- NANOG - lists.nanog.org

DNS CAA records...
by Eric Tykwinski 21 Jan '17

21 Jan '17

So I’ve come across this on Qualys and just wondering if there’s any practical examples out there in the wild. I know some BIND guys are on here, so I’m sure I’m missing something from the RFCs. Just wanted to test this out on my play domains before putting it out in the wild... Sincerely, Eric Tykwinski TrueNet, Inc. P: 610-429-8300

4 4

Instagram --> SSL
by Payam Poursaied 21 Jan '17

21 Jan '17

Hi folks Is there any publication/report/new/plan on migration of Instagram to server the content over SSL? Facebook serves media on SSL (to my knowledge). So I wonder to know Instagram would go in that way as well.

1 0

Common Reliable Out Of Band Management Options at Carrier Hotels
by Darin Herteen 21 Jan '17

21 Jan '17

Greetings list, We are exploring standardizing our Out Of Band options across our network and various off-net locations and the question was brought up "What about carrier hotels? What constraints might present themselves at those locations?" Assuming each hotel we are located in can provide either Ethernet or DSL I'm guessing that is going to come a cost (cross-connects, rack space etc..) that might end up being cost prohibitive. So my inquiry is... What does the list find to be a reasonably priced yet reliable solution in carrier hotels for OOB? Or is that contradictory :) Thoughts on Cellular? Any experience/insight would be appreciated. Thanks, Darin

7 8

Weekly Routing Table Report
by cscora＠apnic.net 20 Jan '17

20 Jan '17

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, MENOG, SAFNOG, SdNOG, BJNOG, CaribNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 21 Jan, 2017 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 628911 Prefixes after maximum aggregation (per Origin AS): 221875 Deaggregation factor: 2.83 Unique aggregates announced (without unneeded subnets): 305028 Total ASes present in the Internet Routing Table: 55644 Prefixes per ASN: 11.30 Origin-only ASes present in the Internet Routing Table: 36238 Origin ASes announcing only one prefix: 15200 Transit ASes present in the Internet Routing Table: 6554 Transit-only ASes present in the Internet Routing Table: 175 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 55 Max AS path prepend of ASN ( 55644) 51 Prefixes from unregistered ASNs in the Routing Table: 50 Unregistered ASNs in the Routing Table: 15 Number of 32-bit ASNs allocated by the RIRs: 16987 Number of 32-bit ASNs visible in the Routing Table: 12852 Prefixes from 32-bit ASNs in the Routing Table: 53001 Number of bogon 32-bit ASNs visible in the Routing Table: 791 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 382 Number of addresses announced to Internet: 2833896452 Equivalent to 168 /8s, 233 /16s and 212 /24s Percentage of available address space announced: 76.5 Percentage of allocated address space announced: 76.5 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 98.4 Total number of prefixes smaller than registry allocations: 208269 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 156592 Total APNIC prefixes after maximum aggregation: 43096 APNIC Deaggregation factor: 3.63 Prefixes being announced from the APNIC address blocks: 171378 Unique aggregates announced from the APNIC address blocks: 70992 APNIC Region origin ASes present in the Internet Routing Table: 5182 APNIC Prefixes per ASN: 33.07 APNIC Region origin ASes announcing only one prefix: 1139 APNIC Region transit ASes present in the Internet Routing Table: 940 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 55 Number of APNIC region 32-bit ASNs visible in the Routing Table: 2624 Number of APNIC addresses announced to Internet: 762086564 Equivalent to 45 /8s, 108 /16s and 132 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-137529 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 188456 Total ARIN prefixes after maximum aggregation: 89475 ARIN Deaggregation factor: 2.11 Prefixes being announced from the ARIN address blocks: 195492 Unique aggregates announced from the ARIN address blocks: 89769 ARIN Region origin ASes present in the Internet Routing Table: 16064 ARIN Prefixes per ASN: 12.17 ARIN Region origin ASes announcing only one prefix: 5591 ARIN Region transit ASes present in the Internet Routing Table: 1722 Average ARIN Region AS path length visible: 3.8 Max ARIN Region AS path length visible: 23 Number of ARIN region 32-bit ASNs visible in the Routing Table: 1721 Number of ARIN addresses announced to Internet: 1104147360 Equivalent to 65 /8s, 207 /16s and 243 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-397212 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 151475 Total RIPE prefixes after maximum aggregation: 73402 RIPE Deaggregation factor: 2.06 Prefixes being announced from the RIPE address blocks: 162986 Unique aggregates announced from the RIPE address blocks: 99214 RIPE Region origin ASes present in the Internet Routing Table: 18152 RIPE Prefixes per ASN: 8.98 RIPE Region origin ASes announcing only one prefix: 7757 RIPE Region transit ASes present in the Internet Routing Table: 3040 Average RIPE Region AS path length visible: 4.3 Max RIPE Region AS path length visible: 28 Number of RIPE region 32-bit ASNs visible in the Routing Table: 5110 Number of RIPE addresses announced to Internet: 709772672 Equivalent to 42 /8s, 78 /16s and 69 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-207259 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 64000 Total LACNIC prefixes after maximum aggregation: 12598 LACNIC Deaggregation factor: 5.08 Prefixes being announced from the LACNIC address blocks: 80902 Unique aggregates announced from the LACNIC address blocks: 37944 LACNIC Region origin ASes present in the Internet Routing Table: 2480 LACNIC Prefixes per ASN: 32.62 LACNIC Region origin ASes announcing only one prefix: 542 LACNIC Region transit ASes present in the Internet Routing Table: 597 Average LACNIC Region AS path length visible: 5.2 Max LACNIC Region AS path length visible: 30 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 3108 Number of LACNIC addresses announced to Internet: 171100736 Equivalent to 10 /8s, 50 /16s and 202 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-266652 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 15336 Total AfriNIC prefixes after maximum aggregation: 3297 AfriNIC Deaggregation factor: 4.65 Prefixes being announced from the AfriNIC address blocks: 17771 Unique aggregates announced from the AfriNIC address blocks: 6777 AfriNIC Region origin ASes present in the Internet Routing Table: 734 AfriNIC Prefixes per ASN: 24.21 AfriNIC Region origin ASes announcing only one prefix: 171 AfriNIC Region transit ASes present in the Internet Routing Table: 185 Average AfriNIC Region AS path length visible: 4.7 Max AfriNIC Region AS path length visible: 19 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 289 Number of AfriNIC addresses announced to Internet: 86341376 Equivalent to 5 /8s, 37 /16s and 119 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5542 4190 74 ERX-CERNET-BKB China Education and Rese 7545 3735 390 254 TPG-INTERNET-AP TPG Telecom Limited, AU 17974 2979 905 71 TELKOMNET-AS2-AP PT Telekomunikasi Indo 4766 2732 11133 743 KIXS-AS-KR Korea Telecom, KR 9829 2695 1499 538 BSNL-NIB National Internet Backbone, IN 9808 2278 8698 33 CMNET-GD Guangdong Mobile Communication 4755 2053 429 219 TATACOMM-AS TATA Communications formerl 45899 1767 1268 95 VNPT-AS-VN VNPT Corp, VN 4808 1646 1794 455 CHINA169-BJ China Unicom Beijing Provin 24560 1563 561 246 AIRTELBROADBAND-AS-AP Bharti Airtel Ltd Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 22773 3616 2968 151 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 6327 3307 1333 83 SHAW - Shaw Communications Inc., CA 18566 2192 405 109 MEGAPATH5-US - MegaPath Corporation, US 6389 2094 3671 39 BELLSOUTH-NET-BLK - BellSouth.net Inc., 20115 1960 2027 404 CHARTER-NET-HKY-NC - Charter Communicat 209 1715 5066 639 CENTURYLINK-US-LEGACY-QWEST - Qwest Com 30036 1697 319 463 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 6983 1679 848 227 ITCDELTA - Earthlink, Inc., US 701 1600 10629 662 UUNET - MCI Communications Services, In 16509 1580 3046 532 AMAZON-02 - Amazon.com, Inc., US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 39891 3334 171 18 ALJAWWALSTC-AS , SA 20940 3011 1136 2132 AKAMAI-ASN1 , US 9121 2207 1707 95 TTNET , TR 34984 1986 327 376 TELLCOM-AS , TR 13188 1604 99 61 TRIOLAN , UA 12479 1434 1033 51 UNI2-AS , ES 6849 1313 355 22 UKRTELNET , UA 8551 1223 377 46 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 8402 1107 544 15 CORBINA-AS OJSC "Vimpelcom", RU 12389 992 1161 447 ROSTELECOM-AS , RU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 10620 3538 545 156 Telmex Colombia S.A., CO 8151 2489 3380 553 Uninet S.A. de C.V., MX 11830 1800 368 66 Instituto Costarricense de Electricidad 6503 1547 437 54 Axtel, S.A.B. de C.V., MX 7303 1526 974 254 Telecom Argentina S.A., AR 6147 1352 377 27 Telefonica del Peru S.A.A., PE 28573 1062 2271 178 CLARO S.A., BR 11664 1017 279 32 Techtel LMDS Comunicaciones Interactiva 3816 1006 479 179 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 17072 972 127 345 TOTAL PLAY TELECOMUNICACIONES SA DE CV, Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1289 398 42 LINKdotNET-AS, EG 36903 719 361 123 MT-MPLS, MA 37611 680 67 6 Afrihost, ZA 36992 584 1373 25 ETISALAT-MISR, EG 8452 484 1474 16 TE-AS TE-AS, EG 24835 454 594 16 RAYA-AS, EG 37492 410 324 75 ORANGE-TN, TN 29571 368 36 10 CITelecom-AS, CI 15399 318 35 6 WANANCHI-KE, KE 2018 287 327 74 TENET-1, ZA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5542 4190 74 ERX-CERNET-BKB China Education and Rese 7545 3735 390 254 TPG-INTERNET-AP TPG Telecom Limited, AU 22773 3616 2968 151 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 10620 3538 545 156 Telmex Colombia S.A., CO 39891 3334 171 18 ALJAWWALSTC-AS , SA 6327 3307 1333 83 SHAW - Shaw Communications Inc., CA 20940 3011 1136 2132 AKAMAI-ASN1 , US 17974 2979 905 71 TELKOMNET-AS2-AP PT Telekomunikasi Indo 4766 2732 11133 743 KIXS-AS-KR Korea Telecom, KR 9829 2695 1499 538 BSNL-NIB National Internet Backbone, IN Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 7545 3735 3481 TPG-INTERNET-AP TPG Telecom Limited, AU 22773 3616 3465 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 10620 3538 3382 Telmex Colombia S.A., CO 39891 3334 3316 ALJAWWALSTC-AS , SA 6327 3307 3224 SHAW - Shaw Communications Inc., CA 17974 2979 2908 TELKOMNET-AS2-AP PT Telekomunikasi Indo 9808 2278 2245 CMNET-GD Guangdong Mobile Communication 9829 2695 2157 BSNL-NIB National Internet Backbone, IN 9121 2207 2112 TTNET , TR 18566 2192 2083 MEGAPATH5-US - MegaPath Corporation, US Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 65001 PRIVATE 5.143.176.0/20 15468 KLGELECS-AS 38, Teatralnaya st 65001 PRIVATE 31.172.192.0/20 15468 KLGELECS-AS 38, Teatralnaya st 65001 PRIVATE 31.172.192.0/21 15468 KLGELECS-AS 38, Teatralnaya st 65001 PRIVATE 31.172.200.0/21 15468 KLGELECS-AS 38, Teatralnaya st 65001 PRIVATE 31.172.208.0/21 15468 KLGELECS-AS 38, Teatralnaya st 65001 PRIVATE 31.172.216.0/21 15468 KLGELECS-AS 38, Teatralnaya st 65000 PRIVATE 31.219.177.0/25 8966 ETISALAT-AS P.O. Box 1150, Dub 65000 PRIVATE 31.219.177.128/25 8966 ETISALAT-AS P.O. Box 1150, Dub 65001 PRIVATE 46.237.32.0/20 13118 ASN-YARTELECOM PJSC Rostelecom 65001 PRIVATE 94.242.128.0/20 15468 KLGELECS-AS 38, Teatralnaya st Complete listing at http://thyme.rand.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 14.128.12.0/22 55763 UNKNOWN 14.128.12.0/24 55763 UNKNOWN 14.128.13.0/24 55763 UNKNOWN 14.128.15.0/24 55763 UNKNOWN 27.100.7.0/24 56096 UNKNOWN 41.73.16.0/24 37004 Suburban-Broadband-AS, NG 41.73.17.0/24 37004 Suburban-Broadband-AS, NG 41.73.18.0/24 37004 Suburban-Broadband-AS, NG 41.73.19.0/24 37004 Suburban-Broadband-AS, NG 41.73.20.0/24 37004 Suburban-Broadband-AS, NG Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:13 /10:36 /11:103 /12:276 /13:532 /14:1048 /15:1794 /16:13184 /17:7777 /18:13018 /19:25139 /20:38094 /21:40719 /22:73482 /23:61465 /24:350858 /25:553 /26:409 /27:294 /28:34 /29:20 /30:18 /31:1 /32:28 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 6327 3103 3307 SHAW - Shaw Communications Inc., CA 39891 2896 3334 ALJAWWALSTC-AS , SA 22773 2813 3616 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 18566 2085 2192 MEGAPATH5-US - MegaPath Corporation, US 9121 1549 2207 TTNET , TR 30036 1511 1697 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 10620 1449 3538 Telmex Colombia S.A., CO 6389 1392 2094 BELLSOUTH-NET-BLK - BellSouth.net Inc., 13188 1349 1604 TRIOLAN , UA 6983 1323 1679 ITCDELTA - Earthlink, Inc., US Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1575 2:823 4:25 5:2425 6:32 8:1038 11:1 12:1810 13:70 14:1782 15:23 16:2 17:104 18:128 19:1 20:51 23:1980 24:1818 27:2400 31:1861 32:83 33:11 34:1 35:19 36:349 37:2482 38:1299 39:44 40:100 41:2894 42:448 43:1921 44:55 45:2323 46:2564 47:109 49:1210 50:942 51:17 52:660 54:355 55:5 56:4 57:40 58:1604 59:983 60:390 61:1865 62:1495 63:1936 64:4551 65:2183 66:4388 67:2219 68:1163 69:3308 70:1301 71:570 72:2052 74:2588 75:401 76:412 77:1394 78:1562 79:913 80:1367 81:1413 82:971 83:721 84:869 85:1699 86:483 87:1129 88:779 89:2042 90:197 91:6117 92:1007 93:2350 94:2358 95:2785 96:570 97:360 98:939 99:91 100:148 101:1233 103:13310 104:2663 105:145 106:475 107:1515 108:782 109:2544 110:1286 111:1666 112:1148 113:1293 114:1005 115:1640 116:1719 117:1635 118:2050 119:1587 120:947 121:1071 122:2261 123:2026 124:1571 125:1818 128:703 129:507 130:418 131:1404 132:549 133:187 134:522 135:210 136:385 137:416 138:1837 139:486 140:614 141:513 142:729 143:916 144:761 145:167 146:1050 147:654 148:1400 149:563 150:682 151:928 152:709 153:313 154:738 155:959 156:543 157:578 158:436 159:1356 160:567 161:738 162:2464 163:531 164:770 165:1140 166:360 167:1247 168:2481 169:724 170:2622 171:264 172:916 173:1824 174:792 175:711 176:1747 177:4100 178:2432 179:1142 180:2071 181:1971 182:2191 183:1016 184:835 185:8547 186:3239 187:2264 188:2339 189:1782 190:8102 191:1331 192:9305 193:5767 194:4577 195:3852 196:1914 197:1240 198:5602 199:5814 200:7331 201:4130 202:10061 203:9841 204:4460 205:2762 206:2973 207:3154 208:3993 209:3881 210:3897 211:2090 212:2782 213:2462 214:849 215:65 216:5775 217:1970 218:825 219:600 220:1685 221:897 222:714 223:1150 End of report

1 0

S: Contact Qwest DNS Admin / Recovery Point Systems => Re Broken DNSSEC chain / unreachable DNS Addresses: www.bea.gov
by Benoit Panizzon 20 Jan '17

20 Jan '17

Hello There are several DNS issues with www.bea.gov (Bureau of Economic Analysis) which prevent our customers to reach that site (we have DNSSEC and IPv6 enabled resolvers). http://dnsviz.net/d/www.bea.gov/dnssec/ I did send emails to the the SOA contact records the bea.gov www.bea.gov and the DNS Server Domains. I did send emails to the tech contacts found in the ARIN IP Ranges of those DNS servers. I did send email to contacts found on the website itself. I did receive several read confirmations, during the last month. So I know my emails are being read. But nobody replies and the problem is not being fixed. bea.gov name server sauthns1.qwest.net. bea.gov name server sauthns2.qwest.net. sauthns1.qwest.net has address 63.150.72.5 sauthns1.qwest.net has IPv6 address 2001:428::7 sauthns2.qwest.net has address 208.44.130.121 sauthns2.qwest.net has IPv6 address 2001:428::8 Operated by: Qwest Communications Company, LLC www.bea.gov name server ns1.recoverypoint.net. www.bea.gov name server ns3.recoverypoint.net. ns1.recoverypoint.net has address 204.14.132.35 ns1.recoverypoint.net has IPv6 address 2607:f478:0:4005::35 ns3.recoverypoint.net has address 204.14.132.36 ns3.recoverypoint.net has IPv6 address 2607:f478:0:4005::36 CIDR: 204.14.132.0/22 NetName: RECOVERYPOINTSYSTEMS CIDR: 2607:F478::/32 NetName: RECOVERY-POINT-SYSTEMS So as a last resort I try the nanog list now, hoping that somebody reads this who is able to forward this email to the right person, or point me to the person in charge. Any Help appreciated. -Benoît Panizzon- -- I m p r o W a r e A G - Leiter Commerce Kunden ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 Pratteln Fax +41 61 826 93 01 Schweiz Web http://www.imp.ch ______________________________________________________

1 0

External BGP Controller for L3 Switch BGP routing
by Faisal Imtiaz 20 Jan '17

20 Jan '17

Hello, A while back there was a discussion on how to do optimized (dynamic) BGP routing on a L3 switch which is only capable of handing a subset of BGP Routing table. Someone has pointed out that there was a project to do just that, and had posted a link to a presentation on a European operator (Ireland ? ) who had done some code to take Exabgp and create such a setup.. (I am going by memory... )... Needless to say I am trying to find that link, or name of that project. Anyone who can help in refreshing my memory with the link (my search skill are failing to find that presentation !) would be greatly appreciated. Many Thanks in Advance. Faisal Imtiaz

12 19

Re: [outages] ntp.org DNS lookups failing
by Alarig Le Lay 18 Jan '17

18 Jan '17

Hi, On Wed Jan 18 21:25:23 2017, Gert Doering via Outages wrote: > Trying to query directly, ns1/ns2.ntp.org return SERVFAIL as well, > and ns1/ns2.everett.org do not reply at all... so pure guesswork on > my side says "the original set is broken / under attack / ..., so > new servers have been added, but as long as the old NS records are > still being cached, things keep failing". I see the same behaviour: alarig@pikachu ~ % dig -t NS ntp.org ; <<>> DiG 9.11.0-P2 <<>> -t NS ntp.org ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 44422 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;ntp.org. IN NS ;; Query time: 52 msec ;; SERVER: 2a00:5884:8218::1#53(2a00:5884:8218::1) ;; WHEN: Wed Jan 18 21:28:08 CET 2017 ;; MSG SIZE rcvd: 36 alarig@pikachu ~ % ssh alarig(a)log.bzh alarig@log:~$ sudo unbound-control flush_zone ntp.org [sudo] password for alarig: ok removed 8 rrsets, 0 messages and 0 key entries ^D alarig@log:~$ déconnexion Connection to log.bzh closed. alarig@pikachu ~ % dig -t NS ntp.org ; <<>> DiG 9.11.0-P2 <<>> -t NS ntp.org ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 53621 ;; flags: qr rd ra; QUERY: 1, ANSWER: 9, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;ntp.org. IN NS ;; ANSWER SECTION: ntp.org. 3600 IN NS ns1.everett.org. ntp.org. 3600 IN NS ns2.everett.org. ntp.org. 3600 IN NS ns4.p20.dynect.net. ntp.org. 3600 IN NS dns2.udel.edu. ntp.org. 3600 IN NS anyns.pch.net. ntp.org. 3600 IN NS dns1.udel.edu. ntp.org. 3600 IN NS ns1.p20.dynect.net. ntp.org. 3600 IN NS ns2.p20.dynect.net. ntp.org. 3600 IN NS ns3.p20.dynect.net. ;; Query time: 178 msec ;; SERVER: 2a00:5884:8218::1#53(2a00:5884:8218::1) ;; WHEN: Wed Jan 18 21:31:51 CET 2017 ;; MSG SIZE rcvd: 236 -- alarig

1 0

Level3 Internet service, out of order packets causing issues
by Mark Wicker 18 Jan '17

18 Jan '17

Hi, I have 1G Level3 ethernet dedicated internet service as one of my ISP's at my company based in the Los Angeles (Inland Empire) area. After seeing strange application behavior while using this circuit, I failed it out of service and have been troubleshooting it with a directly connected machine (publically addressed, no firewall, nothing between this machine and our Level3 router). I have taken several packet captures while accessing various sites and have noticed large numbers of out of order packets which are wreaking havoc with TCP connections and other traffic. In my experience, per-packet load balancing across various different links can cause this issue. I do not see this behavior with my other ISP's. I have had several tickets opened with Level3 but have had no success. Any help here? Anyone out there seen this and have any contacts that may be able to help? FYI - we own our own public IP space and advertise via BGP to Level3. Currently I am using a dedicated /24 of our space advertised to Level3 only to ensure that the return path is through Level3 and not another ISP. Also, everything is single linked from a layer 2 and 3 perspective from the router to the test machine to ensure that the cause of any out of order packets is not on our end. Thanks, -- Mark Wicker | Senior Network Engineer Esri | 380 New York St | Redlands, CA 92354 | USA T 909 793 2853 x2741 | mwicker(a)esri.com<mailto:mwicker@esri.com> | esri.com<http://www.esri.com/>

2 3

Safe IPv4 Was: Re: premiumcolo.net IP address rental
by Martin Hannigan 18 Jan '17

18 Jan '17

On Mon, Jan 9, 2017 at 11:20 AM, Matt Freitag <mlfreita(a)mtu.edu> wrote: > Joel, > > I can't speak to "premiumcolo.net" > Neither can I, but that may not mean much. Perhaps someone else can validate that they're reputable and can execute a transaction end to end? If you need IPv4 addresses for your network: 1. Make sure you have an IPV6 allocation from your favorite RIR and are using it 2. Apply for and receive a last /22 from RIPE. EVERYONE can do this. 3. Contact a reputable broker. The ones I have experience with (Alphabetical): A. Peter Thimmesch at Addrex http://www.addrex.net B. Amy Cooper at Hilco Streambank http://www.ipv4auctions.com/ C. Mike Burns at http://www.IPTrading.com ARIN also publishes a list (which is not a requirement to be able to transact or support transfers): https://www.arin.net/resources/transfer_listing/facilitator_list.html Network operators have many choices for answering their IP numbering needs these days. Including IPv6. Sorry to be a broken record on this topic, but it seems to come up a lot. And if you search the archives I'll suspect you'll find something similar to this a few time now. An educated network operator is the best kind. That's why we are here. YMMV and Best, -M<

6 7

Questions on IPv6 deployment
by Matthew Crocker 17 Jan '17

17 Jan '17

Hello, I’m AS7849 and I have an IP problem. I’m running IPv4 ( /16 legacy + /20) and have enough space to last me for a while, multi-homed, BGP4 full tables + peering, ect. I have some new shiny Juniper MX480s (RE-S-2X00x6, 64MB RAM) in my core. I want to start building my IPv6 infrastructure. I have a /32 assigned from ARIN (2001:4918::/32) I’m looking for some direction/reading list of how to properly configure IPv6. I’ve read to use a /64 for PtP interfaces and I’ve read use a /128 instead. Assign all loopbacks from the same /64, use a different /64 for each loopback. Ect, ect. I’m trying not to light a religious war but what is the current best practice for IPv6 deployment in a service provider network? PS. I’ll be at NANOG69 in DC next month, 1st NANOG for me after 22 years. ☺ -Matt -- Matthew Crocker Crocker Communications, Inc. President

9 15