- NANOG - lists.nanog.org

Re: MTU of the Internet?
by Sean M. Doran 09 Feb '98

09 Feb '98

Paul A Vixie <paul(a)vix.com> writes: > the fratricide thing someone else mentioned earlier today. That would be Frank Kastenholz, who I am pleased to discover slumming here. > this hurts our benchmark numbers but helps the backbones (where i came from) > and the origin servers (where some of my friends are). quite the dilemma. Frankly, the backbones could care less these days. Heavily decorated micropackets are becoming less and less toxic; at least one implementation is known to smile and ask for more at OC12 rates, another has hardware that can probably do this too. Magic flow-based switching schemes that open VCs and so forth might be happier, but I don't know of any actually deployed in a "backbone" per se. Tli was just pointing out n messages ago that no matter how well you do in terms of aggregating data traffic into bigger chunks, you still will see an enormous number of small packets around (ACKs). You have to be prepared to switch those at line rate; engineering for some statistical mix of big and small packets is asking for a disaster when someone suddenly goes simplex. There is, however, the spectre of there being so many SYNs flying around that they alone might cause congestion collapse. I dunno if I should be frightened of that or not, but I am not one of your origin server friends. --:) Finally, could your explain the "benchmark" comment a bit? Sean.

3 3

Canadians in Albuqueuque
by Phillip Vandry 09 Feb '98

09 Feb '98

We have notice quite a few Canadians on the attendee list, and we thought a BOF of Canadian issues might be a good idea. But Monday night seems to be booked pretty solid, with 4 BOFs already and a tutorial, so we haven't quite decided what to do yet. Anyway, stay tuned, we'll surely have more to say tomorrow. -Phil

2 1

cacheable HTTP?
by sully＠mail.usinternet.com 09 Feb '98

09 Feb '98

I've considered the pro's and con's of caching HTTP, and was wondering what, if any, software or hardware solutions you've implemented..and the success or failure you've experienced. Any response is much appreciated!

1 0

How not to use NANOG -- FastEther vs. FDDI
by John Hawkinson 09 Feb '98

09 Feb '98

So, as an exercise in self-flagellation, I went through the messages in the thread that began with: Date: Thu, 5 Feb 1998 19:42:02 -0500 (EST) From: Charles Sprickman <spork(a)inch.com> To: nanog(a)merit.edu Subject: FDDI or 100Mb Ethernet My principal observation was that collectively, we did a pretty poor job of utilizing the resources of this list. The original question asked seems relatively reasonable (though it's really related to LAN design/engineering and not the operational internet per se, but it's at least a question a number of small operators are asking, and is even similar to some that a number of big operators may be asking themselves). Our first response, from Kent, less-than-helpfully notes the existance of gigabit ethernet (way outside the bounds of the initial question) and suggests that the concurrent thread about MTUs is not to be payed attention to. Failure to address the initial query and failure to say *WHY* the MTU thread isn't worth listening to make this a poor response. Next, we get a reply from the oringal querrant, indicating he received 30 replies in favor of Fast Ethernet, and one in favor of FDDI, and thanking the list. While summarization to the list is appreciated, this level of summary is *NOT* useful. As should be grossly apparent to anyone who reads this list for even a short period of time, the quantity of a response has no discernable relationship to it's quality. If you ask a question and get a significant number of personal replies, summarization to the list is always good. But what's important to summarize is THE THINGS THAT PEOPLE HAVE SAID, not how many people have said them. The reasons why people indicated that Fast Ethernet might be preferable to FDDI in this particular scenario are what is important, not the number of people who may have had the Right Answer for the Wrong Reasons, or the Wrong Answer for the Right Reasons (or even those rare minority with the Right Answer for the Right Reasons)! Then we have a few replies that attempt to provide answers and provide small technical reasons why one of the choices is better. These are ok, except it seems likely these people didn't read the message from the original querrant indicating he'd already gotten "his answer". Either that, or they somehow felt that the answers he'd come up with, or the reasons given, were inadequate. Not that anyone bothered to say that, of course. I have difficulty seeing how the "Beowulf Project"'s choice of a LAN medium has much to do with the question at hand, or even closely related ones. But of course, I didn't slog through the entire web page that was cited. I skimmed it briefly. Presumably if one is going to cite a web page that's not directly relevent to the question asked, one should bother to be specific about what one is referring to and the relevence, if it's not completely obvious. Most service providers aren't building hypercubes... Not to mention that most web pages are ephermeral and the nanog mail archive is not, so a quotation rather than a citation is always nice. Some more commentary that fits the above classifications, and then a short anecdote about the nature of cascading layer two hardware in an enterprise network environment. Surely irrelevent to NANOG, but probably amusing to some. Personally I think it worsens the signal-to-noise ratio, especially when a thread has gone to pieces like this one has. But perhaps my sense of humor was removed at too early an age. Oh yes, then we have Paul and Sean off talking about migration paths, with cisco BFRs and OC3 connections. Proabably not very relevent to the initial query, but I suppose someone is curious, so why not re-iterate a discussion that everyone could find in the archives. But wait, then a segue into MPLS, the favored nanog discussion topic of the year, I'm sure. All-in-all, certainly not the worst thread we've had in a while. But well-managed, structured, something we can point to as a community and say "Yeah, we did a good job answering this question and producing thought-provoking discussion"? I think not. I suppose my cynicism must have reached new heights if this is what I'm bothering to waste my time on. Still, perhaps this missive will make people think just a little bit harder about the things they're going to say; if so, even if it wounds characters, it will have served its purpose. --jhawk

1 0

Re: MTU of the Internet?
by Sean M. Doran 09 Feb '98

09 Feb '98

"William Allen Simpson" <wsimpson(a)greendragon.com> writes: > This is supposedly an operations list. So, everyone, when are you > configuring it in _YOUR_ Cisco? Ebone will be deploying code that does RED in CEF in approximately nine hours. I expect BC and I will be playing with RED most of this week, seeing how the Cisco implementation does on congested high-speed and sometimes high-delay interfaces where traffic is very heavily aggregated. I am not sure anybody else has done this yet (jhawk?) although there is some positive experience with RED on slow interfaces. Sean. - -- Sean Doran <smd(a)ebone.net> Development Manager, Ebone Inc., Copenhagen Denmark

2 1

Re: MTU of the Internet?
by William Allen Simpson 09 Feb '98

09 Feb '98

I hate to extend this thread any, but there is too much misinformation to let slide.... > From: Stephen Sprunk <stephen(a)sprunk.org> > Does anyone have data to show if any terminal servers or client stacks > will honor TOS bits and/or known interactive port numbers when > ordering packets for transmission across slow links? > Well, actually, every NAS for every vendor that I've ever worked with honors the TOS bits (usually in numeric order) and gives precedence to interactive traffic on outbound links, even fast ones, when there is a queue. Telebit, NEC, Rockwell, for examples. Heck, that was even true for the stack in a cellular phone (Qualcomm). In response to the speculation that some bytes are forwarded without determining TOS or packet size, I doubt that anybody is doing cut-thru routing for 28.8 Kbps to 10 Mbps or vice versa. Pretty silly idea. No gain. An entire packet is sent at 10 Mbps in the time that it takes for 4 bytes to show up at 28.8 Kbps. FYI, a larger number of these smaller MTU packets will actually cause _more_ loss due to memory congestion. Modern stacks do not allocate packets on a byte by byte basis. They allocate a buffer the size of the largest allowable incoming packet on an interface (often called p-bufs). So, a 40 byte packet takes the same memory as a 1500 byte packet. You don't get 3 times as many packets at 576. There's no gain in trimming the packet down after it comes in, the whole thing is just going to be returned to the memory pool in milliseconds anyway. As to the proposal that the big packets could be sliced and diced to allow a smaller interactive packet thru -- well, the PPP fragmentation header has been out there for years, but nobody really implements it, even for multi-link. Too much pain, not enough gain. Same problems as ATM. The real problem is that too many OSes do not implement RFC-1123 Host Requirements, even after 8 years. As I remember the words of one clueless product manager a year or so ago, listed in his byline as a renowned Internet expert, complaining that (paraphrased) Simpson believes that only those who have steeped in moldy RFCs should be allowed to write network stacks. It was pretty clear that he had not bothered with reading too many of them on his way to becoming a self-described expert, and very clear that his staff was none too familiar with them, either. And MicroSoft apparently has even more problems than Apple. The real answer for ISPs is to never ship Explorer on your configuration CD, since it is impossible to make well-behaved. Preconfigure Navigator to 2 streams. And even better, set Auto-Load Images Off. There is a nice big Images button to load the images on a page on those rare occasions that you actually want to see them.... You will find that your users will be much happier with their networking experience, and you will have fewer support calls. WSimpson(a)UMich.edu Key fingerprint = 17 40 5E 67 15 6F 31 26 DD 0D B9 9B 6A 15 2C 32

3 2

Hello, @Home?
by Adam Rothschild 09 Feb '98

09 Feb '98

Uh... Could someone from @H please contact me privately, ASAP?!? Put simply, your connectivity at SprintNAP and [the Parking Garage Commonly Referred to as] MAE-East sucks at the moment. Your phone support leaves much to be desired in terms of competency and responsiveness. BTW, thanks to everyone who contacting me re: cross-country connectivity. I have a gazillion FR price quotes headed my way... :) Thanks, Adam -- ---------------------------------------------------------- Adam Rothschild <asr(a)millburn.net> CTO / Senior Systems Engineer http://www.millburn.net millburnNET inter@ctive

2 3

Re: nanog discussion of HTTP 1.1
by Henrik Frystyk Nielsen 09 Feb '98

09 Feb '98

Hi Marc, I have not been on this list for long but please allow me to elaborate on some of the points in this mail. >> Phil Howard writes: >> > By loading the images in parallel, with the initial part of the image files >> > being a fuzzy approximation, you get to see about where every button is >> > located, and in many cases you know exactly what it is, and you can click >> > on them as soon as you know where to go. >> >> By loading the images in parallel over multiple TCP connections, you >> also totally screw the TCP congestion avoidance mechanisms, and hurt >> the net as a whole, especially given how prevalent HTTP is these days. >> Unfortunately, as has been seen here, very few people working with the >> net these days actually understand the details of things the net >> depends on, and TCP congestion avoidance is one of them. >> >> HTTP 1.1 allows multiplexing in a single stream, and even (amazingly > >Once again, HTTP/1.1 does _not_ allow multiplexing multiple transfers >simlultaneously in a single TCP connection. Multiple responses are >serialized. To be precise, an HTTP/1.1 client can issue multiple requests on the same TCP connection without waiting for the responses to previous requests. The requests as well as the responses do not change order while transferred and are not interleaved - it is strictly a question of timing. You can find a more detailed in our paper http://www.w3.org/Protocols/HTTP/Performance/Pipeline.html which you refer to as well as out HTTP performance overview at http://www.w3.org/Protocols/HTTP/Performance/ >> enough) ends up working faster in practice than multiple TCP >> connections. > >I have seen nothing supporting that assertion for high latency, medium >(aka. the Internet on a good day) packet loss connections. The discussion >at: > > http://www.w3.org/Protocols/HTTP/Performance/Pipeline.html > >shows some interesting information about the wins of persistent >connections and piplining, however their tests only went as far as >including a 28.8k local dialup, which does not simulate the "average user" >going to the "average web site". This is not entirely correct - the paper discusses the effect of HTTP/1.1 buffering and pipelining in three network environments: WAN between LBL and MIT LAN (10 Mbit) PPP over 28.8 modem Our tests show that in all three environments, HTTP/1.1 using a single TCP connection outperforms HTTP/1.0 using 6 simultaneous connections. In both the LAN and the WAN case the number of TCP packets used by HTTP/1.1 dropped to about 1/3 and time spent to about 1/2 in direct comparison between HTTP/1.1 and HTTP/1.0. The savings in the PPP case are more modest due to the low bandwidth. I should say that we used the W3C libwww as the client side HTTP/1.0 and HTTP/1.1 implementations and Apache and Jigsaw as HTTP/1.1 servers. The client side pipelining code is available from http://www.w3.org/Library/ > If you are dropping packets and >congestion contol is coming into play, you may see more impact when using >one connection that is temporarily stalled than multiple connections, with >the hope that at least one will be sending at any time. I am not aware of >any research to support (or deny, for that matter) this view, however >AFAIK there is a general lack of published research on the interaction >between HTTP w/pipelined and persistent connections and the Internet. While the absolute time spent in our WAN experiments varied greatly over the cause of the day (low in the morning, high in the afternoon, ET) the relative difference between HTTP/1.0 and HTTP/1.1 was fairly constant even when we experienced high packet loss (some links litterely went down while we ran the tests). >As I have already pointed out to Paul, but think it deserves to be >emphasized because it is not apparent to many, they do _not_ do pipelined >connections but only persistent connections. You can not do reliable >pipelined connections with HTTP/1.0. The difference between pipelined >persistent and non-pipelined persistent connections (in the case where >there are multiple requests to the same server in a row) is one RTT per >request plus a possible little bit from merging the tail of one response >with the head of another into one packet. You can easily fit 4-5 HTTP requests into the same TCP packet and similarly, HTTP servers can send responses back to back without starting a new packet. For example, in the case of cache validation responses it is possible to fit 4-5 responses into the same TCP packet. Together with a lot less context swaps, the overall result is that servers cool down quite a bit, see http://www.w3.org/Protocols/HTTP/Performance/System/SysCalls.html I should point out that existing Web applications actually have a reason for using HTTP/1.0 the way they do - it allows them to get the metadata for the inlined objects faster and hence they can lay out the page much sooner - a crucial factor in the browser battle. Pipelining doesn't fully solve this problem. >Also worthy of note is that the only widespread client that implements >HTTP/1.1 is MSIE4, and even it is botched badly, although not as badly as >4.0b2 was. (eg. it sometimes sent 1.1 requests but would only accept 1.0 >responses) Scott Lawrence maintains a HTTP/1.1 implementor's forum where implementors can get together and test their HTTP/1.1 implementations on a regular basis: http://www.w3.org/Protocols/HTTP/Forum/ If you find bugs or problems in any of the implementations that participate in the test (listed on the page above) then you should send a mail to the list <w3c-http(a)w3.org>, which is described in http://www.w3.org/Protocols/#Lists Thanks, Henrik -- Henrik Frystyk Nielsen, <frystyk(a)w3.org> World Wide Web Consortium http://www.w3.org/People/Frystyk

1 0

Re: smurf... still?
by Tatsuya Kawasaki 08 Feb '98

08 Feb '98

Dear Daniel, Sorry that I have mislead you to the Hookup. As you might know already, Hookup went backrupt a few months ago. And all what they had is NOW break into a few company's. I believe this might give you "real" start. According to nslookup, "hookup.net" is currently upated by hookup.net nameserver = ns1.nbc.netcom.ca hookup.net nameserver = ns2.nbc.netcom.ca So, I lookup whois data base for netcom.ca. I got [No name] (NS18559-HST) Hostname: NS1.NBC.NETCOM.CA Address: 207.181.89.2 System: ? running ? Coordinator: Bignell, Graham (BG54-ORG) netcom(a)THE.ENTIRE.NET 416 341 5776 Fax- - - 416 341 5725 Record last updated on 21-Jan-97. Database last updated on 8-Feb-98 04:14:24 EDT. So, I think this might be a good start. I should have looked further before informed you. regards, tatsuya ------------------------------------------------ = = = = = = 電話 03-3239-0607 fax 03-3239-2609 business network telecom http://www.giganet.net On Sun, 8 Feb 1998, Daniel Reed wrote: > On Thu, 5 Feb 1998, Tatsuya Kawasaki wrote: > ) On Tue, 3 Feb 1998, Craig A. Huegen wrote: > ) > On Wed, 4 Feb 1998, Tatsuya Kawasaki wrote: > ) > mskucher is no longer with hookup; and, in fact, hookup has filed for > ) > bankruptcy, last I heard. > ) Daniel, > ) if you need information about upper provider or the letter > ) mskucher sent, please let me know. I think he also CC to nanog, too. > Welp, I've waited until now, and just tried again: > > root@narnia:~# ping -c2 165.154.1.255 > PING 165.154.1.255 (165.154.1.255): 56 data bytes > 64 bytes from 165.154.125.53: icmp_seq=0 ttl=243 time=365.8 ms > 64 bytes from 165.154.1.1: icmp_seq=0 ttl=242 time=459.9 ms (DUP!) > 64 bytes from 165.154.1.7: icmp_seq=0 ttl=242 time=462.0 ms (DUP!) > 64 bytes from 127.0.0.2: icmp_seq=0 ttl=242 time=463.8 ms (DUP!) > 64 bytes from 165.154.1.66: icmp_seq=0 ttl=242 time=466.9 ms (DUP!) > 64 bytes from 165.154.1.57: icmp_seq=0 ttl=242 time=496.9 ms (DUP!) > 64 bytes from 165.154.1.4: icmp_seq=0 ttl=242 time=506.9 ms (DUP!) > 64 bytes from 165.154.1.8: icmp_seq=0 ttl=242 time=537.0 ms (DUP!) > 64 bytes from 165.154.1.26: icmp_seq=0 ttl=242 time=556.9 ms (DUP!) > 64 bytes from 165.154.1.21: icmp_seq=0 ttl=242 time=576.7 ms (DUP!) > 64 bytes from 165.154.1.26: icmp_seq=1 ttl=242 time=288.5 ms > > --- 165.154.1.255 ping statistics --- > 2 packets transmitted, 2 packets received, +10 duplicates, 0% packet loss > round-trip min/avg/max = 288.5/477.3/576.7 ms > root@narnia:~# > > I originally contacted registry(a)hookup.net (as per the output from whois > 165.154), but it appears they haven't fixed the problem. I'm unsure where > to go from here (should I contact Netcom, do you think?), but there was > only two networks listed in that smurf.c derivative that were susceptable > to being used in a smurf attack anyway, so I'm not really sure it's > entirely worthwhile persuing those two contacts. > > -- > Daniel Reed <n(a)narnia.n.ml.org> (3CE060DD) > System administrator of narnia.n.ml.org (narnia.mhv.net [199.0.0.118]) > recursive (adj.) - See recursive. > >

1 0

Re: FDDI or 100Mb Ethernet
by Sean M. Doran 08 Feb '98

08 Feb '98

| > SM FDDI -> SM POS. Problem solved. Reuse your fibre, even. | | *cough* Um, hate to have to raise an ugly bugaboo, but reusing | the fibre isn't the problem; it's redesigning the whole network | architecture from multidrop, ring based FDDI, to point-to-point | POS connections. Multipoint? Ha! Your architecture should be around an FDDI switch anyway, then all you do is unplug all the SM (or MM if that suits you) from the switch(es) and plug them into your wonderful Cisco 12012 populated with OC3 cards. If you really want it to look like LANnish still, run MPLS. | Or are you going to point out a cheap (~$100,000) SONET switch | that will work as a relatively "drop-in" replacement for already | installed DEC Gigaswitches? If you know of one 120xx. You really don't want to put too many 155-size interfaces into a 75xx router anyway thanks to the fun backplane (so you are limited in potential choices anyway), but you probably want two POS cards, one to 12012 "A" and one to 12012 "B". Traffic managment will be fun, but hey, you are wizardly at multihoming and stuff already, right? So that should be easy-peasy by comparison. | I'll order a half dozen. Otherwise, there really isn't any | multi-drop replacement for FDDI at this point. Hm, go back and look at the POP design I postulated the other day. Note that MPLS can run over many media, if you really want things to look like a single level two fabric... Sean. ("It's kinda like ATM done mostly right")

1 0