- Test - lists.nanog.org

RE: Juniper configuration recommendations/BCP
by Jakob Heitz (jheitz) 13 Oct '20

13 Oct '20

IOS-XR accepts extended communities and large communities by default. You have to enable to send them, but not receive. Regards, Jakob. -----Original Message----- Date: Mon, 12 Oct 2020 15:06:05 +0100 From: <adamv0025(a)netconsultings.com> Here's a fun one. By default Junos accepts extended communities on any BGP session (not just on MP-BGP sessions like it's the default case on cisco -unless explicitly enabled). Since most operators are not aware of this default Junos behaviour, one can be importing routes to interesting places if one were so inclined. -so yeah bleach unwanted communities on ingress (bleach those that would interfere with the ones used by the AS internally -so called "untaggable"/"untouchable" ). adam > -----Original Message----- > From: NANOG <nanog- > bounces+adamv0025=netconsultings.com(a)nanog.org> On Behalf Of > Chriztoffer Hansen > Sent: Thursday, October 8, 2020 11:05 AM > To: nanog(a)nanog.org > Subject: Juniper configuration recommendations/BCP > Importance: Low > > > On 08/10/2020 11:37, Forrest Christian (List Account) wrote: > > Is there anything I should worry about which is Juniper-specific? > > JUNOS default ARP timeout: 20 min. > > If you connect to IXP's. Recommended ARP timeout: 4 hours.

1 0

Securing Greenfield Service Provider Clients
by Christopher J. Wolff 11 Oct '20

11 Oct '20

Dear Nanog; Hope everyone is getting ready for a good weekend. I'm working on a greenfield service provider network and I'm running into a security challenge. I hope the great minds here can help. Since the majority of traffic is SSL/TLS, encrypted malicious content can pass through even an "NGFW" device without detection and classification. Without setting up SSL encrypt/decrypt through a MITM setup and handing certificates out to every client, is there any other software/hardware that can perform DPI and/or ssl analysis so I can prevent encrypted malicious content from being downloaded to my users? Have experience with Palo and Firepower but even these need the MITM approach. I appreciate any advice anyone can provide. Best, CJ

11 13

Centurylink Boise Networking Oddness
by Allen Smith 09 Oct '20

09 Oct '20

I apologize for the noise, this seems like the kind of thing where it actually isn't possible to get a message to the right folks through the front door. Hoping someone subscribed here can take a look. Looks like something here in Boise is squirrelly. fw1$ traceroute -A -I twitch.tv traceroute: Warning: twitch.tv has multiple addresses; using 151.101.66.167 traceroute to twitch.tv (151.101.66.167), 64 hops max, 60 byte packets 1 boid-dsl-gw17.boid.qwest.net (184.99.64.17) [AS209, AS209] 10.036 ms 9.39 ms 9.633 ms 2 184-99-65-133.boid.qwest.net (184.99.65.133) [AS209, AS209] 108.501 ms 96.669 ms 92.894 ms 3 4.68.63.137 (4.68.63.137) [AS3356] 117.743 ms 125.807 ms 127.163 ms 4 * * * 5 4.31.15.194 (4.31.15.194) [AS3356] 125.038 ms 113.778 ms 102.7 ms 6 151.101.66.167 (151.101.66.167) [AS54113] 115.716 ms 121.388 ms 118.879 ms Using lookingglass.centurylink.com I see the same thing from the other direction. Tracing route to 184.99.65.134 1 ae-2-3615.edge6.Seattle1.Level3.net (4.69.219.210) 0ms 0ms 0ms 2 4.68.63.134 (4.68.63.134) 10ms 10ms 10ms 3 boid-agw2.inet.qwest.net (205.171.94.2) 26ms 26ms 26ms 4 184-99-65-134.boid.qwest.net (184.99.65.134) 126ms 118ms All of this is around Thu Oct 8 12:10:31 MDT 2020 Thanks, -Allen

3 3

Charter/spectrum contact (AS20115)
by Ross Tajvar 09 Oct '20

09 Oct '20

Hi, can someone reach out off-list please? We are seeing very high latency to Spectrum residential users from LAX.

1 0

Weekly Routing Table Report
by cscora＠apnic.net 09 Oct '20

09 Oct '20

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 10 Oct, 2020 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 826062 Prefixes after maximum aggregation (per Origin AS): 316047 Deaggregation factor: 2.61 Unique aggregates announced (without unneeded subnets): 398199 Total ASes present in the Internet Routing Table: 69603 Prefixes per ASN: 11.87 Origin-only ASes present in the Internet Routing Table: 59808 Origin ASes announcing only one prefix: 24791 Transit ASes present in the Internet Routing Table: 9795 Transit-only ASes present in the Internet Routing Table: 304 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 30 Max AS path prepend of ASN ( 45582) 27 Prefixes from unregistered ASNs in the Routing Table: 947 Number of instances of unregistered ASNs: 948 Number of 32-bit ASNs allocated by the RIRs: 33749 Number of 32-bit ASNs visible in the Routing Table: 27899 Prefixes from 32-bit ASNs in the Routing Table: 127659 Number of bogon 32-bit ASNs visible in the Routing Table: 16 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 518 Number of addresses announced to Internet: 2861122816 Equivalent to 170 /8s, 137 /16s and 69 /24s Percentage of available address space announced: 77.3 Percentage of allocated address space announced: 77.3 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.5 Total number of prefixes smaller than registry allocations: 278612 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 215567 Total APNIC prefixes after maximum aggregation: 63344 APNIC Deaggregation factor: 3.40 Prefixes being announced from the APNIC address blocks: 211259 Unique aggregates announced from the APNIC address blocks: 86600 APNIC Region origin ASes present in the Internet Routing Table: 10908 APNIC Prefixes per ASN: 19.37 APNIC Region origin ASes announcing only one prefix: 3069 APNIC Region transit ASes present in the Internet Routing Table: 1584 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 30 Number of APNIC region 32-bit ASNs visible in the Routing Table: 6023 Number of APNIC addresses announced to Internet: 778576512 Equivalent to 46 /8s, 104 /16s and 34 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-141625 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 241395 Total ARIN prefixes after maximum aggregation: 111284 ARIN Deaggregation factor: 2.17 Prefixes being announced from the ARIN address blocks: 239104 Unique aggregates announced from the ARIN address blocks: 116911 ARIN Region origin ASes present in the Internet Routing Table: 18600 ARIN Prefixes per ASN: 12.86 ARIN Region origin ASes announcing only one prefix: 6768 ARIN Region transit ASes present in the Internet Routing Table: 1908 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 24 Number of ARIN region 32-bit ASNs visible in the Routing Table: 3461 Number of ARIN addresses announced to Internet: 1089748224 Equivalent to 64 /8s, 244 /16s and 61 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-399260 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 232714 Total RIPE prefixes after maximum aggregation: 110090 RIPE Deaggregation factor: 2.11 Prefixes being announced from the RIPE address blocks: 228843 Unique aggregates announced from the RIPE address blocks: 136172 RIPE Region origin ASes present in the Internet Routing Table: 27439 RIPE Prefixes per ASN: 8.34 RIPE Region origin ASes announcing only one prefix: 11844 RIPE Region transit ASes present in the Internet Routing Table: 3887 Average RIPE Region AS path length visible: 4.3 Max RIPE Region AS path length visible: 30 Number of RIPE region 32-bit ASNs visible in the Routing Table: 9558 Number of RIPE addresses announced to Internet: 709215616 Equivalent to 42 /8s, 69 /16s and 197 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 111522 Total LACNIC prefixes after maximum aggregation: 25869 LACNIC Deaggregation factor: 4.31 Prefixes being announced from the LACNIC address blocks: 112696 Unique aggregates announced from the LACNIC address blocks: 47831 LACNIC Region origin ASes present in the Internet Routing Table: 10540 LACNIC Prefixes per ASN: 10.69 LACNIC Region origin ASes announcing only one prefix: 2613 LACNIC Region transit ASes present in the Internet Routing Table: 1969 Average LACNIC Region AS path length visible: 5.0 Max LACNIC Region AS path length visible: 29 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8130 Number of LACNIC addresses announced to Internet: 174398976 Equivalent to 10 /8s, 101 /16s and 30 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-272796 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 23916 Total AfriNIC prefixes after maximum aggregation: 4738 AfriNIC Deaggregation factor: 5.05 Prefixes being announced from the AfriNIC address blocks: 33642 Unique aggregates announced from the AfriNIC address blocks: 10257 AfriNIC Region origin ASes present in the Internet Routing Table: 1415 AfriNIC Prefixes per ASN: 23.78 AfriNIC Region origin ASes announcing only one prefix: 497 AfriNIC Region transit ASes present in the Internet Routing Table: 288 Average AfriNIC Region AS path length visible: 5.1 Max AfriNIC Region AS path length visible: 28 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 727 Number of AfriNIC addresses announced to Internet: 108678912 Equivalent to 6 /8s, 122 /16s and 79 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7545 5689 769 679 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4700 4192 73 ERX-CERNET-BKB China Education and Rese 7552 3591 1330 21 VIETEL-AS-AP Viettel Group, VN 45899 3243 1896 51 VNPT-AS-VN VNPT Corp, VN 7713 2715 829 620 TELKOMNET-AS-AP PT Telekomunikasi Indon 9808 2551 9043 60 CMNET-GD Guangdong Mobile Communication 4766 2349 11103 554 KIXS-AS-KR Korea Telecom, KR 9498 2304 450 231 BBIL-AP BHARTI Airtel Ltd., IN 4755 2143 441 193 TATACOMM-AS TATA Communications formerl 9394 2042 4914 18 CTTNET China TieTong Telecommunications Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 11492 4578 306 797 CABLEONE, US 16509 4355 8631 1991 AMAZON-02, US 7155 4034 264 32 VIASAT-SP-BACKBONE, US 22773 3657 2985 182 ASN-CXA-ALL-CCI-22773-RDC, US 6327 3351 1323 82 SHAW, CA 16625 3089 1625 2219 AKAMAI-AS, US 209 2523 5060 518 CENTURYLINK-US-LEGACY-QWEST, US 30036 2466 366 134 MEDIACOM-ENTERPRISE-BUSINESS, US 26484 2388 149 312 IKGUL-26484, US 5650 2313 2982 1626 FRONTIER-FRTR, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 6202 1652 139 UNI2-AS, ES 39891 3652 203 21 ALJAWWALSTC-AS, SA 8551 3438 379 45 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 3206 2217 1027 AKAMAI-ASN1, EU 12389 2781 2277 868 ROSTELECOM-AS, RU 47331 2264 399 1720 TTNET, TR 34984 2198 355 572 TELLCOM-AS, TR 9009 2153 228 1164 M247, GB 13188 1609 100 32 TRIOLAN, UA 61317 1332 156 595 ASDETUK http://www.heficed.com, GB Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8117 3330 604 Uninet S.A. de C.V., MX 10620 3387 529 527 Telmex Colombia S.A., CO 11830 2564 369 63 Instituto Costarricense de Electricidad 6503 1594 322 446 Axtel, S.A.B. de C.V., MX 7303 1482 953 268 Telecom Argentina S.A., AR 13999 1461 460 389 Mega Cable, S.A. de C.V., MX 28573 1348 2251 223 CLARO S.A., BR 3816 1157 577 162 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 6147 1146 379 39 Telefonica del Peru S.A.A., PE 11664 985 211 408 Techtel LMDS Comunicaciones Interactiva Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1403 393 22 LINKdotNET-AS, EG 36992 1187 1527 125 ETISALAT-MISR, EG 24835 1106 468 28 RAYA-AS, EG 36903 918 480 94 MT-MPLS, MA 29571 700 68 12 ORANGE-COTE-IVOIRE, CI 6713 552 1863 34 IAM-AS, MA 15399 492 46 15 WANANCHI-, KE 37342 481 32 1 MOVITEL, MZ 36935 450 519 37 Vodafone-, EG 36914 350 82 3 KENET-AS, KE Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8117 3330 604 Uninet S.A. de C.V., MX 12479 6202 1652 139 UNI2-AS, ES 7545 5689 769 679 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4700 4192 73 ERX-CERNET-BKB China Education and Rese 11492 4578 306 797 CABLEONE, US 16509 4355 8631 1991 AMAZON-02, US 7155 4034 264 32 VIASAT-SP-BACKBONE, US 22773 3657 2985 182 ASN-CXA-ALL-CCI-22773-RDC, US 39891 3652 203 21 ALJAWWALSTC-AS, SA 7552 3591 1330 21 VIETEL-AS-AP Viettel Group, VN Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 12479 6202 6063 UNI2-AS, ES 7545 5689 5010 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4700 4627 ERX-CERNET-BKB China Education and Research Net 7155 4034 4002 VIASAT-SP-BACKBONE, US 11492 4578 3781 CABLEONE, US 39891 3652 3631 ALJAWWALSTC-AS, SA 7552 3591 3570 VIETEL-AS-AP Viettel Group, VN 22773 3657 3475 ASN-CXA-ALL-CCI-22773-RDC, US 8551 3438 3393 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 6327 3351 3269 SHAW, CA Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 22357 UNALLOCATED 8.7.108.0/24 3356 LEVEL3, US 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 174 COGENT-174, US 32985 UNALLOCATED 8.28.31.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 174 COGENT-174, US 23061 UNALLOCATED 8.39.119.0/24 3356 LEVEL3, US 395438 UNALLOCATED 8.42.206.0/24 3356 LEVEL3, US 46766 UNALLOCATED 8.44.208.0/24 3356 LEVEL3, US 40544 UNALLOCATED 12.0.33.0/24 6461 ZAYO-6461, US 46505 UNALLOCATED 12.7.131.0/24 7018 ATT-INTERNET4, US Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.141.0.0/24 Origin: 395350 UNASSIGNED Transit: 11426 TWC-11426-CAROLINAS, US 23.142.80.0/24 Origin: 10753 LVLT-10753, US Transit: 3356 LEVEL3, US 23.157.0.0/24 Origin: 395101 UNASSIGNED Transit: 33657 CMCS, US 27.100.7.0/24 Origin: 56096 UNASSIGNED Transit: 45455 TH-2S1N-AP Two S One N Co Ltd, Internet 27.126.156.0/22 Origin: 55827 UNASSIGNED Transit: 9930 TTNET-MY TIME dotCom Berhad No. 14, Jala Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:9 /9:12 /10:39 /11:100 /12:288 /13:577 /14:1169 /15:1930 /16:13467 /17:8312 /18:13999 /19:25626 /20:40928 /21:49881 /22:102544 /23:86342 /24:479563 /25:1276 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 5167 6202 UNI2-AS, ES 11492 3695 4578 CABLEONE, US 6327 3148 3351 SHAW, CA 7155 3122 4034 VIASAT-SP-BACKBONE, US 8551 2897 3438 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 8151 2839 8117 Uninet S.A. de C.V., MX 22773 2825 3657 ASN-CXA-ALL-CCI-22773-RDC, US 39891 2801 3652 ALJAWWALSTC-AS, SA 30036 2209 2466 MEDIACOM-ENTERPRISE-BUSINESS, US 5650 1995 2313 FRONTIER-FRTR, US Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1645 2:1139 3:33 4:19 5:3618 6:54 8:1484 9:1 11:1 12:1767 13:343 14:2352 15:72 16:9 17:297 18:89 20:111 23:4033 24:2328 25:3 27:2323 31:2165 32:119 34:1 35:43 36:1003 37:3492 38:1896 39:466 40:150 41:3797 42:635 43:2136 44:219 45:14743 46:3554 47:320 49:1541 50:1649 51:103 52:1117 54:230 55:697 56:6 57:54 58:1600 59:1164 60:805 61:2319 62:2167 63:2003 64:5273 65:2385 66:5078 67:2918 68:1165 69:4072 70:1395 71:677 72:2988 74:2562 75:1455 76:674 77:1993 78:2084 79:2630 80:2053 81:1632 82:1324 83:1147 84:1254 85:2762 86:568 87:1795 88:1455 89:2858 90:371 91:7150 92:1577 93:2503 94:2805 95:3638 96:1237 97:337 98:937 99:981 100:87 101:1022 102:1098 103:24472 104:3582 105:389 106:909 107:2117 108:697 109:3746 110:1971 111:2348 112:1691 113:1433 114:1527 115:1833 116:1826 117:2107 118:2187 119:1740 120:911 121:1051 122:2558 123:2048 124:1633 125:2140 128:1378 129:1248 130:736 131:1943 132:752 133:307 134:1365 135:330 136:648 137:878 138:2320 139:1311 140:746 141:1101 142:982 143:1216 144:1147 145:348 146:1387 147:1245 148:2138 149:1203 150:757 151:1325 152:1571 153:437 154:3334 155:1269 156:2594 157:1104 158:885 159:1975 160:1968 161:1078 162:3196 163:899 164:1520 165:1313 166:590 167:1660 168:3546 169:617 170:4382 171:779 172:1989 173:2871 174:973 175:1045 176:2794 177:4281 178:2709 179:1889 180:2250 181:2563 182:3107 183:1441 184:2431 185:17077 186:3952 187:3012 188:3305 189:2677 190:9040 191:1476 192:10436 193:7741 194:6306 195:4551 196:3162 197:2156 198:6063 199:5930 200:7324 201:5273 202:10542 203:10193 204:4643 205:3086 206:3217 207:3263 208:3987 209:4505 210:4223 211:2078 212:3526 213:3271 214:1186 215:60 216:6130 217:2472 218:853 219:614 220:2049 221:914 222:974 223:1654 End of report

1 0

The clean network in US
by Danny Pinto 09 Oct '20

09 Oct '20

Some questions on the clean network program adoption/policy as a network operator. https://www.state.gov/the-clean-network/ Looking at some Tier 1 network operator logos and statements on that notification, Is this only about choice of network electronics deployment for future.. Would this really change Internet interconnection dynamics to 3Cs operators in US or adjustments in EU or Asia also ? How about sub sea capacity into the US. Probably there are many cables owned by consortium of Asian operators for many years ... ? Danny

1 0

Florida: Voter registration website overwhelmed at deadline
by Sean Donelan 09 Oct '20

09 Oct '20

Every election has problems. Most of the time, those problems aren't noticed. Elections rely on a lot of back-end infrastructure, besides the actual voting itself. It could be a DDOS attack, or simply duct-taped systems having trouble with the load. Voting early (mail, drop-off, in-person) means more time to fix glitches. https://apnews.com/article/virus-outbreak-election-2020-florida-elections-r… The FBI and the Cybersecurity and Infrastructure Security Agency warned elections officials nationwide last week that cyberattacks could disrupt their systems during the run-up to the election. They particularly noted “distributed denial-of-service” attacks, which inundate a computer system with requests, potentially clogging up servers until the system becomes inaccessible to legitimate users.

8 10

Spoofer Report for NANOG for Sep 2020
by CAIDA Spoofer Project 08 Oct '20

08 Oct '20

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within usa, can. Inferred improvements during Sep 2020: ASN Name Fixed-By 39939 RISE-CO-AS39939 2020-09-01 9009 M247 2020-09-02 13857 ONLINEMAC 2020-09-19 10886 MAX-GIGAPOP 2020-09-22 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Sep 2020: ASN Name First-Spoofed Last-Spoofed 6939 HURRICANE 2016-02-22 2020-09-08 54825 PACKET 2016-04-15 2020-09-18 46562 TOTAL-SERVER-SOLUTIONS 2016-04-26 2020-09-03 36351 SOFTLAYER 2016-05-10 2020-09-08 13213 UK2NET 2016-07-27 2020-09-02 209 CENTURYLINK-US-LEGACY-QWEST 2016-08-16 2020-09-25 6128 CABLE-NET-1 2016-09-03 2020-09-30 20412 CLARITY-TELECOM 2016-09-30 2020-09-28 6181 FUSE-NET 2016-10-10 2020-09-28 18451 LESNET 2016-10-18 2020-09-09 14971 PINETEL 2016-10-21 2020-09-25 11427 TWC-11427-TEXAS 2016-10-21 2020-09-30 174 COGENT-174 2016-10-21 2020-09-08 32440 LONI 2016-11-03 2020-09-27 12083 WOW-INTERNET 2016-11-09 2020-09-27 22439 PERFECT-INTERNATIONAL 2016-11-22 2020-09-08 20473 AS-CHOOPA 2017-01-08 2020-09-29 9009 M247 2017-01-10 2020-09-12 63296 AWBROADBAND 2017-09-01 2020-09-29 27589 MOJOHOST 2017-09-20 2020-09-03 546 PARSONS-PGS-1 2017-11-20 2020-09-23 20448 VPNTRANET-LLC 2018-09-20 2020-09-05 20278 NEXEON 2019-03-05 2020-09-08 8047 GCI 2019-04-11 2020-09-24 62904 EONIX-COMMUNICATIONS-ASBLOCK-6 2019-07-14 2020-09-08 46375 AS-SONICTELECOM 2019-10-21 2020-09-11 11650 PLDI 2020-05-25 2020-09-11 46816 DSNETWORKS-001 2020-08-24 2020-09-08 32489 AMANAHA-NEW 2020-08-24 2020-09-02 7040 NETMINDERS 2020-08-31 2020-09-03 206804 EstNOC 2020-09-02 2020-09-03 32181 ASN-GIGENET 2020-09-02 2020-09-03 11042 NTHL 2020-09-02 2020-09-02 53340 FIBERHUB 2020-09-02 2020-09-02 32780 HOSTINGSERVICES-INC 2020-09-02 2020-09-02 19318 IS-AS-1 2020-09-03 2020-09-03 398325 2020-09-05 2020-09-26 395111 KVCNET-2009 2020-09-08 2020-09-08 25780 HUGESERVER-NETWORKS 2020-09-08 2020-09-08 207134 PHOENIXNAP-SRB 2020-09-08 2020-09-08 62217 VooServers 2020-09-08 2020-09-08 206628 2020-09-10 2020-09-10 23393 NUCDN 2020-09-30 2020-09-30 30602 2020-09-30 2020-09-30 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block… Source Address Validation issues inferred during Sep 2020 using open resolver tests: ASN Name Last-Detected 11260 EASTLINK-HSI 2020-09-24 12214 RAPIDDSL--WIRELESS 2020-09-24 131284 ETISALATAFG 2020-09-23 40033 RED-SPECTRUM 2020-09-23 53850 GORILLASERVERS 2020-09-22 395262 CENTRE-OF-EXCELLENCE-IN-NEXT-G 2020-09-22 26166 WATCHCOMM-WEST-OH 2020-09-19 14403 JJI-DEFAULT-00 2020-09-16 16524 METTEL 2020-09-15 32444 SAFELINK-MV 2020-09-11 53338 ITCI 2020-09-10 15081 ASN-CROS-1 2020-09-07 19257 SUBRIGO 2020-09-07 40447 SKYHAWK-GROUP 2020-09-05 53274 3DB-WIRELESS 2020-09-04 397081 AUWIRELESS-01 2020-09-04 40676 AS40676 2020-09-04 16922 OUHSC-EDU 2020-09-04 4565 MEGAPATH2-US 2020-09-04 47023 NOR-NET-COMM 2020-09-04 40651 MONSTERGOVSOL 2020-09-04 32233 PERSONA 2020-09-03 394232 TELKEL-MTL 2020-09-03 46375 AS-SONICTELECOM 2020-09-03 46328 FOUR-U 2020-09-03 6539 GT-BELL 2020-09-03 29953 MORNCOMM 2020-09-02 396236 MIMOKC 2020-09-02 53456 WESTRUX 2020-09-01 27017 NWFBR 2020-09-01 11287 AS-MSEA 2020-09-01 55175 CLOUDBURST 2020-09-01 395261 AS-HCCL-7 2020-09-01 9009 M247 2020-09-01 25636 ONTL-2002 2020-09-01 577 BACOM 2020-09-01 30600 AS-CMN 2020-09-01 Further information for these tests is available at: https://spoofer.caida.org/ornog.php?country_include=usa,can Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Fastly's Montreal POP offline
by Eric Dugas 08 Oct '20

08 Oct '20

My PNI with them in Montreal is barely passing any traffic since yesterday just before 18:00. Fastly is also on QIX in Montreal, and both LAGs shows no traffic since yesterday, same time my PNI's traffic dropped. I've tried to reach peering@ and noc@ today but no replies so far and it's been hours. If anyone from Fastly can reach me off-list or on-list. Eric

1 1

BGP in the lab - v4 & v6 live feeds from Europe
by Łukasz Bromirski 07 Oct '20

07 Oct '20

Dear NANOGers, If you’re looking for live, full BGP v4 & v6 feed for your lab or a bit of testing before going live, I just shared a short post on how to get it: https://lukasz.bromirski.net/post/bgp-w-labie-3/ Happy BGPing, -- Łukasz Bromirski CCIE R&S/SP #15929, CCDE #2012::17, PGP Key ID: 0xFD077F6A

1 0