- Test - lists.nanog.org

ipv4/25s and above
by Dave Taht 05 Dec '22

05 Dec '22

I am kind of curious as to the distribution of connections to smaller companies and other entities that need more than one ipv4 address, but don't run BGP. So, for as an ISP or infrastructure provider, what is the typical percentage nowadays of /32s /31s /30s... /25s of stuff that gets run "elsewhere"? Is there any correlation between the number of IPs a customer gets and the amount of bandwidth they buy? Obviously "retail", home use is /32s and there's an increasing amount of CGNAT, but I can't help but imagine there are thousands of folk running /27s and /29s for every /24 or /22 out there. I've been paying 15/month for a /29 for forever, but barely use it. -- This song goes out to all the folk that thought Stadia would work: https://www.linkedin.com/posts/dtaht_the-mushroom-song-activity-69813666656… Dave Täht CEO, TekLibre, LLC

26 91

Power outages Maryland near Washington DC (Plane crash into power lines)
by Sean Donelan 03 Dec '22

03 Dec '22

A small plane crashed into high-voltage transmission power lines in Montgomery County, Maryland; near Washington DC. Most of the data centers are in Northern Virginia, but some are in Southern Maryland (Wheaton, Olney, Gaithersburg and as far away as Silver Spring). https://wtop.com/montgomery-county/2022/11/outages-in-montgomery-co-after-s…

2 1

Weekly Global IPv4 Routing Table Report
by Routing Table Analysis Role Account 02 Dec '22

02 Dec '22

This is an automated weekly mailing describing the state of the Global IPv4 Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net. For historical data, please see https://thyme.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. IPv4 Routing Table Report 04:00 +10GMT Sat 03 Dec, 2022 BGP Table (Global) as seen in Japan. Report Website: https://thyme.apnic.net Detailed Analysis: https://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 916495 Prefixes after maximum aggregation (per Origin AS): 346331 Deaggregation factor: 2.65 Unique aggregates announced (without unneeded subnets): 443280 Total ASes present in the Internet Routing Table: 73865 Prefixes per ASN: 12.41 Origin-only ASes present in the Internet Routing Table: 63445 Origin ASes announcing only one prefix: 26042 Transit ASes present in the Internet Routing Table: 10420 Transit-only ASes present in the Internet Routing Table: 416 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 55 Max AS path prepend of ASN (265020) 50 Prefixes from unregistered ASNs in the Routing Table: 1005 Number of instances of unregistered ASNs: 1010 Number of 32-bit ASNs allocated by the RIRs: 40761 Number of 32-bit ASNs visible in the Routing Table: 33760 Prefixes from 32-bit ASNs in the Routing Table: 164587 Number of bogon 32-bit ASNs visible in the Routing Table: 16 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 526 Number of addresses announced to Internet: 3063369856 Equivalent to 182 /8s, 151 /16s and 80 /24s Percentage of available address space announced: 82.7 Percentage of allocated address space announced: 82.7 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.6 Total number of prefixes smaller than registry allocations: 311275 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 239683 Total APNIC prefixes after maximum aggregation: 68244 APNIC Deaggregation factor: 3.51 Prefixes being announced from the APNIC address blocks: 234521 Unique aggregates announced from the APNIC address blocks: 97382 APNIC Region origin ASes present in the Internet Routing Table: 13128 APNIC Prefixes per ASN: 17.86 APNIC Region origin ASes announcing only one prefix: 3821 APNIC Region transit ASes present in the Internet Routing Table: 1756 Average APNIC Region AS path length visible: 4.6 Max APNIC Region AS path length visible: 31 Number of APNIC region 32-bit ASNs visible in the Routing Table: 8383 Number of APNIC addresses announced to Internet: 773709312 Equivalent to 46 /8s, 29 /16s and 222 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-151865 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 267297 Total ARIN prefixes after maximum aggregation: 121921 ARIN Deaggregation factor: 2.19 Prefixes being announced from the ARIN address blocks: 268818 Unique aggregates announced from the ARIN address blocks: 129483 ARIN Region origin ASes present in the Internet Routing Table: 19070 ARIN Prefixes per ASN: 14.10 ARIN Region origin ASes announcing only one prefix: 6975 ARIN Region transit ASes present in the Internet Routing Table: 1935 Average ARIN Region AS path length visible: 3.8 Max ARIN Region AS path length visible: 35 Number of ARIN region 32-bit ASNs visible in the Routing Table: 4684 Number of ARIN addresses announced to Internet: 1289197824 Equivalent to 76 /8s, 215 /16s and 153 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 262593 Total RIPE prefixes after maximum aggregation: 121388 RIPE Deaggregation factor: 2.16 Prefixes being announced from the RIPE address blocks: 259388 Unique aggregates announced from the RIPE address blocks: 155057 RIPE Region origin ASes present in the Internet Routing Table: 28164 RIPE Prefixes per ASN: 9.21 RIPE Region origin ASes announcing only one prefix: 11992 RIPE Region transit ASes present in the Internet Routing Table: 3957 Average RIPE Region AS path length visible: 4.2 Max RIPE Region AS path length visible: 36 Number of RIPE region 32-bit ASNs visible in the Routing Table: 10898 Number of RIPE addresses announced to Internet: 716165760 Equivalent to 42 /8s, 175 /16s and 210 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 117313 Total LACNIC prefixes after maximum aggregation: 28373 LACNIC Deaggregation factor: 4.13 Prefixes being announced from the LACNIC address blocks: 116660 Unique aggregates announced from the LACNIC address blocks: 48901 LACNIC Region origin ASes present in the Internet Routing Table: 11001 LACNIC Prefixes per ASN: 10.60 LACNIC Region origin ASes announcing only one prefix: 2670 LACNIC Region transit ASes present in the Internet Routing Table: 2253 Average LACNIC Region AS path length visible: 5.0 Max LACNIC Region AS path length visible: 55 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8760 Number of LACNIC addresses announced to Internet: 175872000 Equivalent to 10 /8s, 123 /16s and 152 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-273820 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 28604 Total AfriNIC prefixes after maximum aggregation: 5648 AfriNIC Deaggregation factor: 5.06 Prefixes being announced from the AfriNIC address blocks: 36582 Unique aggregates announced from the AfriNIC address blocks: 12024 AfriNIC Region origin ASes present in the Internet Routing Table: 1698 AfriNIC Prefixes per ASN: 21.54 AfriNIC Region origin ASes announcing only one prefix: 584 AfriNIC Region transit ASes present in the Internet Routing Table: 329 Average AfriNIC Region AS path length visible: 5.0 Max AfriNIC Region AS path length visible: 37 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 1035 Number of AfriNIC addresses announced to Internet: 108125440 Equivalent to 6 /8s, 113 /16s and 221 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 9808 9139 8884 50 CHINAMOBILE-CN China Mobile Communicati 7545 5955 786 695 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4882 4192 75 ERX-CERNET-BKB China Education and Rese 7552 3616 1331 21 VIETEL-AS-AP Viettel Group, VN 7713 3510 1043 63 TELKOMNET-AS-AP PT Telekomunikasi Indon 45899 3366 1867 85 VNPT-AS-VN VNPT Corp, VN 9498 2557 499 237 BBIL-AP BHARTI Airtel Ltd., IN 4766 2533 11252 598 KIXS-AS-KR Korea Telecom, KR 24560 2308 849 416 AIRTELBROADBAND-AS-AP Bharti Airtel Ltd 45090 2180 1438 79 TENCENT-NET-AP Shenzhen Tencent Compute Complete listing at https://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 7674 10624 2899 AMAZON-02, US 11492 4546 301 570 CABLEONE, US 7155 3893 265 32 VIASAT-SP-BACKBONE, US 22773 3702 3060 317 ASN-CXA-ALL-CCI-22773-RDC, US 6327 3527 1320 63 SHAW, CA 16625 3512 1834 2531 AKAMAI-AS, US 749 3064 50660 2331 DNIC-AS-00749, US 30036 2583 369 338 MEDIACOM-ENTERPRISE-BUSINESS, US 7018 2578 24059 1552 ATT-INTERNET4, US 396982 2565 3482 360 GOOGLE-CLOUD-PLATFORM, US Complete listing at https://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 6961 1730 151 UNI2-AS, ES 9121 6365 1692 17 TTNET, TR 20940 4081 3400 182 AKAMAI-ASN1, NL 39891 4010 234 47 ALJAWWALSTC-AS, SA 8551 3977 374 38 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 12389 2952 2291 913 ROSTELECOM-AS, RU 9009 2645 252 1362 M247, RO 47331 2589 386 1951 TTNET, TR 34984 2250 357 609 TELLCOM-AS, TR 6849 2194 339 20 UKRTELNET, UA Complete listing at https://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 10799 3336 597 Uninet S.A. de C.V., MX 10620 3461 506 848 Telmex Colombia S.A., CO 11830 2261 369 64 Instituto Costarricense de Electricidad 13999 2131 350 554 Mega Cable, S.A. de C.V., MX 28573 1333 2327 261 Claro NXT Telecomunicacoes Ltda, BR 6503 1293 338 521 Axtel, S.A.B. de C.V., MX 3816 1288 728 155 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 6147 1154 369 22 Telefonica del Peru S.A.A., PE 11664 1133 184 474 Techtel LMDS Comunicaciones Interactiva 26615 989 2466 43 TIM SA, BR Complete listing at https://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24835 1548 537 31 RAYA-AS, EG 24863 1537 393 21 LINKdotNET-AS, EG 36992 1356 1520 269 ETISALAT-MISR, EG 36903 1242 550 99 MT-MPLS, MA 29571 1011 67 40 ORANGE-COTE-IVOIRE, CI 36935 882 520 42 Vodafone-, EG 6713 612 1863 34 IAM-AS, MA 15399 527 53 45 WANANCHI-, KE 37342 441 32 1 MOVITEL, MZ 23889 400 231 14 MauritiusTelecom, MU Complete listing at https://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 10799 3336 597 Uninet S.A. de C.V., MX 9808 9139 8884 50 CHINAMOBILE-CN China Mobile Communicati 16509 7674 10624 2899 AMAZON-02, US 12479 6961 1730 151 UNI2-AS, ES 9121 6365 1692 17 TTNET, TR 7545 5955 786 695 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4882 4192 75 ERX-CERNET-BKB China Education and Rese 11492 4546 301 570 CABLEONE, US 20940 4081 3400 182 AKAMAI-ASN1, NL 39891 4010 234 47 ALJAWWALSTC-AS, SA Complete listing at https://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 9808 9139 9089 CHINAMOBILE-CN China Mobile Communications Grou 12479 6961 6810 UNI2-AS, ES 9121 6365 6348 TTNET, TR 7545 5955 5260 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4882 4807 ERX-CERNET-BKB China Education and Research Net 16509 7674 4775 AMAZON-02, US 11492 4546 3976 CABLEONE, US 39891 4010 3963 ALJAWWALSTC-AS, SA 8551 3977 3939 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 20940 4081 3899 AKAMAI-ASN1, NL Complete listing at https://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 65000 PRIVATE 2.92.64.0/20 8371 VIMPELCOM-NN Vimpelcom, Nizh 65000 PRIVATE 2.92.80.0/20 8371 VIMPELCOM-NN Vimpelcom, Nizh 398083 UNALLOCATED 5.133.124.0/24 399587 UT, US 33123 UNALLOCATED 8.10.69.0/24 11168 SCC, US 16641 UNALLOCATED 8.10.194.0/24 3356 LEVEL3, US 16641 UNALLOCATED 8.10.210.0/24 3356 LEVEL3, US 25674 UNALLOCATED 8.12.76.0/24 3356 LEVEL3, US 16641 UNALLOCATED 8.12.250.0/24 3356 LEVEL3, US 25674 UNALLOCATED 8.14.115.0/24 3356 LEVEL3, US 12169 UNALLOCATED 8.15.207.0/24 32787 PROLEXIC-TECHNOLOGIES-DDOS-M Complete listing at https://thyme.apnic.net/current/data-badAS Prefixes from the Special Purpose Address Registry (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at https://thyme.apnic.net/current/data-spar Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.131.184.0/24 Origin: 174 COGENT-174, US 23.131.184.0/24 Transit: 2516 KDDI KDDI CORPORATION, JP 23.131.185.0/24 Origin: 174 COGENT-174, US 23.131.185.0/24 Transit: 2516 KDDI KDDI CORPORATION, JP 23.131.186.0/24 Origin: 174 COGENT-174, US 23.131.186.0/24 Transit: 2516 KDDI KDDI CORPORATION, JP 23.131.187.0/24 Origin: 174 COGENT-174, US 23.131.187.0/24 Transit: 2516 KDDI KDDI CORPORATION, JP 23.131.188.0/24 Origin: 46450 PILOT, US 23.131.188.0/24 Transit: 1299 TWELVE99 Arelion, fka Telia Carrier, SE Complete listing at https://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:13 /10:39 /11:100 /12:295 /13:587 /14:1201 /15:2048 /16:13516 /17:8303 /18:13900 /19:25190 /20:44356 /21:52395 /22:110218 /23:97945 /24:545572 /25:801 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 5994 6961 UNI2-AS, ES 9121 5528 6365 TTNET, TR 8151 4784 10799 Uninet S.A. de C.V., MX 11492 3453 4546 CABLEONE, US 8551 3441 3977 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 6327 3335 3527 SHAW, CA 39891 3193 4010 ALJAWWALSTC-AS, SA 7155 2982 3893 VIASAT-SP-BACKBONE, US 22773 2731 3702 ASN-CXA-ALL-CCI-22773-RDC, US 30036 2241 2583 MEDIACOM-ENTERPRISE-BUSINESS, US Complete listing at https://thyme.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1845 2:1024 3:167 4:5 5:4065 6:118 7:5 8:1583 9:1 11:173 12:1614 13:380 14:2375 15:286 16:73 17:368 18:386 20:240 21:4 22:188 23:6012 24:2455 25:4 27:2707 29:19 31:2480 32:104 34:8 35:94 36:1808 37:4573 38:3879 39:771 40:145 41:3971 42:1154 43:2314 44:304 45:16374 46:4170 47:378 49:1723 50:1930 51:244 52:1506 54:397 55:838 56:8 57:78 58:1794 59:1159 60:1005 61:2426 62:2581 63:1950 64:5636 65:2337 66:4845 67:2983 68:1376 69:4143 70:1289 71:689 72:2988 74:2647 75:1470 76:599 77:2259 78:3958 79:3159 80:2041 81:1824 82:1499 83:1228 84:1503 85:3755 86:755 87:1932 88:2837 89:3494 90:578 91:7612 92:1994 93:2571 94:3537 95:4825 96:1315 97:345 98:1168 99:740 100:69 101:1052 102:2461 103:30496 104:4567 105:483 106:827 107:2547 108:915 109:4324 110:2024 111:3305 112:2042 113:1569 114:1605 115:2042 116:1912 117:2467 118:2333 119:1917 120:1723 121:1108 122:2593 123:2136 124:1578 125:2211 128:1259 129:949 130:971 131:2025 132:846 133:400 134:1904 135:295 136:878 137:856 138:2554 139:1522 140:1039 141:1487 142:1417 143:1422 144:1199 145:354 146:1897 147:1514 148:2283 149:1849 150:864 151:1146 152:1837 153:455 154:3802 155:1411 156:1634 157:1288 158:1041 159:2241 160:2578 161:1427 162:3530 163:1452 164:1677 165:1627 166:822 167:1731 168:3852 169:914 170:4569 171:869 172:3516 173:3106 174:1034 175:1144 176:3627 177:4782 178:3552 179:2148 180:2364 181:3358 182:3257 183:1936 184:2365 185:19962 186:4627 187:3925 188:4048 189:3435 190:9057 191:1466 192:11003 193:8801 194:7217 195:5078 196:2974 197:2445 198:6018 199:6099 200:7711 201:5833 202:10616 203:10070 204:4608 205:3500 206:3836 207:3405 208:4118 209:4818 210:4422 211:2489 212:4053 213:3457 214:1104 215:57 216:6581 217:2626 218:1287 219:575 220:2050 221:954 222:840 223:2031 End of report

1 0

Sites blocking ISP Addresses
by James Dexter 02 Dec '22

02 Dec '22

Dear list, We have address ranges that are being blocked by sites like Ticketmaster. Customer support is able to assist, and unable to receive a response from legal or hostmaster emails. What are the recommendations for requesting a removal from the blocked list at these sites?

8 7

Remote code execution bug in FreeBSD's ping (CVE-2022-23093)
by Mike Lewinski 01 Dec '22

01 Dec '22

Ooof. https://www.freebsd.org/security/advisories/FreeBSD-SA-22:15.ping.asc Some hope here: "The ping process runs in a capability mode sandbox on all affected versions of FreeBSD and is thus very constrainted in how it can interact with the rest of the system at the point where the bug can occur." Lots of other things are based on FreeBSD and may be affected, including firewalls like pfsense and OPNsense and possibly Junos. At the least I expect host discovery is ramping up by now.

1 0

Mozilla and others move to distrust the "Trustcor" CA
by Eric Kuhnke 01 Dec '22

01 Dec '22

https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/oxX69KFvsm4… Start from the top post for a full history.

1 0

Any Riot Games folks lingering on the list?
by Mike Lyon 01 Dec '22

01 Dec '22

Have a peering issue with you @ Any2LA and no one is answering your peering@ and noc@ emails. Please shoot me an email offlist. Thank You, Mike

1 0

Register Now for NANOG 87! + Hired: A NANOG Success Story + More
by Nanog News 30 Nov '22

30 Nov '22

*Register Now for NANOG 87!* *Join Us 13 - 15 Feb. in Atlanta for our 87th Meeting* Don't miss hours of ground-breaking industry talks with tech icons and networking opportunities! Register now for NANOG 87. *REGISTER NOW <https://www.nanog.org/events/nanog-87/>* *Hired: A NANOG Success Story* *Pro Tips from a Newcomer who Struck NANOG Gold at a Meeting* It was almost a professional blind date. "I remember being at the airport and asking him, so what exactly will this be like? What are we doing? And he didn't want to tell us," Jacob Smith said. The 22-year-old was finishing a master's program at Ball State University called The Center for Information and Communication Sciences. Professor and Director of Training at Ball State, Ron Kovac, invited Smith to tag along to the NANOG 84 meeting in February of this year in Austin, Texas. Kovac was Smith's professor at the time. *READ MORE <https://www.nanog.org/stories/hired-a-nanog-success-story/>* *N87 Sponsorships are Still Available! * Sponsorships are an excellent way to show your dedication in building the Internet of Tomorrow. Please contact Shawn Winstead at swinstead(a)nanog.org for more information. *NANOG Community Event: Tomorrow! * *ICANN Grant Program Implementation Update Webinar * *Date: *1 December 2022 *Time: *15:00 UTC *More info: *The Grant Program is the culmination of years of work by the ICANN community. It is a testament to the multistakeholder model in action and the ICANN organization's ability to deliver on the community's recommendations. *REGISTER NOW <https://www.icann.org/en/announcements/details/register-for-the-icann-grant…>*

1 0

CfP - ICANN DNSSEC and Security Workshop for ICANN76 Community Forum in Cancún
by Jacques Latour 29 Nov '22

29 Nov '22

Call for Participation -- ICANN DNSSEC and Security Workshop for ICANN76 Community Forum In cooperation with the ICANN Security and Stability Advisory Committee (SSAC), we are planning a DNSSEC and Security Workshop for the ICANN76 Community Forum being held as a hybrid meeting from 11-16 March 2023 in the Eastern Time Zone (GMT -5). This workshop date will be determined once ICANN creates a block schedule for us to follow; then we will be able to request a day and time. The DNSSEC and Security Workshop has been a part of ICANN meetings for several years and has provided a forum for both experienced and new people to meet, present and discuss current and future DNSSEC deployments. For reference, the most recent sessions were held at the ICANN75 Annual General Meeting on Wednesday, 21 September 2022. The presentations and transcripts are available at https://75.schedule.icann.org/meetings/hvW7BbDtvbw4hoSTx, https://75.schedule.icann.org/meetings/WLtBZqEydncda7Dsr, and https://75.schedule.icann.org/meetings/8jcmXcKTEoPTr3NQw. The DNSSEC Workshop Program Committee is developing a program for the upcoming meeting. Proposals will be considered for the following topic areas and included if space permits. In addition, we welcome suggestions for additional topics either for inclusion in the ICANN75 workshop, or for consideration for future workshops. 1. Global DNSSEC Activities Panel For this panel, we are seeking participation from those who have been involved in DNSSEC deployment as well as from those who have not deployed DNSSEC but who have a keen interest in the challenges and benefits of deployment, including Root Key Signing Key (KSK) Rollover activities and plans. 2. DNSSEC Best Practice Now that DNSSEC has become an operational norm for many registries, registrars, and ISPs, what have we learned about how we manage DNSSEC? * Do you still submit/accept DS records with Digest Type 1? * What is the best practice around key roll-overs? * What about Algorithm roll-overs? * Do you use and support DNSKEY Algorithms 13-16? * How often do you review your disaster recovery procedures? * Is there operational familiarity within your customer support teams? * What operational statistics have been gathered about DNSSEC? * Are there experiences being documented in the form of best practices, or something similar, for transfer of signed zones? Activities and issues related to DNSSEC in the DNS Root Zone are also desired. 3. DNSSEC Deployment Challenges The program committee is seeking input from those that are interested in implementation of DNSSEC but have general or particular concerns with DNSSEC. In particular, we are seeking input from individuals that would be willing to participate in a panel that would discuss questions of the following nature: * Are there any policies directly or indirectly impeding your DNSSEC deployment? (RRR model, CDS/CDNSKEY automation) * What are your most significant concerns with DNSSEC, e.g., complexity, training, implementation, operation or something else? * What do you expect DNSSEC to do for you and what doesn't it do? * What do you see as the most important trade-offs with respect to doing or not doing DNSSEC? 4. Security Panel The program committee is looking for presentations on DNS, DNSSEC, routing and other topics that could impact the security and/or stability of the Internet. We are looking for presentations that cover implementation issues, challenges, opportunities and best practices for: * Emerging threats that could impact the security and/or stability of the Internet * DoH and DoT * RPKI (Resource Public Key Infrastructure) * BGP routing & secure implementations * MANRS ( Mutually Agreed Norms for Routing Security) * Browser security - DNS, DNSSEC, DoH * EMAIL & DNS related security - DMARC, DKIM, TLSA, etc... If you are interested in participating, please send a brief (1-3 sentence) description of your proposed presentation to dnssec-security-workshop(a)icann.org<mailto:dnssec-security-workshop@icann.org> by COB Friday, 20 January 2023. Thank you, Jacques On behalf of the DNSSEC Workshop Program Committee: Steve Crocker, Shinkuro Mark Elkins, DNS/ZACR Jacques Latour, .CA Russ Mundy, Parsons Ondrej Filip, CZ.NIC Yoshiro Yoneya, JPRS Fred Baker, ISC Dan York, Internet Society

1 0

Newbie Concern: (BGP) AS-Path Oscillation
by Pirawat WATANAPONGSE 28 Nov '22

28 Nov '22

Dear Guru(s), My apologies upfront if this question has already been asked. If that’s the case, please kindly point me to the solution|thread so that the mailing list bandwidth is not wasted. Situation: On one of our prefixes, we are detecting continuous “BGP AS-Path Changes” in the order of 1,000 announcements per hour---practically one every 3-4 seconds. Those paths oscillate between two of our immediate upstreams. Questions: 1. Is this number of events “normal” for a prefix? 2. Is there any way we, as the tail-end (Origin Announcer), can do to reduce it? Or should I just “let it be”? 3. [Extra] Is this kind of oscillation affecting user experience, say, throughput and/or latency? Thank you in advance for all the pointers and help. Best Regards, Pirawat.

4 3