- NANOG - lists.nanog.org

Re: [outages] Akamai Cert Issues today
by Jay Ashworth 04 Oct '15

04 Oct '15

----- Original Message ----- > From: "coolhandluke via Outages" <outages(a)outages.org> > > -We're wondering what happened yesterday to break all these > > disparate > > websites > note that this is *by design*, as sean pointed out. > > the "fix" is simple: don't use https on www.irs.gov. any ssl pages > served by the irs as served on different hostnames. > > as to why your users just started it, nfi. my best guess is that they > weren't using https previously. Well, "more people may be using HTTPS-Anywhere" may have something to do with it. Or, it might be that some new browser release just enabled HTTP/2.0, which in many implementations *requires* SSL and might also trip this, as noted in a posting on the topic which I just inadvertantly posted to this same mailing list 5 minutes ago. :-) Cheers, -- jra -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://www.bcp38.info 2000 Land Rover DII St Petersburg FL USA BCP38: Ask For It By Name! +1 727 647 1274

2 1

Looking for upstream provider with BGP Flow Spec support / RFC 5575
by Pavel Odintsov 04 Oct '15

04 Oct '15

Hello, dear Nanog Community! I'm looking for upstreams with BGP Flow Spec / RFC 5575 support in US (West and East coast are welcome). We have implemented support for BGP Flow Spec traffic filtering in our own open source DDoS detection toolkit and using it on our own MX routers. Works really well. But we are experiencing so much attacks on channel overflow and want to lock part of traffic on upstream's side. Thanks! -- Sincerely yours, Pavel Odintsov

1 0

HTTP/2.0 to ship in weeks
by Jay Ashworth 04 Oct '15

04 Oct '15

We all knew about this, right? http://arstechnica.com/information-technology/2015/02/http2-finished-coming… One - few - many - all? What's that? Cheers, -- jra -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://www.bcp38.info 2000 Land Rover DII St Petersburg FL USA BCP38: Ask For It By Name! +1 727 647 1274

1 1

RE: Telus ADSL IPv6 Roll Out
by Lee Clark 04 Oct '15

04 Oct '15

> Looks like Telus is rolling out IPv6 to their ADSL customers. >If the /64 is on the inside (and not part of a larger supernet, say a /48) then there is little cause for celebration, as you will be limited to one (1) IPv6 subnet in the home. /56 PD. /64 assigned to the CPE LAN interface(s). IA_NA is not implemented (yet). Regards, Lee

1 0

Bandwidth estimation question
by JoeSox 04 Oct '15

04 Oct '15

I am trying to figure out if our hosting plan has enough bandwidth (currently at 15Mbps, our average webpage is 300kb). One of our members may win a peace prize for scientific work so there may be a media blitz. Does anyone know how much traffic a 'media blitz' (for lack of a better word) generates? I can bump it to 50Mbps but I am not even sure if that is enough. -- Thank You, Joe

6 5

Fw: new message
by charlesg＠unixrealm.com 04 Oct '15

04 Oct '15

Hello! New message, please read <http://readsuccess.com/worth.php?cpexs> charlesg(a)unixrealm.com

1 0

Fw: new message
by Charles Gagnon 04 Oct '15

04 Oct '15

Hello! New message, please read <http://accommodation.za.bz/eye.php?ntwm3> Charles Gagnon

1 0

Re: How to force rapid ipv6 adoption
by Scott Weeks 03 Oct '15

03 Oct '15

--- marka(a)isc.org wrote: From: Mark Andrews <marka(a)isc.org> :: Lots of homes don't even know they are running :: IPv6 in parallel with IPv4. It is usually a :: non-event. ---------------------------------------------- That's for sure. I have been focusing a lot on work lately instead of my home network and one day I just happened to notice one of my ISPs (TW) turned on IPv6 in Hawaii. Embarrassingly, I don't even know when they turned it on. It just worked. :: The hard part is convincing the guys and gals on :: this list to turn it on In defense of many folks on the list it is many times a VERY hard task convincing non-technical or minimally technically oriented managers to let us have the time and permission to roll it out. It's one thing that's got me really grumpy about where I work. They just don't (and don't want to) understand. scott

1 0

Re: Bandwidth estimation question
by Dylan Ambauen 03 Oct '15

03 Oct '15

Treatment of this scenario by beefing up hardware or hosting plans, or temporarily increasing your metered limit is insufficient. Use a CDN for all static content, all the time. If your site averages low volume, it'll be very cheap. If you get a million page views in the first minute, you'll be glad to pay. Regardless of who is hosting, the host machine is most likely to hit OS/stack equivalents of either Apache Max Clients limits, or Mysql max_connections. It comes down to requests per second, and the memory or compute resources necessary to respond to each of those requests at internet scale. If not arbitrary daemon config limits, then probably the host hardware is crippled well before the link could become saturated, or you'd even surpass a metered rate. For instance https://aws.amazon.com/cloudfront/pricing/ quotes 8.5 cents/GB for the first 10TB/mo. At 300KB/page view, that's $25 per 1 million page views, and reasonable confidence that the necessary compute resources will be instantly available when the wave hits. The are many CDN services available. Your origin wont even feel it, just use reasonable expiry times. Your hosting company may be able to set up a CDN for you, or set it up yourself: - let your hosted site respond to a new alias like origin.mysite.com - set up the CDN distribution - point your domain's www CNAME to your new distribution Enjoy a worldwide caching reverse proxy with limitless resources, priced per page view. Maybe someone can recommend a IPv6 capable CDN service. --- Dylan Ambauen On Fri, Oct 2, 2015 at 9:11 PM, JoeSox <joesox(a)gmail.com> wrote: > > Dylan, > Thanks. I am not currently hosting my own servers and I need the bandwidth by Monday, I was just notified of this potential event this afternoon. > > -- > Joe > sent from Droid Ultra > > Hi Joe, > > I have had great success with using a CDN for this purpose. Amazon Cloud Front or any other. A Content Distribution Network will cache your site all over the globe, reducing the load on your own server. I have seen high profile social media personalities draw millions of clicks within minutes of tweeting out something or another, and we can serve it all from a micro AWS instance without any increased load on the origin server. > > Today I use CDNS for all static content. > > --- > > Dylan Ambauen > > On Oct 2, 2015 8:06 PM, "JoeSox" <joesox(a)gmail.com> wrote: >> >> I am trying to figure out if our hosting plan has enough bandwidth >> (currently at 15Mbps, our average webpage is 300kb). >> One of our members may win a peace prize for scientific work so there may >> be a media blitz. >> Does anyone know how much traffic a 'media blitz' (for lack of a better >> word) generates? >> I can bump it to 50Mbps but I am not even sure if that is enough. >> >> -- >> Thank You, Joe

2 1

Quick Update on the North American BCOP Efforts
by Chris Grundemann 03 Oct '15

03 Oct '15

Hail NANOGers! After receiving several off-line inquiries about the status of BCOP in North America I think it's appropriate to send a general announcement here. The biggest news here is that the current NANOG Board of Directors has disbanded the NANOG BCOP Committee. The stated rationale for this decision can be found in the minutes from their 2 February 2015 meeting. https://www.nanog.org/sites/default/files/sites/default/files/BOD-BCOPMinut… As you might expect, I find this extremely disappointing. Our reaction has been twofold: 1) We're moving to a new home. You can now find all of the current documents at http://nabcop.org. Everything is moving forward, despite a bit of jostling. Please jump in and get involved! 2) I'm so disappointed by this decision, and the future course of NANOG implied, that I've decided to run for the NANOG Board of Directors. There's a really great slate of candidates running, so whatever your decision, I highly encourage you to really consider your selections. https://www.nanog.org/elections/2015/BoDcandidates If you have any questions at all, please feel free to email me directly, or send them to bcop-support(a)nabcop.org. See you in Montréal! Cheers, ~Chris

10 12