- Test - lists.nanog.org

[NANOG-announce] Reminder: NANOG 73 CFP is open!
by Ryan Woolley via NANOG-announce 20 Apr '18

20 Apr '18

This message has been wrapped due to the DMARC policy setting to prevent NANOG subscribers from being unsubscribed due to bounces. _______________________________________________ NANOG-announce mailing list NANOG-announce(a)nanog.org https://mailman.nanog.org/mailman/listinfo/nanog-announce

1 0

Weekly Routing Table Report
by cscora＠apnic.net 20 Apr '18

20 Apr '18

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG, IRNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 21 Apr, 2018 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 696141 Prefixes after maximum aggregation (per Origin AS): 268430 Deaggregation factor: 2.59 Unique aggregates announced (without unneeded subnets): 335330 Total ASes present in the Internet Routing Table: 60451 Prefixes per ASN: 11.52 Origin-only ASes present in the Internet Routing Table: 52213 Origin ASes announcing only one prefix: 22858 Transit ASes present in the Internet Routing Table: 8238 Transit-only ASes present in the Internet Routing Table: 268 Average AS path length visible in the Internet Routing Table: 4.0 Max AS path length visible: 34 Max AS path prepend of ASN ( 30873) 32 Prefixes from unregistered ASNs in the Routing Table: 49 Number of instances of unregistered ASNs: 49 Number of 32-bit ASNs allocated by the RIRs: 22275 Number of 32-bit ASNs visible in the Routing Table: 17911 Prefixes from 32-bit ASNs in the Routing Table: 74601 Number of bogon 32-bit ASNs visible in the Routing Table: 16 Special use prefixes present in the Routing Table: 3 Prefixes being announced from unallocated address space: 340 Number of addresses announced to Internet: 2863051010 Equivalent to 170 /8s, 166 /16s and 177 /24s Percentage of available address space announced: 77.3 Percentage of allocated address space announced: 77.3 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 98.9 Total number of prefixes smaller than registry allocations: 231650 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 190615 Total APNIC prefixes after maximum aggregation: 54054 APNIC Deaggregation factor: 3.53 Prefixes being announced from the APNIC address blocks: 189511 Unique aggregates announced from the APNIC address blocks: 77395 APNIC Region origin ASes present in the Internet Routing Table: 8729 APNIC Prefixes per ASN: 21.71 APNIC Region origin ASes announcing only one prefix: 2431 APNIC Region transit ASes present in the Internet Routing Table: 1311 Average APNIC Region AS path length visible: 4.0 Max APNIC Region AS path length visible: 29 Number of APNIC region 32-bit ASNs visible in the Routing Table: 3687 Number of APNIC addresses announced to Internet: 767197698 Equivalent to 45 /8s, 186 /16s and 130 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-137529 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 207023 Total ARIN prefixes after maximum aggregation: 98996 ARIN Deaggregation factor: 2.09 Prefixes being announced from the ARIN address blocks: 207967 Unique aggregates announced from the ARIN address blocks: 98338 ARIN Region origin ASes present in the Internet Routing Table: 18149 ARIN Prefixes per ASN: 11.46 ARIN Region origin ASes announcing only one prefix: 6715 ARIN Region transit ASes present in the Internet Routing Table: 1792 Average ARIN Region AS path length visible: 3.6 Max ARIN Region AS path length visible: 24 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2336 Number of ARIN addresses announced to Internet: 1109260960 Equivalent to 66 /8s, 29 /16s and 250 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-397212 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 189988 Total RIPE prefixes after maximum aggregation: 91532 RIPE Deaggregation factor: 2.08 Prefixes being announced from the RIPE address blocks: 185878 Unique aggregates announced from the RIPE address blocks: 110829 RIPE Region origin ASes present in the Internet Routing Table: 25117 RIPE Prefixes per ASN: 7.40 RIPE Region origin ASes announcing only one prefix: 11405 RIPE Region transit ASes present in the Internet Routing Table: 3505 Average RIPE Region AS path length visible: 4.1 Max RIPE Region AS path length visible: 34 Number of RIPE region 32-bit ASNs visible in the Routing Table: 6911 Number of RIPE addresses announced to Internet: 715628160 Equivalent to 42 /8s, 167 /16s and 158 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-207259 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 89797 Total LACNIC prefixes after maximum aggregation: 19767 LACNIC Deaggregation factor: 4.54 Prefixes being announced from the LACNIC address blocks: 91186 Unique aggregates announced from the LACNIC address blocks: 40836 LACNIC Region origin ASes present in the Internet Routing Table: 7029 LACNIC Prefixes per ASN: 12.97 LACNIC Region origin ASes announcing only one prefix: 1934 LACNIC Region transit ASes present in the Internet Routing Table: 1304 Average LACNIC Region AS path length visible: 4.7 Max LACNIC Region AS path length visible: 32 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 4569 Number of LACNIC addresses announced to Internet: 172626400 Equivalent to 10 /8s, 74 /16s and 17 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-268700 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 18667 Total AfriNIC prefixes after maximum aggregation: 4036 AfriNIC Deaggregation factor: 4.63 Prefixes being announced from the AfriNIC address blocks: 21259 Unique aggregates announced from the AfriNIC address blocks: 7635 AfriNIC Region origin ASes present in the Internet Routing Table: 1132 AfriNIC Prefixes per ASN: 18.78 AfriNIC Region origin ASes announcing only one prefix: 372 AfriNIC Region transit ASes present in the Internet Routing Table: 229 Average AfriNIC Region AS path length visible: 4.5 Max AfriNIC Region AS path length visible: 21 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 408 Number of AfriNIC addresses announced to Internet: 97927680 Equivalent to 5 /8s, 214 /16s and 66 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5404 4192 74 ERX-CERNET-BKB China Education and Rese 7545 4380 415 430 TPG-INTERNET-AP TPG Telecom Limited, AU 4766 2897 11134 789 KIXS-AS-KR Korea Telecom, KR 9829 2810 1499 545 BSNL-NIB National Internet Backbone, IN 7552 2735 1155 69 VIETEL-AS-AP Viettel Group, VN 9394 2641 4922 26 CTTNET China TieTong Telecommunications 45899 2574 1572 158 VNPT-AS-VN VNPT Corp, VN 17974 2336 928 79 TELKOMNET-AS2-AP PT Telekomunikasi Indo 9808 2189 8699 32 CMNET-GD Guangdong Mobile Communication 4755 2093 417 214 TATACOMM-AS TATA Communications formerl Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6327 3386 1323 85 SHAW - Shaw Communications Inc., CA 22773 3288 2988 149 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 18566 2168 405 109 MEGAPATH5-US - MegaPath Corporation, US 20115 2092 2489 452 CHARTER-NET-HKY-NC - Charter Communicat 16509 2057 4445 640 AMAZON-02 - Amazon.com, Inc., US 209 1965 5070 607 CENTURYLINK-US-LEGACY-QWEST - Qwest Com 30036 1961 339 182 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 11492 1809 228 548 CABLEONE - CABLE ONE, INC., US 16625 1762 862 1257 AKAMAI-AS - Akamai Technologies, Inc., 7018 1697 20212 1254 ATT-INTERNET4 - AT&T Services, Inc., US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 4073 1514 507 UNI2-AS, ES 39891 3778 203 20 ALJAWWALSTC-AS, SA 20940 2672 731 1962 AKAMAI-ASN1, US 8551 2134 378 43 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 12389 2032 1860 705 ROSTELECOM-AS, RU 34984 2016 334 485 TELLCOM-AS, TR 9121 1974 1692 19 TTNET, TR 13188 1610 100 43 TRIOLAN, UA 6849 1241 355 21 UKRTELNET, UA 8402 1233 544 14 CORBINA-AS OJSC "Vimpelcom", RU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 4443 3387 586 Uninet S.A. de C.V., MX 10620 3585 541 254 Telmex Colombia S.A., CO 11830 2642 369 86 Instituto Costarricense de Electricidad 6503 1626 437 53 Axtel, S.A.B. de C.V., MX 7303 1518 1024 191 Telecom Argentina S.A., AR 28573 1038 2255 176 CLARO S.A., BR 3816 1008 505 122 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 6147 1005 377 31 Telefonica del Peru S.A.A., PE 11172 928 126 85 Alestra, S. de R.L. de C.V., MX 18881 908 1074 29 TELEFÔNICA BRASIL S.A, BR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1176 396 45 LINKdotNET-AS, EG 37611 829 107 9 Afrihost, ZA 36903 741 372 137 MT-MPLS, MA 36992 672 1412 41 ETISALAT-MISR, EG 8452 641 1730 18 TE-AS TE-AS, EG 24835 597 850 15 RAYA-AS, EG 29571 474 68 12 ORANGE-COTE-IVOIRE, CI 37492 451 376 81 ORANGE-, TN 15399 361 35 7 WANANCHI-, KE 37342 361 32 1 MOVITEL, MZ Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5404 4192 74 ERX-CERNET-BKB China Education and Rese 8151 4443 3387 586 Uninet S.A. de C.V., MX 7545 4380 415 430 TPG-INTERNET-AP TPG Telecom Limited, AU 12479 4073 1514 507 UNI2-AS, ES 39891 3778 203 20 ALJAWWALSTC-AS, SA 10620 3585 541 254 Telmex Colombia S.A., CO 6327 3386 1323 85 SHAW - Shaw Communications Inc., CA 22773 3288 2988 149 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 4766 2897 11134 789 KIXS-AS-KR Korea Telecom, KR 9829 2810 1499 545 BSNL-NIB National Internet Backbone, IN Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 7545 4380 3950 TPG-INTERNET-AP TPG Telecom Limited, AU 8151 4443 3857 Uninet S.A. de C.V., MX 39891 3778 3758 ALJAWWALSTC-AS, SA 12479 4073 3566 UNI2-AS, ES 10620 3585 3331 Telmex Colombia S.A., CO 6327 3386 3301 SHAW - Shaw Communications Inc., CA 22773 3288 3139 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 7552 2735 2666 VIETEL-AS-AP Viettel Group, VN 9394 2641 2615 CTTNET China TieTong Telecommunications Corpora 11830 2642 2556 Instituto Costarricense de Electricidad y Telec Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 230105 UNALLOCATED 38.110.79.0/24 23015 CMC180-TOR-AS - Cambridge Merc 65001 PRIVATE 46.237.40.0/21 13118 ASN-YARTELECOM PJSC Rostelecom 64513 PRIVATE 62.150.101.0/24 9155 QNET Kuwait, KW 65537 DOCUMENT 62.162.120.0/24 6821 MT-AS-OWN bul. Orce Nikolov bb 65024 PRIVATE 87.103.234.0/24 39407 CHITATELECOM-AS, RU 65024 PRIVATE 95.189.78.0/24 39407 CHITATELECOM-AS, RU 65024 PRIVATE 95.189.80.0/22 39407 CHITATELECOM-AS, RU 64111 UNALLOCATED 98.159.5.0/24 19555 KMI-NETWORK - Kinder Morgan, I 64111 UNALLOCATED 98.159.7.0/24 19555 KMI-NETWORK - Kinder Morgan, I 64121 UNALLOCATED 98.159.9.0/24 19555 KMI-NETWORK - Kinder Morgan, I Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 100.66.224.0/19 209 CENTURYLINK-US-LEGACY-QWEST - Qwest Communicati 100.127.16.0/23 28885 OMANTEL-NAP-AS OmanTel NAP, OM 100.127.18.0/23 28885 OMANTEL-NAP-AS OmanTel NAP, OM Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 14.128.14.0/23 10247 NETLINE, ZA 14.192.48.0/24 327815 XNET, NA 14.192.50.0/23 10247 NETLINE, ZA 14.192.58.0/23 10247 NETLINE, ZA 27.100.7.0/24 56096 UNKNOWN 36.255.250.0/23 10247 NETLINE, ZA 41.76.136.0/22 37500 -Reserved AS-, ZZ 41.76.136.0/24 37500 -Reserved AS-, ZZ 41.76.138.0/24 37500 -Reserved AS-, ZZ 41.76.139.0/24 37500 -Reserved AS-, ZZ Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:15 /9:12 /10:37 /11:100 /12:288 /13:565 /14:1096 /15:1900 /16:13401 /17:7827 /18:13644 /19:25153 /20:39337 /21:45283 /22:86502 /23:70144 /24:388600 /25:848 /26:604 /27:655 /28:36 /29:20 /30:17 /31:4 /32:53 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 6327 3174 3386 SHAW - Shaw Communications Inc., CA 39891 2946 3778 ALJAWWALSTC-AS, SA 12479 2811 4073 UNI2-AS, ES 22773 2542 3288 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 18566 2061 2168 MEGAPATH5-US - MegaPath Corporation, US 11830 1990 2642 Instituto Costarricense de Electricidad y Telec 30036 1712 1961 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi 10620 1601 3585 Telmex Colombia S.A., CO 8551 1597 2134 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 11492 1560 1809 CABLEONE - CABLE ONE, INC., US Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1592 2:830 4:19 5:2794 6:65 7:1 8:1117 12:1864 13:184 14:1738 15:30 16:3 17:203 18:68 20:47 21:4 23:2607 24:2161 25:2 27:2269 31:1974 32:88 35:27 36:510 37:2768 38:1448 39:256 40:119 41:3064 42:574 43:1951 44:105 45:4214 46:3061 47:204 49:1323 50:1051 51:304 52:991 54:372 55:5 56:12 57:42 58:1537 59:993 60:430 61:2151 62:1816 63:1795 64:4894 65:2220 66:4591 67:2361 68:1146 69:3192 70:1147 71:561 72:2095 74:2715 75:411 76:435 77:1553 78:1703 79:1925 80:1482 81:1404 82:1077 83:775 84:1042 85:2060 86:580 87:1313 88:935 89:2320 90:207 91:6321 92:1177 93:2378 94:2395 95:2777 96:662 97:357 98:946 99:133 100:81 101:1277 102:40 103:17543 104:3593 105:231 106:660 107:1812 108:709 109:2707 110:1598 111:1775 112:1277 113:1338 114:1123 115:1637 116:1645 117:1718 118:2156 119:1668 120:970 121:1056 122:2450 123:1808 124:1450 125:1893 128:994 129:648 130:453 131:1587 132:672 133:196 134:1016 135:228 136:458 137:495 138:1933 139:595 140:423 141:697 142:808 143:965 144:812 145:457 146:1178 147:781 148:1584 149:707 150:737 151:1056 152:763 153:311 154:1020 155:760 156:926 157:785 158:638 159:1670 160:937 161:750 162:2581 163:527 164:1054 165:1571 166:432 167:1403 168:3067 169:806 170:3685 171:429 172:1080 173:1964 174:885 175:754 176:1865 177:3999 178:2431 179:1219 180:2254 181:2208 182:2390 183:1141 184:918 185:13330 186:3617 187:2381 188:2741 189:2027 190:8090 191:1448 192:9842 193:5881 194:4774 195:3959 196:2524 197:1427 198:5539 199:5883 200:7391 201:5020 202:10406 203:10181 204:4534 205:2875 206:3088 207:3200 208:3978 209:3947 210:4039 211:2115 212:3023 213:2724 214:950 215:62 216:5912 217:2140 218:908 219:619 220:1756 221:995 222:1037 223:1246 End of report

1 0

Suggestion for Layer 3, all SFP+ switches
by Giuseppe Spanò - Datacast Srl 20 Apr '18

20 Apr '18

Hello, we're looking for some L3 switches to be used as distribution devices. They should have all (at leaast 24) SFP+ ports 10G and at least a couple of upstream ports 40G capable, but what is most important, they should be able to run MPLS, EoMPLS and VPLS. Is there any device you would suggest us? We where thinking about NEXUS but I'm sure there are also others, even if it is not so easy to find them on the Internet. Thank you in advance for your help . Giuseppe Spanò Datacast Srl

11 16

Fwd: [cooperation-wg] Massive IP blockings in Russia
by Sandra Murphy 19 Apr '18

19 Apr '18

Of possible interest to this group. Forwarding at Alexander’s suggestion, who says he has already shared info in the NANOG facebook group "(with updated prefixlist)". —Sandy > Begin forwarded message: > > From: Alexander Isavnin <isavnin(a)gmail.com> > Subject: [cooperation-wg] Massive IP blockings in Russia > Date: April 17, 2018 at 1:36:33 PM EDT > To: cooperation-wg(a)ripe.net > > Dear colleagues! > > I’m not pleased to inform you that RosComNadzor, a Russian Communication supervisory body, has started blocking huge ranges of IPs belonging to different cloud infrastructures, mostly Amazon and Google Cloud. > Those ranges include: 13.52.0.0/14, 13.56.0.0/14, 18.184.0.0/15, 18.194.0.0/15, 18.196.0.0/15, 34.192.0.0/10, 34.240.0.0/13, 34.248.0.0/13, 35.156.0.0/14, 35.160.0.0/13, 35.176.0.0/15, 52.0.0.0/11, 52.192.0.0/11, 52.208.0.0/13, 52.28.0.0/15, 52.58.0.0/15, 54.144.0.0/12, 54.160.0.0/12, 54.228.0.0/15, 54.72.0.0/15, 54.88.0.0/16. > > Russian ISPs MUST fully block all traffic to such networks. The list is frequently updated and gets automatically propagated to ISP every once in a while, failure to block any address may result in 1500eur fine. > The infrastructure listed above is being added to the blocklist under “counter-terrorist and counter-extremist” order of the General Prosecutor Office, #27-31-2015/Id4082-15, issued in 2015 and often used for blocking an arbitrary unwanted content. > The real reason for such blocking is an attempt to cut access to Telegram messenger, which refused to provide end-to-end encryption keys to the Federal Security Service (previously known as KGB). This is a case similar to San-Bernardino shooter’s, where the FBI was denied access to the shooter’s iPhone, but courts in Russia have made completely opposite decision. > Telegram’s infrastructure is being blocked by a different decision by RosKomNadzor, #2-1779/2018. > Cloud infrastructures are being blocked for massive proxy and VPN hosting used to dodge messenger blocking. > > It is said, that more Apple and Google networks may be blocked soon for apps updates and push notifications delivery for Telegram. > > We hope to still have the global IP connectivity to keep you informed about how the situation develops. > Do not be surprised if some of your services placed in cloud infrastructures will miss Russian customers. > > You can monitor the number of IP addresses, domains and URLs to be blocked in Russia at the https://2018.schors.spb.ru/ page (run by the famous ENOG community member Phil Kulin). > Detailed information (also via API) is available at the https://reestr.rublacklist.net run by RosKomSvoboda civil society group. > > Kind regards, > Alexander Isavnin > > Sent via RIPE Forum -- https://www.ripe.net/participate/mail/forum

5 4

RCN and IPv6
by Bryan Holloway 19 Apr '18

19 Apr '18

Curious if any RCN network guys or gals are on the list and can provide any idea as to when RCN plans on deploying IPv6? I make inquiries every six months or so, but I get the usual canned response that it's in the works, but no ETA.

1 1

Juniper Config Commit causes Cisco Etherchannels to go into err-disable state
by Joseph Jenkins 18 Apr '18

18 Apr '18

I have cases open with both Cisco and Juniper on this, but wanted to see if anyone else had seen an issue like this because support has no idea. I have a Juniper QFX 5100 Core running in Virtual Chassis mode with 4 switches. I have 4 separate stacks of Cisco 3750 switches with 2x1GB uplinks bound into 4 different LACP trunks. I have had it happen twice now where I apply a trunk port config(not an LACP trunk) to a port that isn't a part of any of the LACP trunks and it causes all 4 of the Etherchannels on the Cisco stacked switches to go into an err-disable state with these messages: Mar 14 07:11:33: %PM-4-ERR_DISABLE: channel-misconfig (STP) error detected on Gi1/0/48, putting Gi1/0/48 in err-disable state Mar 14 07:11:33: %PM-4-ERR_DISABLE: channel-misconfig (STP) error detected on Po17, putting Gi1/0/48 in err-disable state Mar 14 07:11:33: %PM-4-ERR_DISABLE: channel-misconfig (STP) error detected on Po17, putting Po17 in err-disable state Mar 14 07:11:34: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/48, changed state to down Mar 14 07:11:33: %PM-4-ERR_DISABLE: channel-misconfig (STP) error detected on Gi2/0/48, putting Gi2/0/48 in err-disable state (CA-TOR-1-7-2) Mar 14 07:11:34: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet2/0/48, changed state to down Mar 14 07:11:34: %LINEPROTO-5-UPDOWN: Line protocol on Interface Port-channel17, changed state to down Here is the config I am applying to the port that has caused this issue to happen twice now: set interfaces ge-0/0/67 description "Firewall Port" set interfaces ge-0/0/67 unit 0 family ethernet-switching interface-mode trunk set interfaces ge-0/0/67 unit 0 family ethernet-switching vlan members 9-10 set interfaces ge-0/0/67 unit 0 family ethernet-switching vlan members 29 set interfaces ge-0/0/67 unit 0 family ethernet-switching vlan members 31-32 set interfaces ge-0/0/67 unit 0 family ethernet-switching vlan members 43 set interfaces ge-0/0/67 unit 0 family ethernet-switching vlan members 50-51 set interfaces ge-0/0/67 unit 0 family ethernet-switching vlan members 56 set interfaces ge-0/0/67 unit 0 family ethernet-switching vlan members 58 set interfaces ge-0/0/67 unit 0 family ethernet-switching vlan members 66 set interfaces ge-0/0/67 unit 0 family ethernet-switching vlan members 68 set interfaces ge-0/0/67 unit 0 family ethernet-switching vlan members 90 set interfaces ge-0/0/67 unit 0 family ethernet-switching vlan members 143 set interfaces ge-0/0/67 unit 0 family ethernet-switching vlan members 170 The issue happens within a couple of minutes of committing the config on the Juniper side, there are no cables plugged into port 0/0/67 so technically there shouldn't be any BPDU's sent out since there isn't a port change. Juniper Support wants me to turn on trace option and then run though a bunch of scenarios, the issue is that testing this takes down my network. Just wanted to put it out there to see if anyone else had run into a situation similar to this. TIA Joe

8 12

ANRW 2018
by Jared Mauch 18 Apr '18

18 Apr '18

I’m forwarding this on behalf of the ANRW Chairs. Some of this research has been quite interesting, and is on-topic to what NANOG folks are interested in. Here’s some more details about it: https://irtf.org/anrp You can find their slides and presentation videos online as well, with the most recent one here: https://youtu.be/6v1TU4zsp5E?t=54m30s If you’re an operator and going to be at IETF in Montreal this summer, let me know. — snip — In recent years, the focus of many of top academic networking conferences has shifted away from the wide-area Internet. At the same time, the Internet Engineering Task Force (IETF) remains a top place to do practice-facing research on wide-area networking and security protocols. So, we thought its time to bring academics to the IETF, and develop an exciting academic venue that refocuses the community on wide-area networking and security research! To that end, we are rebooting the Applied Networking Research Workshop (ARNW’18) that we be held during IETF’102 on July 16 2018. The goal is to create a top academic venue for wide-area networking and security research and a path to transition research back into IETF standards, while inspiring academics to work on topics and open problems addressed at the IETF. We have several high-quality invited talks lined up (see below!), and are now soliciting submitted talks and papers. Submitted talks can be not-for-publication *re-submissions* of works that have been published elsewhere during the last 12 months; for these, we simply require a 2 page abstract. We are also seeking 6-page short papers for publication. Paper submission deadline is April 20, 2018. If you think your work can have an impact on the design and operation of the Internet, please consider submitting to ANRW'18! Call for papers: https://irtf.org/anrw/2018/cfp.html Invited talks: Why (and How) Networks Should Run Themselves Speaker: Nick Feamster (Princeton University) ARTEMIS: Neutralizing BGP Hijacking within a Minute Speaker: Alberto Dainotti (CAIDA) Run, Walk, Crawl: Towards Dynamic Link Capacities Speaker: Monia Ghobadi (Microsoft Research) TCP Congestion Signatures Speaker: Srikanth Sundaresan (UC Berkeley) or Amogh Dhamdhere (CAIDA) Measuring Adoption of Security Additions to the HTTPS Ecosystem Speaker: Quirin Scheitle (Technical University of Munich) Hope to see you in Montreal! Sharon Goldberg & David Choffnes ANRW'18 Program Committee Chairs

1 0

Attacks on BGP Routing Ranges
by Ryan Hamel 18 Apr '18

18 Apr '18

Hello, I wanted to poll everyones thoughts on how to deal with attacks directly on BGP peering ranges (/30's, /127's). I know that sending an RTBH for our side of the upstream routing range does not resolve the issue, and it would actually make things worse by blackholing all inbound traffic on the carrier I send the null to. What are my options for carriers that are not willing to help investigate the situation or write up a firewall rule to mitigate it on the circuit? I am not a fan of naming and shaming because it has unintended consequences. Thanks in advance for everyone's suggestions. Ryan Hamel

8 10

US-CERT: Alert (TA18-106A) Russian State-Sponsored Cyber Actors Targeting Network Infrastructure Devices
by Jay Farrell 17 Apr '18

17 Apr '18

https://www.us-cert.gov/ncas/alerts/TA18-106A

1 0

FEMA’s plan underestimated Puerto Rican hurricane
by Sean Donelan 15 Apr '18

15 Apr '18

In the U.S. disaster response system, the primary responsbility for disaster response falls on state (territory) and local governments. In theory, the federal government response is supposed to be secondary. https://www.politico.com/story/2018/04/15/puerto-rico-hurricane-fema-disast… [...] The plan also expected private sector companies to quickly restore telecommunications on the island. “There are minimal expectations that federal assistance would be required to restore the infrastructure during the response and recovery of a storm,” it said. If communication systems were not fixed quickly, the document said, first responders could use satellite phones instead or rely on mobile communication trucks delivered to the island. But during Maria, Puerto Rico’s communication system was wiped out, leaving telecommunications companies scrambling to slowly repair the infrastructure as state and local officials struggled to communicate with FEMA and other first responders. Local officials described limited communications as one of the biggest challenges in the first week after the storm. [...] To many in the disaster community, the problems with FEMA’s plan were representative of broader disaster management challenges across the entire agency. FEMA, individual communities and the country prepare for disasters that fit within their current capabilities, they said, but don’t plan for disasters that could cause even more damage, requiring greater planning or resources in such a dire scenario. “If you go back and look at almost any federal disaster plan, it suffers from planning to your current capabilities versus planning to what actually could happen,” said a former FEMA official, adding “I wouldn’t say this is a special case, but it is a problem endemic to the federal government.” [...]

3 2