- NANOG - lists.nanog.org

BGP route processing speed
by Sriram, Kotikalapudi (Fed) 03 Feb '17

03 Feb '17

I am interested in measurements related to BGP route processing speed (i.e. routing engine capacity in terms of routes or updates processed per second). Folks from AMS-IX did an interesting study in 2012 in their Route Server / IXP environment. https://ams-ix.net/downloads/ams-ix-route-server-implementations-performanc… Are there other measurement studies available on this topic, especially in ISP/PE router scenarios, including BGP policy processing, best path selection, route filtering, etc.? Will appreciate much if you can share some pointers. Sriram

2 2

IPv6-enabled multi-factor providers (not DUO)
by David Sotnick 03 Feb '17

03 Feb '17

Hi NANOG, (Apologies if this is slightly off-topic; there are a lot of IPv6-advocates here who might have some insights). At my day job, we use Duo Security for MFA. It works well, with the caveats that it's cloud-based and heavily dependent on Amazon AWS. We had an IPv4 outage last weekend and of course our Duo MFA only supports IPv4 and given their dependence on AWS I'm not hopeful that they'll have IPv6 access to their API servers any time this year. If they had, my weekend would have gone a lot easier. What MFA alternatives are out there that support IPv6? If we found a suitable alternative, I'm sure we'd consider shifting our business their way. Thanks! -Dave

2 2

East coast outage
by Benjamin Hatton 02 Feb '17

02 Feb '17

Is anyone else seeing connectivity issues along the east coast? Our pipe through HE in NYC is showing loss to things behind most of Level3, and Qwest below Washington. *Ben Hatton* Network Engineer Haefele TV Inc. d:(607)589-8000 bhatton(a)htva.net www.htva.net

8 11

.gov / census.gov contact
by Ray Van Dolson 02 Feb '17

02 Feb '17

One of our external hide NATs has been blocked by the census.gov WAF. Would someone contact me off-list about this or help point me to the proper POC? Am thinking responsibility may lie at the higher .gov level... TIA, Ray

1 0

ARIN on the Road - Little Rock, Arkansas USA on 7 March 2017
by John Curran 02 Feb '17

02 Feb '17

NANOGers - There is an "ARIN on the Road” one-day event coming up soon. The program covers a range of registry related topics including DNSSEC, RPKI, ARIN tools and services, IPv6 and more. We will be in Little Rock, Arkansas USA on 7 March 2017. This event is open to all and registration is free. If you are in the area, please come join us. For more information (including venue, agenda, and registration), go to https://www.arin.net/littlerock Thanks! /John John Curran President and CEO ARIN

1 0

T-Mobile Looking Glass
by Tyler Applebaum 02 Feb '17

02 Feb '17

Hey all, just wondering if AS21928 has a looking glass. - Tyler

2 1

PayCom Network Contact Request
by Jason Hellenthal 01 Feb '17

01 Feb '17

Could a network engineer from PayCom contact me off list when you get a chance please. Hoping to glean some subnet information from you that might help us out, if there is someone from PayCom on this list. Thanks

1 0

DWDM Optics cheaper than CWDM Optics?
by Karl Gerhard 31 Jan '17

31 Jan '17

Hello, fs.com offers DWDM optics that are cheaper than CWDM optics: CWDM 80km 10G for 600$ http://www.fs.com/c/cisco-cwdm-sfp-plus-2425?70-80km DWDM 80km 10G for 420$ http://www.fs.com/c/cisco-dwdm-sfp-plus-2485?70-80km This is significant. Is this for real? Has anybody bought their DWDM optics? Going with DWDM and passive Mux/Demux seems to be cheaper nowadays than going with CWDM. Regards Karl

7 6

Netflow/sFlow generator for Linux with BGP support
by Patrick Velder 31 Jan '17

31 Jan '17

Hi there I'm currently switching from MikroTik CCR 1009 to SuperMicro 5018D-FN8T as small router. Now I'd love to integrate BGP infos into netflow/sflow, as MikroTik still doesn't have any support for that. Are there any alternatives to nProbe (which supports BGP but is ways too expensive with its 300€)? Regards Patrick

6 6

Re: Fwd: Any Yahoo DNS admins on list?
by Dan States 31 Jan '17

31 Jan '17

Looks like this may be a peering issue, we're investigating. Regards -- ♜ Dan States - Yahoo DNS Operations On Saturday, January 28, 2017, 4:29:12 AM PST, Stephen Strowes <stephe...(a)gmail.com> wrote:I assume somebody knows about this thread :-) S. ---------- Forwarded message ---------- > On Jan 27, 2017, at 6:30 PM, Brielle Bruns <bruns(a)2mbit.com> wrote: > > Hello! > > Don't suppose there's a Yahoo admin in the DNS department that can investigate/debug a Geolocation issue? > > It appears that Yahoo's Geolocation is putting CenturyLink's IPv6 addresses as being in .BR, causing not only the two CL/Qwest recursive servers (205.171.2.65/205.171.3.65/ 2001:428::1/2001:428::2), but recusive servers hosted on biz customer IPv6 6RD ranges to return non-US Yahoo servers (and be agonizingly slow). > > ===== > View from local powerdns recursor, dual stacked, but preferring ipv6 for resolving: > > root@noc:~# dig mg.mail.yahoo.com @127.0.0.2 > > ; <<>> DiG 9.9.5-9+deb8u9-Debian <<>> mg.mail.yahoo.com @127.0.0.2 > ;; global options: +cmd > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 50638 > ;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0 > > ;; QUESTION SECTION: > ;mg.mail.yahoo.com. IN A > > ;; ANSWER SECTION: > mg.mail.yahoo.com. 1349 IN CNAME fd-geoycpi-uno.gycpi.b. yahoodns.net. > fd-geoycpi-uno.gycpi.b. yahoodns.net. 300 IN A 200.152.162.161 > fd-geoycpi-uno.gycpi.b. yahoodns.net. 300 IN A 200.152.162.135 > > ;; Query time: 240 msec > ;; SERVER: 127.0.0.2#53(127.0.0.2) > ;; WHEN: Fri Jan 27 17:20:52 MST 2017 > ;; MSG SIZE rcvd: 116 > > ===== > View from CL/Qwest IPv4 (likely dual stacked) and IPv6 recursors: > > root@noc:~# dig mg.mail.yahoo.com @205.171.2.65 > > ; <<>> DiG 9.9.5-9+deb8u9-Debian <<>> mg.mail.yahoo.com @205.171.2.65 > ;; global options: +cmd > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 8308 > ;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1 > > ;; OPT PSEUDOSECTION: > ; EDNS: version: 0, flags:; udp: 4096 > ;; QUESTION SECTION: > ;mg.mail.yahoo.com. IN A > > ;; ANSWER SECTION: > mg.mail.yahoo.com. 758 IN CNAME fd-geoycpi-uno.gycpi.b. yahoodns.net. > fd-geoycpi-uno.gycpi.b. yahoodns.net. 138 IN A 200.152.162.161 > fd-geoycpi-uno.gycpi.b. yahoodns.net. 138 IN A 200.152.162.135 > > ;; Query time: 17 msec > ;; SERVER: 205.171.2.65#53(205.171.2.65) > ;; WHEN: Fri Jan 27 17:21:35 MST 2017 > ;; MSG SIZE rcvd: 127 > > > root@noc:~# dig mg.mail.yahoo.com @2001:428::1 > > ; <<>> DiG 9.9.5-9+deb8u9-Debian <<>> mg.mail.yahoo.com @2001:428::1 > ;; global options: +cmd > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24138 > ;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1 > > ;; OPT PSEUDOSECTION: > ; EDNS: version: 0, flags:; udp: 4096 > ;; QUESTION SECTION: > ;mg.mail.yahoo.com. IN A > > ;; ANSWER SECTION: > mg.mail.yahoo.com. 464 IN CNAME fd-geoycpi-uno.gycpi.b. yahoodns.net. > fd-geoycpi-uno.gycpi.b. yahoodns.net. 214 IN A 200.152.162.161 > fd-geoycpi-uno.gycpi.b. yahoodns.net. 214 IN A 200.152.162.135 > > ;; Query time: 46 msec > ;; SERVER: 2001:428::1#53(2001:428::1) > ;; WHEN: Fri Jan 27 17:23:38 MST 2017 > ;; MSG SIZE rcvd: 127 > > ===== > Google recursor for reference: > > root@noc:~# dig mg.mail.yahoo.com @8.8.8.8 > > ; <<>> DiG 9.9.5-9+deb8u9-Debian <<>> mg.mail.yahoo.com @8.8.8.8 > ;; global options: +cmd > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 13327 > ;; flags: qr rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 1 > > ;; OPT PSEUDOSECTION: > ; EDNS: version: 0, flags:; udp: 512 > ;; QUESTION SECTION: > ;mg.mail.yahoo.com. IN A > > ;; ANSWER SECTION: > mg.mail.yahoo.com. 1459 IN CNAME fd-geoycpi-uno.gycpi.b. yahoodns.net. > fd-geoycpi-uno.gycpi.b. yahoodns.net. 184 IN A 216.115.100.124 > fd-geoycpi-uno.gycpi.b. yahoodns.net. 184 IN A 208.71.44.31 > fd-geoycpi-uno.gycpi.b. yahoodns.net. 184 IN A 216.115.100.123 > fd-geoycpi-uno.gycpi.b. yahoodns.net. 184 IN A 208.71.44.30 > > ;; Query time: 27 msec > ;; SERVER: 8.8.8.8#53(8.8.8.8) > ;; WHEN: Fri Jan 27 17:21:59 MST 2017 > ;; MSG SIZE rcvd: 159 > > > > For reference, CL/Qwest's IPv6 range for 6RD is 2602::/24. > > This appears to be impacting Yahoo, Yahoo Mail, Flickr, etc (aka Yahoo owned properties). > > > Thanks! > > -- > Brielle Bruns > The Summit Open Source Development Group > http://www.sosdg.org / http://www.ahbl.org

1 1