March 2010 - Test - lists.nanog.org

Roadrunner Mail-gateway Contact
by Ryan Greenier 09 Mar '10

09 Mar '10

If possible, can someone technical (dns/email) from Roadrunner contact me off-list? I tried going through the online & phone channels provided on the various websites, but I'm getting the run-around. Thanks, - Ryan

1 0

Re: CRS-3
by Brandon Galbraith 09 Mar '10

09 Mar '10

It was mentioned that Att is already testing this with a 100gbps fiber run. On Mar 9, 2010 1:53 PM, "Brian Feeny" <bfeeny(a)mac.com> wrote: So who is going to be the first to deploy these? http://newsroom.cisco.com/dlls/2010/prod_030910.html - Download the entire Library of Congress in just over 1 second - Stream every motion picture ever created in less than four minutes If nothing else you gotta love the Cisco Marketing machine! Brian

3 2

Calix listserv starting up -- delete if you're not interested
by Frank Bulk - iName.com 09 Mar '10

09 Mar '10

Considering that there are likely more than a handful of Calix customers in this list, I'd like to advertise a new listserv to talk about all things Calix, namely calix-nsp. If you're interested, you can sign up here: https://puck.nether.net/mailman/listinfo/calix-nsp Regards, Frank Bulk

1 0

networking job list
by James Jones 09 Mar '10

09 Mar '10

Hey everyone, I posted an email a last week asking about a NANOG job board/list. I received no responses so Jared Mauch and I thought it would be a good idea to start a separate mailing list for this purpose. I will be moderating this for the time being and asking for more moderators as it grows. This is here to help network operators to stay network operators. So please if you have a need for network operators or engineers please post it on this list. Thanks for your support. You can subscribe here: https://puck.nether.net/mailman/listinfo/network-jobs -- James Jones +1-413-667-9199 james(a)freedomnet.co.nz

1 0

IPv6 client adoption slowly going 3% (?)
by Ask Bjørn Hansen 09 Mar '10

09 Mar '10

Hi everyone, I read the IPv4 address space thread and thought this might be of interest to the group: Some months ago I setup a small test to test if users browsing http://www.pool.ntp.org/ supported IPv6: http://www.v6test.develooper.com/statistics http://www.v6test.develooper.com/ It's slowly been creeping up to 2.8% this month (from ~2.2% in November). At this rate we'll have critical mass (say 25%?) already in 2022! Kidding aside, although most of the test data is from NTP Pool website currently I've been testing a few different sites and the numbers are all pretty close. Anyway - if you want to test your user base, then you can make an account at http://www.v6test.develooper.com/account and get a bit of javascript to put on your website/weblog/... The code for the system is at http://git.develooper.com/?p=v6test.git;a=summary and http://github.com/abh/v6test Specifically the javascript doing the test at: http://github.com/abh/v6test/blob/master/public/devel/v6test.js I've also been testing how many fails to handle A+AAAA records and it seems to be about 2-3%[1] -- which sounds like more than plenty for Google, Amazon etc not to enable IPv6 on their regular hostnames where it matters. - ask [1] The number on the "global" statistics page is artificially low because many of the tests have been via a host with both A and AAAA records and I forgot to take that into account when calculating the numbers. Oops. I'll get it fixed. -- http://develooper.com/ - http://askask.com/

1 0

Re: FreeAxez raised flooring?
by Tim Durack 09 Mar '10

09 Mar '10

>> We have/are building new datacenters with a raised floor plenum. Air >> is directed into the racks from below, and ducted out of the top. No >> hot/cold aisle, just lots of cold air to cool the equipment. It's an >> AFCO rack design. Seems to be efficient so far. > > How do you measure efficiency? How do you blow air on all the > computers in the rack and not just the bottom one? > > Hot/cold aisles are going to be way more efficient, or at least more > uniform. Your systems are probably like most rack mount gear and > designed to take air in the front, route it over the internals in an > ideal way (possibly using baffles) and spitting it out through the > back. Hot/cold aisles work with this system. Your way hits the bottom > box and then spits the air out of the rack missing the top systems. Same way you cool the top of a rack in a cold/hot aisle system. Blow cold air up the front of the rack. We measure temperature at select points in the rack. Keep the hottest spot below set point, and everything is fine. The physics aren't that much different. We are cooling 20kw per rack with this setup. 4 hp c-class chassis per rack. Works great. -- Tim:>

2 2

PPP+RADIUS - routing subnets to end users - Framed-Route vs. Framed-IP-Netmask
by Erik L 08 Mar '10

08 Mar '10

Scenario: with the help of RADIUS, routing subnets to end users connecting via PPP. Discussion: pros/cons of using Framed-IP-Address+Framed-Route versus Framed-IP-Address+Framed-IP-Netmask. We're talking here in generic terms, so as far as the behaviour of the LNS or access concentrator or whatever else is receiving the Access-Accept and terminating the ppp session, we're assuming more or less sane behaviour, roughly as follows. In the first alternative, the IP address on the ppp link is outside the subnet indicated by Framed-Route and one or more subnets are routed via the link; one such subnet per Framed-Route attrib. In the second alternative, the one subnet routed is that which contains the Framed-IP-Address and is as large as the Framed-IP-Netmask indicates. I'm arguing to a colleague that the first alternative is "better", non-/32 netmasks on a ppp link make no sense (since netmasks on point-to-point links don't matter anyway), that the second alternative doesn't allow users to make use of their allocated space as easily and effectively as the first alternative, and that the second alternative is limited to routing one subnet (though you might be able to mix Framed-IP-Netmask and Framed-Route together?). Comments? How are others doing it and why? Erik

2 1

Best VPN Appliance
by Dawood Iqbal 08 Mar '10

08 Mar '10

Hello All, Is it possible to get your ideas on what VPN appliances are good to have in enterprise network? Requirements are; SSL IPSec Client and Web VPN support (Win/MAC/iPhone/Android) If webvpn is used, then when any user connects via webvpn, we should be able to re-direct him to any and ONLY specific application i.e SAP. If 2 boxes are installed then they should replicate data seamlessly. Regards, dI

5 4

Re: Locations with no good Internet
by Joel Snyder 08 Mar '10

08 Mar '10

Patrick Giagnocavo <patrick(a)zill.net> wrote: >Isn't this really an issue (political) with tariffed T1 prices rather >than a technical problem? >I was told that most T1s are provisioned over a DSLAM these days >anyways, and that the key difference between T1 and DSL was the SLA >(99.99% guarantee vs. "when we get it fixed"). I don't know about anything other than Qwest-land in Arizona, but we are seeing the few T1s that are still in service provisioned as you described: a 2-wire DSL connection, although not out of a local DSLAM. I think it depends on your definition of the box that's being used for connections as a DSLAM. It's certainly not the same traffic engineering as DSL, because DSL circuits are muxed at the DSLAM (at least in Qwest-land) and may or may not be subject to congestion when leaving the neighborhood remote terminal DSLAM. We for sure NEVER see any congestion on the T1s that are being provisioned using DSL technology. Now, whether that's the same chassis with engineering over an uplink, or two separate chassis in the same road-side wart for the two different services, that's a deployment issue. In other words, I think you're right about the technology involved (DSL-ish 2 wire circuits) being used to deliver, but there's more to it than repair time SLA when it comes to selling the same 2 wires as DSL for $39.95 and T1 for $399.95. (again, at least out here in the Wild West) That being said, I think your fundamental point is likely correct, something well known to everyone in this business: the cost to a Telco to provide T1 service is not 10x the cost to provide DSL service at similar speeds, and when there is that much additional marginal revenue being generated, they are going to fight with politics, tariffs, and any other tool at their disposal to keep the additional revenue coming in as long as possible. jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 jms(a)Opus1.COM http://www.opus1.com/jms

3 2

Trojan traffic from 115.100.250.112
by Hadas Shany 08 Mar '10

08 Mar '10

Hello NANOG, Yesterday we've found some strange requests in our logs, typical to the Daonol Trojan. According to the logs, the infected computers are sending personal information such as search engine lookups and browsing history. The information sent to 115.100.250.112. Log entry for example: GET http://115.100.250.112/x/?0ECiqocksamkpjqtnwhgrtieydpwgvnmktk2 HTTP/1.0..SS: More information on Daonol Trojan: http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Nam… We've blocked all communication with this address. Thank you, Hadas Shany CERT.GOV ISRAEL

1 0