July 2000 - Test - lists.nanog.org

RE: LoadBalancing products: Foundry ServerIron
by Karyn Ulriksen 06 Jul '00

06 Jul '00

> > I believe BigIP has a product called DNS3 that serves a similar function. > One of our ".com's" uses it to support their dual co-lo set-up. > Two of F5's (www.f5.com) products are DNS3 and their BigIP series. BigIP is a software based load balancing device (i386 platform) and DNS3 is their global load balancing DNS mechanism. -----Original Message----- From: Richard Colella [mailto:colella@aol.net] Sent: Thursday, July 06, 2000 5:38 AM To: nanog(a)merit.edu Subject: RE: LoadBalancing products: Foundry ServerIron Products are also available from Alteon, Cisco (Distributed Director) and Resonate. Last time I looked, none of these products does everything one wants, IMHO, but the set union of features comes pretty close. --Richard > > I believe BigIP has a product called DNS3 that serves a similar function. > One of our ".com's" uses it to support their dual co-lo set-up. > > -TY > > -----Original Message----- > From: Brantley Jones [mailto:bjones@redundant.net] > Sent: Wednesday, July 05, 2000 10:06 PM > To: nanog(a)merit.edu > Subject: RE: LoadBalancing products: Foundry ServerIron > > > > At 09:28 PM 7/5/2000 -0400, you wrote: > > >they also have the dns based solution > >available on serverirons. > >-- > >dima. > > Speaking of using a DNS proxy, does anybody know of anybody else doing this > besides Foundry?? > > Brantley > >

1 0

RE: bad idea?
by Dmitri Krioukov 06 Jul '00

06 Jul '00

i plan to. -- dima. > -----Original Message----- > From: Adam Rothschild [mailto:asr@latency.net] > Sent: Wednesday, July 05, 2000 10:24 PM > To: Dmitri Krioukov > Subject: Re: bad idea? > > > On Wed, Jul 05, 2000 at 06:10:40PM -0400, Dmitri Krioukov wrote: > > i'm in the process of preparing an overview > > of the available techniques along with introduction > > of a new one, which solves a lot of headaches. > > it requires a feature set that is not available > > on any of the currently existing lb platforms, > > hence, for testing, i had to develop one using > > open source (i chose linux to make it fast (it > > had almost all bits in place -- check > > http://www.linuxvirtualserver.org/)) > > Are you going to publish your documentation/software upon completion? I, > for one, would be _very_ interested -- especially since you're working > with the Linux Virtual Server Project stuffs. I'm sure many others would > as well. ;) > > Regards, > -adam >

1 0

Re: LoadBalancing products: Foundry ServerIron
by Brantley Jones 06 Jul '00

06 Jul '00

At 10:19 AM 7/6/2000 -0400, Mike Diehn wrote: >* Brantley Jones (bjones(a)redundant.net) [07 05, 2000 22:30]: > > > > At 09:28 PM 7/5/2000 -0400, you wrote: > > > > >they also have the dns based solution available on > > >serverirons. -- dima. > > > > Speaking of using a DNS proxy, does anybody know of anybody > > else doing this besides Foundry?? > >Radware's WSD (Web Server Director) plays DNS server for clients >wanting to resolve a hostname to the IP of a close (from a network >latency perspective) server farm. > >It isn't a DNS proxy, though. It's acting as the authoritative >DNS server for specific hostnames delegated to it by the servers >authoritative for the parent zone. > >Resonate does that, too. And so does Cisco's global Director (I >think). > >Is that what you were after? > >Mike Kind of. What we're trying to do here is provide a back-up only approach for Internet service via NAT and VRRP/HSRP at the customer premise. The problem is with people hosting applications on-site that require DNS (www,MX,etc.). Trying to avoid using BGP as a back-up mechanism in this case (for obvious reasons), if I could find a product that could act as a authoritative DNS with a TTL of 0 or something, and only send replies for applications when the primary IP was down or unreachable, and then statically NAT our address over to the primary address at the customer premise, I think we could have a pretty good solution for providing back-up Internet service, including web, mail, etc. applications. I will definitely take a look at all the listed products and would appreciate anyone's input on this matter. Thanks! Brantley

2 1

RE: LoadBalancing products: Foundry ServerIron
by Richard Colella 06 Jul '00

06 Jul '00

Products are also available from Alteon, Cisco (Distributed Director) and Resonate. Last time I looked, none of these products does everything one wants, IMHO, but the set union of features comes pretty close. --Richard > > I believe BigIP has a product called DNS3 that serves a similar function. > One of our ".com's" uses it to support their dual co-lo set-up. > > -TY > > -----Original Message----- > From: Brantley Jones [mailto:bjones@redundant.net] > Sent: Wednesday, July 05, 2000 10:06 PM > To: nanog(a)merit.edu > Subject: RE: LoadBalancing products: Foundry ServerIron > > > > At 09:28 PM 7/5/2000 -0400, you wrote: > > >they also have the dns based solution > >available on serverirons. > >-- > >dima. > > Speaking of using a DNS proxy, does anybody know of anybody else doing this > besides Foundry?? > > Brantley > >

1 0

RE: LoadBalancing products: Foundry ServerIron
by York, Tracy (CEI-Atlanta) 06 Jul '00

06 Jul '00

I believe BigIP has a product called DNS3 that serves a similar function. One of our ".com's" uses it to support their dual co-lo set-up. -TY -----Original Message----- From: Brantley Jones [mailto:bjones@redundant.net] Sent: Wednesday, July 05, 2000 10:06 PM To: nanog(a)merit.edu Subject: RE: LoadBalancing products: Foundry ServerIron At 09:28 PM 7/5/2000 -0400, you wrote: >they also have the dns based solution >available on serverirons. >-- >dima. Speaking of using a DNS proxy, does anybody know of anybody else doing this besides Foundry?? Brantley

1 0

Re: C&W DoS
by Sean Donelan 06 Jul '00

06 Jul '00

On Wed, 05 July 2000, Ian Gulliver wrote: > I'm being told by my colo provider (in NY) that Cable & Wireless northeast > is currently under a major DoS. Has anyone else heard anything about > this? The nice thing about public traffic stats is everyone can see how you are doing, good or bad. Cable&Wireless's traffic web site indicate some "yellow" delays from Washington, but nothing excessive. http://traffic.cw.net/ DOS attacks tend to be highly localized, so it is possible your upstream provider or someone sharing your C&W node is experiencing a DOS. But it doesn't appear to be affecting the general C&W network in the northeast.

1 0

Routing problems with qwest
by Jan Ahrent Czmok 05 Jul '00

05 Jul '00

Hi all! I have a routing issue with QWEST and cannot get anybody of their noc. mails to noc(a)qwest.net bounced. i cannot reach www.qwest.net from our network (AS5409): traceroute to www.qwest.net (208.45.139.41), 30 hops max, 40 byte packets 1 firewall1.frankfurt.gigabell.net (195.211.170.1) 1 ms 0 ms 0 ms 2 e5-0.cr1.frankfurt.gigabell.net (194.152.32.53) 1 ms 1 ms 1 ms 3 atm5-101.cr4.london.gigabell.net (195.211.114.2) 15 ms 15 ms 15 ms 4 linx-gw1.UK.EU.net (195.66.224.90) 27 ms 30 ms 28 ms 5 Ldn-nr07.EU.net (134.222.229.126) 23 ms 21 ms 26 ms 6 Ledn-cr01.NL.EU.net (134.222.229.45) 25 ms 35 ms Ldn-nr06.UK.EU.net (134.222.229.217) 35 ms 7 Ledn-cr01.NL.EU.net (134.222.228.245) 31 ms Nyk-cr02.NY.US.EU.net (134.222.228.237) 108 ms Ledn-cr01.NL.EU.net (134.222.228.245) 26 ms 8 Nyk-cr02.NY.US.EU.net (134.222.229.194) 106 ms 123 ms * 9 * * * 10 * * * 11 * * * EuNet does not see any errors in the routes received. Anybody got a clue whom to contact ? Greetings Jan -- Jan Ahrent Czmok Head of International Peering Department Gigabell AG http://www.gigabell.net phone: +49 69 17084-716

2 1

RE: bad idea?
by Richard A. Steenbergen 05 Jul '00

05 Jul '00

On Wed, 5 Jul 2000, Dmitri Krioukov wrote: > > the major disadvantage of the foundry (bgp) > solution is longer prefix injection. > > the major problem with the dns-based solutions is > that they're not topology-aware (-> suboptimal > routing). attempts to make dns smart lead to > rather awkward reverse pinging configurations > and proprietary protocols running between load > balancers. (there was also rfc2052 by paul vixie > but it required modification of dns clients.) I don't think anyone sane would advocate a reverse pinging setup, but rather returning a DNS answer based on which DNS server you hit, and you hit the DNS server thats "closest" to you. I guess it depends what you value, short web traffic and instantanious failover regardless of the disruption of existing connections due to a route flap or metric change (remember this could be the fault of ANYONE's network, not necessarily yours), or guarenteed connections with possible non-instantanious failover. It also depends on the density of your server farms (one on the east coast, one on the west coast, it would take a fair amount of problems for the routes of the "majority" of people on either coast to change to the other). This is grossly generalized load balancing at its finest, take from it what you will. -- Richard A Steenbergen <ras(a)e-gerbil.net> http://www.e-gerbil.net/humble PGP Key ID: 0x138EA177 (67 29 D7 BC E8 18 3E DA B2 46 B3 D8 14 36 FE B6)

1 0

RE: PGP kerserver infrastructure
by L. Sassaman 05 Jul '00

05 Jul '00

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Wed, 5 Jul 2000, Mat Butler wrote: > Which, incidentally, Thawte -did-. They offer PGP certificates as well, for > their Freemail members' personal cert members. Thawte offered PGP support so poorly that it was irrelevant. And they never had any commercial PGP services. See the thread on the UK-Crypto list ~ January 2000 with the subject of "Food for Thawte" if you really want to know why Thawte's PGP program is worthless. Note that this is probably moot now that Verisign has bought them. __ L. Sassaman System Administrator | Technology Consultant | "Common sense is wrong." icq.. 10735603 | pgp.. finger://ns.quickie.net/rabbi | --Practical C Programming -----BEGIN PGP SIGNATURE----- Comment: OpenPGP Encrypted Email Preferred. iD8DBQE5Y4k/PYrxsgmsCmoRAnymAJkBPVt4CYpv6XYN3fn/m9vEcc0PgwCaAvqK HlFfXipaEmlwUoD1irkEWIw= =5oMV -----END PGP SIGNATURE-----

2 1

exodus.net
by Morris Allen 05 Jul '00

05 Jul '00

Does anyone have a contact name and number for exodus.net. I have sent the normal e-mails to abuse@ and root@? I have a hacker that has been hitting my T1 for 5 hours doing UDP probes and ICPM echo frames from behind their firewall or proxy server. thanks Morris Allen VidcomNet, Inc.

2 1