- NANOG - lists.nanog.org

Correcting Netflix ipv6 geolocation
by Justin Kilpatrick 19 Oct '23

19 Oct '23

Our ipv6 subnet 2602::FBAD::/40 is showing up as in Kiev Ukraine on Fast.com and Netflix.com which is causing all sorts of problems for our US based customers. Other services like Google and MaxMind don't seem to have any issue and report correct locations. Happy to follow up with more information off list. Thanks! -- Justin Kilpatrick | Cofounder and CTO justin(a)althea.net

2 1

Congestion/latency-aware routing for MPLS?
by Adam Thompson 19 Oct '23

19 Oct '23

Using a mix of Juniper hardware... Network provides VPLS to customer, over MPLS (obviously) in a dual-redundant-ring radio topology. Each site is connected to one or more neighbors, generally with two radios, in two different bands, to *each* neighbor. So an ordinary node might have 4 radios, 2 pointing in each direction. Every single radio link has different bandwidth, different latency, and different interference characteristics. These radio links do run at 100% capacity at least some of the time. It's possible to set each link's relative cost in OSPF or IS-IS, of course, but I haven't found a way to make the router react to latency changes on one link or the other. (Right now, I think costs are set equal so traffic will use both links.) This means interference in one band invisibly diminishes the Ethernet bandwidth available and silently increases the latency on that link, sometimes dramatically. This seems to do interestingly unpleasant things to the client's flows. It's generally true that one band will be much more severely affected than the other, in any interference event. Before anyone asks, I'm told the network is a mixture of licensed and unlicensed bands, that's not changing anytime soon. In a perfect world, I'd like the routers to dynamically adjust traffic balance, but even just temporarily halting use of the impaired link would be helpful (or so I believe right now, at least). Is this a pipe dream? I'm not seeing anything in JunOS that could accomplish this... I'm not even sure if a mesh protocol could handle dual active links like this? Ideas, comments, etc. all appreciated. Also, I'm not the direct operator of use network. I'm involved, but mostly just trying to help them find better solutions. Nor am I an MPLS expert, as is obvious here. Thanks, -Adam Adam Thompson Consultant, Infrastructure Services MERLIN 100 - 135 Innovation Drive Winnipeg, MB R3T 6A8 (204) 977-6824 or 1-800-430-6404 (MB only) https://www.merlin.mb.ca<https://www.merlin.mb.ca/> Chat with me on Teams<https://teams.microsoft.com/l/chat/0/0?users=athompson@merlin.mb.ca>

8 9

FastNetMon Usage in the wild
by Javier Gutierrez 18 Oct '23

18 Oct '23

Hi, I wanted to drop a quick question as I would like to evaluate the FastNetMon solution to do DDoS protection and wanted to see what other companies are using it out there so I can have a base of how much should I recommend this. Thanks in advance for your responses Kind regards, Javier Gutierrez,

5 6

Akamai Network Partnership
by email＠edylie.net 18 Oct '23

18 Oct '23

Dear All, May I know if anyone could guide me to the right contact for Akamai Network Partnership? We are a network operator in Indonesia and is keen to work with Akamai to speed up access to Akamai Content. Many Thanks. Best Regards, Edy

5 4

Amir Golestan sentenced to 5 years in prison for IP theft scheme
by goemon＠sasami.anime.net 18 Oct '23

18 Oct '23

https://krebsonsecurity.com/2023/10/tech-ceo-sentenced-to-5-years-in-ip-add… And a statement from ARIN: https://www.arin.net/blog/2023/10/16/micfo-golestan-sentencing/

3 3

Google ISP portal repeatedly denied for peer
by TJ Trout 18 Oct '23

18 Oct '23

Anyone from Google that could help get us isp portal access? We're directly period with Google but continually get denied portal access. Ticket 726155557. Thank you in advance, TJ Trout Volt Broadband ---------- Forwarded message --------- From: TJ Trout <tj(a)voltbb.com> Date: Tue, Oct 17, 2023, 6:06 AM Subject: Google ISP portal denied for peer To: nanog <nanog(a)nanog.org> Anyone from Google that could help get us isp portal access? We're directly period with Google but continually get denied portal access. Ticket 726155557. Thank you in advance, TJ Trout Volt Broadband

1 0

MX204 tunnel services BW
by behrnsjeff＠yahoo.com 17 Oct '23

17 Oct '23

Encountered an issue with an MX204 using all 4x100G ports and a logical tunnel to hairpin a VRF. The tunnel started dropping packets around 8Gbps. I bumped up tunnel-services BW from 10G to 100G which made the problem worse; the tunnel was now limited to around 1.3Gbps. To my knowledge with Trio PFE you shouldn't have to disable a physical port to allocate bandwidth for tunnel-services. Any helpful info is appreciated.

7 13

jon postel
by Randy Bush 17 Oct '23

17 Oct '23

25 years ago, jon postel died. we stand on the shoulders of jon and others, a number of whom died in october. not a cheering month for old timers. randy

4 4

Add communities on direct routes in Juniper
by Stanislav Datskevych 16 Oct '23

16 Oct '23

Dear all, Is there a way to add BGP communities on direct (interface) routes in Junipers? The task looks to be simple but the solution eludes me. In Cisco/Arista, for example, I could use "network 192.0.2.0/24 route-map <SOME_MAP_THAT_ADDS_COMMUNITIES>". In Juniper it seems to be impossible. I even tried putting interface-routes into rib-group with an import policy. But it seems the import policy only works on importing routes into Secondary routing tables (e.g. inet.50), and not into the Primary one (inet.0). I know it's possible to add communities on later stage while announcing networks to peers, in [protocols bgp group <name> export]. But I'd better slap the community on the routes right when they're imported into RIB, not when they announced to peers. Thanks in advance.

5 4

transit and peering costs projections
by Dave Taht 16 Oct '23

16 Oct '23

This set of trendlines was very interesting. Unfortunately the data stops in 2015. Does anyone have more recent data? https://drpeering.net/white-papers/Internet-Transit-Pricing-Historical-And-… I believe a gbit circuit that an ISP can resell still runs at about $900 - $1.4k (?) in the usa? How about elsewhere? ... I am under the impression that many IXPs remain very successful, states without them suffer, and I also find the concept of doing micro IXPs at the city level, appealing, and now achievable with cheap gear. Finer grained cross connects between telco and ISP and IXP would lower latencies across town quite hugely... PS I hear ARIN is planning on dropping the price for, and bundling 3 BGP AS numbers at a time, as of the end of this year, also. -- Oct 30: https://netdevconf.info/0x17/news/the-maestro-and-the-music-bof.html Dave Täht CSO, LibreQos

12 19