February 2010 - Test - lists.nanog.org

Re: Location of upstream connections & BGP templates
by Scott Weeks 17 Feb '10

17 Feb '10

--- steve(a)ibctech.ca wrote: From: Steve Bertrand <steve(a)ibctech.ca> layered. My thinking is that my 'upstream' connections should be moved out of the core, and onto the edge. My reasoning for this is so that I What do other providers do? Are your transit peers connected directly to the core? I can understand such a setup for transit-only providers, but -------------------------------------------- Border, core, access. Border routers only connect the core to the upstreams. They do nothing else. No acls, just prefix filters. For example, block 1918 space from leaving your network. Block other bad stuff from leaving your network too. Allow in only what you're expecting from the upstream; again 1918 space, etc. They can fat finger like anyone else. Core is for moving bits as efficiently as possible: no acls; no filters. Connect downstream BGP customers to access routers that participate in the iBGP mesh. Filter them only allowing what they're supposed to advertise. They'll mess it up a lot if they're like my customers by announcing everything under the sun. Filter what you're announcing to them. You can fat finger just as well as anyone else. ;-) scott

4 8

Location of upstream connections & BGP templates
by Steve Bertrand 17 Feb '10

17 Feb '10

Hey all, I've got a couple of questions that I'd like operational feedback about. . Although we're an ISP, we currently are only an access provider. We don't yet provide any transit services, but the requirement for us to do so may creep up on a very small scale shortly. Nonetheless... I'm on the latter stages of transforming our network from flat to layered. My thinking is that my 'upstream' connections should be moved out of the core, and onto the edge. My reasoning for this is so that I can eliminate ACL/filtering etc from the core, and push it ALL out toward the edge, keeping the core as fast, sleek and maintenance-free as possible. I visualize my transit providers as essentially 'access', not part of my core backbone. What do other providers do? Are your transit peers connected directly to the core? I can understand such a setup for transit-only providers, but I can't see how that makes sense for any provider that provides (mostly) access services. I'm looking for feedback from both large and small providers, just to gain some perspective. Another question, along the same lines, due to recent discussions, I've done a great deal of research on BGP templates, and now want to migrate to them from peer-group. Before I waste lab time configuring things, I just want to ask for feedback based on experience on whether the following makes sense/will work for transition: - configure template structure - 'no' a single neighbour - apply templates to neighbour - the neighbour comes back up - wash, rinse, repeat Steve

2 2

Re: Location of upstream connections & BGP templates
by Scott Weeks 17 Feb '10

17 Feb '10

--- deleskie(a)gmail.com wrote: From: jim deleskie <deleskie(a)gmail.com> Border/Core/Access is great thinking when your a sales rep for a vendor that sells under power kit. No reason for it any more. ----------------------------------------------- I'd imagine it depends on the network size. Collapsing functionality is doable for smaller sizes. Please elaborate. scott

2 1

History of 4.2.2.2. What's the story?
by Sean Reifschneider 17 Feb '10

17 Feb '10

I've wondered about this for years, but only this evening did I start searching for details. And I really couldn't find any. Can anyone point me at distant history about how 4.2.2.2 came to be, in my estimation, the most famous DNS server on the planet? I know that it was originally at BBN, what I'm looking for is things like: How the IP was picked. (I'd guess it was one of the early DNS servers, and the people behind it realized that if there was one IP address that really needed to be easy to remember, it was the DNS server, for obvious reasons). Was it always meant to be a public resolver? How it continued to remain an open resolver, even in the face of amplifier attacks using DNS resolvers. Perhaps it has had rate-limiting on it for a long time. There's a lot of conjecture about it using anycast, anyone know anything about it's current configuration? So, if anyone has any stories about 4.2.2.2, I'd love to hear them. Thanks, Sean -- Microsoft treats objects like women, man... -- Kevin Fenzi, paraphrasing the Dude, 1998 Sean Reifschneider, Member of Technical Staff <jafo(a)tummy.com> tummy.com, ltd. - Linux Consulting since 1995: Ask me about High Availability

19 37

50/8 and 107/8 allocated to ARIN
by Leo Vegoda 17 Feb '10

17 Feb '10

Hi, The IANA IPv4 registry has been updated to reflect the allocation of two /8 IPv4 blocks to ARIN in February 2010: 50/8 and 107/8. You can find the IANA IPv4 registry at: http://www.iana.org/assignments/ipv4-address-space/ipv4-address-space.xml http://www.iana.org/assignments/ipv4-address-space/ipv4-address-space.xml http://www.iana.org/assignments/ipv4-address-space/ipv4-address-space.txt Please update your filters as appropriate. There are 22 unallocated unicast IPv4 /8s. Regards, Leo Vegoda Number Resources Manager, IANA ICANN

1 0

2nd send: Adopt‐an‐Haitian‐Internet‐technician‐or‐facility
by Eric Brunner-Williams 17 Feb '10

17 Feb '10

Folks, This is a slightly edited, and _unsigned_ resend of my note of the 8th. In an effort to "unbury the lede", the bank routing info is at the top of the post, as well as the bottom ;-) Bank: SOGEBANK Bank Address : Route de Delmas, Delmas 29, Port-au-Prince, HAITI Account Number: 130212988 Swift code : SOGHHTPP Beneficiary : Association Haïtienne pour le Développement des Technologies de l’Information et de la Communication, 18, rue Moise, Pétion-Ville, HAITI I appreciate the anonymous offers, of money, time, and talent that have been sent me. The money should go to the address above, unless this is too cumbersome, in which case drop me a line and I'll work something out. Those of you with corporate responsibility contacts within your employers or clients, if you would write a "why network continuity is a good thing" cover and forward this internally, that could add to the amount AHTIC collects through this public ask. I've posted an HTML version here: http://www.circleid.com/posts/project_title_adopt_an_haitian_internet_techn… and here: http://wampum.wabanaki.net/vault/2010/02/005491.html The text version follows. ==== Project Title: Adopt-an-Haitian-Internet-technician-or-facility Project Description: The project aims to collect money and telecom gear to provide mid-term financial aid to IT technicians that have been affected with their families during the January 12, 2010 earthquake. Money, telecoms gears, time, software, etc will serve to setup technology community centers to support schools, universities, vocational centers that have collapsed. Begin Date February 2010 End Date August 2010 The Context: On the January 12, 2010, Haiti one of the poorest country in the world is hurt by a 7.3 Earthquake that caused major damage to Port-au-Prince, Jacmel, Leogane and other settlements around. Many notable landmark buildings were significantly damaged or destroyed, including schools, universities, vocational schools even the Port-au-Prince Cathedral, and the main jail. Among those killed are a lot of technicians, students, teachers. Many countries responded to appeals for humanitarian aid, pledging funds and dispatching rescue and medical teams, engineers and support personnel. Communication systems, air, land, and sea transport facilities, hospitals, schools, universities, and electrical networks had been damaged by the earthquake, which hampered rescue and aid efforts; confusion over who was in charge, air traffic congestion, and problems with prioritization of flights further complicated early relief work. As rescues tailed off, supplies, medical care and sanitation become priorities. Among them we also need to address education on a mid term run. With a lot of destroyed schools and dead teachers e-learning can be a good way to overcome this problem. Deliverables and criteria for close-out The projects has 2 majors deliverables: 1. Providing financial support to at least 50 technicians whose houses have been destroyed during the seism. The idea is getting them a job so they don’t have to worry about their family basic needs and keeping them on their workplace 2. Setup mobile IT community centers to provide IT services to schools and universities. 3. Contents production for e-learning The project boundaries: This project aims to provide technical support to teachers helping them putting their courses online or on DVD and make it available for remote schools or schools whose teachers have been killed during the quake. Data Center in a box will facilitate access to those courses by the students. Project will be conducted in joint venture with the Ministry of Education that will define the priority based on must affected area and teacher availability. The main risks: The main risk of this project is not having enough funds to address all the needs in supporting the schools in producing online courses because it’s a well-known fact that in schools in Haiti adopted their own curriculum ignoring sometimes the official one. The second concern Stakeholders: Client(sponsor): Ministry of Education Project Manager: Reynold Guerrier Project Team: Reynold Guerrier, Max Larson Henry, Steering committee: Reynold Guerrier, Stéphane Bruno, Sergey Gaillard, Roque Gagliano, Max Larson Henry Other Stakeholders: Local ISP, LACNIC, ISOC, IDB Budget and resources: ($, people, equipment, facilities, software, etc.) * 100,000.00 USD for salaries to support technicians and their family to get them back on track * 5 contents production units * Production software * Management software * 10 data center in a box Milestones Date Key deliverables Feb-March 2010: Financial support to technicians and families March 2010: Data center in a box March-August 2010: Implementation period Bank Account Info: Bank: SOGEBANK Bank Address : Route de Delmas, Delmas 29, Port-au-Prince, HAITI Account Number: 130212988 Swift code : SOGHHTPP Beneficiary : Association Haïtienne pour le Développement des Technologies de l’Information et de la Communication Beneficiary Address: 18, rue Moise, Pétion-Ville, HAITI ==== People interesting in working in Haiti can send me a skills and availability statement too, but what is needed soonest is a budget that can be applied to existing backfill cash needs passed through the AHTIC. Eric

1 0

Last Call for Applicants - ARIN Meetings Fellowship Program
by cja＠daydream.com 17 Feb '10

17 Feb '10

Hi everyone, If you know someone who would make a good candidate for the ARIN Fellowship Program. Please send this along to him/her. Thanks! ----Cathy ========================================================= **We encourage ARIN members to spread the word about this exciting opportunity to bring new faces and opinions to the next ARIN Public Policy and Members Meeting. If you know someone that may be interested in attending their first ARIN meeting, then pass this message along.** ARIN is pleased to offer a Meetings Fellowship Program to bring new voices and ideas to public policy discussions. This call is for Fellows to attend ARIN XXV in Toronto, Canada 18-21 April 2010. If you are interested in participating in the program, submit your application by this Friday, 19 February. The application, submission instructions, and a detailed description of the program can be found at: https://www.arin.net/participate/meetings/fellowship.html One individual from each of the three sectors within ARIN's service region (Canada, the Caribbean and North Atlantic Islands, and the United States and Outlying Areas) will be selected. Fellows receive financial support to attend the Public Policy and Members Meeting, and ARIN Advisory Council representatives will serve as mentors to the fellows to help maximize their meeting experience. Individuals selected for the fellowship receive: * Free meeting registration https://www.arin.net/participate/meetings/ARIN-XXV/ * Round-trip economy class airfare to the meeting, booked directly by ARIN * Hotel accommodations at the venue hotel, booked directly by ARIN * A stipend to cover meals and incidental travel expenses. Please contact info(a)arin.net if you have any questions concerning the program and the application process. Regards, Member Services American Registry for Internet Numbers (ARIN) _______________________________________________ ARIN-Announce You are receiving this message because you are subscribed to the ARIN Announce Mailing List (ARIN-announce(a)arin.net) Unsubscribe or manage your mailing list subscription at: http://lists.arin.net/mailman/listinfo/arin-announce Please contact info(a)arin.net if you experience any issues.

1 0

Looking for contact from the University of Wisconsin Madison (146.151.0.0/16)
by John Jason Brzozowski 17 Feb '10

17 Feb '10

Anyone have a contact at University of Wisconsin Madison (146.151.0.0/16)? Would really like to talk to someone who is involved with running the network over there. Thanks, John ========================================= John Jason Brzozowski Comcast Cable e) mailto:john_brzozowski@cable.comcast.com o) 609-377-6594 m) 484-962-0060 w) http://www.comcast6.net =========================================

2 2

Request Recommendation for ISDN Service in London UK
by Tim McKee 17 Feb '10

17 Feb '10

My apologies for the non-operational nature of this query. Please respond to tmckee(a)sdnglobal.com so that we can keep non-relevant messages off the list. I have need of a recommendation for an ISDN PRI provider in my Telecity Sovereign House colo (London UK). Also, it has been quite a while since I have dealt with ISDN RAS and need an experienced engineer on the ground to work with installation and configuration of the service. Any and all recommendations will be greatly appreciated. Tim McKee

1 0

.mil nameserver problems?
by Antonio Querubin 16 Feb '10

16 Feb '10

Anyone else noticing an increase in .mil nameserver problems today? Our resolvers aren't able to find NS info for various .mil domains such as pacom.mil and usfj.mil. % dig +trace pacom.mil ; <<>> DiG 9.5.0-P1 <<>> +trace pacom.mil ;; global options: printcmd . 491372 IN NS E.ROOT-SERVERS.NET. . 491372 IN NS F.ROOT-SERVERS.NET. . 491372 IN NS G.ROOT-SERVERS.NET. . 491372 IN NS H.ROOT-SERVERS.NET. . 491372 IN NS I.ROOT-SERVERS.NET. . 491372 IN NS J.ROOT-SERVERS.NET. . 491372 IN NS K.ROOT-SERVERS.NET. . 491372 IN NS L.ROOT-SERVERS.NET. . 491372 IN NS M.ROOT-SERVERS.NET. . 491372 IN NS A.ROOT-SERVERS.NET. . 491372 IN NS B.ROOT-SERVERS.NET. . 491372 IN NS C.ROOT-SERVERS.NET. . 491372 IN NS D.ROOT-SERVERS.NET. ;; Received 500 bytes from 64.65.64.1#53(64.65.64.1) in 4 ms mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. ;; Received 245 bytes from 199.7.83.42#53(L.ROOT-SERVERS.NET) in 198 ms pacom.mil. 86400 IN NS DNS2.pacom.mil. pacom.mil. 86400 IN NS DNS1.pacom.mil. pacom.mil. 86400 IN NS NS01.USFJ.mil. ;; Received 137 bytes from 199.252.154.234#53(eur1.nipr.mil) in 234 ms dig: couldn't get address for 'NS01.USFJ.mil': not found Antonio Querubin 808-545-5282 x3003 e-mail/xmpp: tony(a)lava.net

3 2