March 2008 - Test - lists.nanog.org

Transition Planning for IPv6 as mandated by the US Govt
by Glen Kent 18 Mar '08

18 Mar '08

Hi, I was just reading http://www.whitehouse.gov/omb/egov/b-1-information.html#IPV6, released some time back in 2005, and it seems that the US Govt. had set the target date of 30th June 2008 for all federal govt agencies to move their network backbones to IPv6. This deadline is almost here. Are we any close for this transition? I have another related question: Do all ISPs atleast support tunneling the IPv6 pkts to some end point? For example, is there a way for an IPv6 enthusiast to send his IPv6 packet from his laptop to a remote IPv6 server in the current circumstances if his ISP does not actively support native IPv6? Cheers, Glen

16 21

blackberry.com
by Matt Liotta 18 Mar '08

18 Mar '08

Anyone having problems accessing blackberry.com? -Matt

3 3

reminder: NANOG43 submissions due
by Todd Underwood 18 Mar '08

18 Mar '08

a reminder to everyone: nanog 43 submissions are due (past due, really). the program committee is already reviewing the many submissions we've already received and will shortly have our first conference call to select the first presentations for the agenda. now is your absolute best chance to get your presentation accepted for nanog 43 in brooklyn in june. http://nanog.org/mtg-0806/callforpresent.html (for more info). if you have been planning to submit a presentation, panel, bof or tutorial, now is the time to get it done. please go to http://www.nanogpc.org/ and get an abstract and some slides submitted (the slides to not have to be final but do have to be substantive enough for us to understand what the talk is about and convince us of the quality of the presentation). please email me with any questions. thanks, t. -- _____________________________________________________________________ todd underwood +1 603 643 9300 x101 renesys corporation general manager babbledog todd(a)renesys.com http://www.renesys.com/blog

1 0

NANOG Information/Updates
by Betty J. Burke 17 Mar '08

17 Mar '08

NANOG Community: Hello everyone. On behalf of Merit and the NANOG Committees, I am pleased to provide an activity update regarding NANOG meetings. In support of our ongoing commitment to the community, a number of reports are now posted at the NANOG website. By many measures, NANOG 42 hosted by CRG West in San Jose was a big success! Meeting video archives are now available off the meeting's agenda page. Meeting Attendance Information posted at: <http://nanog.org/mtg-0802/Attendance_Stats_N42.pdf> Meeting Survey results posted at: <http://nanog.org/mtg-0802/surveyresults.html> NANOG 41 Financial information shared at the Community meeting posted at: <http://www.nanog.org/financials/nanog41.pdf> Now to the future!! I was sorry to have missed NANOG 42 and can not wait to see everyone in June! As you know NANOG 43 is scheduled for June 1-4, 2008 in Brooklyn, NY. The meeting will be hosted by Telx. This is also NANOG's first meeting in New York. The Call for Presentations is posted at: <http://nanog.org/mtg-0806/callforpresent.html> with a draft agenda expected by the end of March 2008. Get those ideas going and send them to: <http://www.nanogpc.org/> We have a number of folks interested in sponsorship opportunities <http://nanog.org/contribute.html> Don't wait contact, nanog-support(a)nanog.org now! The location is great and the agenda is coming along. Confirm your attendance by visiting our website, complete your registration and book your hotel room! The information is now posted at <https://www.nanog.org/registration/> <http://nanog.org/mtg-0806/hotel.html> As always, feel free to contact me directly, or any of the NANOG Teams (Committees)! All best. Betty Burke Merit/NANOG Project Manager

1 0

Operators Penalized? (was Re: Kenyan Route Hijack)
by Glen Kent 17 Mar '08

17 Mar '08

> > > > Usually unintentional. See Pakistan Telecom for recent example. > > Pakistan's blackhole was semi-unintentional, kind of like you tried to > shoot your spouse but the bullet went through the wall and > "unintentionally" hit a neighbor. Do ISPs (PTA, AboveNet, etc) that "unintentionally" hijack someone else IP address space, ever get penalized in *any* form? Depending upon whom and what they hijack, and who all get affected, it sure can get them lot of (undesired) publicity - news, articles, nanog discussions/presentations, ietf discussions, blogs - but, it doesnt really hurt them much, does it? AboveNet, unlike PTA, got a lot less publicity for their achievement, primarily because they didnt put millions off, from watching imbecilic videos of cats jumping the cars, and people slipping in snow - a simple google test corroborates this. While you get pages and pages of sites that talk about "PTA Youtube", you only get a handful when you do "Abovenet Africa Online". So, is there anything that can be done to discourage such mishaps? What do we do if an ISP, again accidentally, hijacks another address block or blackholes them? Would it pain them if their announcements were suppressed, or reachability (more specifically origination information) is damped for some time? I understand, this is opening up a pandora's box, because this ISP could be providing transit services to other ISPs, and this might inadvertently affect them. So, i am not suggesting a solution - i am seeking suggestions on what can be done about this? And before this, if there is anything that we as a community want to do about this? Affably, Glen

6 7

ARIN & CAIDA IPv6 Survey
by Member Services 17 Mar '08

17 Mar '08

As a reminder to those of you that have not participated in the IPv6 survey. The American Registry for Internet Numbers (ARIN), in cooperation with the Cooperative Association for Internet Data Analysis (CAIDA), is conducting a survey to gather data regarding the current and future use of IPv6 throughout the ARIN Region. For a complete list of countries go to: http://www.arin.net/community/ARINcountries.html We encourage all organizations in the ARIN region to participate in the survey so we can establish a comprehensive view of present IPv6 penetration and future plans of IPv6 deployment. The survey will open on 10 March and remain available until noon ET on 24 March. The results of the survey will be presented and discussed at the ARIN XXI Public Policy and Members Meeting to be held in Denver 6-9 April 2008, and the survey data will support ongoing research. The survey is composed of 20 questions that can be answered in a few minutes. When you complete the survey you will be entered in a drawing for prizes. You must provide your contact information to win. This is a secure survey and all data will be presented in summary form only, and kept confidential between ARIN and CAIDA. Please take a few moments to complete the survey located at: https://www.surveymonkey.com/s.aspx?sm=2x5j2OlJl0cq44iYfQadrw_3d_3d Regards, Member Services American Registry for Internet Numbers (ARIN)

1 0

load balancing and fault tolerance without load balancer
by Joe Shen 17 Mar '08

17 Mar '08

hi, we plan to set up a web site with two web servers. The two servers should be under the same domain name. Normally, web surfing load should be distributed between the servers. when one server fails, the other server should take all of load automatically. When fault sever recovers, load balancing should be achived automatically.There is no buget for load balancer. we plan to use DNS to balance load between the two servers. But, it seems DNS based solution could not direct all load to one server automatically when the other is down. Is there any way to solve problem above? we use HP-UX with MC-Service Guard installed. thanks in advance. Joe __________________________________________________________________ Tired of visiting multiple sites for showtimes? Yahoo! Movies is all you need http://sg.movies.yahoo.com

7 6

Routing Loop
by Felix Bako 17 Mar '08

17 Mar '08

Hello, There is a routing loop while accesing my network 194.9.82.0/24 from some networks on the Internet. | This is a test done from lg.above.net looking glass. 1 ten-gige-2-2.mpr2.ams2.nl.above.net (64.125.26.70) 4 msec 0 msec 0 msec 2 ten-gige-2-2.mpr1.ams2.nl.above.net (64.125.26.69) [MPLS: Label 78 Exp 0] 0 msec 0 msec 0 msec 3 ge-1-2-0.mpr1.ams1.nl.above.net (64.125.26.74) 8 msec 8 msec 0 msec 4 ten-gige-1-1.mpr1.ams2.nl.above.net (64.125.26.73) [MPLS: Label 80 Exp 0] 0 msec 4 msec 0 msec 5 ten-gige-2-2.mpr2.ams2.nl.above.net (64.125.26.70) 4 msec 0 msec 0 msec 6 ten-gige-2-2.mpr1.ams2.nl.above.net (64.125.26.69) [MPLS: Label 78 Exp 0] 0 msec 0 msec 4 msec 7 ge-1-2-0.mpr1.ams1.nl.above.net (64.125.26.74) 64 msec 0 msec 4 msec 8 ten-gige-1-1.mpr1.ams2.nl.above.net (64.125.26.73) [MPLS: Label 80 Exp 0] 0 msec 4 msec 0 msec 9 ten-gige-2-2.mpr2.ams2.nl.above.net (64.125.26.70) 4 msec 0 msec 0 msec 10 ten-gige-2-2.mpr1.ams2.nl.above.net (64.125.26.69) [MPLS: Label 78 Exp 0] 0 msec 4 msec 0 msec 11 ge-1-2-0.mpr1.ams1.nl.above.net (64.125.26.74) 4 msec 0 msec 4 msec| How do i aproach to fix this issue Regards Felix -- Best Regards, Felix Bako Network Engineer Africa Online, Kenya Tel: +254 (20) 27 92 000 Fax: +254 (20) 27 100 10 Email: fbako(a)africaonline.co.ke Aim:felixbako * Africa Online Disclaimer and Confidentiality Note * This e-mail, its attachments and any rights attaching hereto are, unless the context clearly indicates otherwise, the property of Africa Online Holdings (Kenya) Limited and / or its subsidiaries ("the Group"). It is confidential and intended for the addressee only. Should you not be the addressee and have received this e-mail by mistake, kindly notify the sender, delete this e-mail immediately and do not disclose or use the same in any manner whatsoever. Views and opinions expressed in this e-mail are those of the sender unless clearly stated as those of the Group. The Group accepts no liability whatsoever for any loss or damages, however incurred, resulting from the use of this e-mail or its attachments. The Group does not warrant the integrity of this e-mail, nor that it is free of errors, viruses, interception or interference. For more information about Africa Online, please visit our website at http://www.africaonline.com

8 8

Re: Kenyan Route Hijack
by Paul Ferguson 17 Mar '08

17 Mar '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -- "Bill Stewart" <nonobvious(a)gmail.com> wrote: >I've seen two popular reasons for doing it accidentally >- Fat fingers when configuring IP addresses by hand >- Using old routing protocols such as IGRP or RIP and autosummarizing >routes, > usually done by a customer of an ISP that doesn't bother filtering > carefully. > This doesn't give you a /24 address by accident, > but it lets you take two /24 subnets of a Class B or Class A > and turn them into an advertisement for the whole network. Also: I have seen instances where a static route points to a next hop that (inadvertently) may be "redistribute-static" injected into BGP. This happens occasionally due to ad hoc configurations, back- hole null routing, etc. - - ferg -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.3 (Build 3017) wj8DBQFH3LBoq1pz9mNUZTMRAm8qAJwLWej/LjWQo8svLbgmOhe3kOOMCwCg7XZ/ V8/XCEkVEu0h2MAndAIpZ5g= =jQfu -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

10 9

Re: Kenyan Route Hijack
by Paul Ferguson 16 Mar '08

16 Mar '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -- "Glen Kent" <glen.kent(a)gmail.com> wrote: >If its done intentionally then it would only make sense if theres a >DOS attack coming from that address block, or if theres something >"blasphemous" put up there. If none of these, then why locally >blackhole traffic? > Usually unintentional. See Pakistan Telecom for recent example. - - ferg -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.3 (Build 3017) wj8DBQFH3L1Pq1pz9mNUZTMRAr9aAKDWAsFl1x92MHitc3vZ4FLF2oHXzgCg9ykS HMfSKSozgOcWVgAUOV1N8xU= =iNQ9 -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

5 4