- NANOG - lists.nanog.org

Can someone from Cogentco.com contact me offlist?
by Lou Katz 13 Aug '15

13 Aug '15

A routing/filtering problem probably between be2185.ccr22.cle04.atlas.cogentco.com and be2009.ccr21.alb02.atlas.cogentco.com. -- -=[Lou Katz]=- Composed on an ASR33

2 1

Branch Location Over The Internet
by Colton Conor 12 Aug '15

12 Aug '15

We have an enterprise that has a headquarter office with redundant fiber connections, its own ASN, its own /22 IP block from ARIN, and a couple of gigabit internet connections from multiple providers. The office is taking full BGP routes from tier 1 providers using a Juniper MX80. They are establishing their first branch location, and need the branch location to be able to securely communicate back to headquarters, AND be able to use a /24 of headquarters public IP addresses. Ideally the device at the HQ location would hand out public IP address using DHCP to the other side of the tunnel at the branch location. We know that in an ideal world it would be wise to get layer 2 transport connections from HQ to the branch location, but lets assume that is not an option. Please don't flood this thread about how it could be an option because it's not at this time. This setup will be temporary and in service for the next year until we get fiber to the branch site. Let's assume at the branch location we can get a DOCSIS cable internet connection from a incumbent cable provider such as Comcast, and that provider will give us a couple static IP address. Assume as a backup, we have a PPPoE DSL connection from the ILEC such as Verizon who gives us a dynamic IP address. What solution could we put at the HQ site and the branch site to achieve this? Ideally we would want the solution to load balance between the connections based on the connections speeds, and failover if one is down. The cable connection will be much faster speed (probably 150Mbps down and 10 Upload) compared to the DSL connection (10 download and 1 upload). If we need more speed we can upgrade the cable modem to a higher package, but for DSL that is the max speed so we might have to get multiple DSL lines. The cable solution could always be used as the primary, and the DSL connection could only be used as backup if that makes things easier. If you were to do this with Juniper or Cisco gear what would you have at each location? What technology would you use? I know there is Pepewave and a couple of other software solutions that seem to have a proprietary load balancing solutions developed, but I would prefer to use a common Cisco or Juniper solution if one exists. There will be 50 users at the branch office. There is only one branch location at this time, but they might expand to a couple more but under 10.

9 11

router dump and config
by Randy Bush 12 Aug '15

12 Aug '15

[ uncast reply please, unless you just wanna tell me to foad publicly, which is fine ] purely for research, and we promise to destroy after. would appreciate one router config (passwords/credentials removed, of course) rib dump from that router (we can process C or J) which has a number of large tier-1 peers we are not really looking at peering or anything such as that. no politics or business involved at all. it's about ACL load, RPKI simulation, ... thanks randy

1 0

Cogent revisited
by Adam Greene 12 Aug '15

12 Aug '15

Hi all, We are getting ready to renew our fiber contract with our incumbent provider (Lightower, ASN 46887). We are happy with them, but are looking for alternatives. At the location in question we need about 200M. Cogent recently contacted us, and I shied away a bit, based on this conversation a few years ago: http://mailman.nanog.org/pipermail/nanog/2012-May/048181.html Have opinions changed since then? Or is Cogent still the "budget alternative to have in your mix, but better to stay away from if you need high-performance, reliable, mostly standalone bandwidth" (which is how I would summarize the consensus in 2012)? Thanks, Adam

2 1

advice dealing with clean-mx
by Michael Bubb 12 Aug '15

12 Aug '15

hello I've lurked on this list for a while - I have an issue that I need help with. I work for a company that does fraud detection we host our servers on physica hardware in managed hosting datacenters (softlayer, hertzer, coresites, etc). Recently we were flagged for malware buy clean-mx. It was the IP of an haproxy loadbalancer. I followed up by following the link to clean-mx. It looked as if the score was based upon information from the following sites: http://www.malwaredomainlist.com https://www.virustotal.com http://urlquery.net When I checked the ip in question against these sites all the checks passed exceptfor one - fortinet. And fortinet indicated that it was an unknown signature - not specifically malware. So it appeared clean. I am hesitant to deal directly with clean-mx as we do not have any existing relationship and frankly a google search turns up many horror stories. I am mindful that these may be the 'stories' of frustrated fraudsters. I honestly do not know how to evaluate this situation. If clean-mx is legit then it would make sense to have a relationship with them . If they are not then how does one deal with them? thank you Michael -- Michael Bubb +1.646.783.8769 | KD2DTY Resume - http://mbubb.devio.us/res/resume.html *noli timere*

2 1

Live-streaming the Root Zone Key-Signing Key Ceremony 22
by Edward Lewis 12 Aug '15

12 Aug '15

FYI, (Apologies if you see duplicates of this message.) ICANN, as the IANA Functions Operator, will be live-streaming the Root Zone Key-Signing Key Ceremony (number 22) on Thursday, August 13. The "main" ceremony that day is scheduled to begin at 2000UTC. (This is an activity related to DNSSEC.) For more information about the event see: https://www.iana.org/dnssec/ceremonies/22 On Thursday there will be two cermonies as listed on that web page. The first ceremnoy will rotate cryptographic officer duties, basically, a change in some of the trusted community representatives participating in the key ceremonies. The second ceremony (the "main") will feature the introduction of two new Hardware Security Modules. This is the ceremony that will start at 2000 UTC. Please see the above link for more information. The live-streaming link is at the bottom of the page. (https://icann.adobeconnect.com/kskceremony)

1 0

free Tools to monitor website performance
by sathish kumar Ippani 11 Aug '15

11 Aug '15

Hi All, Thanks to all for reviewing my topic, may it is slightly off topic. We have almost 300 URL's (local and web) and we want to monitor few of them which are very critical URL's for web access and local access. I would like to know is there any free tool or software with I can use to monitor url performance in terms of response time. Which gives more information like how much time it taken to connect the server and time to load the page and total response time. Thanks in advance. -- With Regards, Sathish Ippani

12 11

Re: AT&T att.net postmaster contact needed
by Larry Sheldon 11 Aug '15

11 Aug '15

On 8/10/2015 12:43, Ken Chase wrote: > > please reply offlist, mutual customer issue. Seems like this exact question comes up pretty frequently. Maybe NANOG should consider a repository of frequent inquiries....... -- sed quis custodiet ipsos custodes? (Juvenal)

2 1

Super Core Hardware suggestions
by Ben Cornish 11 Aug '15

11 Aug '15

Hey All We are looking for suggestions for a device to act as a super Core Device / MPLS P router only. There seems to be plenty of Chassis based solutions out there that also cater for a lot more. We ideally would like a 1RU or 2RU device - Handling MPLS / IGP only * Ideally 16 to 48 ports of 10Gig - SFP * Non-blocking line rate capable on all ports. * MPLS / OSPF /BFD / ISIS / RSVP-TE capably. * Deep buffers on the ports would also be nice * With a possible option of 40Gig uplinks.. Thanks

9 8

Zayo/AboveNet
by Blair Trosper 10 Aug '15

10 Aug '15

Anyone know why Zayo still hasn't renamed the BGP AS network names for all the AboveNet ASNs? Not to poke fun at Global Crossing, but they changed Level 3's AS name in less time (which, if I recall, took over a year to happen...) I don't see Zayo using the Above.net brand anywhere lately...honest question. I know small details like the name of your AS can slip through the cracks in an acquisition THREE YEARS AGO <http://www.zayo.com/abovenet>, but still...it's been a while... http://bgp.he.net/AS6461

3 4