May 2003 - Test - lists.nanog.org

ntp, gps & august 2003
by Tomas Daniska 21 May '03

21 May '03

we got a notify from our supplier of gps ntp servers that urgent software upgrade is needed or the boxes might lose gps signal track on august 10, 2003 no more details, however i haven't heard any advises of gps system changes so my question is if this is a scam just pushing the people to upgrade the software (although free of charge) or this really might have an operational background thanks -- Tomas Daniska systems engineer Tronet Computer Networks Plynarenska 5, 829 75 Bratislava, Slovakia tel: +421 2 58224111, fax: +421 2 58224199 A transistor protected by a fast-acting fuse will protect the fuse by blowing first.

1 0

Undersea cable re-routed, Gulf area Internet outages expected
by Sean Donelan 21 May '03

21 May '03

http://www.gulf-daily-news.com/Articles.asp?Article=52224&Sn=BNEW Internet users in Bahrain and other Gulf countries face interruptions for several days, as an undersea cable is re-routed, Batelco announced yesterday. It is being diverted to make way for the new Palm Island development, in the UAE. [...] The work also affects Kuwait and Qatar.

1 0

American Idol network congestion expected Tuesday May 20 2003
by Sean Donelan 20 May '03

20 May '03

Do you have your GETS card handy? Also Bill Woodcock's INOC-DBA IP Phone network is separate from the telephone network, and would not be affected by the same congestion. "We built our network to be strong enough to survive a hurricane, flood or other natural disaster, but it is also flexible enough to adapt to enable our technicians to handle a surge in calls due to a radio call-in contest, rock concert ticket sale or American Idol voting," said Wiskocil. While the company's network is designed to handle heavy call volumes, the initial surge when millions of SBC customers pick up their telephones simultaneously as the voting lines open this Tuesday, May 20th could cause some callers to experience a "fast busy" signal, as the network provides far more than the usual number of customers with a dial tone to place their calls. Wiskocil explains: "If callers hear a fast busy signal on Tuesday night, we encourage them to hang up and try their call again in a little while. Our network experts have advised that if callers can wait approximately 30 minutes after the show ends, they will most likely get through on the first try." http://www.prnewswire.com/cgi-bin/stories.pl?ACCT=SVBIZINK6.story&STORY=/ww… http://www.zwire.com/site/news.cfm?newsid=8063525&BRD=1281&PAG=461&dept_id=…

1 0

Re: European equivalent of Equinix?
by Wouter van Hulten 20 May '03

20 May '03

Interxion has a partnership with Equinix: http://www.interxion.com/cms3000/modules/content_pages/page_preview .asp?Page_id=38&NodeID=A_128&navID=2 Both companies were established in a similar timeframe (1998), raised similar amounts of money and have similar services/products. fyi: Interxion has the largest carrier neutral datacentre footprint in Europe & is one of the few datacentre companies with really good power engineering standards; note that I am slightly biased in this matter. Regards, Wouter http://www.vanhulten.com/~wouter/ From: Frank Louwers <frank(a)openminds.be> Save Address | Headers To: Steve Francis <steve(a)expertcity.com> Date: Tue, 20 May 2003 09:12:25 +0200 Subject: Re: European equivalent of Equinix? ------------------------------------------------------------------- ------------- On Mon, May 19, 2003 at 03:24:39PM -0700, Steve Francis wrote: > > Not really north american content, except for the using equinix as a > comparison: > Anyone care to recommend a European equivalent of an Equinix site? > (Carrier neutral, well secured space, good power/building/HVAC > management; lots of carriers present; ideally with a peering switch; not > exorbitant cross connect fees) > > We're looking at opening our first European datacenter. InterXion has quite a few datacenters in Europe. Most of them house (a part of) the local peering infrastructure. They are all carrier neutral, the power/HVAC/security is very good/... Kind Regards, Frank Louwers -- Openminds bvba www.openminds.be Tweebruggenstraat 16 - 9000 Gent - Belgium

1 0

Google off the air?
by Hank Nussbacher 20 May '03

20 May '03

Something happen? Tried from multiple paths - all dead. -Hank

4 3

Wasted netspace (recovering)
by listuser＠numbnuts.net 19 May '03

19 May '03

Howdy. This afternoon I was working with a used switch I recently purchased when I noticed it still had the previous owner's IP in it. I noted that it wasn't a reserved address that I recognized so I looked it up. As it turned out the IP belonged to Occidental Petroleum Corp (oxy.com) and was part of a /16 (155.224.0.0/16). The fact that it they had a /16 was a bit surprising. Seeing how it was allocated back in 1992, I guess I really shouldn't be that surprised. I figured they must have enough remote offices to reasonably use a large portion of that /16. While loading their website I noted that www.oxy.com fell into another netblock (208.35.252.113/24). I was curious enough (read: bored) that I eventually queried Arin's WHOIS for Occidental Petroleum and was quite surprised at what I saw. http://ws.arin.net/cgi-bin/whois.pl?queryinput=occidental%20petroleum OCCIDENTAL PETROLEUM (OCCIDE-1) Occidental Petroleum Corp. (OPC) Occidental Petroleum Corporation (OPC-2) Occidental Petroleum IP (OPI-1) Occidental Petroleum Corporation (AS26517) OXYHOUAS-01 26517 OCCIDENTAL PETROLEUM FON-106789196846411 (NET-63-166-189-0-1) 63.166.189.0 - 63.166.189.255 OCCIDENTAL PETROLEUM FON-106789094446405 (NET-63-166-185-0-1) 63.166.185.0 - 63.166.185.255 OCCIDENTAL PETROLEUM FON-106789068846359 (NET-63-166-184-0-1) 63.166.184.0 - 63.166.184.255 OCCIDENTAL PETROLEUM FON-106790118446425 (NET-63-166-225-0-1) 63.166.225.0 - 63.166.225.255 OCCIDENTAL PETROLEUM FON-110111612871621 (NET-65-161-178-224-1) 65.161.178.224 - 65.161.178.255 OCCIDENTAL PETROLEUM FON-349201920042097 (NET-208-35-252-0-1) 208.35.252.0 - 208.35.252.255 Occidental Petroleum Corp. OXY1-NET (NET-155-224-0-0-1) 155.224.0.0 - 155.224.255.255 Occidental Petroleum Corporation OXY-2 (NET-170-189-0-0-1) 170.189.0.0 - 170.189.255.255 Occidental Petroleum Corporation OXY-3 (NET-199-248-164-0-1) 199.248.164.0 - 199.248.168.255 Occidental Petroleum IP FON-106769945643237 (NET-63-163-205-0-1) 63.163.205.0 - 63.163.205.255 Occidental Petroleum IP FON-106780672044417 (NET-63-165-112-0-1) 63.165.112.0 - 63.165.112.255 They have not one /16 but two /16s, eight /24s, one /22, and one /27. Does this seem a little excessive to anyone else? I can think of a dozen state-run universities off of the top of my head that could never dream of justifying a /16, let alone more. I hate to pummel a dead horse but would it be worthwhile to ask these corporations to relinguish netblocks that they don't use or can't justify keeping? "Because I'm paying you" isn't a good enough reason IMHO. Would it be worthwhile to have organizations with direct allocations submit a netblock usage summary every 4-5 years to justify keeping their existing blocks? I know it might be hard for ARIN to justify taking back someone's netblocks. It just irks me to no ends to see a considerable amount of wasted netspace such as this. Pardon me for asking because I imagine this has been discussed many times before. Justin Shore

3 3

An area for operations growth - Storage Area Nets in MANS
by Gordon Cook 19 May '03

19 May '03

Roxane Googin is usually ahead of the competition in spotting trends in data net use. here is what has has to say about enterprise use of MANs. COOK Report: Where are the metro area networks going? Googin: Probably the killer application for the MAN is grid computing and storage area networks. A lot of people think the driver for broadband access to the home is going to be multi-media. People, when they think about next generation networks, think home use. But this is never where the money has been. And no phone company is ever going to build the infrastructure. Although these new real time applica tions will clearly send more data over the network, the real killer application is going to be remote storage and synchronous storage. Synchronous storage means that you have two large servers doing the exact same thing at the exact same time in two different locations. COOK Report: Like a decentralized disk array? Googin: Yes. The backbone has to be incredibly fast because you cannot complete a transaction until you have acknowledgments from both disk drives. This will happen. Probably this year. What they are already doing is taking fiber channel and putting that on a Cienna Core Director optical switch port. Half of the ports being sold on the Core Director now are fiber channel. They aren't even Ethernet. And this is used for storage area nets (SANs). These are corporate MANs and will have nothing to do with sales to service providers. They are bypass business services where the storage arrays may not be more than a kilometer or two apart. These SANs are backing up continuously terabytes of data. We are talking huge applications that will use every bit of access to every bit of capacity they can get. COOK Report: Is 9/11 a motivation for this? Googin: Partly. Not only that but the whole paradigm of the real time organization will drive it. It used to be that your server had its own storage. It was a "stove pipe" connected to the CPU. Now as soon as you decouple that "stove pipe," you can put it anywhere. What they are finding is that if they have two of them that are mirrored in real time and place remotely that they do not have to do as much management of resources. COOK Report: Then forget the disaster back up and recovery operations? Those are the next to be marked for extinction? Googin: Oh yes. It is so elegant. The new architecture cannot be supported on direct attached storage. It must move off the server and it is doing so. If you have to go through a server to get to the storage, it simply doesn't work. Storage can't become just a utility until you move it off the server. The MAN will be backing up terabytes of data regularly and in real time. Disaster recovery, in real time, comes for "free". For more detail please see Fiber & Wireless as First Mile Technology - Fiber Business Models & Architecture http://cookreport.com/12.04-06.shtml -- ============================================================= The COOK Report on Internet, 431 Greenway Ave, Ewing, NJ 08618 USA 609 882-2572 (PSTN) 703 738-6031 (Vonage) cook(a)cookreport.com Subscription info & prices at http://cookreport.com/subscriptions.shtml Fiber & Wireless as First Mile Technology - Fiber Business Models & Architecture, July- September 2003, 130 pages available at http://cookreport.com/12.04-06.shtml =============================================================

4 5

BGP Path Filtering
by Mark Radabaugh 18 May '03

18 May '03

I'm having a hard time finding best practices for filtering outbound bgp announcements when providing transit to bgp-speaking customers. While we currently multi-home to several providers it appears we will soon need to provide transit for customers with their own AS's. I find lots of references (and understand) the basic ip as-path access-list 3 permit ^$ and it would seem that should we wish to provide transit for a bgp customer AS12345 we would use: ip as-path access-list 3 permit ^12345$ but I think this breaks if AS12345 prepends their advertisement. Next up is: ip as-path access-list 3 permit ^12345_[0-9]$* Which seems correct to me. Is this still best practice (or even correct)? Mark Radabaugh Amplex (419) 720-3635

14 29

List of martians appeared during the week May 6-12 2003
by Sean Donelan 16 May '03

16 May '03

http://www.ris.ripe.net/weekly-report/reports/20030506-20030512.html List of martians appeared during the week. Prefix Origin AS 10.0.0.0/8 18298 Chungnam National University Computer Center 10.1.1.1/32 5413 GX Networks (Formerly XO UK, CNCX, Xara Networks) 172.16.0.0/16 18298 Chungnam National University Computer Center 172.16.1.0/24 24587 Internet Online BV 172.16.2.0/24 24587 Internet Online BV 192.168.1.0/24 18298 Chungnam National University Computer Center 192.168.2.0/24 18298 Chungnam National University Computer Center 192.168.3.0/24 18298 Chungnam National University Computer Center 192.168.4.0/24 18298 21166 SatGate Stockholm Sweden 192.168.5.0/24 18298 Chungnam National University Computer Center 192.168.6.0/24 18298 Chungnam National University Computer Center 192.168.7.0/24 18298 Chungnam National University Computer Center 192.168.8.0/24 18298 Chungnam National University Computer Center 192.168.9.0/24 18298 Chungnam National University Computer Center 192.168.16.0/24 18298 Chungnam National University Computer Center 192.168.30.0/24 18298 Chungnam National University Computer Center 192.168.38.0/24 18298 Chungnam National University Computer Center 192.168.40.0/24 18298 Chungnam National University Computer Center 192.168.50.0/24 18298 Chungnam National University Computer Center 192.168.54.0/24 18298 Chungnam National University Computer Center 192.168.60.0/24 18298 Chungnam National University Computer Center 192.168.64.0/24 18298 Chungnam National University Computer Center 192.168.100.0/24 18298 Chungnam National University Computer Center 192.168.101.0/24 18298 Chungnam National University Computer Center

1 0

RE: Communities BCP [was: RE: BGP Path Filtering]
by Ejay Hire 16 May '03

16 May '03

On the subject of communities, these are some I have seen regularly implemented for controlling routes advertised to peers. (code snippet follows) Where xxxx is the peer ASN: xxxx:80 Set LocalPref to 80 xxxx:90 Set LocalPref to 80 xxxx:100 Set LocalPref to 80 xxxx:110 Set LocalPref to 80 xxxx:1 Prepend xxxx 1 time in the AS Path xxxx:2 Prepend xxxx 2 times in the AS Path xxxx:3 Prepend xxxx 3 times in the AS Path xxxx:no-export Well known community that requests the advertisement not leave the AS. xxxx:666 BlackHole. I've implemented this community for clueful downstream peers that suffered frequent DOS attacks. They advertise a single or small block of their IPs to me and I will blackhole traffic destined for their IP. I've considered echoing this advertisement up to my upstreams (if they support it), but have not done so. The config bits that follow are from memory, so no guarantees of syntax accuracy. If anyone knows how I can have an Item matched multiple times in the route-map I would appreciate a reply. I.e. if a customer wanted to send xxxx:100 and xxxx:1, currently I would match on the xxxx:1 and the localpref change would not be applied. Thanks in advance to whoever comes up with this gem. Code Snippet: (Again, this may not be 100% correct on syntax, I'm doing it from memory.) Prefix-list customerxyz-in permit 200.200.0.0/16 le 24 Prefix-list customerxyz-bh-in permit 200.200.0.0/16 le 32 ip community-list 66 permit xxxx:666 ip community-list 10 permit xxxx:1 ip community-list 11 permit xxxx:2 ip community-list 12 permit xxxx:3 ip community-list 13 permit xxxx:80 ip community-list 14 permit xxxx:90 ip community-list 15 permit xxxx:100 ip community-list 16 permit xxxx:110 route-map customerxyz-in permit 10 match community 66 match ip address prefix-list customerxyz-bh-in (this uses the ...-bh-in list allowing prefix lengths up to /32) set community no-export additive set next-hop null0 route-map customerxyz-in permit 20 match community 10 match ip address prefix-list customerxyz-in (this uses the regular customer prefix list allowing lengths up to /24) set as-path prepend xxxx ... 30 and 40 similar, for community lists 11 and 12 route-map customerxyz-in permit 50 match community 13 match ip address prefix-list customerxyz-in set localpref 80 ... 60,70,80, and 90 similar, for community lists 14-17 Ejay Hire ISDN-NET Network Engineer -----Original Message----- From: Jay Ford [mailto:jay-ford@uiowa.edu] Sent: Friday, May 16, 2003 2:27 PM To: Joe Abley Cc: deepak(a)ai.net; Mark Radabaugh; nanog(a)merit.edu Subject: Re: Communities BCP [was: RE: BGP Path Filtering] On Fri, 16 May 2003, Joe Abley wrote: > Examples of characteristics I have seen in the wild are: > > + I was learnt from a peer > + I was learnt from a transit provider > + I was learnt from a customer > + I was learnt over an exchange point > + I was learnt over a private peering connection > > These are all markers to be used in setting internal policy, so the > choice of numbers really doesn't matter. You can add or remove > characteristics from your list when necessary without having to > renumber anything. You can (and probably should) strip all these > attributes before sending routes to EBGP peers, so nobody else has to > see them. You can & definitely should strip those community values on announcements you receive from EBGP peers. Interesting things happen if you let others turn your routing policy knobs when you think they can't reach them. ________________________________________________________________________ Jay Ford, Network Engineering Group, Information Technology Services University of Iowa, Iowa City, IA 52242 email: jay-ford(a)uiowa.edu, phone: 319-335-5555, fax: 319-335-2951

2 2