- Test - lists.nanog.org

RIPE NCC Global IPv6 Deployment Survey
by Massimiliano Stucchi 29 Mar '18

29 Mar '18

Hi, just a little reminder that there are a few days left to help the RIPE NCC by filling up our Global IPv6 Deployment Survey. We have already received a considerable amount of responses, but would like to hear from more people. The goal of the survey is to get an overview of IPv6 deployment across the world, and to assess how this is seen from the perspective of ISPs and Enterprise users. The 2018 survey is a follow up to similar surveys run between 2008 and 2013, and will serve as a comparison with the data acquired back then. You can find the survey at the following address: https://www.surveymonkey.com/r/GlobalIPv6survey2018 Responses can be submitted until 31 March 2018. We will then collect the data with the aim of presenting the preliminary results during the upcoming RIPE 76 meeting in Marseille. If you have any question about the survey, please feel free to email us at: ipv6survey2018(a)ripe.net. Thank you very much in advance for your participation! -- Massimiliano Stucchi IPv6 Programme Manager RIPE NCC mstucchi(a)ripe.net Follow us on Twitter for the fastest and latest RIPE NCC Training news! @TrainingRIPENCC

1 0

aol login problems - my.screenname.aol.com
by Aaron Gould 29 Mar '18

29 Mar '18

When going to aol.com and click "login/join" in top-right corner, brings you to a login page. when I try to login, I get nothing. just tries and tries to take me to the next page, which seems to be my.screenname.aol.com. but it never gets there. If I try from different subnets in my network, it does work. But from other subnets it does not. Has anyone ever heard/seen this problem ? Anyone from aol here that can assist with this please ? You can contact me directly if you can assist. -Aaron

1 0

Re: validating reachability via an ISP
by Baldur Norddahl 29 Mar '18

29 Mar '18

Also the only traffic you will be receiving on the other provider will be from parties that did not pick up the more specific prefix. It should therefore be really obvious. You should not receive any traffic at all, not even from the transit provider. Regards, Baldur Den tor. 29. mar. 2018 10.41 skrev Baldur Norddahl < baldur.norddahl(a)gmail.com>: > If your prefix is larger than /24 you can test with a more specific prefix > such as a /24. Announce the test prefix on just one transit provider. Then > check with BGP services such as the looking glass service provided by the > NLNOG RING network. > > There will be no interruption in the traffic as it will follow the less > specific prefix everywhere the test prefix was not picked up. > > If you only have a /24 you will need to test in a service window. > > Regards > > Baldur > > > Den tor. 29. mar. 2018 01.24 skrev Andy Litzinger < > andy.litzinger.lists(a)gmail.com>: > >> Hi all, >> I have an enterprise network and do not provide transit. In one of our >> datacenters we have our own prefixes and rely on two ISPs as BGP neighbors >> to provide global reachability for our prefixes. One is a large regional >> provider and the other is a large global provider. >> >> Recently we took our link to the global provider offline to perform >> maintenance on our router. Nearly immediately we were hit with alerts >> that >> our prefix was unreachable and BGPMon alerted that nearly 80 AS's noted >> our >> route had been withdrawn. We were not unreachable from every AS, but we >> certainly were from some of the largest. >> >> The root cause is that the our prefix is not being adequately >> re-distributed globally by the regional ISP. This is unexpected and we >> are >> working through this with them now. >> >> My question is, how can I monitor global reachability for a prefix via >> this >> or any specific provider I use over time? Are there various route-servers >> I can programmatically query for my prefix and get results that include AS >> paths? Then I could verify that an "acceptable" number of paths exist that >> include the AS of the all the ISPs I rely upon. And what would an >> "acceptable" number of alternate paths be? >> >> >> thanks in advance, >> -andy >> >

1 0

Québec Sales tax
by Jean-Francois Mezei 28 Mar '18

28 Mar '18

Not quite networking but probably relevant. The Canadian province of Québec just introduced a new budget with basically the intent to force foreign digital companies who sell services to Québekers to collect the local value added sales tax and remit those to the QC government. The goal is to capture tax from Netflix who has so far escaped taxation in Canada by having no legal/physical presence in Canada, no cache servers of its own etc. Netflix does not currently collect province information from customers (or any address info for that matter). They based many of their arguments on an OECD study (which ironically the Canadian federal government says is not completed yet (as excuse for not proceeding with similar tax). So foreign digital services will be required to require subscibers enter AND VALIDATE their address so that they have an accurate province field (validation remains to be finalized), and IF they sell more than $30,000 to Québec residents, will be required to self register with QC government to collect local sales tax (and remit to QC government). The Québec budget expects that validation of address will be based on IP address geolocation or custoemrs send paper bills to prove place of residence. (Although requiring full address/phone number and sendint this to credit card network for authorization might constitute a better means to validate address). I suspect the big winners will be VPN services in the USA :-) Because many ISPs span multiple provinces, IP geolocation generally points to their HQ address, not necessarily the province of the subscriber. (This is especially true for DSL in bell Canada wholesale where currently a single point of connection between Bell and ISP allows full reach of all of its DSL territory in QC/ON. For Cable, ISPs require different IP pools for Rogers in Ontario and Vidéotron in Ontario (with a couple of exceptions where Vidéotron has service in a couple fo Ontario towns). In Western Canada, things are harder as Shaw serves BC, AB, SASK and MB.

4 7

Firewall as a Service.
by Daniel Corbe 27 Mar '18

27 Mar '18

Are there any vendors that have hardware firewalls and maintain their own Openstack nova/neutron driver set? I’m looking for something that I can offer to my VPS customers as a self-managed service. At the moment, I’m using the default firewall driver. Which is nothing but a wrapper for iptables; and while seamless, I can’t imagine it’s going to scale very well. I’m looking for something that has 10 gig client connectivity and either 100G or 40G uplinks. -Daniel

1 0

Re: Québec Sales tax
by Eric Dugas 27 Mar '18

27 Mar '18

Replied off-list since it's a bit off-topic. On Tue, Mar 27, 2018, 18:47 Jean-Francois Mezei <jfmezei_nanog(a)vaxination.ca (mailto:jfmezei_nanog@vaxination.ca)> wrote: > On 2018-03-27 18:28, Eric Dugas wrote: > > On the IP geoloc subject, we (EBOX) actually have multiple pools for QC-based and ON-based customers. > > You may all have different IP pools, but are they registered such that > geolocation services show them with different provinces, or do they all > point to your > > OrgName: EBOX > OrgId: QUEBE-50 > Address: 1225 St-Charles Ouest, Suite 1100 > City: Longueuil > StateProv: QC > PostalCode: J4K 0B9 > Country: CA > > address ? > (there were complains in the past of some of your ON customers unable to > access Sport Check and being directed to Sport Experts store web sites > due to geolocation.

1 0

How does ER Infinity Hold up?
by howard stearn 27 Mar '18

27 Mar '18

I've seen this list looking for inexpensive routers before, so i'm wondering. . . Since this was released rather recently, Is anyone using ER-8-XG to receive a full bgp table yet? (Yes BGP and are you neighbored with 1, 2, 10, 40 peers?) https://dl.ubnt.com/datasheets/edgemax/EdgeRouter_ER-8-XG_DS.pdf How does it stack up against Cisco, or your other previous router? What's the lookup time on a new unknown destination?

4 3

Problems with Skype video - outgoing calls only
by Igor Krneta 27 Mar '18

27 Mar '18

Hi guys, last few days we have a several of our customers complaining about weird problem with skype video chat. When they try to initiate video call from their computer, call fails and receiving side gets notification that they were called. But when receiving side tries to call them, call gets through immediately, no problems. This affects only video calls. Audio calls, chat, file transfer, group conference all work without any problems during the same session. And we have sent our tech's to customer premises with our own equipment. They too have the same problem while on location while using our laptops/phones/tablets. After customers started complaining, we switched their IP address to some of our other IP ranges and problem was gone for some time. Now, we have started getting reports of skype video not working from our other IP ranges. What's most frustrating about this problem is that it's not a problem for all users in particular subnet, only a few of them at time. For others, everything works as usual. We have checked and double checked everything about our network, and all is well and in normal parameters. No new firewalls/rules/equipment change/updates.... Anyone having same issues maybe ? Sincerely, Igor Krneta Elta Kabel d.o.o.

1 0

Spiffy Netflow tools?
by mike.lyon＠gmail.com 27 Mar '18

27 Mar '18

Howdy! Checking out various Netflow tools and wanted to see what others are using? Kentik is cool. Are they the only SaaS based flow digester? I don’t seem to see any others. Also curious about on-prem solutions as well. Thanks! Mike

20 19

Re: Question about great firewall of China
by Scott Weeks 26 Mar '18

26 Mar '18

> As you may have heard, Bell Canada has gathered a > group called Fairplay Canada to force all ISPs in > Canada to block web sites --- hugo(a)slabnet.com wrote: From: Hugo Slabbert <hugo(a)slabnet.com> re: Nation-level controls, the Sandvine report from Citizen Labs can add some context and real world examples: https://citizenlab.ca/2018/03/bad-traffic-sandvines-packetlogic-devices-dep… Also discusses http vs. https things. ----------------------------------- Wow, that's a really interesting write up. It's long, though... <slight troll; don't read further> It looks like a "Great Firewall of Canada" is going up. They should look at the dismal record of how Australia implemented theirs (all the while knowing how easy it is for the "criminals and terrorists" to bypass their blocks). https://en.wikipedia.org/wiki/Internet_censorship_in_Australia But,it really isn't about the "criminals and terrorists" is it? The people in positions of power worldwide are feverishly drooling over the ability to control what others can know, while not blocking the information from themselves. What a sad, sad life those people live! Sounds like the Dark Ages. scott

2 1