January 2009 - Test - lists.nanog.org

Re: ISP Unbundling circuits
by Mark Kent 31 Jan '09

31 Jan '09

On a slightly related topic, a US-based colo outfit used by a company I work with wants a fee to disconnect power to the cage. The tenant had been there for years and, at contract renewal time, was lobbied hard ($$) by the colo company to reduce power consumption. The tenant worked for a few months and freed up 20 power circuits. The colo then said that they had a disconnect fee for each power circuit. Now, I think a reasonable fee is $0. The colo wants considerably more. I won't bias you with the figure yet... please let me know what you think is reasonable, either by experience or just as a thought exercise. Thanks, -mark

5 4

Any ATT DNS admins out there?
by Mike Lyon 30 Jan '09

30 Jan '09

If so, would you mind hitting me up offlist? I have a few questions that i am unable to get answered through normal channels. Cheers, Mike

41 58

Towerstream outage/intermittency?
by askthelist＠gmail.com 30 Jan '09

30 Jan '09

anyone using towerstream in the la area and experiencing an outage?

1 0

RE: Shaping on a large scale
by C. Jon Larsen 30 Jan '09

30 Jan '09

> Open source you can do a custom setup with IPTables and iproute2, but it > will take some work to get the same kind of features and management > interface. LARTC is a good reference for this kind of topic: > http://lartc.org/. Also I'm not sure if someone has built this into any > of the firewall specific linux distros yet, so you may want to explore > those a little. The scripts below will set max bandwidth on an interface to 60mbit, and setup a queue to shape a.b.c.d to 3Mbit. Seems to work ok for me. Its used on a physical server to limit bandwidth to a virtual server(s) on the physical server. Should work just as well on a dual-armed router/firewall shaping devices behind it. You would just create more classes (1:11, 1:12, etc) for more clients/ips to shape and you might want to knock the ceiling on the default (1:30) class down to guarantee the bandwidth to the 1:10, 1:11...classes. tc qdisc add dev eth0 root handle 1: htb default 30 tc class add dev eth0 parent 1: classid 1:1 htb rate 60mbit burst 150k tc class add dev eth0 parent 1:1 classid 1:10 htb rate 3mbit burst 15k tc class add dev eth0 parent 1:1 classid 1:30 htb rate 1kbit ceil 60mbit burst 150k tc qdisc add dev eth0 parent 1:10 handle 10: sfq perturb 10 tc qdisc add dev eth0 parent 1:30 handle 30: sfq perturb 10 ## limit a.b.c.d to 3mbit/sec: U32="tc filter add dev eth0 protocol ip parent 1:0 prio 1 u32" $U32 match ip src a.b.c.d/32 flowid 1:10 $U32 match ip dst a.b.c.d/32 flowid 1:10 tc -s -d qdisc show dev eth0 > -----Original Message----- > From: Bruce Grobler [mailto:bruce@yoafrica.com] > Sent: Friday, January 30, 2009 12:34 AM > To: nanog(a)nanog.org > Subject: Shaping on a large scale > > Hi, > > Does anyone know of any Shaping appliances to shape customers based on > IP, allow for a quota per IP and qos mechanisms like LLQ?, This is > should be something that can sit in between two border router's and > support a small ISP (20000 customers), also an opensource solution would > be great!

3 2

-48VDC summary of responses
by Deepak Jain 30 Jan '09

30 Jan '09

Lots of folks provided very good suggestions and information. Here is a brief attempt at a summary. I only got a few sales folks hitting me up, so you are probably on your own to get in touch with most of these guys. Top recommendation: * Eltek/Valere seemed to be the top recommendation (3:1 or 4:1), though customer svc is rumored to have gone downhill since the acquisition). Large Plants: (1000A and more) ** C&C & Sageon (sageon: stand alone, not rack mount, C&C scales in 100A increments) Small plants: Argus (re: Cordex unit- management UI only works in IE, emails just fine, good chassis based expandability) [2:1 recommendation here] Tyco in the lower range Telect for unmanaged supplies/PDUs Lorain/Realtec makes nice equipment. Thanks to everyone for their input, I don't have much more detail from most of the responses so if you want a contact who is using this gear, I can try to make the introduction. Deepak Jain AiNET

1 0

clueful yahoo admin?
by goemon＠anime.net 30 Jan '09

30 Jan '09

Can a yahoo mail admin with clue pleae contact me? I'm going around in circles with your support staff who are unable to read headers. -Dan

1 0

Weekly Routing Table Report
by Routing Analysis Role Account 30 Jan '09

30 Jan '09

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.apnic.net. If you have any comments please contact Philip Smith <pfs(a)cisco.com>. Routing Table Report 04:00 +10GMT Sat 31 Jan, 2009 Report Website: http://thyme.apnic.net Detailed Analysis: http://thyme.apnic.net/current/ Complete listing at http://thyme.apnic.net/current/data-ASnet-APNIC Complete listing at http://thyme.apnic.net/current/data-ASnet-ARIN Complete listing at http://thyme.apnic.net/current/data-ASnet-RIPE Complete listing at http://thyme.apnic.net/current/data-ASnet-LACNIC Complete listing at http://thyme.apnic.net/current/data-ASnet-AFRINIC Complete listing at http://thyme.apnic.net/current/data-ASnet Complete listing at http://thyme.apnic.net/current/data-CIDRnet Complete listing at http://thyme.apnic.net/current/data-badAS Complete listing at http://thyme.apnic.net/current/data-dsua Complete listing at http://thyme.apnic.net/current/data-add-IANA Complete listing at http://thyme.apnic.net/current/data/sXXas-nos End of report

1 0

BGP Update Report
by cidr-report＠potaroo.net 30 Jan '09

30 Jan '09

BGP Update Report Interval: 29-Dec-08 -to- 29-Jan-09 (32 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS7643 88011 1.2% 146.2 -- VNN-AS-AP Vietnam Posts and Telecommunications (VNPT) 2 - AS9583 84992 1.2% 57.3 -- SIFY-AS-IN Sify Limited 3 - AS4323 69146 0.9% 16.1 -- TWTC - tw telecom holdings, inc. 4 - AS6389 68757 0.9% 15.6 -- BELLSOUTH-NET-BLK - BellSouth.net Inc. 5 - AS6629 52216 0.7% 791.2 -- NOAA-AS - NOAA 6 - AS209 51988 0.7% 18.0 -- ASN-QWEST - Qwest Communications Corporation 7 - AS35805 50222 0.7% 141.1 -- UTG-AS United Telecom AS 8 - AS20115 43116 0.6% 20.4 -- CHARTER-NET-HKY-NC - Charter Communications 9 - AS8151 39308 0.5% 26.3 -- Uninet S.A. de C.V. 10 - AS1785 36937 0.5% 20.0 -- AS-PAETEC-NET - PaeTec Communications, Inc. 11 - AS17974 35121 0.5% 70.5 -- TELKOMNET-AS2-AP PT Telekomunikasi Indonesia 12 - AS17488 34805 0.5% 23.0 -- HATHWAY-NET-AP Hathway IP Over Cable Internet 13 - AS9829 33611 0.5% 39.6 -- BSNL-NIB National Internet Backbone 14 - AS7018 28934 0.4% 19.5 -- ATT-INTERNET4 - AT&T WorldNet Services 15 - AS2386 27997 0.4% 17.3 -- INS-AS - AT&T Data Communications Services 16 - AS14420 27808 0.4% 112.6 -- ANDINATEL S.A. 17 - AS4766 27066 0.4% 15.1 -- KIXS-AS-KR Korea Telecom 18 - AS6458 27005 0.4% 55.6 -- Telgua 19 - AS21433 25762 0.4% 196.7 -- ACCENTUREFSSC Accenture London Delivery Centre 20 - AS24863 25397 0.3% 40.9 -- LINKdotNET-AS TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS30287 6015 0.1% 6015.0 -- ALON-USA - ALON USA, LP 2 - AS48129 4829 0.1% 4829.0 -- IRBIS-TELECOMMUNICATIONS-AS IRBIS Telecommunications Ltd. 3 - AS30306 18237 0.2% 3647.4 -- AfOL-Sz-AS 4 - AS32753 3180 0.0% 3180.0 -- GLOBEOP-FINANCIAL-SERVICES-NYC1 - GlobeOp Financial Services 5 - AS12500 12180 0.2% 3045.0 -- RCS-AS RCS Autonomus System 6 - AS30969 24339 0.3% 3042.4 -- TAN-NET TransAfrica Networks 7 - AS23917 2792 0.0% 2792.0 -- BRIBIE-NET-AS-AP Bribie Island Net Multihomed, Brisbane 8 - AS28194 7093 0.1% 2364.3 -- 9 - AS19017 1990 0.0% 1990.0 -- QUALCOMM-QWBS-LV - Qualcomm, Inc. 10 - AS32398 13362 0.2% 1670.2 -- REALNET-ASN-1 11 - AS45122 1572 0.0% 1572.0 -- JASPACE-AS-ID-AP PT. JASPACE NET 12 - AS41007 4615 0.1% 1538.3 -- CTCASTANA CTC ASTANA, KZ 13 - AS10806 6138 0.1% 1534.5 -- AFP-NET - AGENCE FRANCE PRESSE 14 - AS24228 10091 0.1% 1441.6 -- BARNETWORK-AP BarNetwork Pty Limited 15 - AS5033 13137 0.2% 1313.7 -- ISW - Internet Specialties West Inc. 16 - AS30095 2523 0.0% 1261.5 -- AS-30095 - Group M Worldwide, Inc. 17 - AS25970 7511 0.1% 1251.8 -- IAC - IAC Services LLC 18 - AS29427 2456 0.0% 1228.0 -- AZM-AS Mercury Telecom 19 - AS44265 13244 0.2% 1204.0 -- SMOLTELECOM-NET Smoltelecom Ltd AS peering 20 - AS29224 2052 0.0% 1026.0 -- HELLMANN Hellmann Worldwide Logistics GmbH & Co KG TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 210.214.151.0/24 22738 0.3% AS9583 -- SIFY-AS-IN Sify Limited 2 - 124.7.201.0/24 21287 0.3% AS9583 -- SIFY-AS-IN Sify Limited 3 - 144.36.245.0/24 21258 0.3% AS21433 -- ACCENTUREFSSC Accenture London Delivery Centre 4 - 72.23.246.0/24 18307 0.2% AS5050 -- PSC-EXT - Pittsburgh Supercomputing Center 5 - 192.35.129.0/24 17259 0.2% AS6629 -- NOAA-AS - NOAA 6 - 192.102.88.0/24 17030 0.2% AS6629 -- NOAA-AS - NOAA 7 - 198.77.177.0/24 16984 0.2% AS6629 -- NOAA-AS - NOAA 8 - 41.204.2.0/24 13199 0.2% AS32398 -- REALNET-ASN-1 9 - 64.162.116.0/24 13016 0.2% AS5033 -- ISW - Internet Specialties West Inc. 10 - 196.27.104.0/21 11897 0.2% AS30969 -- TAN-NET TransAfrica Networks 11 - 196.27.108.0/22 11819 0.2% AS30969 -- TAN-NET TransAfrica Networks 12 - 222.255.51.64/26 10834 0.1% AS7643 -- VNN-AS-AP Vietnam Posts and Telecommunications (VNPT) 13 - 192.12.120.0/24 10506 0.1% AS5691 -- MITRE-AS-5 - The MITRE Corporation 14 - 202.83.176.0/21 9977 0.1% AS24228 -- BARNETWORK-AP BarNetwork Pty Limited 15 - 221.135.80.0/24 9100 0.1% AS9583 -- SIFY-AS-IN Sify Limited 16 - 212.85.220.0/24 8932 0.1% AS30306 -- AfOL-Sz-AS 17 - 212.85.223.0/24 8920 0.1% AS30306 -- AfOL-Sz-AS 18 - 199.2.119.0/24 7055 0.1% AS11816 -- SetarNet 19 - 89.4.131.0/24 6255 0.1% AS24731 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 20 - 158.50.64.0/20 6099 0.1% AS10806 -- AFP-NET - AGENCE FRANCE PRESSE Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

The Cidr Report
by cidr-report＠potaroo.net 30 Jan '09

30 Jan '09

This report has been generated at Fri Jan 30 21:13:57 2009 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org for a current version of this report. Recent Table History Date Prefixes CIDR Agg 23-01-09 286053 177941 24-01-09 286089 178446 25-01-09 286547 178462 26-01-09 286835 178564 27-01-09 287083 178066 28-01-09 286198 178147 29-01-09 286289 177870 30-01-09 286408 178004 AS Summary 30507 Number of ASes in routing system 12982 Number of ASes announcing only one prefix 4379 Largest number of prefixes announced by an AS AS6389 : BELLSOUTH-NET-BLK - BellSouth.net Inc. 89881344 Largest address span announced by an AS (/32s) AS27064: DDN-ASNBLK1 - DoD Network Information Center Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 30Jan09 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 286397 178149 108248 37.8% All ASes AS6389 4379 356 4023 91.9% BELLSOUTH-NET-BLK - BellSouth.net Inc. AS4323 4216 1741 2475 58.7% TWTC - tw telecom holdings, inc. AS209 2828 1264 1564 55.3% ASN-QWEST - Qwest Communications Corporation AS4766 1771 499 1272 71.8% KIXS-AS-KR Korea Telecom AS17488 1507 345 1162 77.1% HATHWAY-NET-AP Hathway IP Over Cable Internet AS4755 1200 231 969 80.8% TATACOMM-AS TATA Communications formerly VSNL is Leading ISP AS22773 1007 62 945 93.8% ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. AS8151 1476 615 861 58.3% Uninet S.A. de C.V. AS1785 1803 1036 767 42.5% AS-PAETEC-NET - PaeTec Communications, Inc. AS11492 1218 458 760 62.4% CABLEONE - CABLE ONE, INC. AS8452 1021 283 738 72.3% TEDATA TEDATA AS19262 944 243 701 74.3% VZGNI-TRANSIT - Verizon Internet Services Inc. AS2386 1566 899 667 42.6% INS-AS - AT&T Data Communications Services AS3356 1143 489 654 57.2% LEVEL3 Level 3 Communications AS18101 766 143 623 81.3% RIL-IDC Reliance Infocom Ltd Internet Data Centre, AS18566 1061 466 595 56.1% COVAD - Covad Communications Co. AS6478 1204 660 544 45.2% ATT-INTERNET3 - AT&T WorldNet Services AS7545 690 158 532 77.1% TPG-INTERNET-AP TPG Internet Pty Ltd AS2706 545 25 520 95.4% HKSUPER-HK-AP Pacific Internet (Hong Kong) Limited AS22047 623 114 509 81.7% VTR BANDA ANCHA S.A. AS17908 602 111 491 81.6% TCISL Tata Communications AS855 602 146 456 75.7% CANET-ASN-4 - Bell Aliant AS4808 612 158 454 74.2% CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network AS7018 1438 1003 435 30.3% ATT-INTERNET4 - AT&T WorldNet Services AS4134 902 475 427 47.3% CHINANET-BACKBONE No.31,Jin-rong Street AS24560 661 239 422 63.8% AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services AS4668 699 283 416 59.5% LGNET-AS-KR LG CNS AS9443 504 92 412 81.7% INTERNETPRIMUS-AS-AP Primus Telecommunications AS17676 527 115 412 78.2% GIGAINFRA BB TECHNOLOGY Corp. AS7011 958 550 408 42.6% FRONTIER-AND-CITIZENS - Frontier Communications of America, Inc. Total 38473 13259 25214 65.5% Top 30 total Possible Bogus Routes 24.75.116.0/22 AS10796 SCRR-10796 - Road Runner HoldCo LLC 24.75.160.0/19 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 24.245.128.0/17 AS11492 CABLEONE - CABLE ONE, INC. 24.246.0.0/17 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 24.246.128.0/18 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 41.223.112.0/22 AS5713 SAIX-NET 41.223.188.0/24 AS22351 INTELSAT Intelsat Global BGP Routing Policy 41.223.189.0/24 AS26452 BRING-AS - BringCom, Inc. 62.12.96.0/19 AS15834 MENANET-AS MenaNet network Autonomous System 62.12.107.0/24 AS15834 MENANET-AS MenaNet network Autonomous System 62.61.220.0/24 AS24974 TACHYON-EU Tachyon Europe BV - Wireless Broadband via Satellite 62.61.221.0/24 AS24974 TACHYON-EU Tachyon Europe BV - Wireless Broadband via Satellite 63.140.213.0/24 AS22555 UTC - Universal Talkware Corporation 63.143.251.0/24 AS22555 UTC - Universal Talkware Corporation 63.248.0.0/16 AS3356 LEVEL3 Level 3 Communications 64.7.112.0/21 AS6453 GLOBEINTERNET TATA Communications 64.7.120.0/21 AS6453 GLOBEINTERNET TATA Communications 64.31.32.0/19 AS11955 SCRR-11955 - Road Runner HoldCo LLC 64.31.32.0/22 AS10796 SCRR-10796 - Road Runner HoldCo LLC 64.31.36.0/23 AS10796 SCRR-10796 - Road Runner HoldCo LLC 64.31.38.0/23 AS12262 RR-CINCINNATI-ASN-01 - Road Runner HoldCo LLC 64.31.40.0/23 AS12262 RR-CINCINNATI-ASN-01 - Road Runner HoldCo LLC 64.31.42.0/23 AS10796 SCRR-10796 - Road Runner HoldCo LLC 64.31.44.0/23 AS10796 SCRR-10796 - Road Runner HoldCo LLC 64.31.46.0/24 AS10796 SCRR-10796 - Road Runner HoldCo LLC 64.31.48.0/22 AS11060 NEO-RR-COM - Road Runner HoldCo LLC 64.31.53.0/24 AS10796 SCRR-10796 - Road Runner HoldCo LLC 64.31.55.0/24 AS10796 SCRR-10796 - Road Runner HoldCo LLC 64.31.59.0/24 AS7017 SCRR-7015 - Road Runner HoldCo LLC 64.31.60.0/24 AS7017 SCRR-7015 - Road Runner HoldCo LLC 64.64.159.0/24 AS32004 BIG-ASN - Business Information Group, Inc. 64.79.88.0/24 AS26096 LODDEN - Lodden Services 64.79.89.0/24 AS26096 LODDEN - Lodden Services 64.188.0.0/16 AS3356 LEVEL3 Level 3 Communications 66.11.32.0/20 AS6261 VISINET - Visionary Systems, Inc. 66.11.40.0/21 AS6261 VISINET - Visionary Systems, Inc. 66.54.91.0/24 AS30506 BLACKSUN-1 - Blacksun Technologies LLC 66.55.160.0/19 AS29994 66.180.239.0/24 AS35888 VIGNETTE - VIGNETTE CORPORATION 66.199.32.0/20 AS10397 WISP-AS - Wispnet, LLC 66.206.32.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.33.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.34.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.35.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.40.0/22 AS174 COGENT Cogent/PSI 66.206.44.0/23 AS174 COGENT Cogent/PSI 66.206.47.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 66.207.32.0/20 AS23011 67.20.0.0/20 AS27334 MEGAGATE - Megagate Broadband, Inc. 69.71.192.0/20 AS13818 PHX-INTL-TELEPORT - Phoenix International Teleport 69.80.0.0/17 AS3043 AMPHIB-AS - Amphibian Media Corporation 80.88.0.0/21 AS33774 DJAWEB 80.88.8.0/22 AS33774 DJAWEB 80.88.10.0/24 AS33774 DJAWEB 80.88.12.0/24 AS33779 wataniya-telecom-as 81.4.0.0/18 AS15834 MENANET-AS MenaNet network Autonomous System 95.208.0.0/16 AS29562 KABELBW-ASN Kabel Baden-Wuerttemberg GmbH & Co. KG 95.209.0.0/16 AS44034 HI3G Hi3G Access AB 98.96.0.0/13 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 121.46.0.0/16 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 121.50.168.0/21 AS9931 CAT-AP The Communication Authoity of Thailand, CAT 137.0.0.0/13 AS27064 DDN-ASNBLK1 - DoD Network Information Center 155.254.0.0/16 AS7046 RFC2270-UUNET-CUSTOMER - MCI Communications Services, Inc. d/b/a Verizon Business 163.142.0.0/16 AS2500 WIDE-BB WIDE Project 172.7.0.0/24 AS28175 172.10.1.0/30 AS18305 POSNET POSDATA Co.,Ltd 192.9.0.0/16 AS11479 BRM-SUN-AS - Sun Microsystems, Inc 192.9.200.0/24 AS3602 AS3602-RTI - Rogers Telecom Inc. 192.64.85.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.69.107.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.69.108.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.69.177.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.70.164.0/24 AS25689 NRCNET-AS - National Research Council of Canada 192.96.36.0/24 AS5713 SAIX-NET 192.96.37.0/24 AS10474 NETACTIVE 192.96.135.0/24 AS2018 TENET-1 192.96.136.0/23 AS2018 TENET-1 192.96.141.0/24 AS2018 TENET-1 192.96.143.0/24 AS2018 TENET-1 192.96.145.0/24 AS2018 TENET-1 192.96.177.0/24 AS6083 POSIX-AFRICA 192.101.45.0/24 AS2905 TICSA-ASN 192.101.46.0/24 AS6503 Avantel, S.A. 192.101.64.0/21 AS702 AS702 Verizon Business EMEA - Commercial IP service provider in Europe 192.101.70.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 192.101.71.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 192.101.72.0/24 AS702 AS702 Verizon Business EMEA - Commercial IP service provider in Europe 192.101.74.0/24 AS1239 SPRINTLINK - Sprint 192.124.248.0/23 AS680 DFN-IP service G-WiN 192.124.252.0/22 AS680 DFN-IP service G-WiN 192.131.233.0/24 AS6389 BELLSOUTH-NET-BLK - BellSouth.net Inc. 192.133.6.0/24 AS10282 ORANGE-BUSINESS-SERVICES-CEEUR Orange Business Services (formerly Equant) AS for CEEUR 192.153.144.0/21 AS27064 DDN-ASNBLK1 - DoD Network Information Center 192.154.32.0/19 AS81 NCREN - MCNC 192.188.208.0/20 AS27064 DDN-ASNBLK1 - DoD Network Information Center 194.0.68.0/22 AS41704 OGS-AS ZAO "Orenburgskaya Gorodskaya Set", Orenburg, Russia 195.190.146.0/24 AS9167 WEBPARTNER WEBPARTNER A/S is a Danish Internet Service Provider 196.6.108.0/24 AS5713 SAIX-NET 196.10.119.0/24 AS2018 TENET-1 196.10.122.0/23 AS2018 TENET-1 196.10.251.0/24 AS2018 TENET-1 196.10.252.0/23 AS2018 TENET-1 196.10.254.0/24 AS2018 TENET-1 196.13.101.0/24 AS2018 TENET-1 196.13.102.0/23 AS2018 TENET-1 196.13.104.0/24 AS2018 TENET-1 196.13.121.0/24 AS2018 TENET-1 196.13.125.0/24 AS2018 TENET-1 196.13.126.0/24 AS2018 TENET-1 196.13.169.0/24 AS2018 TENET-1 196.13.174.0/23 AS2018 TENET-1 196.13.176.0/21 AS2018 TENET-1 196.13.192.0/22 AS2018 TENET-1 196.13.196.0/24 AS2018 TENET-1 196.32.96.0/20 AS6453 GLOBEINTERNET TATA Communications 196.202.224.0/21 AS8818 TELE Greenland Autonomous System 198.1.2.0/24 AS4761 INDOSAT-INP-AP INDOSAT Internet Network Provider 198.23.26.0/24 AS4390 BELLATLANTIC-COM - Bell Atlantic, Inc. 198.54.82.0/24 AS2018 TENET-1 198.54.92.0/24 AS2018 TENET-1 198.54.222.0/24 AS2018 TENET-1 198.97.72.0/21 AS27064 DDN-ASNBLK1 - DoD Network Information Center 198.97.80.0/20 AS27064 DDN-ASNBLK1 - DoD Network Information Center 198.97.96.0/19 AS27064 DDN-ASNBLK1 - DoD Network Information Center 198.97.240.0/20 AS27064 DDN-ASNBLK1 - DoD Network Information Center 198.144.96.0/20 AS12185 198.161.87.0/24 AS6539 GT-BELL - Bell Canada 198.167.0.0/16 AS7456 INTERHOP - Interhop Network SERVICES Inc. 198.168.0.0/16 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 198.169.0.0/16 AS803 SASKTEL - Saskatchewan Telecommunications 198.180.198.0/24 AS23715 SEOUL-INTGW-GXS-AP Global Exchange Services 199.10.0.0/16 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.114.0.0/21 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.114.128.0/18 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.114.130.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.131.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.132.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.134.0/24 AS3541 ITSDN-U4 - DoD Network Information Center 199.114.136.0/24 AS27044 DDN-ASNBLK1 - DoD Network Information Center 199.114.138.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.140.0/24 AS3544 ITSDN-U7 - DoD Network Information Center 199.114.142.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.144.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.148.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.150.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.152.0/24 AS27033 DDN-ASNBLK1 - DoD Network Information Center 199.114.153.0/24 AS27034 DDN-ASNBLK1 - DoD Network Information Center 199.114.154.0/24 AS1733 CENTAF-SWA - 754th Electronic Systems Group 199.114.156.0/24 AS1733 CENTAF-SWA - 754th Electronic Systems Group 199.114.160.0/24 AS1733 CENTAF-SWA - 754th Electronic Systems Group 199.121.0.0/16 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.123.0.0/18 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.123.16.0/20 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.123.80.0/21 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.189.32.0/19 AS7332 IQUEST-AS - IQuest Internet 199.202.0.0/16 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 199.202.216.0/21 AS577 BACOM - Bell Canada 199.246.116.0/24 AS813 UUNET-CANADA - MCI Communications Services, Inc. d/b/a Verizon Business 202.6.176.0/20 AS24316 202.58.113.0/24 AS19161 INNOCOM-TELECOM - INNOCOM TELECOM 202.58.224.0/19 AS17925 202.58.224.0/20 AS17925 202.58.240.0/20 AS17925 202.58.240.0/24 AS17925 202.58.244.0/24 AS17925 202.58.249.0/24 AS17925 202.58.250.0/24 AS17925 202.58.253.0/24 AS17925 202.72.40.0/24 AS38205 202.72.41.0/24 AS38205 202.72.46.0/24 AS38205 202.72.47.0/24 AS38205 202.73.144.0/20 AS4788 TMNET-AS-AP TM Net, Internet Service Provider 202.80.192.0/20 AS2706 HKSUPER-HK-AP Pacific Internet (Hong Kong) Limited 202.86.252.0/22 AS4748 RESOLINK-AS-AP Resources Link Network Limited 202.86.252.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.253.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.254.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.255.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.94.1.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.94.70.0/24 AS9837 POWERTEL-AP Powertel Ltd 202.122.120.0/21 AS17494 BTTB-AS-AP Telecom Operator & Internet Service Provider as well 202.124.195.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.133.67.0/24 AS38616 WORLDCALL-AS-KHI Worldcall Telecom Limited 202.133.69.0/24 AS38616 WORLDCALL-AS-KHI Worldcall Telecom Limited 202.133.70.0/24 AS38616 WORLDCALL-AS-KHI Worldcall Telecom Limited 202.133.71.0/24 AS38616 WORLDCALL-AS-KHI Worldcall Telecom Limited 202.133.73.0/24 AS38616 WORLDCALL-AS-KHI Worldcall Telecom Limited 202.133.74.0/24 AS38616 WORLDCALL-AS-KHI Worldcall Telecom Limited 202.133.75.0/24 AS38616 WORLDCALL-AS-KHI Worldcall Telecom Limited 202.133.77.0/24 AS38616 WORLDCALL-AS-KHI Worldcall Telecom Limited 202.133.78.0/24 AS38616 WORLDCALL-AS-KHI Worldcall Telecom Limited 202.136.254.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.136.255.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.140.160.0/24 AS4841 202.140.161.0/24 AS4841 202.140.162.0/24 AS4841 202.140.163.0/24 AS4841 202.140.164.0/24 AS4841 202.140.165.0/24 AS4841 202.140.166.0/24 AS4841 202.140.167.0/24 AS4841 202.140.168.0/24 AS4841 202.140.169.0/24 AS4841 202.140.170.0/24 AS4841 202.140.171.0/24 AS4841 202.140.172.0/24 AS4841 202.140.173.0/24 AS4841 202.140.174.0/24 AS4841 202.140.175.0/24 AS4841 202.140.180.0/24 AS7540 HKCIX-AS-AP HongKong Commercial Internet Exchange 202.140.181.0/24 AS7540 HKCIX-AS-AP HongKong Commercial Internet Exchange 202.140.182.0/24 AS7540 HKCIX-AS-AP HongKong Commercial Internet Exchange 202.150.227.0/24 AS17727 NAPINFO-AS-AP PT. NAP Info Lintas Nusa 202.181.32.0/24 AS4645 ASN-HKNET-AP HKNet Co. Ltd 203.12.45.0/24 AS4854 NETSPACE-AS-AP Netspace Online Systems 203.62.0.0/17 AS7575 AARNET-AS-AP Australian Academic and Reasearch Network (AARNet) 203.78.48.0/20 AS9299 IPG-AS-AP Philippine Long Distance Telephone Company 203.89.139.0/24 AS17911 BRAINPK-AS-AP Brain Telecommunication Ltd. 203.111.192.0/20 AS7473 SINGTEL-AS-AP Singapore Telecommunications Ltd 203.112.111.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.113.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.114.0/24 AS4802 ASN-IINET iiNet Limited 203.112.116.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.117.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.118.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.119.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.120.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.121.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.127.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.128.128.0/19 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 203.128.128.0/24 AS23849 CNNIC-NET263-AP Beijing Capital-online science development Co.,Ltd. 203.152.154.0/23 AS9583 SIFY-AS-IN Sify Limited 204.9.216.0/23 AS6389 BELLSOUTH-NET-BLK - BellSouth.net Inc. 204.9.217.0/24 AS4323 TWTC - tw telecom holdings, inc. 204.9.218.0/23 AS6389 BELLSOUTH-NET-BLK - BellSouth.net Inc. 204.13.140.0/22 AS7270 NET2PHONE - Net2Phone Corp. 204.16.120.0/23 AS12077 204.16.122.0/23 AS12077 204.19.14.0/23 AS577 BACOM - Bell Canada 204.106.8.0/21 AS36052 JTI0 - Juch-Tech Inc 204.154.125.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.126.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.127.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 205.150.0.0/15 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 205.189.134.0/24 AS11814 CYBERSURF - Cybersurf Inc. 205.210.145.0/24 AS11814 CYBERSURF - Cybersurf Inc. 205.233.204.0/22 AS22446 MEDLINE - Medline Industries 206.180.240.0/20 AS12083 KNOLOGY-NET - Knology Holdings 207.191.128.0/19 AS10887 BPSI-AS - BPSI Internet Services 207.204.168.0/24 AS15150 BELLTECH-AS - BELLWETHER TECHNOLOGY CORPORATION 207.204.222.0/24 AS22773 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc. 208.38.192.0/18 AS3043 AMPHIB-AS - Amphibian Media Corporation 208.38.202.0/24 AS14237 BEAMSPEED1 - Beamspeed 208.38.203.0/24 AS14237 BEAMSPEED1 - Beamspeed 208.38.204.0/22 AS14237 BEAMSPEED1 - Beamspeed 209.54.93.0/24 AS22773 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. 209.54.111.0/24 AS22773 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. 209.54.123.0/24 AS6062 NETPLEX - NETPLEX 209.54.240.0/21 AS10887 BPSI-AS - BPSI Internet Services 209.74.96.0/19 AS10912 INTERNAP-BLK - Internap Network Services Corporation 209.140.90.0/24 AS14461 NTSL - NET SOLUTIONS 209.140.224.0/21 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.234.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.235.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.236.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.237.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.238.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.239.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.141.16.0/21 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.141.48.0/22 AS14461 NTSL - NET SOLUTIONS 209.145.192.0/18 AS3043 AMPHIB-AS - Amphibian Media Corporation 209.222.5.0/24 AS26699 PSI-CT - Printing For Systems Inc 209.222.6.0/24 AS26699 PSI-CT - Printing For Systems Inc 210.5.128.0/20 AS4837 CHINA169-BACKBONE CNCGROUP China169 Backbone 212.100.64.0/24 AS20598 CYBERSPACE-AS Autonomous System number for Cyber Space, 212.100.65.0/24 AS20598 CYBERSPACE-AS Autonomous System number for Cyber Space, 212.100.66.0/24 AS20598 CYBERSPACE-AS Autonomous System number for Cyber Space, 212.100.68.0/24 AS20598 CYBERSPACE-AS Autonomous System number for Cyber Space, 212.100.69.0/24 AS20598 CYBERSPACE-AS Autonomous System number for Cyber Space, 212.100.71.0/24 AS20598 CYBERSPACE-AS Autonomous System number for Cyber Space, 212.100.72.0/24 AS29835 NSS-CA - New Skies Satellites, Inc. 212.100.73.0/24 AS29835 NSS-CA - New Skies Satellites, Inc. 216.37.114.0/23 AS3549 GBLX Global Crossing Ltd. 216.37.120.0/23 AS13377 216.59.0.0/17 AS3356 LEVEL3 Level 3 Communications 216.99.16.0/24 AS6395 LVLT-6395 - Level 3 Communications, Inc. 216.99.20.0/24 AS6395 LVLT-6395 - Level 3 Communications, Inc. 216.162.96.0/19 AS7393 CYBERCON - CYBERCON, INC. 216.172.198.0/24 AS22773 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. 216.172.199.0/24 AS22773 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. 216.210.86.0/24 AS577 BACOM - Bell Canada 216.240.240.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.240.241.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.240.242.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.251.207.0/24 AS1239 SPRINTLINK - Sprint 217.29.128.0/20 AS15834 MENANET-AS MenaNet network Autonomous System 217.29.134.0/24 AS15834 MENANET-AS MenaNet network Autonomous System 217.78.71.0/24 AS12491 IPPLANET-AS IPPlanet 217.78.72.0/24 AS12491 IPPLANET-AS IPPlanet 217.78.73.0/24 AS12491 IPPLANET-AS IPPlanet Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Re: New ISP to market, BCP 38, and new tactics
by Steve Bertrand 30 Jan '09

30 Jan '09

Raoul Bhatia [IPAX] wrote: > hello steve, > > Steve Bertrand wrote: >> I've done much research on RPSL, BCP 38, and other basic filter methods >> (and from a systems standpoint, I always follow an >> allow,allow,default-deny approach) , and I am willing to follow all >> standards and recommended practises to ensure compliance with current >> Internet standards. > > did you receive off-list replies? do you mind replying with a summary > of your findings to the list? i would also be interested in this subject > thou i will not be able to work on this during the next couple of > months. Yes, I did receive a few very kind off-list replies. The feedback was based mainly on the fact that I have a small number of address blocks, and few connections to the Internet. In summary: - implement BCP 38 by using ACLs on outward facing interfaces by permitting anything within my (or my client's) address space as source, and log/deny the rest (which is my personal standard per my OP) - on all client-connected interfaces, ensure that the prefix(es) you supply them with is found in the source address for packets inbound, and deny the rest - for smaller *SPs, ACLs is the way to go, as with only a few prefixes and a limited number of connections to the Internet, manual management of filters is easily maintained. Inbound ACLs can be put in place when a new client is provisioned, and for a small shop without the need or the resources, strategies such as uRPF are not advised - pay attention to uRPF ("and the like"), as manual ACL management is not scalable. It pays to keep up with what the "big boys" are doing. Having knowledge of scalable methods, while utilizing a basic approach will allow for an easier transition in the event of quick growth/acquisition/new job. - ensure you only advertise your own block(s) via BGP. allow-allow-deny approach - regarding BGP, scrutinize, but deny-by-default anything longer than /24. (With IPv6, I don't know of any standard, so I filter above /48 and I have 1579 and 1422 routes with two peers) The above is a summary of feedback from others. I have a few that I already do personally, but remember that I don't even advertise my v4 space myself yet: - peer with Cymru, and null route BOGONs - implement a pull-up route - on all interfaces, 'get rid of' inbound traffic with a source within BOGON - inform clients of their broken VPN connections, when you see private IP space being sent via their assigned default gateway (which of course is just an alert, because it has already been null0'd) - always develop the closest-match allow filters you can, and implement with an explicit deny. If anything, for visual purposes - never be afraid to ask for help - be confident, but always assume someone knows more than you do - and most important (IMHO), always acknowledge and be able to admit when you have made a mistake. Hopefully this summary is ok. Thanks to all those who did reply off-list. Steve

1 0