- NANOG - lists.nanog.org

Spoofer Project
by Matthew Luckie 09 Aug '17

09 Aug '17

Hi, The CAIDA Spoofer project has been collecting and publicly sharing data on the deployment of source address validation since March 2016. We've built up a reasonably large install-base of the open-source client, and receive tests from 400-500 unique IPs per day. We're posting reports with links to test outcomes on the spoofer website. In particular, we've got summary statistics for each AS at: https://spoofer.caida.org/as_stats.php If you know an operator for anyone on that list who has at least one spoofable prefix, please feel free to reach out to them and let them know. I've been sending emails to abuse contacts for nearly a year now. Roughly 1/5 ASes I've contacted have fixed at least one problem. The remediation we know about (automatically generated) is at: https://spoofer.caida.org/remedy.php In order to improve the notification emails, I'm also soliciting configuration snippets from operators who have deployed source address validation. If you have deployed SAV and wouldn't mind sharing redacted configuration (privately is fine) including any necessary platform details (such as vendor and operating system) we would greatly appreciate it. We will aggregate and post configuration snippets at https://spoofer.caida.org/ Matthew

2 1

US/Canada International border concerns for routing
by Hiers, David 09 Aug '17

09 Aug '17

Hi, We're looking to extend some services into Canada. While our lawyers dig into it, I thought that I'd ask the hive mind about border restrictions. For traffic routing, is anyone constraining cross-border routing between Canada and the US? IOW, if you are routing from Toronto to Montreal, do you have to guarantee that the path cannot go through, say, Syracuse, New York? I'm asking network operators about packet routing; data storage is a very different matter, of course. Thanks, David ---------------------------------------------------------------------- This message and any attachments are intended only for the use of the addressee and may contain information that is privileged and confidential. If the reader of the message is not the intended recipient or an authorized representative of the intended recipient, you are hereby notified that any dissemination of this communication is strictly prohibited. If you have received this communication in error, notify the sender immediately by return email and delete the message and any attachments from your system.

10 13

Admiral Hosting in London
by Michael Wayne 08 Aug '17

08 Aug '17

We were contacted by Admiral Hosting in London to rent some our unused IP space. While they insist that they're not spammers, we can not find out much about them. Has anyone had any dealings with this company? Legit? Scam? We are not interested in contributing to the Scam/Spam problem and figured I would ask here. As this is not, technically, NA-related, private replies are preferred. I'll summarize to the list.

7 6

Re: Spoofer Project
by Matthew Luckie 08 Aug '17

08 Aug '17

To my knowledge this is the meeting network. https://spoofer.caida.org/recent_tests.php?as_include=19230 Your interpretation of the results is congruent with mine. If you look through the history of tests you can see SAV is usually deployed on the network during the meeting. This is true of other network operator group meeting networks as well. On 08/09/17 11:25, Info | ddostest.me wrote: > Is it me or NANOG's AS allowing spoofing? > > https://spoofer.caida.org/as.php?asn=19230

1 0

Cisco Nexus 93180YC Switch Feedback
by James Braunegg 08 Aug '17

08 Aug '17

Dear Nanog Just wondering if anyone is using the Cisco Nexus 93180YC with the LAN enterprise license and has any honest feedback about this platform, especially if you are using VXLAN routing and eVPN, would love to hear from you. For those that don't know the Cisco Nexus 93180YC is a 1RU switch with 48 x 25gbit ports SFP+ ports (1G, 10G or 25G) + 6 x 100gbit QSFP uplink ports. (40G, 50G or 100G) Kindest Regards James Braunegg [cid:image001.png@01D280A4.01865B60] 1300 769 972<tel:1300%20769%20972> / 0488 997 207<tel:1300%20769%20972> james(a)micron21.com<mailto:james@micron21.com> www.micron21.com/<http://www.micron21.com/> [cid:image002.png@01D280A4.01865B60]<http://www.micron21.com/> [cid:image003.png@01D280A4.01865B60]<https://www.facebook.com/micron21/> [cid:image004.png@01D280A4.01865B60]<https://twitter.com/micron21> Follow us on Twitter<https://twitter.com/micron21> for important service and system updates. This message is intended for the addressee named above. It may contain privileged or confidential information. If you are not the intended recipient of this message you must not use, copy, distribute or disclose it to anyone other than the addressee. If you have received this message in error please return the message to the sender by replying to it and then delete the message from your computer.

5 5

Reviews - GTT, NTT and Telia
by Ramy Hashish 08 Aug '17

08 Aug '17

Good day all, If you are going to have two 10G "multiservice" ports in Europe, over which you will run IPT, EVPL (point-to-point switched Ethernet) and IP MPLS VPNs, and you are about to choose between GTT, NTT and Telia, which one will you choose as per your previous experience? Or please share your experience with any of their support, general or specific content quality of experience, overall performance or service delivery. Thanks in advance. Ramy Hashish

4 4

ARIN NRPM 2017.4: New Policies Implemented
by John Curran 08 Aug '17

08 Aug '17

NANOGers: Two new policies affecting transfers of number resources have been implemented at ARIN – it is worthing taking a moment to become familiar with these changes if you manage IP number resources. Thanks! /John John Curran President and CEO ARIN Begin forwarded message: From: ARIN <info(a)arin.net<mailto:info@arin.net>> Subject: [arin-ppml] NRPM 2017.4: New Policies Implemented Date: 8 August 2017 at 11:08:52 AM EDT To: <arin-ppml(a)arin.net<mailto:arin-ppml@arin.net>> On 22 June 2017, the Board of Trustees adopted the following Recommended Draft Policies: Recommended Draft Policy ARIN-2016-3: Alternative simplified criteria for justifying small IPv4 transfers Recommended Draft Policy ARIN-2016-9: Streamline Merger & Acquisition Transfers These policies are now in effect. A new version of the ARIN Number Resource Policy Manual (NRPM) has been published to the ARIN website. NRPM version 2017.4 is effective 8 August 2017 and supersedes the previous version. The NRPM is available at: https://www.arin.net/policy/nrpm.html Board minutes are available at: https://www.arin.net/about_us/bot/index.html Draft policies and proposals are available at: https://www.arin.net/policy/proposals/ The ARIN Policy Development Process (PDP) is available at: https://www.arin.net/policy/pdp.html Regards, Sean Hopkins Policy Analyst American Registry for Internet Numbers (ARIN) _______________________________________________ PPML You are receiving this message because you are subscribed to the ARIN Public Policy Mailing List (ARIN-PPML(a)arin.net) Unsubscribe or manage your mailing list subscription at: http://lists.arin.net/mailman/listinfo/arin-ppml Please contact info(a)arin.net if you experience any issues.

2 2

Microsoft peering - no response
by Kaiser, Erich 07 Aug '17

07 Aug '17

We have been trying to complete our peering with Microsoft at Equinix Ashburn for over a month, keep getting the run-around, all we need is for someone to complete the sessions on their end. Hopefully this will get to someone that can do that. We are peered at several other IX locations across the US already. Our ASN is 19754. Our side is already complete. Just sent another email to peering_at_microsoft and got an undeliverable email response. Sincerely, Erich Kaiser The Fusion Network erich(a)gotfusion.net

5 5

Re: Bell outage
by Rod Beck 07 Aug '17

07 Aug '17

I am pretty sure most of the fiber runs counterclockwise from Toronto to Buffalo. Just a fact. - R. ________________________________ From: Jason Lixfeld <jason(a)lixfeld.ca> Sent: Friday, August 4, 2017 11:48 PM To: Rod Beck Cc: nanog(a)nanog.org; ahebert(a)pubnix.net Subject: Re: Bell outage I think having a lake right in the middle makes a really nice, natural, diverse route between the two locations, as is the case with the many routes running east and west around the lake out of both 151 Front and 350 Main. It’s great for non latency sensitive traffic if your short path fails, but it sucks for latency sensitive traffic if your short path fails. What’s the solution in that case if you need geo diverse, low latency routes between two longish haul points that can only be connected by one major highway and one major railway, and where there’s a large likelihood that the even a single route would have to use both those pathways? I’m sure it's trivial to get geo diverse routes out of any major carrier hotel, but what about the in between bits? > On Aug 4, 2017, at 4:54 PM, Rod Beck <rod.beck(a)unitedcablecompany.com> wrote: > > Well, imagine what happens when you have a body of water like Lake Ontario separating the key hubs on each side of the border, 151 Front Street and 350 Main Street. The fiber is probably stacked parallel around the lake and at certain points is collapsed into one right of way. > > > - R. > > > ________________________________ > From: NANOG <nanog-bounces(a)nanog.org> on behalf of Alain Hebert <ahebert(a)pubnix.net> > Sent: Friday, August 4, 2017 10:34 PM > To: nanog(a)nanog.org > Subject: Re: Bell outage > > Well, > > We have a case where 2 paths, between 151 front to somewhere in > Markham, ended up overlapping 3 times for about 300m total :( > > And to cap the whole thing off... Enter the building thru the same > conduit. > > You pretty much need to be onsite supervising the whole thing up. > > And yes their files have the circuits going thru a home, what looks > like a gas station, an electrical grids, etc =D. Pretty impressive. > > PS: As rodent, you mean the punks that fire bomb "that" conduit > under "that" bridge, a few years back? > > ----- > Alain Hebert ahebert(a)pubnix.net > PubNIX Inc. > 50 boul. St-Charles > P.O. Box 26770 Beaconsfield, Quebec H9W 6G7 > Tel: 514-990-5911 http://www.pubnix.net Fax: 514-990-9443 PubNIX Inc. – Branché sur le monde – Connected to the World<http://www.pubnix.net/> www.pubnix.net PubNIX is a boutique Internet service provider with personalized service that offers you an alternative to "Big Telco". At PubNIX, we are committed to providing you ... > PubNIX Inc. – Branché sur le monde – Connected to the World<http://www.pubnix.net/> PubNIX Inc. – Branché sur le monde – Connected to the World<http://www.pubnix.net/> www.pubnix.net PubNIX is a boutique Internet service provider with personalized service that offers you an alternative to "Big Telco". At PubNIX, we are committed to providing you ... > www.pubnix.net<http://www.pubnix.net> PubNIX Inc. – Branché sur le monde – Connected to the World<http://www.pubnix.net/> www.pubnix.net PubNIX is a boutique Internet service provider with personalized service that offers you an alternative to "Big Telco". At PubNIX, we are committed to providing you ... > PubNIX is a boutique Internet service provider with personalized service that offers you an alternative to "Big Telco". At PubNIX, we are committed to providing you ... > > > > On 08/04/17 15:07, Ken Chase wrote: >> And can be hard to know without serious dilligence - two of our upstreams >> happened to go through the same 360 networks conduit in montreal that "saw >> significant rodent activity". Both were down for 6 hours. A couple customers >> had some custom apps that relied on the two, each as redundancy to the other. >> >> That didnt work out. >> >> Getting salesdroids to give you the info can be very hard though, and even >> tech dept's may not know what secondary providers their fibres run through or >> where, readily. >> >> /kc >> >> On Fri, Aug 04, 2017 at 02:57:22PM -0400, Alain Hebert said: >>> Well, >>> >>> Saying they provided you with geographically diverse circuits versus >>> actually doing it, happen way too often. >>> >>> ----- >>> Alain Hebert ahebert(a)pubnix.net >>> PubNIX Inc. >>> 50 boul. St-Charles >>> P.O. Box 26770 Beaconsfield, Quebec H9W 6G7 >>> Tel: 514-990-5911 http://www.pubnix.net Fax: 514-990-9443 PubNIX Inc. – Branché sur le monde – Connected to the World<http://www.pubnix.net/> www.pubnix.net PubNIX is a boutique Internet service provider with personalized service that offers you an alternative to "Big Telco". At PubNIX, we are committed to providing you ... > PubNIX Inc. – Branché sur le monde – Connected to the World<http://www.pubnix.net/> PubNIX Inc. – Branché sur le monde – Connected to the World<http://www.pubnix.net/> www.pubnix.net PubNIX is a boutique Internet service provider with personalized service that offers you an alternative to "Big Telco". At PubNIX, we are committed to providing you ... > www.pubnix.net<http://www.pubnix.net> PubNIX Inc. – Branché sur le monde – Connected to the World<http://www.pubnix.net/> www.pubnix.net PubNIX is a boutique Internet service provider with personalized service that offers you an alternative to "Big Telco". At PubNIX, we are committed to providing you ... > PubNIX is a boutique Internet service provider with personalized service that offers you an alternative to "Big Telco". At PubNIX, we are committed to providing you ... > > >> >

2 2

ATT Support
by Dennis Burgess 07 Aug '17

07 Aug '17

I am looking to talk to ATT MIS support, someone that can actually look at stuff. :( Please e-mail me off-list. Going in circles with their normal support .... Dennis Burgess - Network Solution Engineer - Consultant MikroTik Certified Trainer/Consultant<http://www.linktechs.net/productcart/pc/viewcontent.asp?idpage=5> - MTCNA, MTCRE, MTCWE, MTCTCE, MTCINE For Wireless Hardware/Routers visit www.linktechs.net<http://www.linktechs.net/> Radio Frequency Coverages: www.towercoverage.com<http://www.towercoverage.com/> Office: 314-735-0270 E-Mail: dmburgess(a)linktechs.net<mailto:dmburgess@linktechs.net>

1 0