April 2005 - Test - lists.nanog.org

RE: BGP Anywhere - Global Redundancy
by Vandy Hamidi 14 Apr '05

14 Apr '05

Bill, Excellent suggestion to advertise a more specific block at the Primary Datacenter and a less specific block at the Backup DC. I can't get a /20, but I can justify a /23. With that I can advertise, for example: 192.168.0.0/24 at the PDC 192.168.0.0/23 at the BDC If the PDC advertisements fail due to a disaster/failure the less specific /23 will route to the BDC. Question for NANOG: If I advertise a /24 and /23, are you aware of any ISPs that would drop the /24 advertisement but keep the /23. If that were to happen, I could get some traffic sent to the BDC? Or would it be ok as my direct peer ISP wont (shouldn't) drop the /24? -=Vandy=- -----Original Message----- From: Bill Stewart [mailto:nonobvious@gmail.com] Sent: Wednesday, April 13, 2005 10:01 PM To: Vandy Hamidi Subject: Re: BGP Anywhere - Global Redundancy Depending on what your address space needs are, you might also consider advertising the PDC with a more specific address space and the BDC with a less specific space, and make sure that the transit providers you're using at both ends will accept routes for the more specific space (e.g. /20? /24?) That rule is supposed to trump AS Path Length rules and just about anything else, so if you're using both to point traffic to the PDC, you're likely to win. It also lets you address specific destinations in the BDC-only space if you want to reach them when the PDC is up. And I'm puzzled that somebody said 15 minutes +/- 5. Typical BGP timers are set for ~30-60 seconds, so you should see recovery in 90-180 seconds, or faster if the failure can be detected by Layer 2 or Layer 1 protocol handling at your upstream provider (e.g. backhoe problems should be detectable almost immediately; router CPU flakeouts will need to wait for timeout.) On 4/6/05, Vandy Hamidi <vandy.hamidi(a)markettools.com> wrote: > > All, > We're an ASP and are considering adding a secondary Backup Datacenter > (BDC) in the US to protect our web presence. > > My goal is to ensure automatic failover of my Primary DC's (IP) traffic > to the BDC in the event of a catastrophic failure of the PDC. > > I'm considering geographic load balancing and BGP Anywhere as the two > options. I'm clear on how the Geo LB works, but have some doubts about > BGPAW as I've never implemented it before and documentation online is > pretty weak to non-existent. > > Below is how I believe it should be done. > From PDC: > -Advertise CIDR block to all peers w/good metric (0 hop count) > From BDC: > -Advertise same CIDR block to all peers w/poor metric (+20 hop > count) > > During normal operation, all ASes will route production traffic to PDC. > In the event of catastrophic failure at PDC; PDC advertisements will > cease, BDC route will become the only one on the net and traffic will > route to the BDC. > > Questions: > 1) Will this work? > 2) Other suggestions or alternatives? > 3) Any chance that traffic could flow to BDC for any reason? > 4) Any internet etiquette I could be ignoring? > 5) What would you estimate the failover time would be? > 6) Assuming the routers at PDC and BDC pull down full routing table, how > will the receipt of the PDC CIDR advertisement be treated? BGP rules > say it will be dropped as a routing loop. What alternatives would I > have if I want to be able to route that CIDR block traffic from the BDC > to the PDC. Confed? Cisco conditional advertisements? > > Thanks all. This is the only place I can think of that would have the > expertise to comment. > > -=Vandy=- > > -- ---- Thanks; Bill Note that this isn't my regular email account - It's still experimental so far. And Google probably logs and indexes everything you send it.

1 0

RE: Anyone familiar with the SBC product lingo?
by Dan Lockwood 14 Apr '05

14 Apr '05

I also wanted to pass on the website for our contract. It is was negotiated with the state so that all public organizations can take advantage. I'm sure some of you are familiar with it: https://ebiznet.sbc.com/calnetinfo/ Dill down through "Products, Services and Pricing" and then to "Rate Tables (Rider C)" Dan -----Original Message----- From: Matthew Crocker [mailto:matthew@crocker.com] Sent: Thursday, April 14, 2005 2:55 PM To: Dan Lockwood Cc: nanog(a)merit.edu Subject: Re: Anyone familiar with the SBC product lingo? > > SONET Circuit Service OC3-c (155Mbps) $2200 vs. Central Office Node > Circuit Service OC3/3c (155Mbps) $675 SONET is a method of transporting TDM channels over fiber. SONET is made up of building blocks calls a STS. A STS is equivalent to a DS-3 + SONET Wrapper. An OC-3 equals 3 STSes. OC-3s come in two types, 'channelized' OC-3 which is 3 DS-3s in 3 STSes and Packet Over SONET (POS), concatenated OC-3c which is 155mbps. If you are planning on using this circuit for TDM based voice (84 T1s in 3 DS-3 chunks) then you will want an OC-3 not an OC-3c. If you are planning on running 155mbps POS IP traffic you want an OC-3c. OC-3 = 3 x STS-1 = 3 x DS-3 = 3 x 28 DS-1s, 84 DS-1s = 2016 DS0 voice channels. OC-3c = 1 x STS-3 = 155mbps You can use an Adtran OPTI-3 to break an OC-3 into 3 distinct DS-3 channels which can be plugged into M13 muxes (Carrier Access Widebank 28) which will break a DS-3 into 28 DS-1s. If you want IP bandwidth you can use an OC-3 POS line card from your router vendor of choice. -Matt

1 0

Re: SONET
by sgorman1＠gmu.edu 14 Apr '05

14 Apr '05

Quantitative analysis confirms said anecdote in many places other than the Baltimore tunnel. It varies widely by city, some are more resilient than others depending on a variety of factors ranging from geography to zoning ordinances. We just finished a comparison between NYC and Charlotte that had some interesting results - sometimes being a flat, waterless, boring place is a good thing. ----- Original Message ----- From: David Barak <thegameiam(a)yahoo.com> Date: Thursday, April 14, 2005 4:50 pm Subject: SONET > > > --- Valdis.Kletnieks(a)vt.edu wrote: > > > (Anybody here *NOT* seen cases where the 2 fibers > > leave the building on opposite > > sides, go down different streets - and rejoin 2 > > miles down the way because > > there's only one convenient bridge/tunnel/etc over > > the river, or similar?) > > > confirming anecdote: > > Remember the Baltimore tunnel fire? The protect ring > was in the conduit on one side, and the working was on > the other... > > David Barak > Need Geek Rock? Try The Franchise: > http://www.listentothefranchise.com > > > > __________________________________ > Do you Yahoo!? > Yahoo! Small Business - Try our new resources site! > http://smallbusiness.yahoo.com/resources/ >

1 0

RE: Anyone familiar with the SBC product lingo?
by Hannigan, Martin 14 Apr '05

14 Apr '05

> -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu]On Behalf Of > Valdis.Kletnieks(a)vt.edu > Sent: Thursday, April 14, 2005 4:35 PM > To: Luke Youngblood > Cc: 'Dan Lockwood'; nanog(a)merit.edu > Subject: Re: Anyone familiar with the SBC product lingo? > > > On Thu, 14 Apr 2005 16:15:41 EDT, Luke Youngblood said: > > > > SONET simply means you are on a Sonet ring: Two redundant > connections to > > the central office. If someone gets a little crazy with a > backhoe your line > > is guaranteed to stay up (ask about SLAs, and make sure > they will refund > > part of your monthly bill if you have an outage). That's > why it costs over > > twice as much. > > And remember to ask questions - make sure they've actually got the two > connections routed differently. Remember that if the backhoe > hits the conduit, > *all* the fiber pairs go - and if both runs were in the same > conduit, you're > still dead.... > > (Anybody here *NOT* seen cases where the 2 fibers leave the > building on opposite > sides, go down different streets - and rejoin 2 miles down > the way because > there's only one convenient bridge/tunnel/etc over the river, > or similar?) It's rare that the pairs *don't leave the building in a lateral to the loop. Once you're into the metro, you're usually okay, but yes, you need to check. Most buildings only have 1 zero manhole so it's not feasible to get a second diversified lateral and it doesnt make sense to lease a second lateral on the same pathway. -M<\\ >

1 0

SONET
by David Barak 14 Apr '05

14 Apr '05

--- Valdis.Kletnieks(a)vt.edu wrote: > (Anybody here *NOT* seen cases where the 2 fibers > leave the building on opposite > sides, go down different streets - and rejoin 2 > miles down the way because > there's only one convenient bridge/tunnel/etc over > the river, or similar?) > confirming anecdote: Remember the Baltimore tunnel fire? The protect ring was in the conduit on one side, and the working was on the other... David Barak Need Geek Rock? Try The Franchise: http://www.listentothefranchise.com __________________________________ Do you Yahoo!? Yahoo! Small Business - Try our new resources site! http://smallbusiness.yahoo.com/resources/

1 0

RE: Anyone familiar with the SBC product lingo?
by Hannigan, Martin 14 Apr '05

14 Apr '05

> -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu]On Behalf Of > Luke Youngblood > Sent: Thursday, April 14, 2005 4:16 PM > To: 'Dan Lockwood'; nanog(a)merit.edu > Subject: RE: Anyone familiar with the SBC product lingo? > > > > SONET simply means you are on a Sonet ring: Two redundant > connections to > the central office. If someone gets a little crazy with a > backhoe your line > is guaranteed to stay up (ask about SLAs, and make sure they > will refund > part of your monthly bill if you have an outage). That's why > it costs over > twice as much. Ask for the DLR to assure this. SONET=redundancy is a misnomer. -M<

1 0

RE: AUP for NANOG?
by Hannigan, Martin 14 Apr '05

14 Apr '05

> -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu]On Behalf Of > Bill Nash > Sent: Thursday, April 14, 2005 2:56 PM > To: nanog(a)merit.edu > Subject: Re: AUP for NANOG? > > > > > On Thu, 14 Apr 2005, Scott Grayban wrote: > > > [ SNIP ] > > Having been moderated myself in this past week, I'm glad to see that > people have one, gotten past any trepidation of posting, and > two, that the > new moderation crew is getting up to speed. The issue is finding the comfort zone for both sides of a contentious issue and we're making progress. We're never going to be able to stop people from posting off topic. What we will do is ask for cooperation and if we can't get that cooperation, we will look at each issue on a case by case basis and deal with it using the AUP for guidance. In addition to our active administrative role, it can't hurt to occasionally use the "D" key or write a procmail filter. I'd like to move the conversation over to nanog-reform(a)nanog.org since that seems like more suitable place to go back and forth on list operation and administrivia. Regards, -M<

1 0

IANA IPv4 allocations and bogon update: 41/8
by Rob Thomas 14 Apr '05

14 Apr '05

-----BEGIN PGP SIGNED MESSAGE----- [ Apologies to those of you who receive this note in multiple forums. ] Hi, team. The numerous Team Cymru bogon projects have been updated as of 13 APR 2005 to reflect the following IANA allocation made on 12 APR 2005: 041/8 Apr 05 AfriNIC (whois.afrinic.net) IANA allocations change over time, so please check regularly to ensure you have the latest filters if you are not using the bogon BGP feed(s). We do announce updates to the bogon projects to sundry lists, such as the bogon-announce list. We can not stress this point strongly enough - these allocations change. If you do not adjust your filters, you will be unable to access perhaps large portions of the Internet. Worse yet, you may end up blocking access for people who transit through you. Please do not apply any filters or blocks to your network without carefully considering the ramifications of doing so. As a point of reference, the Team Cymru master Bogon Reference Page can be found here: <http://www.cymru.com/Bogons/> A quick summary of the documents and projects that have been updated include the following: HTTP The Bogon List - <http://www.cymru.com/Documents/bogon-list.html> The Text Bogon Lists - <http://www.cymru.com/Documents/bogon-bn-nonagg.txt> - <http://www.cymru.com/Documents/bogon-bn-agg.txt> Secure BIND Template - <http://www.cymru.com/Documents/secure-bind-template.html> Secure IOS Template (Cisco) - <http://www.cymru.com/Documents/secure-ios-template.html> Secure BGP Template (Cisco) - <http://www.cymru.com/Documents/secure-bgp-template.html> Secure JUNOS Template (Juniper) - <http://www.cymru.com/gillsr/documents/junos-template.htm> Secure JUNOS BGP Template (Juniper) - <http://www.cymru.com/gillsr/documents/junos-bgp-template.htm> Ingress Prefix Filter Templates, Loose and Strict (Cisco) - <ftp://ftp-eng.cisco.com/cons/isp/security/Ingress-Prefix-Filter- Templates/> Ingress Prefix Filter Template, Loose (Juniper) - <http://www.cymru.com/gillsr/documents/junos-isp-prefix-filter- loose.htm> Ingress Prefix Filter Template, Strict (Juniper) - <http://www.cymru.com/gillsr/documents/junos-isp-prefix-filter- strict.htm> BGP Bogon route-server for AUTOMATED updates of bogon filters - All bogon route-server peers have already received the appropriate BGP prefix updates. - <http://www.cymru.com/BGP/bogon-rs.html> RADb fltr-unallocated fltr-martian fltr-bogons - <http://www.cymru.com/Bogons/index.html#radb> RIPE NCC fltr-unallocated fltr-martian fltr-bogons - <http://www.cymru.com/Bogons/index.html#ripe> DNS Bogon (bogons.cymru.com) zone - <http://www.cymru.com/Bogons/index.html#dns> Monitoring Bogon prefix monitoring - <http://www.cymru.com/BGP/robbgp-bogon.html> Bogus ASN monitoring - <http://www.cymru.com/BGP/asnbogusrep.html> Please feel free to contact Team Cymru <team-cymru(a)cymru.com> with any comments, questions, or concerns. Thank you for your continued support. Rob. - -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty); -----BEGIN PGP SIGNATURE----- Version: PGP 6.5.2 iQCVAwUBQl578FkX3QAo5sgJAQEBUQQAhxlGUyzcvxzHVF2/PHZt27K04nSCxSWu k0G70eCN6QRib3h9HIlz3GCu24aBPJMcM+zH6SOGjydVHsDFJFFGuw42HcTWAttV 35nbzeN4jqBQQZGtel3he+lNPcd60uHloE3za/4F6P/flBrl2S3peoCo4TpxDnfe RoBcAod+aTQ= =74Xj -----END PGP SIGNATURE-----

1 0

OpenTransit (france telecom) depeers cogent
by Jonas Frey 14 Apr '05

14 Apr '05

OpenTransit just depeered Cogent. Currently OT sees Cogent behind Sprint/Verio: AS path: 5511 1239 2914 174 13129 I but packets are disapearing in a blackhole. Jonas

6 8

New IANA IPv4 allocation to AfriNIC (41/8)
by Doug Barton 14 Apr '05

14 Apr '05

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Greetings, This is to inform you that the IANA has allocated the following one (1) IPv4 /8 block to AfriNIC: 41/8 AfriNIC For a full list of IANA IPv4 allocations please see: <http://www.iana.org/assignments/ipv4-address-space> This is the first allocation to AfriNIC after their recent recognition as a Regional Internet Registry. The ICANN staff would like to offer its congratulations to AfriNIC for this significant achievement. - -- Doug Barton General Manager, The Internet Assigned Numbers Authority -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (MingW32) iD8DBQFCXIcvwtDPyTesBYwRAi3eAJ9/+Dr9XZcD4xEeEhGv8f51YjYaEACgib9Z HBliA/KP+Xsbe1Bp/poOJfM= =+Z/c -----END PGP SIGNATURE-----

13 18