- NANOG - lists.nanog.org

Leasing /22 blocks
by Security Admin (NetSec) 01 Jun '17

01 Jun '17

Recently had someone offer to lease some IPv4 address space from me. Have never done that before. I thought I would ask the group what a reasonable monthly rate for a /22 in the United States might be. Thanks in advance! Ed(ward) Ray

8 9

Solarwinds Orion/NPM business hours 95th percentile query
by Jesse McGraw 01 Jun '17

01 Jun '17

( I'm not sure if this will be generally useful, but I needed it so I thought I'd share in case others may too ) I have a system that uses Solarwinds NPM/Orion to collect interface utilization data from devices scattered around the globe and I found myself needing to calculate 95th percentile values from it that only takes into account local business hours (i.e. no weekends or nights). After much googling and banging around on the keyboard this is the query that I came up with. As it stands you have to manually adjust the query for the timezones of the SQL database itself and the various devices you're querying, it would be smarter to add a custom field for each device representing its UTC offset and use that value in the query but I haven't made that happen yet I am certainly no SQL maestro so I've also put it into a github repository in case anyone has ideas on how to improve it or fix any silly mistakes I've made https://github.com/jlmcgraw/sql_queries_for_solarwinds_orion/blob/master/so… --Jesse -- This is a query to calculate 95th percentile statistics for bits in, bits out, -- and a new column that is the max of bits in vs. bits out for each sample -- only for business hours (i.e. excluding weekends and hours before / after work -- hours) -- -- Edit the "WHERE" statement in the "InterfaceTraffic_Detail_BusinessHours" CTE -- to choose which devices you're querying -- -- Developed/tested with -- Microsoft SQL server 2014 -- Orion Platform 2017.1, NPM 12.1 -- Uses the detailed last 30 days view of interface statistics -- [swnpm].[dbo].[InterfaceTraffic_Detail] -- you may wish to use different input data -- -- Issues -- You currently must adjust the timezone setting manually and be sure to query -- only devices that are all in the same timezone -- Surely performance can be improved -- To Do -- Document adding a custom column with a UTC offset for each device and modify -- this query to use that value instead -- Account for standard vs. daylight savings time DECLARE @SampleOffset Float DECLARE @TargetDeviceOffset Float DECLARE @TargetPercentile Float DECLARE @StartBusinessHours Float DECLARE @EndBusinessHours Float -- The UTC offset of the timezone the samples are stored in -- (i.e. where the database is) SET @SampleOffset = -4.0 -- The UTC offset of the timezone where the target devices are SET @TargetDeviceOffset = -4.0 -- Target percentile as a decimal SET @TargetPercentile = 0.95 -- When do business hours start ( 0700 = 7am ) SET @StartBusinessHours = 7 -- When do business hours end ( 1800 = 6pm ) SET @EndBusinessHours = 18 ; WITH InterfaceTraffic_Detail_BusinessHours AS ( -- Create a CTE showing only business hours data -- Also adding a MaxBps column SELECT i.DateTime ,i.interfaceid ,i.[In_Maxbps] ,i.[out_Maxbps] ,MaxBps = CASE --Use whichever is greater of IN vs. OUT WHEN Out_Maxbps > In_Maxbps THEN Out_Maxbps ELSE In_Maxbps END FROM [swnpm].[dbo].[InterfaceTraffic_Detail] as I INNER JOIN [swnpm].[dbo].[Nodes] as N ON (n.NodeID = [i].NodeID ) WHERE (n.SysName LIKE '%pattern1%' -- or n.SysName LIKE '%pattern1%' -- or n.SysName LIKE '%pattern2%' -- or n.SysName LIKE '%pattern3%' -- or n.SysName LIKE '%pattern4%' ) AND ( -- This adjusts for both the timezone of the samples and the target device -- Not Saturday or Sunday after adjusting for timezones (DATEPART(dw,DATEADD(hh,-@SampleOffset+@TargetDeviceOffset,DateTime)) <> 1 AND (DATEPART(dw,DATEADD(hh,-@SampleOffset+@TargetDeviceOffset,DateTime)) <> 7) ) AND -- Between @StartBusinessHours and @EndBusinessHours after adjusting for timezones (DATEPART(Hour,DATEADD(hh,-@SampleOffset+@TargetDeviceOffset,DateTime)) >= @StartBusinessHours AND (DATEPART(Hour,DATEADD(hh,-@SampleOffset+@TargetDeviceOffset,DateTime)) <= @EndBusinessHours)) ) ) , Percentile_IN as ( -- A CTE that builds on InterfaceTraffic_Detail_BusinessHours for calculating -- the chosen percentile value for each interfaceId SELECT t.InterfaceID, -- The smallest value in the chosen percentile -- http://www.dummies.com/education/math/statistics/how-to-calculate-percentil… Min(CASE WHEN seqnum >= @TargetPercentile * cnt THEN [In_Maxbps] END) AS percentile FROM ( SELECT t.*, ROW_NUMBER() OVER (PARTITION BY t.InterfaceID ORDER BY [In_Maxbps]) AS seqnum, COUNT(*) OVER (PARTITION BY t.InterfaceID) AS cnt FROM InterfaceTraffic_Detail_BusinessHours t ) t GROUP BY t.InterfaceID ) , Percentile_out as ( -- A CTE that builds on InterfaceTraffic_Detail_BusinessHours for calculating -- the chosen percentile value for each interfaceId SELECT o.InterfaceID, -- The smallest value in the chosen percentile -- http://www.dummies.com/education/math/statistics/how-to-calculate-percentil… Min(CASE WHEN seqnum >= @TargetPercentile * cnt THEN [out_Maxbps] END) AS percentile FROM ( SELECT o.*, ROW_NUMBER() OVER (PARTITION BY o.InterfaceID ORDER BY [Out_Maxbps]) AS seqnum, COUNT(*) OVER (PARTITION BY o.InterfaceID) AS cnt FROM InterfaceTraffic_Detail_BusinessHours o ) o GROUP BY o.InterfaceID ) ,Percentile_max as ( -- A CTE that builds on InterfaceTraffic_Detail_BusinessHours for calculating -- the chosen percentile value for each interfaceId SELECT m.InterfaceID, -- The smallest value in the chosen percentile -- http://www.dummies.com/education/math/statistics/how-to-calculate-percentil… Min(CASE WHEN seqnum >= @TargetPercentile * cnt THEN MaxBps END) AS percentile FROM ( SELECT m.*, ROW_NUMBER() OVER (PARTITION BY m.InterfaceID ORDER BY MaxBps) AS seqnum, COUNT(*) OVER (PARTITION BY m.InterfaceID) AS cnt FROM InterfaceTraffic_Detail_BusinessHours m ) m GROUP BY m.InterfaceID ) SELECT Nodes.NodeID ,Interfaces.InterfaceId ,Nodes.SysName ,Interfaces.Caption AS Interface_Caption ,InterfaceSpeed ,Percentile_in.percentile AS in_percentile ,Percentile_out.percentile AS out_percentile ,Percentile_max.percentile AS max_percentile , UTC_offset = @TargetDeviceOffset , SYSDATETIMEOFFSET () as Date FROM [swnpm].[dbo].[Nodes] INNER JOIN [swnpm].[dbo].[Interfaces] ON (Nodes.NodeID = Interfaces.NodeID ) INNER JOIN Percentile_in ON (Interfaces.InterfaceId = Percentile_in.InterfaceId) INNER JOIN Percentile_out ON (Interfaces.InterfaceId = Percentile_out.InterfaceId) INNER JOIN Percentile_max ON (Interfaces.InterfaceId = Percentile_max.InterfaceId) ORDER BY SysName, Interface_Caption

1 0

Anyone using Arista 7280R as edge router?
by David Hubbard 01 Jun '17

01 Jun '17

Hey all, have some Brocade MLXe’s that can no longer handle a full v4 and v6 route table while also having VRF support (dumb CAM profile limitations in the software). Mine don’t do anything fancy; just BGP to a few upstream peers and OSPF/OSPFv3 to the inside, management VRF, some ACL’s. I’m looking at the ASR9001 with add-on ports since I need (10) 10gig. However, I’ve also been running some Arista 7280SE’s for the past 18 months with no issues, and they want me to consider their 7280R since it would give me more ports, in addition to some higher speed ports, which would be nice if I ever want to upgrade some of our peering to 40 or 100gig. Arista’s specs say the 7500R / 7280R can handle 1M ipv4+ipv6 routes in hardware (FIB): https://www.arista.com/assets/data/pdf/Whitepapers/FlexRoute-WP.pdf In theory, it would last at least a few years if the v4 table doesn’t get too crazy between now and then. Curious if anyone has deployed a 7500R or 7280R in this role and what the feedback has been? The 9001’s 4M ‘credits’ for the combo of v4 +(2)v6 routes obviously goes much further, but I think either one would make it to their expected end of life, or if not on the Arista side, I’d probably have spent half as much. Thanks, David

8 7

XO SIP in Chicago
by Nick Bakker 01 Jun '17

01 Jun '17

Is anyone else having issues with XO SIP service in the Chicago area? We’re seeing poor audio quality on outbound calls and inbound calls may or may not work. Thanks!

2 1

Lille, France
by Rod Beck 01 Jun '17

01 Jun '17

Hi, I am looking for insight into which carriers have metropolitan or last mile networks in this city. Preferably connected to Paris. Roderick Beck Director of Global Sales United Cable Company www.unitedcablecompany.com<http://www.unitedcablecompany.com> 85 Király utca, 1077 Budapest rod.beck(a)unitedcablecompany.com 36-30-859-5144 [1467221477350_image005.png]

8 8

Help evaluate CDN
by Mehmet Akcin 01 Jun '17

01 Jun '17

Hey there I have written few blog posts about dns performance in the past comparing public resolver performance and root server performance using tools like thousandeyes. I am now working on a new blog post independently and voluntarily comparing cdn performance. I wanted to reach out to experts in the community ask feedback on what they wanted to see in such comparison. What are some of the important things like cache-hit-ratio etc. you look for when evaluating CDN performance? What categories would you like to see? Such as video performance, static images, etc. Appreciate any feedback you can share, and will make sure to thank you for your help in my post(s). I might even buy you guys beer @ nanog :) i will be in Bellevue next week if anybody prefers to talk face to face Mehmet

1 0

ospf suppress-fa
by Vikash Sorout 01 Jun '17

01 Jun '17

blockquote, div.yahoo_quoted { margin-left: 0 !important; border-left:1px #715FFA solid !important; padding-left:1ex !important; background-color:white !important; } What is the purpose of suppressing FA when Type 7 is translated to Type 5 and injected to backbone area by ABR. I don't see any reason other than hiding the NSSA ASBR details .Guys please suggest . Sent from Yahoo Mail for iPhone

1 0

NCCoE Secure Inter-Domain Routing Project - request for industry input.
by Montgomery, Douglas (Fed) 31 May '17

31 May '17

The National Cybersecurity Center of Excellence (NCCoE) requests community input on a proposed project entitled: Secure Inter-Domain Routing, Part 1: Route-Hijacks. https://nccoe.nist.gov/projects/building-blocks/secure-inter-domain-routing The objective of the project is to examine and demonstrate the state of the RPKI and BGP Origin Validation technologies in realistic scenarios and to address identified concerns with their deployment and use (e.g., security, robustness, management / monitoring, multi-vendor inter-operation). This request is for industry input on the the proposed project plan. In particular we seek input from both network operators and enterprises on practical issues and barriers to adoption and suggestions for how these could be addressed in the project. Please see the link above for instructions for submitting comments and how you can join a community of interest for the project. *The intention is not to have the discussion here on the NANOG list.* Thanks dougm — Doug Montgomery, Mgr Internet & Scalable Systems Research at NIST/ITL/ANTD

1 0

youtube redirector mapping
by Bajpai, Vaibhav 31 May '17

31 May '17

Hello, Does anybody know what is reported in the ‘debug_info’ portion of the YT redirector mapping webpage: http://redirector.c.youtube.com/report_mapping Is this documented somewhere? Thanks. -- Vaibhav -------------------------- Vaibhav Bajpai www.vaibhavbajpai.com Postdoctoral Researcher TU Munich, Germany --------------------------

1 0

BCP38/84 and DDoS ACLs
by Graham Johnston 29 May '17

29 May '17

I really did try looking before I sent the email but couldn't quickly find what I was looking for. I am looking for information regarding standard ACLs that operators may be using at the internet edge of their network, on peering and transit connections, wherein you are filtering ingress packets such as those sourced from UDP port 19 for instance. I've found incomplete conceptual discussions about it nothing that seemed concrete or complete. This doesn't seem quite like it is BCP38 and more like this is BCP84, but it only talks about use of ACLs in section 2.1 without providing any examples. Given that it is also 13 years old I thought there might be fresher information out there. Thanks, graham

9 10