July 2001 - Test - lists.nanog.org

Re: The large ISPs and Peering
by rs＠seastrom.com 26 Jul '01

26 Jul '01

Curtis Maurand <curtis(a)lamere.net> writes: > A rose by any other name... The fact is, and history shows us, that when > cartels form, things get bad for the consumer. Oil, Electricity, > telecomm. However, The placement of the NAP's is disconcerting, because > the process for choosing them was closed. Does it make sense for all of > my traffic going to maine.rr.com from lamere.net (both in Maine and in the > same communities) to exchange traffic at MAE east 650 miles away? See other mail on this same topic. The placement of the NAPs was not a closed process. If you want to exchange traffic directly with maine.rr.com, you should approach them directly and see if you can work out an arrangement with them. Be prepared to make a business and technical case that is appealing to both sides. This may come as a surprise to you, but being at an exchange point is not a guarantee that any particular organization that is there will be willing to trade traffic with your organization. There's no advantage to being at an exchange point other than quickness of provisioning connections between companies; you still have to meet whatever criteria your prospective partner sets forth for traffic exchange. > > I don't see this as a bad thing. What you say about price equalization > > followed by increases may be true, but it seems unlikely to me for a few > > reasons. > > > > 1. There's a fiber 6glut. > > There won't be if the Tier-1's all form a "consotium." They will collude > on network build out and stop competing with each other. If you think > that's not true, think again. It's hard enough to get backbone providers to cooperate on legal stuff, let alone collude to perform illegal restraint of trade. If none of the big boys takes you seriously, it is probably not a conspiracy, just confirmation that you're small fry. But hey, we could all be wrong, in which case you can at least hitch a ride of Vijay's flying pig... ---Rob

1 0

Peering, Cartelephony, and you
by David Barak 26 Jul '01

26 Jul '01

Quoth Curtis Maurand: >A rose by any other name... The fact is, and history >shows us, that when >cartels form, things get bad for the consumer. Oil, >Electricity, >telecomm. However, The placement of the NAP's is >disconcerting, because >the process for choosing them was closed. Does it >make sense for all of >my traffic going to maine.rr.com from lamere.net (both >in Maine and in the >same communities) to exchange traffic at MAE east 650 >miles away? Depends on what you mean by "Cartel," doesn't it? Would you describe a shopping mall as a cartel? In fact, the locations of shopping malls are generally very influenced by local population demographics and geography. So too any new exchange points. Obviously Nordstroms, Sears, Hechts, etc. have a much bigger impact on the location of shopping malls than the peace frogs store does. Thus, the few "really big ISPs" are going to be the ones who determine where they want services to be provided, and by virtue of their larger $$, will have much more weight than the small ISPs. This isn't surprising - any more than it should surprise you that McDonalds has a bigger impact on Cattle producers than your small regional chain does. Regarding where your traffic goes, if you're concerned about your traffic to maine.rr.com, you should get a circuit with them (either peer or customer). If you have done neither of these things, it certainly is not the fault of larger ISPs. >There won't be if the Tier-1's all form a "consotium." > They will collude >on network build out and stop competing with each >other. If you think >that's not true, think again. Well, I wouldn't theoretically rule out collusion, but it IS illegal - so therefore, the big ISPs do have a pretty strong incentive to avoid the appearence of collusion, and most of the "really big ISPs" have services which are diverse enough to mean that they are still competing for many of the same customers... All this having been said, while I don't have a problem with the idea of there being a smaller number of "mega-colos," I'd be surprised if the "really big ISPs" are in the financial position right now to look at spending a lot of money on (of all things) peering [ie. something which does not generate revenue]. -David Barak "Quis custodes ipsos custodiet?" - Juvenal __________________________________________________ Do You Yahoo!? Make international calls for as low as $.04/minute with Yahoo! Messenger http://phonecard.yahoo.com/

1 0

NAP History (was RE: The large ISPs and Peering)
by Sean Donelan 26 Jul '01

26 Jul '01

On Thu, 26 July 2001, Curtis Maurand wrote: > A rose by any other name... The fact is, and history shows us, that when > cartels form, things get bad for the consumer. Oil, Electricity, > telecomm. However, The placement of the NAP's is disconcerting, because > the process for choosing them was closed. Does it make sense for all of > my traffic going to maine.rr.com from lamere.net (both in Maine and in the > same communities) to exchange traffic at MAE east 650 miles away? The first selection of the NAP's was an "open" process a number of years ago when a group at NSF choose where to place the NAPs. NSF issued an RFP, there were a number of proposals received, committees of outside experts, notification through public notice, etc. At that time three NAPs were chosen (San Francisco, Chicago, and New York) and one alternate (Washingington DC). Over the last half-decade, and additional public exchange points have been formed, and probably an equal number of private exchange points. Some of the additional exchange points have grown very large, such as CIX, MAE-West, LINX, AMS-IX, even though they didn't have NSF's "stamp of approval." If maine.rr.com and lamere.net want to exchange traffic in Maine, nothing changed. The existance or non-existance of a group of national exchange points doesn't change the argument for or against local exchange points. I still believe it makes sense for local and regional ISPs to have local and regional exchange points. You don't need an OC48 to peer with other ISPs in your region. A couple of years ago, when several large carriers decided that NAPs didn't make sense and they could provision private circuits directly between each other better, faster cheaper; several of us (see the NANOG archives) argued it didn't make economic or engineering sense. I even argued ending the existance of public NAPs raised the barrier to entry for new market entrants because of the "combination problem." For example, if everyone requires three points of interconnection, with common NAPs a new market entrant needs to build out three inter-city locations at the common NAPs. But if five major ISPs each require three points of interconnection, but they each choose a different set of cities for new entrants to connect to their networks, a new entrant may need to build 15 inter-city locations. The IETF holds a common meeting of its working groups in location three times a year. While participants going to a single working group may not find it as efficient than having private meetings, it is more efficient for people who want to attend multiple working group meetings to hold them all at the same location. Airlines have created "hub cities." However, airlines set up their hubs so most of them don't overlap. The other alternative is setting up a common location with most of the major competitors, such as the New York Stock Exchange or the Chicago Board of Trade. Markets can be more efficient if all the participants know they can go to a common location, and compete in that location. Markets seem less efficient when competitors have seperate hub locations. Are there downside risks, of course. When the CIX router moved from the Worldcom Santa Clara POP to the PAIX, at least one major ISP used that change as an opportunity to terminate some of its peering. Did the presence of the CIX router increase the business at the PAIX, probably. But its not a given. LINX has built out the LINX fabric in several locations in London. The presences of the LINX helped some locations, and didn't help other locations. If Telehouse has problems in London, the existance of the LINX magnifies the impact. If the New York Stock Exchange has a problem, it affects a lot more companies than if they each traded on seperate exchanges.

2 1

Re: OT: is it possible for an individual (not a business) to get a valid SSL certificate
by Jim Mercer 26 Jul '01

26 Jul '01

On Thu, Jul 26, 2001 at 10:50:41AM -0400, Noah wrote: > On Thu, 26 Jul 2001, Jim Mercer wrote: > > i want to get a useful SSL certificate for my personal webserver. > > (and have customers who would like to do so as well). > > > > i've talked to cibc.com/verisign, the canadian verisign affiliate, and they > > tell me they can only do certificates for registered businesses. > > You may want to give equifax a shot (http://www.equifaxsecure.com/) They > have a "Non-Government Organization" category, which requires letterhead > from the CEO of the company confirming proof of right. They also have the > mondo-spiffy wildcard caertificates (cert works for *.domain.dom). while it would be trivial for me to go out and register "Jim Mercer & Company" as a proprietorship ($50 CDN registration fee for 5 years i think), i fail to see why this is necessary. a person is a business, in that it is a taxable entity, can incur debt, etc, etc, etc. should a copy of my passport not suffice? as a follow-up, i eventually ended up talking to the Toronto office of Thawte, and they will accept: - passport/drivers license - bank statement, tax roll notice or other paper showing address and "existence" - paper letter from the admin contact of the domain deeming the individual as responsible for the SSL certificate (if the individual's name does not appear as the "owner" of the domain). after some discussion, it was agreed that a passport would double both as verification of ID, as well as certification of recognition by an outside entity (ie. the government). as such, i can likely get an SSL certificate with just my passport, drivers license (as a secondary piece of documentation) and a letter deeming me as responsible for the domainname (as my name does not actually exist as the registrant, but i am the admin contact). > There's also www.freessl.com, but their cert only works with IE5.01 or > better. is netscape going to add them as a default as well? -- [ Jim Mercer jim(a)reptiles.org +1 416 410-5633 ] [ Now with more and longer words for your reading enjoyment. ]

4 5

OT: is it possible for an individual (not a business) to get a valid SSL certificate
by Jim Mercer 26 Jul '01

26 Jul '01

i want to get a useful SSL certificate for my personal webserver. (and have customers who would like to do so as well). i've talked to cibc.com/verisign, the canadian verisign affiliate, and they tell me they can only do certificates for registered businesses. i'm currently on hold with verisign USA waiting to talk to someone there, but figured i'd punt the question here. -- [ Jim Mercer jim(a)reptiles.org +1 416 410-5633 ] [ Now with more and longer words for your reading enjoyment. ]

2 1

What is the going rate for a dark fiber mile in the NE?
by Fletcher E Kittredge 26 Jul '01

26 Jul '01

I am looking for a rough sense of current price per mile in the Northeast, USA region for one strand of fiber on an inter-city run of 50 miles or so. Yes, I know that prices tend to be all over the map, because I have received quotations all over map. However, I would be interested in other's recent experiences. The price I am particularly interested in is the one time, up-front, IRU price (Irrevocable Right to Use.) Please respond to me privately. If anyone is interested, I will summarize the replies. regards, fletcher

1 0

so... you want to get to www.ep.net?
by Bill Manning 26 Jul '01

26 Jul '01

You can hit the web site using its (current) IP address of 198.32.4.33 -- --bill

1 0

ep.net being filtered
by Bill Manning 26 Jul '01

26 Jul '01

The nameservers for ep.net were being hammered by ddos yesterday and so we asked our upstream carriers to route traffic to nul0 for a bit to see if the perps would slow down (the servers were fine, but consumption of multiple 100bt links was not to fair to the carriers... :) As sleepy Bill sez... take some rest and things ought to be better in the morning. :} -- --bill

1 0

RE: product liability (was 'we should all be uncomfortable withthe extent to which luck..')
by Dave O'Shea 26 Jul '01

26 Jul '01

If you look to the left of the display, you'll see an arrangement of traditional mechanical instruments, as backups. (Actually, even high-end business jets and commercial craft have them too). Belt-and-suspenders thinking might not have originated in the aviation field, but the lack of it is far more fatal there than in ISP-land. :-) obNANOGcontent: Assuming that Murphy is always lurking just around the corner is about the best planning method I've come across. -----Original Message----- From: Gary E. Miller [mailto:gem@rellim.com] Sent: Wednesday, July 25, 2001 4:57 PM To: Joseph T. Klein Cc: nanog(a)nanog.org Subject: Re: product liability (was 'we should all be uncomfortable withthe extent to which luck..') Yo Joseph! On Wed, 25 Jul 2001, Joseph T. Klein wrote: > Since software, in theory, can't cause physical danger, I suspect > the shrink wrap license makes Microsoft immune to any liability. ROTFL! What about the WinNT powered flight control systems from Avidyne? NT blue screens when you are in the clouds and death is usually shortly follow. Shrink wrap license or not, the first time this happens expect M$ to show up in court. RGDS GARY ------------------------------------------------------------------------ --- Gary E. Miller Rellim 20340 Empire Ave, Suite E-3, Bend, OR 97701 gem(a)rellim.com Tel:+1(541)382-8588 Fax: +1(541)382-8676

1 0

Re: 'we should all be uncomfortable with the extent to which luck..'
by Marshall Eubanks 25 Jul '01

25 Jul '01

> > >>> > How many of us here run anything less than SSH and even allow telnetd to >>> > live on any of our hosts? Hey, we have had to do without SSH in more than one CISCO IOS build in the last 6 months in 12.1 / 12.2. This always made me feel very nervous. Regards Marshall Eubanks >>> >>> Here? Probably not all that many. >> >>[bill's password slide from the Scottsdale NANOG] >>suggests that many (most?) of the NANOG attendees are shipping passwords >>around in the clear (not necessarily all telnet, but indicative of a >>mindset). > >The system with that data on it is off right now, but my recollection was >that the top three offenders were (in no particular order) > >- cleartext POP >- cleartext IMAP >- http:// (mostly people reading their email via Exchange). > >Note that the final slide that I put up at the end of the meeting (with >something like 150 passwords on it) had one of my passwords too >(my Vindigo password, if anyone wants to change what cities I have >configured =), so even people who are aware of the issues sometimes >still send cleartext passwords. > > Bill > Marshall Eubanks tme(a)21rst-century.com

3 2