October 2005 - Test - lists.nanog.org

RE: SWIP and Rwhois in the Real World
by Greenhagen, Robin 01 Dec '05

01 Dec '05

Can someone summarize the alternatives to the ARIN recommended RWHOIS server bits (from rwhois.org)? A quick hit on Google and Freshmeat was fairly barren. Looking for one that is mostly or fully put together, or a cookbook to assemble one from parts (i.e. MySQL, PHP, Apache, 3 rubber bands, 2 gallons of perl, etc...). Regards, Robin Greenhagen GSI http://www.gsihosting.com/

4 3

Level3 Question
by Dan Mahoney, System Admin 13 Nov '05

13 Nov '05

Okay, so I've been reading this thread on L3, and I'm a little curious as to what this potential de-peering means in one unique situation. A friend of mine has got a colo box sitting, single-homed, in a (3) data center. At the end of this, is this going to mean I can't reach Cogent? I've seen something in the discussions that imply this will be the case, but am not ultimately sure. Then again, is anyone? Thanks, -Dan -- --------Dan Mahoney-------- Techie, Sysadmin, WebGeek Gushi on efnet/undernet IRC ICQ: 13735144 AIM: LarpGM Site: http://www.gushi.org ---------------------------

21 30

oh k can you see
by Randy Bush 07 Nov '05

07 Nov '05

so a few of us are still looking at routing through the anycast sunglasses. a particular probe is seeing instability [0] for k.root-servers.net [1]. so we hop on to a router nearby, and have some fun looking at things. we discover an anomaly which takes a while to sort out o some of the anycasted servers mark their announcements with the magic NO_EXPORT community in an attempt to localize their distribution (it would be good if a server in kenya did not take load from nyc) o they also have a server or two which does not so mark their announcements on the presumption that the rest of the world can get to those non-marking server(s) this last assumption is not safe o consider large providers p0 and p1 which are connected to k0 which announces with NO_EXPORT o there is also server k1 which is out there somewhere and announcing without NO_EXPORT o test point t0 is in a multi-homed asn connected to p0 and p1 o the routers in p0 and p1 at which t0's router is connected have their best path to k being the one to k0 o this obscures their path to k1 o and, as they obey k0's NO_EXPORT, they can not export any route to a k.root-servers.net server to t0 o so t0 sees no route to k.root-servers.net this implies that a non-trivial part of the net can not see anycast services for which some of the servers are marking their announcements as NO_EXPORT. note that we saw this from a multi-homed site in seattle, not from some more net-isolated probe. whoops! randy --- [0] - please remember, this is not that the servers are unstable, but rather that routing near the probe is unstable, and the anycasted prefixes are likely to show this more than those which are unicast. [1] - side note: we got misled for a few seconds by % host k.root-servers.org. k.root-servers.org has address 193.0.0.214 % host k.root-servers.net. k.root-servers.net has address 193.0.14.129

9 20

New Rules On Internet Wiretapping Challenged
by Vicky Rode 03 Nov '05

03 Nov '05

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 http://www.washingtonpost.com/wp-dyn/content/article/2005/10/25/AR200510250… or By Arshad Mohammed Washington Post Staff Writer Wednesday, October 26, 2005; Page D01 New federal wiretapping rules that would make it easier for law enforcement to monitor e-mails and Internet-based phone calls were challenged by privacy, high-tech and telecommunications groups in federal court yesterday. The groups argued that the rules would force broadband Internet service providers, including universities and libraries, to pay for redesigning their networks to make them more accessible to court-ordered wiretaps. The groups also said the Federal Communications Commission rules, scheduled to take effect in May 2007, could erode civil liberties and stifle Internet innovation by imposing technological demands on developers. "It's simply a very bad idea for privacy and for free speech for the government to design any technology, much less the Internet, to be surveillance-friendly," said Lee Tien, a senior staff lawyer with the Electronic Frontier Foundation, a nonprofit privacy rights group. The government was trying to "build tentacles of control throughout telecommunications networks," Tien said. The FCC rules make broadband Internet providers and voice over Internet protocol companies subject to a 1994 federal law that requires telecom companies to assist law enforcement agencies in carrying out court-ordered wiretaps. The Communications Assistance for Law Enforcement Act requires telecom carriers to design their networks so they can quickly intercept communications and deliver them to the government when presented with a court order. In adopting the rules, the FCC said it wanted to ensure the government could carry out wiretaps as more communications move from the traditional telephone system to the Internet. "It is clearly not in the public interest to allow terrorists and criminals to avoid lawful surveillance by law enforcement agencies," the commission wrote in its order. Opponents argued the law was tailored for a simpler, earlier era of traditional telephone service and could cripple the evolution of the Internet by forcing engineers to design products so they can be easily monitored by the government. The 1994 law "will have a devastating impact on the whole model of technical innovation on the Internet," said John Morris, staff counsel for the Center for Democracy and Technology in Washington, which filed an appeal of the rules with the U.S. Court of Appeals for the District of Columbia Circuit yesterday. "The Internet evolves through many tens of thousands, or hundreds of thousands, of innovators coming up with brand new ideas," he said. "That is exactly what will be squelched." Morris said his group did not dispute the idea that the government should be able to carry out court-ordered wiretaps, but rather argued that the 1994 law was a blunt instrument ill-suited for the Internet age. He said the matter should be referred to Congress, which "can tailor the obligations to the Internet context as opposed to importing the very clumsy [telephone system] obligations and imposing them on the Internet." The American Council on Education, a higher-education trade group, separately asked the court Monday to review the rules. "We fear that doing what they want will require every router and every switch in an IT system to be replaced," said Terry W. Hartle, the council's senior vice president. He estimated that the upgrades could cost colleges and universities $6 billion to $7 billion. "Our quarrel with them is fairly specific," Hartle said. "We are concerned about the cost, and the complexity, and the schedule on which they want this accomplished." Spokesmen for the FCC and the Justice Department declined comment on the court challenges. - ------- end ------- ...Raising my hand. My question is on Terry Hartle's comments, maybe someone with more insight into this could help clear my confusion. Why would it require to replace every router and every switch when my understanding is, FCC is looking to install *additional* gateway(s) to monitor Internet-based phone calls and emails. I can see some sort of network redesign happening in order to accodomate this but replacing every router and every switch sounds too drastic, unless I mis-understood it. Please, I'm not advocating this change but just trying to understand the impact from an operation standpoint. Any insight will be appreciated. regards, /virendra -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDX/AApbZvCIJx1bcRAktgAKDzp+GaIDlpp5vdYT61jOWzEciClACfRkkW uQBPWQSzNpsw1M80tUQgWdI= =4t1U -----END PGP SIGNATURE-----

6 6

cogent+ Level(3) are ok now
by Jared Mauch 03 Nov '05

03 Nov '05

http://biz.yahoo.com/prnews/051028/laf022.html?.v=27 The internet will not end on November(9)th :) - jared -- Jared Mauch | pgp key available via finger from jared(a)puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine.

22 35

cymru down?
by matthew zeier 02 Nov '05

02 Nov '05

Unable to geto to www.cymru.com and 68.22.187.24 has been down for 5+ hours. Known issue?

8 11

Re: shim6 @ NANOG (forwarded note from John Payne)
by David Meyer 01 Nov '05

01 Nov '05

John, On Thu, Oct 27, 2005 at 02:08:50AM +1000, Geoff Huston wrote: > > From: John Payne <john(a)sackheads.org> > > Subject: shim6 @ NANOG > > Date: Wed, 26 Oct 2005 09:11:45 -0400 > > > Public thanks to Dave, Geoff, Vijay, Ted and Jason for their > involvement in bringing shim6 to the NANOG conference. > > The messages I heard were: > > 1) Traffic engineering, traffic engineering and traffic engineering > - do NOT put this in the hands of the end system, this needs to > be site level, or at the very least the site needs to be able to > override the end system's decisions. > > 2) The first hit is of critical importance to content providers (many > of whom couldn't legitimately justify a /32). Hunting through DNS to > find a locator that works won't fly. > > 3) It was good to hear in a widespread forum that shim6 is not > expected to be THE only multihoming solution. However, we were left > uninformed as to where the other work is going on. Thanks. I'd also like to thank Geoff, Jason, Vijay, Ted, and everyone to participated in the BOF. I found the session to be quite productive, and I hope that it will form the foundation for an ongoing dialog. The IAB is hoping to do the next IAB "BOF" at APRICOT, so with any luck, see you all there. Thanks again all, Dave

3 2

feedback from new conference attendees
by Todd Underwood 31 Oct '05

31 Oct '05

folx, a number of people involved with nanog in various official and unofficial capacities have been having in-depth discussions about how to make the nanog conference more accessible and productive to newcomers. i'm collecting anecdotal (totally bereft of scienctific value) data about newcomers' experiences at the most recent nanog conference, in an effort to understand general reaction and suggestions for improvement. this is a supplement, and not a replacement for the survey results that are always excellent and useful. if los angeles was your first nanog conference and you feel like describing your experience, i'm particularly interested in: --what did you expect to get out of the conference? --what did you get out of the conference? --what aspect of the conference was most valuable to you (tutorials, general session, BOFs, beer 'n' gear, informal social time, the terminal room, hotel pool, etc.)? --what aspect of the conference was most frustrating to you (location, schedule, content, food, dress code, tshirt, time zone, etc.)? --will you attend another nanog? when? if not, why not? if not, is there anything that would convince you to? --anything else i'm missing. replies in private email, pls. i'll be collecting results and am happy to share with interested parties. thanks, t. -- _____________________________________________________________________ todd underwood chief of operations & security renesys - internet intelligence todd(a)renesys.com www.renesys.com

1 0

Cogent problems in Miami?
by Chris Ranch 31 Oct '05

31 Oct '05

Hello Folks, Is it just us, or are others experiencing loss/latency/bgp flapping within Cogent (AS174) network in Miami? I'm not a direct customer; my upstream is working with them, and was wondering. This appears to have started for us 10/29/05 19:40 EDT. Thanks, Chris Ranch

1 0

ASN database files from LACNIC or AFRINIC?
by Andreas Ott 30 Oct '05

30 Oct '05

Hello, I am currently looking for ASN databases from LACNIC and AFRINIC the same way they are provided at ftp://ftp.arin.net/pub/rr/arin.db ftp://ftp.ripe.net/ripe/dbase/ripe.db.gz ftp://ftp.apnic.net/apnic/whois-data/APNIC/apnic.RPSL.db.gz I've traversed their respective ftp.[lacnic|afrinic].net servers to no avail. I would appreciate any hints where to download this data if it exists. NB: we do know that looking up from a dowloaded file might not be up-to-date anymore the older the file gets. However, the application usually does more lookups than the online queries permit us to do. We will keep this updated asynchronously. Thanks, andreas -- Andreas Ott andreas(a)naund.org

4 5