- NANOG - lists.nanog.org

zayo / AS 6461 maximum prefix limit
by Job Snijders 29 Sep '17

29 Sep '17

Hi all, It appears one of our fellow network operators ran into some issues earlier today, probably due to the turn-up of a some new circuits for customers. In order to expedite the restoration I'm sharing the below information. I recommend any peering partners that saw BGP sessions go down with Zayo / AS 6461 due to maximum prefix limits being hit, please increase the maximum prefix limit to 65,000 for IPv4 and 2,000 for IPv6 and/or clear BGP sessions. The information on https://www.peeringdb.com/net/541 is current. Kind regards, Job

1 0

CenturyLink VDSL2 Support For RFC 4638 or IPoE?
by Brielle Bruns 29 Sep '17

29 Sep '17

Hey everyone, Don't suppose if anyone on this list knows if RFC 4638 (baby jumbos, aka MTU of 1508) or IPoE is supported on CenturyLink VDSL2 connections? I know IPoE is supported on connections with their TV service option. Would be nice to either get PPPoE out of the picture or have a proper 1500 MTU. -- Brielle Bruns The Summit Open Source Development Group http://www.sosdg.org / http://www.ahbl.org

1 0

Weekly Routing Table Report
by cscora＠apnic.net 29 Sep '17

29 Sep '17

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG MENOG, BJNOG, SDNOG, CMNOG, LACNOG, IRNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 30 Sep, 2017 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 664412 Prefixes after maximum aggregation (per Origin AS): 258107 Deaggregation factor: 2.57 Unique aggregates announced (without unneeded subnets): 320310 Total ASes present in the Internet Routing Table: 58459 Prefixes per ASN: 11.37 Origin-only ASes present in the Internet Routing Table: 50491 Origin ASes announcing only one prefix: 22271 Transit ASes present in the Internet Routing Table: 7968 Transit-only ASes present in the Internet Routing Table: 230 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 55 Max AS path prepend of ASN ( 55644) 51 Prefixes from unregistered ASNs in the Routing Table: 91 Number of instances of unregistered ASNs: 91 Number of 32-bit ASNs allocated by the RIRs: 20109 Number of 32-bit ASNs visible in the Routing Table: 15925 Prefixes from 32-bit ASNs in the Routing Table: 65301 Number of bogon 32-bit ASNs visible in the Routing Table: 20 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 359 Number of addresses announced to Internet: 2851720800 Equivalent to 169 /8s, 249 /16s and 206 /24s Percentage of available address space announced: 77.0 Percentage of allocated address space announced: 77.0 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 98.7 Total number of prefixes smaller than registry allocations: 219606 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 183498 Total APNIC prefixes after maximum aggregation: 52398 APNIC Deaggregation factor: 3.50 Prefixes being announced from the APNIC address blocks: 182418 Unique aggregates announced from the APNIC address blocks: 74771 APNIC Region origin ASes present in the Internet Routing Table: 8348 APNIC Prefixes per ASN: 21.85 APNIC Region origin ASes announcing only one prefix: 2300 APNIC Region transit ASes present in the Internet Routing Table: 1198 Average APNIC Region AS path length visible: 4.4 Max APNIC Region AS path length visible: 55 Number of APNIC region 32-bit ASNs visible in the Routing Table: 3207 Number of APNIC addresses announced to Internet: 765499872 Equivalent to 45 /8s, 160 /16s and 153 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-137529 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 199474 Total ARIN prefixes after maximum aggregation: 95708 ARIN Deaggregation factor: 2.08 Prefixes being announced from the ARIN address blocks: 201183 Unique aggregates announced from the ARIN address blocks: 93502 ARIN Region origin ASes present in the Internet Routing Table: 17897 ARIN Prefixes per ASN: 11.24 ARIN Region origin ASes announcing only one prefix: 6628 ARIN Region transit ASes present in the Internet Routing Table: 1779 Average ARIN Region AS path length visible: 3.8 Max ARIN Region AS path length visible: 24 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2191 Number of ARIN addresses announced to Internet: 1107083552 Equivalent to 65 /8s, 252 /16s and 193 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-397212 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 177712 Total RIPE prefixes after maximum aggregation: 86956 RIPE Deaggregation factor: 2.04 Prefixes being announced from the RIPE address blocks: 173663 Unique aggregates announced from the RIPE address blocks: 104888 RIPE Region origin ASes present in the Internet Routing Table: 24439 RIPE Prefixes per ASN: 7.11 RIPE Region origin ASes announcing only one prefix: 11209 RIPE Region transit ASes present in the Internet Routing Table: 3480 Average RIPE Region AS path length visible: 4.4 Max RIPE Region AS path length visible: 28 Number of RIPE region 32-bit ASNs visible in the Routing Table: 6225 Number of RIPE addresses announced to Internet: 713272704 Equivalent to 42 /8s, 131 /16s and 173 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-207259 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 86153 Total LACNIC prefixes after maximum aggregation: 19113 LACNIC Deaggregation factor: 4.51 Prefixes being announced from the LACNIC address blocks: 87391 Unique aggregates announced from the LACNIC address blocks: 39768 LACNIC Region origin ASes present in the Internet Routing Table: 6436 LACNIC Prefixes per ASN: 13.58 LACNIC Region origin ASes announcing only one prefix: 1793 LACNIC Region transit ASes present in the Internet Routing Table: 1187 Average LACNIC Region AS path length visible: 5.3 Max LACNIC Region AS path length visible: 36 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 3958 Number of LACNIC addresses announced to Internet: 172130784 Equivalent to 10 /8s, 66 /16s and 129 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-268700 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 17482 Total AfriNIC prefixes after maximum aggregation: 3857 AfriNIC Deaggregation factor: 4.53 Prefixes being announced from the AfriNIC address blocks: 19398 Unique aggregates announced from the AfriNIC address blocks: 7096 AfriNIC Region origin ASes present in the Internet Routing Table: 1073 AfriNIC Prefixes per ASN: 18.08 AfriNIC Region origin ASes announcing only one prefix: 340 AfriNIC Region transit ASes present in the Internet Routing Table: 208 Average AfriNIC Region AS path length visible: 4.7 Max AfriNIC Region AS path length visible: 23 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 344 Number of AfriNIC addresses announced to Internet: 93275136 Equivalent to 5 /8s, 143 /16s and 68 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5270 4192 76 ERX-CERNET-BKB China Education and Rese 7545 3970 407 406 TPG-INTERNET-AP TPG Telecom Limited, AU 17974 2857 900 77 TELKOMNET-AS2-AP PT Telekomunikasi Indo 4766 2788 11126 753 KIXS-AS-KR Korea Telecom, KR 9829 2754 1499 540 BSNL-NIB National Internet Backbone, IN 45899 2389 1472 112 VNPT-AS-VN VNPT Corp, VN 9808 2367 8699 32 CMNET-GD Guangdong Mobile Communication 9394 2175 4931 27 CTTNET China TieTong Telecommunications 4755 2106 423 222 TATACOMM-AS TATA Communications formerl 4134 1746 28203 462 CHINANET-BACKBONE No.31,Jin-rong Street Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6327 3442 1341 88 SHAW - Shaw Communications Inc., CA 22773 3295 2952 157 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 18566 2208 405 107 MEGAPATH5-US - MegaPath Corporation, US 6389 2045 3671 39 BELLSOUTH-NET-BLK - BellSouth.net Inc., 20115 2041 2254 430 CHARTER-NET-HKY-NC - Charter Communicat 209 1923 5067 645 CENTURYLINK-US-LEGACY-QWEST - Qwest Com 16509 1834 3963 546 AMAZON-02 - Amazon.com, Inc., US 30036 1809 322 355 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 6983 1688 853 228 ITCDELTA - Earthlink, Inc., US 701 1679 10589 626 UUNET - MCI Communications Services, In Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 39891 3387 186 23 ALJAWWALSTC-AS, SA 20940 2884 898 2068 AKAMAI-ASN1, US 8551 2448 377 41 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 34984 2049 330 429 TELLCOM-AS, TR 12389 1803 1662 687 ROSTELECOM-AS, RU 12479 1722 1055 71 UNI2-AS, ES 9121 1720 1691 17 TTNET, TR 13188 1604 100 52 TRIOLAN, UA 6849 1225 355 21 UKRTELNET, UA 8402 1208 544 15 CORBINA-AS OJSC "Vimpelcom", RU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 10620 3564 541 244 Telmex Colombia S.A., CO 8151 3208 3467 580 Uninet S.A. de C.V., MX 11830 2097 370 65 Instituto Costarricense de Electricidad 6503 1564 437 53 Axtel, S.A.B. de C.V., MX 7303 1548 1015 242 Telecom Argentina S.A., AR 6147 1278 377 27 Telefonica del Peru S.A.A., PE 3816 1033 510 92 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 28573 962 2285 181 CLARO S.A., BR 11172 915 127 87 Alestra, S. de R.L. de C.V., MX 18881 901 1056 24 TELEFÔNICA BRASIL S.A, BR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1205 398 48 LINKdotNET-AS, EG 37611 767 91 8 Afrihost, ZA 36903 708 356 136 MT-MPLS, MA 36992 665 1383 31 ETISALAT-MISR, EG 24835 515 850 15 RAYA-AS, EG 29571 422 36 10 CITelecom-AS, CI 37492 416 354 77 ORANGE-, TN 8452 398 1730 18 TE-AS TE-AS, EG 15399 357 35 7 WANANCHI-, KE 2018 297 327 73 TENET-1, ZA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5270 4192 76 ERX-CERNET-BKB China Education and Rese 7545 3970 407 406 TPG-INTERNET-AP TPG Telecom Limited, AU 10620 3564 541 244 Telmex Colombia S.A., CO 6327 3442 1341 88 SHAW - Shaw Communications Inc., CA 39891 3387 186 23 ALJAWWALSTC-AS, SA 22773 3295 2952 157 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 8151 3208 3467 580 Uninet S.A. de C.V., MX 20940 2884 898 2068 AKAMAI-ASN1, US 17974 2857 900 77 TELKOMNET-AS2-AP PT Telekomunikasi Indo 4766 2788 11126 753 KIXS-AS-KR Korea Telecom, KR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 7545 3970 3564 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3387 3364 ALJAWWALSTC-AS, SA 6327 3442 3354 SHAW - Shaw Communications Inc., CA 10620 3564 3320 Telmex Colombia S.A., CO 22773 3295 3138 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 17974 2857 2780 TELKOMNET-AS2-AP PT Telekomunikasi Indonesia, I 8151 3208 2628 Uninet S.A. de C.V., MX 8551 2448 2407 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 9808 2367 2335 CMNET-GD Guangdong Mobile Communication Co.Ltd. 45899 2389 2277 VNPT-AS-VN VNPT Corp, VN Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 65602 UNALLOCATED 8.225.192.0/24 30372 SUNESYS2 - Sunesys, LLC, US 64525 PRIVATE 45.119.143.0/24 133275 GIGANTIC-AS Gigantic Infotel P 64525 PRIVATE 45.125.62.0/24 133275 GIGANTIC-AS Gigantic Infotel P 65530 PRIVATE 45.249.40.0/24 133720 SOFTCALLCOC-AS SOFT CALL CUST- 65001 PRIVATE 46.237.40.0/21 13118 ASN-YARTELECOM PJSC Rostelecom 65534 PRIVATE 58.68.109.0/24 10201 DWL-AS-IN Dishnet Wireless Lim 64513 PRIVATE 62.150.101.0/24 9155 QNET Kuwait, KW 290012147 UNALLOCATED 63.65.43.0/24 7046 RFC2270-UUNET-CUSTOMER - MCI C 65538 DOCUMENT 64.27.253.0/24 1273 CW Vodafone Group PLC, GB 65099 PRIVATE 95.173.150.0/24 43797 RSNET2-AS RSNET2, RU Complete listing at http://thyme.rand.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 14.192.48.0/24 134833 LIHGL-HK LANLIAN INTERNATIONAL HOLDING GROUP LIMITE 14.192.49.0/24 134833 LIHGL-HK LANLIAN INTERNATIONAL HOLDING GROUP LIMITE 14.192.50.0/24 134833 LIHGL-HK LANLIAN INTERNATIONAL HOLDING GROUP LIMITE 14.192.51.0/24 134833 LIHGL-HK LANLIAN INTERNATIONAL HOLDING GROUP LIMITE 23.128.126.0/23 62878 XLITT - Xlitt, US 27.100.7.0/24 56096 UNKNOWN 41.78.12.0/23 62878 XLITT - Xlitt, US 41.78.180.0/23 37265 -Reserved AS-, ZZ 41.242.132.0/23 62878 XLITT - Xlitt, US 43.228.144.0/22 9829 BSNL-NIB National Internet Backbone, IN Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:15 /9:13 /10:36 /11:105 /12:283 /13:554 /14:1051 /15:1864 /16:13424 /17:7766 /18:13656 /19:25316 /20:39490 /21:42801 /22:80287 /23:65309 /24:369979 /25:853 /26:627 /27:654 /28:37 /29:39 /30:217 /31:2 /32:34 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 6327 3238 3442 SHAW - Shaw Communications Inc., CA 39891 2946 3387 ALJAWWALSTC-AS, SA 22773 2519 3295 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 18566 2094 2208 MEGAPATH5-US - MegaPath Corporation, US 8551 1913 2448 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 30036 1589 1809 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi 10620 1521 3564 Telmex Colombia S.A., CO 11830 1487 2097 Instituto Costarricense de Electricidad y Telec 34984 1356 2049 TELLCOM-AS, TR 6389 1355 2045 BELLSOUTH-NET-BLK - BellSouth.net Inc., US Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1560 2:840 4:18 5:2485 6:33 7:1 8:1072 12:1853 13:157 14:1722 15:28 16:3 17:172 18:76 20:59 23:2459 24:1609 25:2 27:2387 29:1 31:1929 32:89 33:22 35:21 36:408 37:2355 38:1384 39:73 40:97 41:2974 42:494 43:1965 44:81 45:3099 46:2821 47:171 49:1253 50:1012 51:19 52:824 54:354 55:2 56:4 57:44 58:1580 59:982 60:352 61:2022 62:1711 63:1907 64:4711 65:2207 66:4557 67:2288 68:1191 69:3340 70:1161 71:613 72:2143 74:2646 75:402 76:429 77:1504 78:1520 79:1890 80:1415 81:1403 82:1024 83:724 84:974 85:1882 86:465 87:1212 88:806 89:2231 90:172 91:6240 92:1038 93:2346 94:2369 95:2659 96:634 97:353 98:961 99:95 100:153 101:1224 102:1 103:15915 104:3036 105:207 106:542 107:1763 108:830 109:2917 110:1469 111:1754 112:1275 113:1305 114:1069 115:1559 116:1689 117:1782 118:2141 119:1644 120:725 121:1072 122:2432 123:1872 124:1501 125:1800 128:916 129:677 130:444 131:1507 132:599 133:193 134:733 135:225 136:305 137:466 138:1962 139:522 140:379 141:669 142:750 143:928 144:787 145:184 146:1110 147:701 148:1497 149:589 150:702 151:1000 152:716 153:300 154:917 155:761 156:686 157:732 158:516 159:1559 160:771 161:748 162:2503 163:507 164:984 165:1428 166:384 167:1289 168:3010 169:844 170:3566 171:383 172:989 173:1946 174:775 175:781 176:1867 177:3941 178:2527 179:1153 180:2210 181:2076 182:2454 183:769 184:886 185:10836 186:3268 187:2250 188:2590 189:1850 190:8405 191:1363 192:9604 193:5800 194:4732 195:3930 196:2133 197:1373 198:5470 199:5799 200:7608 201:4428 202:10350 203:9972 204:4490 205:2838 206:2960 207:3111 208:3872 209:3929 210:3931 211:2070 212:2879 213:2537 214:838 215:66 216:5796 217:2103 218:958 219:590 220:1676 221:922 222:759 223:1202 End of report

1 0

Best way to San Jose Fairmont from SFO?
by Stephen Fulton 29 Sep '17

29 Sep '17

Hi all, I'm flying in for the conference, landing in San Francisco. What's the best way to get from SFO to the conference hotel? Thanks, -- Stephen

8 8

anybody here from earthlink operations?
by Miles Fidelman 28 Sep '17

28 Sep '17

If there's someone here from earthlink operations, can you contact me privately. Thanks! Miles Fidelman -- In theory, there is no difference between theory and practice. In practice, there is. .... Yogi Berra

1 0

Root KSK roll delayed
by Matt Larson 28 Sep '17

28 Sep '17

(Please pardon the repetition if you've seen this message on another list) ICANN has decided to postpone the root KSK roll previously scheduled for 11 October 2017 for at least one quarter. This message gives some background and explanation for that decision. Historically there has been no way to determine which trust anchors DNSSEC validators have configured, making it difficult to assess the potential impact of the root KSK rollover. "Signaling Trust Anchor Knowledge in DNS Security Extensions (DNSSEC)" (defined in RFC 8145) is a recent protocol extension that allows a validator to report which trust anchors it has configured for a zone to that zone's name servers. The protocol was only finalized in April, 2017, and only the most recent versions of BIND (9.10.5b1 and 9.11.0b3 and later) and Unbound (1.6.4 and later) support it. This protocol was not expected to have sufficient deployment to provide useful information for the first root KSK rollover. However, initial research by Verisign and then by ICANN has found a growing number of validators reporting trust anchor configuration to the root servers. Based on data from six root server addresses, approximately 12,000 unique source IP addresses have sent trust anchor configuration reports so far in September 2017. The number reporting is growing and now approaches 1400 unique addresses per day. Significantly, approximately 5% of the total validators and about 6%-8% on any given day report only KSK-2010, the root zone KSK currently signing the root's DNSKEY RRset. These validators would not resolve correctly after the planned root KSK roll. There are various reasons a validator might report only KSK-2010. One reason is an old configuration with a statically configured trust anchor (e.g., BIND's "trusted-key" statement). ICANN has always known that a small percentage of validators would not be ready for the rollover because they had manually configured their trust anchor, and that operators of those validators would need to take action when the root KSK rollover happened. Another reason is a failure to automatically update the trust anchor using the RFC 5011 automated update protocol because of a software defect, operator error or other reason. Based on our research and preliminary investigation, we also believe it is possible that some operators believe that they are ready for the rollover because they configured their validator to use RFC 5011 automated updates, but will not trust KSK-2017 when the rollover happens due to configuration issues or software defects. Given the relatively high percentage of validators with just KSK-2010, ICANN believes it is important to better understand the reasons before proceeding with the root KSK roll. We will soon be publishing the list of resolvers reporting only KSK-2010 and will ask for the operational community's help in identifying, diagnosing and correcting these systems. Throughout the project we have emphasized that the root KSK is being rolled under normal operational conditions and have proceeded cautiously and without haste. The decision to postpone was taken in that spirit of caution because there is no operational pressure to proceed given our continued confidence in the security of KSK-2010. We appreciate the community's understanding and we look forward to your assistance in gathering the information necessary to move forward with the root KSK roll. Matt -- Matt Larson, VP of Research ICANN Office of the CTO

1 0

New TRANSLANT cable - US/VA to ES
by Jay R. Ashworth 28 Sep '17

28 Sep '17

Microsoft, Facebook, Telxius. 160TB, presumably each way, but no technical detail in this piece: https://interestingengineering.com/microsoft-and-facebook-just-laid-a-6600-… Cheers, -- jra -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://www.bcp38.info 2000 Land Rover DII St Petersburg FL USA BCP38: Ask For It By Name! +1 727 647 1274

4 3

1and1 DNS contact
by Feldman, Mark 28 Sep '17

28 Sep '17

If there's anyone from 1and1 (specifically, someone involved with apps-1and1.com) please contact me off list. We're running across a DNS resolution issue from some places on our network and would like to discuss. Thanks. Mark Comcast T&P Core Network Services

1 0

Information about the national test of the Emergency Alert System
by Sean Donelan 28 Sep '17

28 Sep '17

> And your upstream(s) to work. And their upstream(s) to work. etc. If 90% > of the stations in the EAS web are down you may end up with nothing > working. 6% of TV stations are operating in Puerto Rico 15% of radio stations are operating in Puerto Rico Nationally, there are about 28,000 cable systems, radio and television stations. This test will not use the FEMA primary entry point system, so its only a partial test of the national EAS. Today's national test of the Emergency Alert System will be the same as the 2016 national test. It is a partial test of the EAS, using the FEMA IPAWS system over the internet (i.e. Akamai and Cloudfront are used as CDNs) to the distribute the emergency test message. Cable, radio and TV stations need a working Internet connection as well as radio receivers and transmitters for IPAWS and EAS. Although the national test was scheduled back in July, its still a good test opportunity to see how the internet and EAS works in Puerto Rico and the U.S. VI with so much damage to the infrastructure. The one minute national test should not intefere with disaster recovery efforts in PR or USVI. For more information: https://www.fema.gov/news-release/2017/09/19/mandatory-nationwide-test-emer… https://www.fcc.gov/document/nationwide-emergency-alert-system-test-planned…

3 2

Google DNS64 misconfigured?
by Joel Whitehouse 28 Sep '17

28 Sep '17

I had an ipv6-only lab environment cease being able to browse much of the internet on Monday. Tracked the issue down to google's public DNS64 service; the following queries should return DNS64 responses from the 64:9bff::/96 prefix, however, I'm getting 0 DNS64 answers from dig on both their servers for the last 60 hours: dig @2001:4860:4860::64 ipv4only.arpa AAAA dig @2001:4860:4860::6464 ipv4only.arpa AAAA DNS works fine, just not DNS64. A forum topic [0] suggests this behavior might be intermittent but no official response from google there. Is google's public DNS64 down for anyone else? [0] https://groups.google.com/d/topic/public-dns-discuss/dD_lSPfqXHA/discussion -- Joel Whitehouse

3 2