- Test - lists.nanog.org

FORT monitoring/visibility
by Randy Bush 27 Oct '21

27 Oct '21

i run a FORT RPKI relying party instance. i am looking for some visibility into its operation. is it up: both ways, fetching and serving routers? from what CAs has it pulled, how recently and frequently with what success? what routers is it serving with rpki-rtr 323? blah blah blah my old DRL RP instances produce MRTG graphs etc of the CA fetching side, though nothing on the rpki-rtr side. randy --- https://seclists.org/nanog/2021/Jun/259 and ggm's excellent decoding thereof, https://blog.apnic.net/2021/07/15/some-handy-roa-advice-from-randy-bush/

5 4

ROA mirror to IRR?
by Shawn 27 Oct '21

27 Oct '21

Curious if any IRR databases are mirroring/importing ROA data - creating route|6 objects from ROA? LACNIC requires a route object to be created when creating a ROA. APNIC you create a route object, then may generate a ROA during that process. Other RIR's, curious if anything tries to bring the two together? Applicable for networks that only use IRR data (do not yet validate RPKI), they could benefit. IRR questions: How do most large networks maintain (automate) their IRR records? Is it standard practice to accept more specifics (append IPv4 "le /24" and IPv6 "le /48")? Or is it expected to have one IRR route per BGP announcement?

6 5

question about enabling RPKI using Hosted mode
by Edvinas Kairys 27 Oct '21

27 Oct '21

Hello, We're thinking of enabling BGP ROA, because more and more ISPs are using strict RPKI mode. Does enabling Hosted Mode (where it doesn't requires any additional configuration on client end) on RPKI could for some reason could cause a traffic loss ? The only disasterious scenario i could think of, is if we would enable ROA with incorrect sub prefixes, maximum prefix length. Am i Right ? Thanks

3 4

General Survey about DNSSEC, DMARC and RPKI <by November 5th>
by Akira Shibuya 27 Oct '21

27 Oct '21

Dear nanog members, We hope this message finds you safe and well. Japan Network Information Center (JPNIC) is conducting a survey about the situation of the implementation of security technologies. The Internet is spreading in a coordinated manner thanks to its openness and autonomous, distributed and cooperative architecture, On the other hand, security technologies (DNSSEC, mail security such as DMARC, routing security such as RPKI), which need to be tackled in a coordinated manner, have been slow to spread in Japan. We would like to know the situation and efforts made in your country/economy. We will be grateful if you could respond to the questionnaire below by November 5th. https://forms.gle/7s6s2oWmpTtPNecLA If you have any questions, please let us know by sending an email to arch-info(a)nic.ad.jp. Sorry for bother you but thank you for your cooperation. ----- Akira Shibuya (on behalf of JPNIC secretariat)

1 0

re:
by Miles Fidelman 27 Oct '21

27 Oct '21

*Mel Beckman*mel at beckman.org <mailto:nanog%40nanog.org?Subject=Re%3A%20Network%20visibility&In-Reply-To=%3C3F9A10AF-090C-410A-96BC-CEF1B0371B3C%40beckman.org%3E> wrote: > Mark, > > Before 1983, the ARPANET wasn’t an internet, let alone The Internet. Each ARPANET connection required a host-specific interface (the “IMP”) and simplex Network Control Protocol (NCP). NCP used users' email addresses, and routing had to be specified in advance within each NCP message. > This is just so completely wrong as to be ludicrous. First of all, the IMP was the box. Computers connected using the protocols specified in BBN Report 1822 (https://walden-family.com/impcode/BBN1822_Jan1976.pdf) NCP was alternately referred to as the Network Control PROGRAM and the Network Control Protocol. It essentially played the role of TCP, managing pairs of simplex connections. Routing was completely dynamic - that was the whole point of the IMP software. And routing did NOT require email addresses - those operated much further up the protocol stack. Perhaps you're confusing this with UUCP mail addressing ("bang" paths). Or possibly BITNET or FidoNet - which I believe also were source routed (but memory fails on that. re. > Even so, the Internet as a platform open to anyone didn’t start until 1992. I know you joined late, in 1999, so you probably missed out on this history. :) You know, there are people on this list who were back there in 1969, and actually wrote some of that code - so you might want to stop spouting nonsense. (Not me, I was a user, starting in 1971, didn't get to BBN until 1985 - when we were still dealing with stragglers who didn't quite manage to cutover to TCP/IP on the Flag Day.) -- In theory, there is no difference between theory and practice. In practice, there is. .... Yogi Berra Theory is when you know everything but nothing works. Practice is when everything works but no one knows why. In our lab, theory and practice are combined: nothing works and no one knows why. ... unknown

8 9

Guam Private Line
by Robert DeVita 26 Oct '21

26 Oct '21

Any recommendations for Private Line service into Guam from the US? 2 gigs? Thanks Rob [photo] [cid:image002.png@01D7CA4B.D0993B20] Robert DeVita CEO & Founder [cid:image003.png@01D7CA4B.D0993B20]<http://www.linkedin.com/company/mejeticks> [cid:image004.png@01D7CA4B.D0993B20]<http://twitter.com/mejeticks> [cid:image005.png@01D7CA4B.D0993B20] 469-581-2160<tel:469-581-2160> [cid:image006.png@01D7CA4B.D0993B20] 469-441-8864<tel:469-441-8864> [cid:image007.png@01D7CA4B.D0993B20] radevita(a)mejeticks.com<mailto:radevita@mejeticks.com> [cid:image008.png@01D7CA4B.D0993B20] www.mejeticks.com<http://mejeticks.com/> [cid:image009.png@01D7CA4B.D0993B20] 3100 Carlisle St, 16-113, Dallas TX 75204

1 0

DNS/CDN Issue at Microsoft
by Brett Carr 25 Oct '21

25 Oct '21

Hi, is there anyone on list at Microsoft who can assist with with a DNS/CDN Issue with one of Nominet's recursive DNS service being incorrectly located in Japan The query in question is for hnd-efz.ms-acdc.office.com<http://hnd-efz.ms-acdc.office.com> If anyone who can help can drop me an email I would really appreciate it. Thanks Brett -- Brett Carr Manager DNS Engineering Nominet UK

1 0

ARIN POC RegDate...
by bzs＠theworld.com 25 Oct '21

25 Oct '21

Perhaps silly but am I the only one with an ARIN POC RegDate of 1970-01-01? I've been in that db a long time but not quite that long. Does it matter? I have no idea what the correct date might be so the instructions to correct don't help. If I needed that info I'd consult the ARIN DB but I guess not. I guess I'm wondering if it's just their temporary DB glitch so I should ignore it. The rest of the info is perfect beyond my wildest dreams. -- -Barry Shein Software Tool & Die | bzs(a)TheWorld.com | http://www.TheWorld.com Purveyors to the Trade | Voice: +1 617-STD-WRLD | 800-THE-WRLD The World: Since 1989 | A Public Information Utility | *oo*

3 2

Smokeping - EchoPingHttps
by Mike Hammett 24 Oct '21

24 Oct '21

I used EchoPingHttps for the first time today. I pulled up the top 20 sites (well, removing duplicate sites from the same company) from Alexa and put them in to trend response times. I've had "this feels slow" over the years, but no way to really track that other than feels and pings. I noticed that a few (Facebook, Salesforce, ESPN, and Zillow) don't chart at all, with varying errors in a smokeping --debug. I've noticed that a couple more (Amazon and Etsy) are fickle in their responses. I assume if they're not responding, they're poo pooing on my fake client. Am I in the right ballpark? Next, is there a better way of doing this? I saw the curl plugin, but it was only after I had seen EchoPingHttps, so maybe curl is "better." ----- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest-IX http://www.midwest-ix.com

3 3

Re: Network visibility
by Mark Tinka 24 Oct '21

24 Oct '21

On 10/20/21 20:37, Lady Benjamin Cannon of Glencoe, ASCE wrote: > -48VDC power is still the best. I really envy folk that love DC for networking gear :-). Work in 2007 was an all-DC network. I rebuilt it into AC, considering the ISP also owned the data centre (most of whose customers bought AC). The space we freed up and the ease of deployment was night & day. Currently, we obviously need DC for the terrestrial Transport and wet plants (because that's just how classic telco rolls), but I also switched all IP/MPLS gear to AC soon as I arrived. Heck, even the Arbor (now Netscout) gear, as well as the HP server rack, was loaded with DC power supplies. Those things just had to go. There is an avenue of pleasure in not having to spend inordinate amounts of time adding major electrical planning to deploying/decommissioning a router, switch or server. But yeah, I know the AC vs. DC discussion can become a rat hole. I'm aware of data centre operators now providing DC as an option for their expansion projects, when they previously had it as the norm, FWIW. Mark.

5 5