
by Brandon Z. 13 Nov '24

13 Nov '24

Hi guys, In technical terms, RIRs can indeed configure IPs to become RPKI invalid. However, my point is not to remove RPKI but to make it invalid. This could happen; for example, RIPE was required to remove all IRRs related to Russia (I'm glad RIPE has not done this). > Everything that was blockchain last year is now AI. Decentralization can address this issue; it's not just a hype concept. Best, *Brandon Z.* HUIZE LTD www.huize.asia <https://huize.asia/>| www.ixp.su | Twitter This e-mail and any attachments or any reproduction of this e-mail in whatever manner are confidential and for the use of the addressee(s) only. HUIZE LTD can’t take any liability and guarantee of the text of the email message and virus. On Wed, 13 Nov 2024 at 11:10, Gert Doering <gert(a)space.net> wrote: > Hi, > > On Wed, Nov 13, 2024 at 09:39:03AM -0500, Brandon Z. wrote: > > Another concept is to use blockchain technology. > > Everything that was blockchain last year is now AI. > > Gert Doering > -- NetMaster > -- > have you enabled IPv6 on something today...? > > SpaceNet AG Vorstand: Sebastian v. Bomhard, Ingo > Lalla, > Karin Schuler, Sebastian Cler > Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann > D-80807 Muenchen HRB: 136055 (AG Muenchen) > Tel: +49 (0)89/32356-444 USt-IdNr.: DE813185279 >

1 0

N92 Pictures Are Ready! + N93 Call For Presentations, Talk of the Week
by Nanog News 13 Nov '24

13 Nov '24

*** Reminder: NANOG 93 Call For Presentations* ------------------------------------------------------------ *The PC is Seeking Talk Proposals for N93!* We are looking to schedule over 1,600 minutes of content for NANOG 93 - so don’t wait! We want to hear from you whether you plan to present from on the stage or as a live remote presenter. *MORE INFO* <https://nanog.org/program/call-presentations/> https://nanog.org/program/call-presentations/ *** N92 Pictures Are Ready!* ------------------------------------------------------------ *Download, Save, + Create Your own NANOG 92 Album* *A picture makes a memory last forever.* The official NANOG 92 daily photo albums are now available for viewing, downloading, and sharing. Click below to access the NANOG Flickr account and share the highlights with your network. *VIEW NOW <https://www.flickr.com/photos/nanog/albums/> * https://www.flickr.com/photos/nanog/albums/ *** Talk of the Week — What’s up with Starlink Speeds?* ------------------------------------------------------------ *Ft. Kemal Sanjta—Cisco ThousandEyes + Mike Hicks—Cisco ThousandEyes* In this study, researchers measured sustained throughput across the United States, Europe, and Australia using Starlink, the leading satellite internet provider. Their analysis reveals notable gaps between advertised speeds, Speedtest results, and actual throughput, with underlying TCP mechanisms playing a significant role in these discrepancies. *WATCH NOW* <https://www.youtube.com/watch?v=bR99OxQTRuc&list=PLO8DR5ZGla8jZuNZqoXorIMAC…> *** Stay Connected* ------------------------------------------------------------ http://www.facebook.com http://www.instagram.com/nanog_org/ http://www.linkedin.com/company/nanog/ https://www.twitter.com/nanog/ http://nanog.org

1 0

Hurricane Electric ISP custom routing via BGP communities
by Edvinas Kairys 13 Nov '24

13 Nov '24

Hello, Has anyone tried to use Hurricane Electric ISP custom routing via BGP communities ? I thought that a provider with such a Tier would allow customers to influence inbound (to customer) routing using additional BGP communities. But seems they don't have free service for that, they're offering $200/mo fee per session to make the custom communities work. I'm shocked:)

13 12

Re: etiquette for replying to daily digests
by Willy Manga 13 Nov '24

13 Nov '24

Hi, On 09/11/2024 16:00, nanog-request(a)nanog.org wrote: > [...] > Hi all, > > I (and I'm sure many of you) subscribe to daily digests from NANOG to keep > things concentrated. However, there are sometimes messages in the digest > I'd like to reply to, and I don't want to be that guy who just replies to > the digest and opens an ugly new thread. > > Curious what workflow/process any of you use to do so, and what the > best/netizen-polite way is to end up with a reply that's appropriately > threaded. Do I just need to mirror the subject line? 1. I locate the relevant message I want to reply 2. Delete everything before/after or with some mail client (like Thunderbird) , I can just select the message and hit the 'reply' button. It will include only the selected text 2. Copy exactly the subject line of the relevant message I want to reply and if it doesn't yet contain a 'Re:' in front, I insert it. And that is exactly what I'm doing with this reply. I believe it's not so disruptive at least when I look at the archives [1], it's not opening a new thread. 1. https://mailman.nanog.org/pipermail/nanog/ Of course, like you I usually don't reply to messages so it's not so tedious. -- Willy Manga

6 5

etiquette for replying to daily digests
by Alex Buie 11 Nov '24

11 Nov '24

Hi all, I (and I'm sure many of you) subscribe to daily digests from NANOG to keep things concentrated. However, there are sometimes messages in the digest I'd like to reply to, and I don't want to be that guy who just replies to the digest and opens an ugly new thread. Curious what workflow/process any of you use to do so, and what the best/netizen-polite way is to end up with a reply that's appropriately threaded. Do I just need to mirror the subject line? *Alex Buie*Senior Cloud Operations Engineer 450 Century Pkwy # 100 Allen, TX 75013 <https://maps.google.com/?q=450+Century+Pkwy+STE+100+%7C+Allen,+TX+%7C+75013…> D: 469-884-0225 | www.cytracom.com

8 10

EA Game IP Geolocation
by Claire Dubois 11 Nov '24

11 Nov '24

Hi, We’ve recently received feedback from some of our customers reporting issues accessing EA games. It appears that IPs in our network are flagged or incorrectly identified in EA’s geo-location database, causing disruptions for our users. Does anyone have insight into which geo-location database Electronic Arts uses for their IP filtering or any steps to correct this issue? Thanks, *Claire Dubois* Huicast Telecom Limited www.huicast.com This e-mail and any attachments or any reproduction of this e-mail in whatever manner are confidential and for the use of the addressee(s) only. Huicast Telecom Limited can’t take any liability and guarantee of the text of the email message and virus.

2 1

Need AS3257/GTT Network Engineer Contact
by Aaron Atac 08 Nov '24

08 Nov '24

Hi, Seeking AS3257/GTT network engineering contact. We’ve been engaging your NOCC for the last 5 hours and haven’t made progress in issue resolution. Thanks, Aaron

1 0

Spoofer Report for NANOG for Oct 2024
by CAIDA Spoofer Project 08 Nov '24

08 Nov '24

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within usa, can. Inferred improvements during Oct 2024: ASN Name Fixed-By 19126 KIZAWIRELESS 2024-10-01 55 UPENN 2024-10-02 394195 CLEARNETWORX 2024-10-16 199203 2024-10-18 14031 SCXY 2024-10-30 54600 PEGTECHINC 2024-10-31 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Oct 2024: ASN Name First-Spoofed Last-Spoofed 3356 LEVEL3 2016-03-06 2024-10-11 40676 AS40676 2016-08-29 2024-10-28 27364 ACS-INTERNET 2016-09-27 2024-10-29 20412 CLARITY-TELECOM 2016-09-30 2024-10-31 12083 WOW-INTERNET 2016-11-09 2024-10-14 23314 ORLANDOTELCO 2017-04-14 2024-10-21 2152 CSUNET-NW 2017-11-08 2024-10-30 21804 ACCESS-SK 2019-06-09 2024-10-21 12183 TALKIE-COMMUNICATIONS 2022-12-10 2024-10-26 3701 NERONET 2023-04-18 2024-10-26 400282 2023-04-27 2024-10-30 393577 SCCNET 2023-05-03 2024-10-24 202400 2023-05-08 2024-10-21 61461 Airtek Solutions C.A. 2023-05-13 2024-10-31 20119 ARROW 2023-10-19 2024-10-31 394684 WISPERNET 2024-01-17 2024-10-26 394195 CLEARNETWORX 2024-03-22 2024-10-10 40850 ENKI 2024-04-03 2024-10-30 393530 TLU 2024-05-22 2024-10-30 19935 CRRS 2024-05-29 2024-10-29 3801 MISNET 2024-09-09 2024-10-29 30475 WEHOSTWEBSITES-COM 2024-09-30 2024-10-14 13807 GREAT-PLAINS-COMMUNICATIONS 2024-10-09 2024-10-09 20260 SAWTEL-UC 2024-10-16 2024-10-23 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block… Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0