- NANOG - lists.nanog.org

Bat Blue cloud security
by B F 16 Jul '16

16 Jul '16

Happy Friday list, Any experiences/opinions to share about batblue.Com ? tia, ed

1 0

issues?
by Ryan Finnesey 15 Jul '16

15 Jul '16

Is this list having issues? The last message I received was late Tuesday. Cheers Ryan

4 3

Re: Military coup in Turkey?
by 0x906 15 Jul '16

15 Jul '16

It might be an attempt actually and not a real coup. On Fri, Jul 15, 2016, at 04:48 PM, Dovid Bender wrote: > Seems so. Check twitter. Its been on there for about an hour. > > Regards, > > Dovid > > -----Original Message----- > From: bzs(a)theworld.com > Sender: "NANOG" <nanog-bounces(a)nanog.org>Date: Fri, 15 Jul 2016 16:44:44 > To: <nanog(a)nanog.org> > Subject: Military coup in Turkey? > > > It looks to me like the Turkish internet is unreachable. > > -- > -Barry Shein > > Software Tool & Die | bzs(a)TheWorld.com | > http://www.TheWorld.com > Purveyors to the Trade | Voice: +1 617-STD-WRLD | 800-THE-WRLD > The World: Since 1989 | A Public Information Utility | *oo*

1 0

Weekly Routing Table Report
by cscora＠apnic.net 15 Jul '16

15 Jul '16

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, SAFNOG, PaNOG, SdNOG, BJNOG, CaribNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 16 Jul, 2016 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 604283 Prefixes after maximum aggregation (per Origin AS): 218714 Deaggregation factor: 2.76 Unique aggregates announced (without unneeded subnets): 294430 Total ASes present in the Internet Routing Table: 54306 Prefixes per ASN: 11.13 Origin-only ASes present in the Internet Routing Table: 36527 Origin ASes announcing only one prefix: 15528 Transit ASes present in the Internet Routing Table: 6435 Transit-only ASes present in the Internet Routing Table: 161 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 54 Max AS path prepend of ASN ( 55644) 51 Prefixes from unregistered ASNs in the Routing Table: 56 Unregistered ASNs in the Routing Table: 12 Number of 32-bit ASNs allocated by the RIRs: 14649 Number of 32-bit ASNs visible in the Routing Table: 11344 Prefixes from 32-bit ASNs in the Routing Table: 44758 Number of bogon 32-bit ASNs visible in the Routing Table: 11 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 388 Number of addresses announced to Internet: 2821308388 Equivalent to 168 /8s, 41 /16s and 191 /24s Percentage of available address space announced: 76.2 Percentage of allocated address space announced: 76.2 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 98.2 Total number of prefixes smaller than registry allocations: 196731 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 155939 Total APNIC prefixes after maximum aggregation: 42673 APNIC Deaggregation factor: 3.65 Prefixes being announced from the APNIC address blocks: 168048 Unique aggregates announced from the APNIC address blocks: 68014 APNIC Region origin ASes present in the Internet Routing Table: 5196 APNIC Prefixes per ASN: 32.34 APNIC Region origin ASes announcing only one prefix: 1179 APNIC Region transit ASes present in the Internet Routing Table: 934 Average APNIC Region AS path length visible: 4.3 Max APNIC Region AS path length visible: 54 Number of APNIC region 32-bit ASNs visible in the Routing Table: 2225 Number of APNIC addresses announced to Internet: 759067716 Equivalent to 45 /8s, 62 /16s and 116 /24s Percentage of available APNIC address space announced: 88.7 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-137529 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 182913 Total ARIN prefixes after maximum aggregation: 89387 ARIN Deaggregation factor: 2.05 Prefixes being announced from the ARIN address blocks: 188573 Unique aggregates announced from the ARIN address blocks: 88343 ARIN Region origin ASes present in the Internet Routing Table: 16302 ARIN Prefixes per ASN: 11.57 ARIN Region origin ASes announcing only one prefix: 5786 ARIN Region transit ASes present in the Internet Routing Table: 1699 Average ARIN Region AS path length visible: 3.8 Max ARIN Region AS path length visible: 23 Number of ARIN region 32-bit ASNs visible in the Routing Table: 1327 Number of ARIN addresses announced to Internet: 1105487328 Equivalent to 65 /8s, 228 /16s and 101 /24s Percentage of available ARIN address space announced: 58.5 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-397212 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 144900 Total RIPE prefixes after maximum aggregation: 71186 RIPE Deaggregation factor: 2.04 Prefixes being announced from the RIPE address blocks: 154555 Unique aggregates announced from the RIPE address blocks: 94995 RIPE Region origin ASes present in the Internet Routing Table: 18083 RIPE Prefixes per ASN: 8.55 RIPE Region origin ASes announcing only one prefix: 7822 RIPE Region transit ASes present in the Internet Routing Table: 2992 Average RIPE Region AS path length visible: 4.4 Max RIPE Region AS path length visible: 27 Number of RIPE region 32-bit ASNs visible in the Routing Table: 4922 Number of RIPE addresses announced to Internet: 705542272 Equivalent to 42 /8s, 13 /16s and 184 /24s Percentage of available RIPE address space announced: 102.6 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 196608-204287 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 61513 Total LACNIC prefixes after maximum aggregation: 12272 LACNIC Deaggregation factor: 5.01 Prefixes being announced from the LACNIC address blocks: 76566 Unique aggregates announced from the LACNIC address blocks: 36665 LACNIC Region origin ASes present in the Internet Routing Table: 2476 LACNIC Prefixes per ASN: 30.92 LACNIC Region origin ASes announcing only one prefix: 562 LACNIC Region transit ASes present in the Internet Routing Table: 564 Average LACNIC Region AS path length visible: 4.8 Max LACNIC Region AS path length visible: 26 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 2632 Number of LACNIC addresses announced to Internet: 170025536 Equivalent to 10 /8s, 34 /16s and 98 /24s Percentage of available LACNIC address space announced: 101.3 LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-265628 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 14203 Total AfriNIC prefixes after maximum aggregation: 3186 AfriNIC Deaggregation factor: 4.46 Prefixes being announced from the AfriNIC address blocks: 16153 Unique aggregates announced from the AfriNIC address blocks: 6053 AfriNIC Region origin ASes present in the Internet Routing Table: 737 AfriNIC Prefixes per ASN: 21.92 AfriNIC Region origin ASes announcing only one prefix: 179 AfriNIC Region transit ASes present in the Internet Routing Table: 177 Average AfriNIC Region AS path length visible: 4.6 Max AfriNIC Region AS path length visible: 19 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 238 Number of AfriNIC addresses announced to Internet: 80838912 Equivalent to 4 /8s, 209 /16s and 129 /24s Percentage of available AfriNIC address space announced: 80.3 AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5556 4191 75 ERX-CERNET-BKB China Education and Rese 7545 3415 384 254 TPG-INTERNET-AP TPG Telecom Limited, AU 4766 3179 11144 1130 KIXS-AS-KR Korea Telecom, KR 17974 2937 907 82 TELKOMNET-AS2-AP PT Telekomunikasi Indo 9829 2560 1485 515 BSNL-NIB National Internet Backbone, IN 1659 2492 1466 38 ERX-TANET-ASN1 Taiwan Academic Network 9808 2153 8761 40 CMNET-GD Guangdong Mobile Communication 4755 2079 431 239 TATACOMM-AS TATA Communications formerl 4808 1716 2317 556 CHINA169-BJ China Unicom Beijing Provin 38197 1494 93 274 SUNHK-DATA-AS-AP Sun Network (Hong Kong Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 22773 3483 2965 144 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 6389 2225 3671 41 BELLSOUTH-NET-BLK - BellSouth.net Inc., 18566 2197 405 110 MEGAPATH5-US - MegaPath Corporation, US 20115 1928 1951 408 CHARTER-NET-HKY-NC - Charter Communicat 209 1713 5103 656 CENTURYLINK-US-LEGACY-QWEST - Qwest Com 30036 1689 339 438 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 6983 1687 849 228 ITCDELTA - Earthlink, Inc., US 7018 1346 20075 1000 ATT-INTERNET4 - AT&T Services, Inc., US 11492 1336 236 550 CABLEONE - CABLE ONE, INC., US 16509 1333 2475 422 AMAZON-02 - Amazon.com, Inc., US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 39891 3329 169 15 ALJAWWALSTC-AS , SA 20940 2715 1053 1923 AKAMAI-ASN1 , US 34984 1974 327 358 TELLCOM-AS , TR 8551 1279 377 46 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 12479 1277 1002 45 UNI2-AS , ES 6849 1148 355 21 UKRTELNET , UA 13188 1090 98 65 BANKINFORM-AS , UA 8402 1041 544 15 CORBINA-AS Russia, RU 31148 1017 47 44 FREENET-AS , UA 6830 888 2752 462 LGI-UPC formerly known as UPC Broadband Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 10620 3479 543 124 Telmex Colombia S.A., CO 8151 2274 3365 560 Uninet S.A. de C.V., MX 7303 1531 949 240 Telecom Argentina S.A., AR 11830 1489 369 66 Instituto Costarricense de Electricidad 6503 1364 437 54 Axtel, S.A.B. de C.V., MX 6147 1106 377 27 Telefonica del Peru S.A.A., PE 3816 1001 477 179 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 7738 994 1882 40 Telemar Norte Leste S.A., BR 11172 907 125 76 Alestra, S. de R.L. de C.V., MX 28573 877 2178 159 CLARO S.A., BR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1228 402 48 LINKdotNET-AS, EG 36903 656 330 109 MT-MPLS, MA 37611 646 48 2 Afrihost, ZA 36992 541 1357 26 ETISALAT-MISR, EG 8452 505 1472 15 TE-AS TE-AS, EG 37492 378 234 68 ORANGE-TN, TN 24835 329 594 15 RAYA-AS, EG 29571 299 37 12 CITelecom-AS, CI 2018 257 327 74 TENET-1, ZA 36947 225 855 15 ALGTEL-AS, DZ Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5556 4191 75 ERX-CERNET-BKB China Education and Rese 22773 3483 2965 144 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 10620 3479 543 124 Telmex Colombia S.A., CO 7545 3415 384 254 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3329 169 15 ALJAWWALSTC-AS , SA 4766 3179 11144 1130 KIXS-AS-KR Korea Telecom, KR 17974 2937 907 82 TELKOMNET-AS2-AP PT Telekomunikasi Indo 20940 2715 1053 1923 AKAMAI-ASN1 , US 9829 2560 1485 515 BSNL-NIB National Internet Backbone, IN 1659 2492 1466 38 ERX-TANET-ASN1 Taiwan Academic Network Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 10620 3479 3355 Telmex Colombia S.A., CO 22773 3483 3339 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 39891 3329 3314 ALJAWWALSTC-AS , SA 7545 3415 3161 TPG-INTERNET-AP TPG Telecom Limited, AU 17974 2937 2855 TELKOMNET-AS2-AP PT Telekomunikasi Indo 1659 2492 2454 ERX-TANET-ASN1 Taiwan Academic Network 6389 2225 2184 BELLSOUTH-NET-BLK - BellSouth.net Inc., 9808 2153 2113 CMNET-GD Guangdong Mobile Communication 18566 2197 2087 MEGAPATH5-US - MegaPath Corporation, US 4766 3179 2049 KIXS-AS-KR Korea Telecom, KR Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 65001 PRIVATE 5.143.176.0/20 15468 KLGELECS-AS 38, Teatralnaya st 65001 PRIVATE 31.172.192.0/20 15468 KLGELECS-AS 38, Teatralnaya st 65001 PRIVATE 31.172.192.0/21 15468 KLGELECS-AS 38, Teatralnaya st 65001 PRIVATE 31.172.200.0/21 15468 KLGELECS-AS 38, Teatralnaya st 65001 PRIVATE 31.172.208.0/21 15468 KLGELECS-AS 38, Teatralnaya st 65001 PRIVATE 31.172.216.0/21 15468 KLGELECS-AS 38, Teatralnaya st 65000 PRIVATE 31.219.177.0/25 8966 ETISALAT-AS P.O. Box 1150, Dub 65000 PRIVATE 31.219.177.128/25 8966 ETISALAT-AS P.O. Box 1150, Dub 65001 PRIVATE 46.237.32.0/20 13118 ASN-YARTELECOM Verhnevolzhsky 64502 RESERVED 92.38.215.0/24 12695 DINET-AS , RU Complete listing at http://thyme.rand.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 23.249.144.0/20 40430 COLO4JAX-AS - colo4jax, LLC, US 27.100.7.0/24 56096 UNKNOWN 41.73.1.0/24 37004 -Reserved AS-, ZZ 41.73.2.0/24 37004 -Reserved AS-, ZZ 41.73.3.0/24 37004 -Reserved AS-, ZZ 41.73.4.0/24 37004 -Reserved AS-, ZZ 41.73.5.0/24 37004 -Reserved AS-, ZZ 41.73.6.0/24 37004 -Reserved AS-, ZZ 41.73.7.0/24 37004 -Reserved AS-, ZZ 41.73.8.0/24 37004 -Reserved AS-, ZZ Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:13 /10:36 /11:101 /12:266 /13:518 /14:1049 /15:1772 /16:13165 /17:7812 /18:12757 /19:25309 /20:38237 /21:40145 /22:66925 /23:58566 /24:335940 /25:562 /26:587 /27:377 /28:49 /29:32 /30:16 /31:1 /32:32 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 39891 2896 3329 ALJAWWALSTC-AS , SA 22773 2717 3483 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 18566 2089 2197 MEGAPATH5-US - MegaPath Corporation, US 30036 1503 1689 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 6389 1440 2225 BELLSOUTH-NET-BLK - BellSouth.net Inc., 10620 1383 3479 Telmex Colombia S.A., CO 6983 1339 1687 ITCDELTA - Earthlink, Inc., US 34984 1257 1974 TELLCOM-AS , TR 11492 1236 1336 CABLEONE - CABLE ONE, INC., US 6849 968 1148 UKRTELNET , UA Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1577 2:728 4:21 5:2139 6:31 8:972 12:1777 13:41 14:1721 15:45 16:2 17:84 18:112 20:49 22:1 23:1690 24:1783 27:2282 31:1787 32:67 33:3 34:2 35:5 36:304 37:2267 38:1233 39:35 40:94 41:2740 42:444 43:1809 44:43 45:2095 46:2520 47:83 49:1158 50:892 51:20 52:515 54:338 55:9 56:7 57:42 58:1595 59:937 60:351 61:1832 62:1486 63:1931 64:4519 65:2176 66:4279 67:2217 68:1120 69:3286 70:1254 71:483 72:2026 74:2547 75:343 76:378 77:1429 78:1266 79:877 80:1249 81:1378 82:967 83:719 84:852 85:1599 86:483 87:1097 88:552 89:2020 90:189 91:6068 92:957 93:2381 94:2408 95:2472 96:522 97:372 98:948 99:41 100:75 101:1067 103:11555 104:2510 105:127 106:433 107:1392 108:662 109:2233 110:1277 111:1634 112:1022 113:1120 114:1080 115:1654 116:1610 117:1526 118:1980 119:1602 120:1268 121:1168 122:2185 123:2037 124:1582 125:1726 128:698 129:422 130:410 131:1343 132:597 133:175 134:467 135:135 136:379 137:394 138:1751 139:296 140:712 141:453 142:648 143:919 144:711 145:184 146:889 147:648 148:1362 149:533 150:653 151:1020 152:636 153:302 154:651 155:956 156:513 157:488 158:417 159:1141 160:505 161:726 162:2343 163:921 164:890 165:1055 166:314 167:1158 168:1969 169:670 170:1775 171:262 172:595 173:1641 174:755 175:721 176:1728 177:4056 178:2213 179:1134 180:2081 181:1814 182:1954 183:980 184:834 185:6927 186:2994 187:2069 188:2174 189:1725 190:7846 191:1262 192:9045 193:5723 194:4451 195:3830 196:1706 197:1048 198:5544 199:5747 200:7043 201:3752 202:10046 203:10041 204:4507 205:2728 206:2994 207:3103 208:4089 209:3881 210:4256 211:2039 212:2725 213:2302 214:870 215:70 216:5857 217:1984 218:801 219:623 220:1634 221:862 222:678 223:1269 End of report

1 0

Report on Airtel (Indian Mobile Operator) Sniffing Cloudfare
by Sharath Chandra 15 Jul '16

15 Jul '16

Dear List Last week, this report has now created bit of a stir within the net-neutrality policy circles and ISPs in India. I was hoping anyone here could see if this analysis and hunch about Airtel India’s sneaky practices is indeed correct : https://medium.com/@karthikb351/airtel-is-sniffing-and-censoring-cloudflare… <https://medium.com/@karthikb351/airtel-is-sniffing-and-censoring-cloudflare…> Regards Sharath Chandra Ram Twitter: @AgentSpock Signal Lab: http://goo.gl/rssCdH <http://goo.gl/rssCdH>

1 0

SAFNOG-3: Just 3 Weeks Left
by Mark Tinka 15 Jul '16

15 Jul '16

Hello all. With a little over 3 weeks left to SAFNOG-3, the program is shaping up to be very exciting. You can view it here: http://www.safnog.org/event-name/ If you are interested in participating in SAFNOG-3 as a speaker or panelist, there are still a few slots left in the agenda. Kindly review the details of the CfP and submit your talk at the link below: http://www.safnog.org/#callforpapers Travel and hotel venue information about Windhoek, Namibia, can be found here: http://www.safnog.org/travel-information For the social events at this year's SAFNOG meeting, we have organized welcome drinks from 1700hrs by the pool side at the hotel venue on the 7th August: https://www.safarihotelsnamibia.com/safari-court-hotel/ On the 8th August, an opening cocktail in the evening has been planned for at Joe's Beer House: http://www.joesbeerhouse.com/home.html Our closing social will take place on the 9th August, with a braai and dinner at the hotel venue. On the 10th August, a game drive has been prepared at the Okapuka Ranch: http://www.okapuka-ranch.com/main.html All social events will be complimentary to our SAFNOG-3 delegates. We look forward to seeing you in Windhoek. Cheers, Mark Tinka On Behalf of the SAFNOG Management Committee

1 0

Canadian Internet Registration Authority (CIRA)
by Ryan Finnesey 14 Jul '16

14 Jul '16

Is anyone from the Canadian Internet Registration Authority (CIRA) monitoring the list? I was hoping they can ping me off list. I have a few questions around there policy's and a program we would like to put in place. Cheers Ryan

1 0

Re: New Office, New Network. Questions.
by Nikolai Petrov 14 Jul '16

14 Jul '16

Here are my replies on this e-mail. Sorry for the late replies! > On Sun, 10 Jul 2016 21:53:52 +0300, Nikolai Petrov said: > >> 1. Currently we do not have IPv6 in our network but I have seen the ISP is >> giving us a "/56 Block" which from what I understand is a couple hundred "/64 >> Subnets". I think you can only have /64 subnets in IPv6. In our IPv4 setup we > > You can have other sized subnets, but 64 is very handy if you intend to use > SLAAC auto-configure. There's also the danger of running into broken equipment > that doesn't understand other sized subnets (similar to very old IPv4 gear that > understood a /24, but exploded if told about a /23 or /25). I really like SLAAC and its design and I would very much like to use it. Therefore we will be using /64 IP Ranges. Is there any way to limit the amount of devices in a subnet to avoid problems and attacks? I don't think the equipment will work with 2^64 devices in a single subnet.. > >> have 32 addresses, four of which I will use for NAT and the remaining needed >> for online services and servers. In IPv6 we have a lot of addresses but I am >> not sure whether I should give an address of the ISP to every device. I found > > Assign a /64 to everyplace that you would assign a subnet in IPv4. Give each > device on that subnet its own address. Use DHCPv6 or SLAAC or both, whatever > gets the job done in your situation. Don't worry about NAT anymore, you have > enough addresses. > >> that there is an organization that can help avoid collisions in private IPs: >> https://www.sixxs.net/tools/grh/ula/ . From what I can tell it is just a >> registry, but I am thinking of registering the ranges there and then use these >> subnets and NAT them to the IPv6 address of the router. > > Don't do that. NAT was invented to fix a problem that IPv6 doesn't have. Feel > free to give every single device a global address. (You'll still want a > stateful firewall someplace, but it doesn't have to do NAT, it just has to keep > track of legitimate versus malicious traffic). So why are these addresses there? For installations not connected to the Internet? > > And don't freak out if a device has more than one address. As I'm writing this > from the sofa in my living room, my laptop wireless has: > > ra0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 > inet 192.168.1.150 netmask 255.255.255.224 broadcast 192.168.1.159 > inet6 2601:5c0:c100:6431:cad7:19ff:fe37:c02 prefixlen 64 scopeid 0x0<global> > inet6 2601:5c0:c100:6431:c01:a589:19a4:236e prefixlen 64 scopeid 0x0<global> > inet6 2601:5c0:c100:6431::d67 prefixlen 128 scopeid 0x0<global> > inet6 2601:5c0:c100:6431:1dc3:657:eda6:8abf prefixlen 64 scopeid 0x0<global> > inet6 fe80::cad7:19ff:fe37:c02 prefixlen 64 scopeid 0x20<link> > inet6 2601:5c0:c100:6431:ad68:c60c:583:19e9 prefixlen 64 scopeid 0x0<global> > ether c8:d7:19:37:0c:02 txqueuelen 1000 (Ethernet) > > (One DHCPv6 - ::d67. One SLAAC - the one with ff:fe in it. And 4 different > RFC3041 privacy addresses that it's chunked out over the weekend. It works > just fine that way - and it's *designed* to do so. (Of course, in a corporate > environment, you may want to turn the privacy addresses off, and only use > one of DHCPv6/SLAAC - I do it this way because it tests for broken software...) Thanks for letting me know ahead of time. I have looked up about the privacy addresses and we don't need them as you say. Is there a reason you use DHCPv6 and SLAAC? Is it for compatibility? Can I use the DHCPv4 to give out DNSv6 addresses? > > Oh, and don't block ICMPv6. :) I was never a fan of blocking ICMP except the redirects in some cases.. > >> something strange. The WAN port of our router gets a /64 IPv6 address which is >> not in our IPv6. Should I use this for NAT or one of "our" addresses? > > You use it for the IP address of the provider-facing interface of your router. > Assign the "inside" interface(s) addresses on the appropriate /64 subnet that > they will be on. Oh, so this is like BGP.. In my previous company we had BGP connections and we used an IPv4 /30 for these connections which was not within our IP range. I thought they would give us a /126 and not a full /64 so I did not think that was it.. Thanks!

4 3

IX in Iran by TIC
by Shahab Vahabzadeh 13 Jul '16

13 Jul '16

Hello Everybody, I am here to announce that TIC in Iran launched Neutral Internet Exchange Points. Right now we have four in: - Tehran (tehran-ix.ir) - Shiraz (shiraz-ix.ir) - Tabriz (tabriz-ix.ir) - Mashhad (mashhad-ix.ir) Currently we have near 45Gbps traffic on it but it will increase to 100Gbps within two months. Content Providers activating their BGP peering with members one by one. Also I have something interesting for you around the world, TIC is launching a International IX in Chabahar called Chabahar IX (chabahar-ix.ir) which can be interesting for T1 ISPs or Content Providers like Akamai, Amazon, Google, Limelight, Cloudflare and etc. We are able to give anyone colocation space or ground for building their own Datacenter. As you know Iran is cheapest country in Middle East for Energy and Electricity reasons so we are the best opportunity for having a node there. Cables we have there right now are POI, FALCON and GCX. Please share this with your friends or your Business Development departments. If anyone have question regard this you can contact me via this email or peering(a)tic.ir. Thanks -- Regards, Shahab Vahabzadeh, Network Engineer and System Administrator PGP Key Fingerprint = 1C43 988E 01A8 4D95 B662 9118 CD94 9F10 4DF4 6163

8 11

Softlayer
by Joe Carroll 13 Jul '16

13 Jul '16

Is there an admin from the softlayer network ? We're experiencing routing issues getting traffic to the softlayer network.

1 0