June 2010 - Test - lists.nanog.org

The Cidr Report
by cidr-report＠potaroo.net 18 Jun '10

18 Jun '10

This report has been generated at Fri Jun 18 21:11:45 2010 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org for a current version of this report. Recent Table History Date Prefixes CIDR Agg 11-06-10 325486 201041 12-06-10 325434 201048 13-06-10 325403 201290 14-06-10 325496 201328 15-06-10 325528 201450 16-06-10 325586 201474 17-06-10 325380 201665 18-06-10 325632 201799 AS Summary 34629 Number of ASes in routing system 14709 Number of ASes announcing only one prefix 4464 Largest number of prefixes announced by an AS AS4323 : TWTC - tw telecom holdings, inc. 96116800 Largest address span announced by an AS (/32s) AS4134 : CHINANET-BACKBONE No.31,Jin-rong Street Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 18Jun10 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 326121 201754 124367 38.1% All ASes AS6389 3910 292 3618 92.5% BELLSOUTH-NET-BLK - BellSouth.net Inc. AS4323 4464 1534 2930 65.6% TWTC - tw telecom holdings, inc. AS4766 1847 496 1351 73.1% KIXS-AS-KR Korea Telecom AS22773 1166 70 1096 94.0% ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. AS4755 1310 232 1078 82.3% TATACOMM-AS TATA Communications formerly VSNL is Leading ISP AS17488 1319 324 995 75.4% HATHWAY-NET-AP Hathway IP Over Cable Internet AS18566 1059 101 958 90.5% COVAD - Covad Communications Co. AS6478 1284 359 925 72.0% ATT-INTERNET3 - AT&T WorldNet Services AS8151 1522 617 905 59.5% Uninet S.A. de C.V. AS19262 1127 272 855 75.9% VZGNI-TRANSIT - Verizon Internet Services Inc. AS10620 1059 231 828 78.2% Telmex Colombia S.A. AS7545 1340 567 773 57.7% TPG-INTERNET-AP TPG Internet Pty Ltd AS8452 1163 431 732 62.9% TEDATA TEDATA AS5668 864 140 724 83.8% AS-5668 - CenturyTel Internet Holdings, Inc. AS4808 837 231 606 72.4% CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network AS4804 678 84 594 87.6% MPX-AS Microplex PTY LTD AS1785 1793 1207 586 32.7% AS-PAETEC-NET - PaeTec Communications, Inc. AS7303 720 150 570 79.2% Telecom Argentina S.A. AS35805 641 88 553 86.3% SILKNET-AS SILKNET AS AS7018 1513 963 550 36.4% ATT-INTERNET4 - AT&T WorldNet Services AS4780 684 163 521 76.2% SEEDNET Digital United Inc. AS28573 943 432 511 54.2% NET Servicos de Comunicao S.A. AS4134 983 488 495 50.4% CHINANET-BACKBONE No.31,Jin-rong Street AS17676 573 81 492 85.9% GIGAINFRA Softbank BB Corp. AS9443 559 75 484 86.6% INTERNETPRIMUS-AS-AP Primus Telecommunications AS7011 1130 649 481 42.6% FRONTIER-AND-CITIZENS - Frontier Communications of America, Inc. AS33588 618 170 448 72.5% BRESNAN-AS - Bresnan Communications, LLC. AS7738 477 30 447 93.7% Telecomunicacoes da Bahia S.A. AS3356 1183 744 439 37.1% LEVEL3 Level 3 Communications AS24560 919 486 433 47.1% AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services Total 37685 11707 25978 68.9% Top 30 total Possible Bogus Routes 31.0.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 31.1.0.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 31.1.24.0/24 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 41.222.79.0/24 AS36938 AMSCOTELECOMS Amsco Telecommunications Nigeria Limited 41.223.92.0/22 AS36936 CELTEL-GABON Celtel Gabon Internet Service 41.223.188.0/24 AS22351 INTELSAT Intelsat Global BGP Routing Policy 41.223.189.0/24 AS6453 GLOBEINTERNET TATA Communications 41.223.196.0/24 AS36990 41.223.197.0/24 AS36990 41.223.198.0/24 AS36990 41.223.199.0/24 AS36990 62.61.220.0/24 AS24974 TACHYON-EU Tachyon Europe BV 62.61.221.0/24 AS24974 TACHYON-EU Tachyon Europe BV 63.140.213.0/24 AS22555 UTC - Universal Talkware Corporation 63.143.251.0/24 AS22555 UTC - Universal Talkware Corporation 64.20.80.0/20 AS40028 SPD-NETWORK-1 - SPD NETWORK 64.82.128.0/19 AS16617 COMMUNITYISP - CISP 64.82.160.0/19 AS16617 COMMUNITYISP - CISP 66.128.38.0/24 AS15246 Telecomunicaciones Satelitales Telesat S.A. 66.180.239.0/24 AS35888 VIGNETTE - VIGNETTE CORPORATION 66.206.32.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.33.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.34.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.35.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.47.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 66.207.32.0/20 AS23011 66.230.240.0/20 AS27286 66.241.112.0/20 AS21547 REVNETS - Revolution Networks 66.245.176.0/20 AS19318 NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC 69.6.80.0/24 AS13442 69.6.81.0/24 AS13442 69.80.224.0/19 AS19166 ACRONOC - ACRONOC INC 71.19.134.0/23 AS3313 INET-AS I.NET S.p.A. 71.19.160.0/23 AS4648 NZIX-2 Netgate 72.22.32.0/19 AS33150 72.22.61.0/24 AS33150 72.22.62.0/24 AS33150 76.77.32.0/19 AS2828 XO-AS15 - XO Communications 80.88.10.0/24 AS33774 DJAWEB 80.88.12.0/24 AS33779 wataniya-telecom-as 110.34.44.0/22 AS12653 COMTONET KB Impuls Hellas 110.173.64.0/19 AS37963 CNNIC-ALIBABA-CN-NET-AP Alibaba (China) Technology Co., Ltd. 117.120.56.0/21 AS4755 TATACOMM-AS TATA Communications formerly VSNL is Leading ISP 121.46.0.0/16 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 121.50.168.0/21 AS9931 CAT-AP The Communication Authoity of Thailand, CAT 158.222.70.0/23 AS6137 SISNA - SISNA, Inc. 158.222.72.0/23 AS6137 SISNA - SISNA, Inc. 158.222.224.0/20 AS19864 O1COMM - O1 COMMUNICATIONS 158.222.224.0/22 AS19864 O1COMM - O1 COMMUNICATIONS 158.222.229.0/24 AS19864 O1COMM - O1 COMMUNICATIONS 176.0.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 176.1.0.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 176.1.24.0/24 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 181.0.0.0/8 AS237 MERIT-AS-14 - Merit Network Inc. 190.102.32.0/20 AS30058 ACTIVO-SYSTEMS-AS30058 ACTIVO-SYSTEMS-AS30058 190.104.32.0/21 AS27882 Telefónica Celular de Bolivia S.A. 192.9.0.0/16 AS11479 BRM-SUN-AS - Sun Microsystems, Inc 192.64.85.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.69.108.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.70.164.0/24 AS25689 NRCNET-AS - National Research Council of Canada 192.101.45.0/24 AS2905 TICSA-ASN 192.101.46.0/24 AS6503 Axtel, S.A.B. de C. V. 192.101.64.0/21 AS702 AS702 Verizon Business EMEA - Commercial IP service provider in Europe 192.101.70.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 192.101.71.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 192.101.72.0/24 AS702 AS702 Verizon Business EMEA - Commercial IP service provider in Europe 192.101.74.0/24 AS1239 SPRINTLINK - Sprint 192.124.248.0/23 AS680 DFN-IP service X-WiN 192.124.252.0/22 AS680 DFN-IP service X-WiN 192.131.233.0/24 AS6389 BELLSOUTH-NET-BLK - BellSouth.net Inc. 192.139.3.0/24 AS23184 PERSONA - PERSONA COMMUNICATIONS INC. 192.154.32.0/19 AS81 NCREN - MCNC 192.154.64.0/19 AS81 NCREN - MCNC 192.188.208.0/20 AS27064 DNIC-ASBLK-27032-27159 - DoD Network Information Center 196.2.224.0/22 AS24863 LINKdotNET-AS 196.6.108.0/24 AS5713 SAIX-NET 196.13.201.0/24 AS2018 TENET-1 196.13.202.0/24 AS2018 TENET-1 196.13.203.0/24 AS2018 TENET-1 196.13.204.0/24 AS2018 TENET-1 196.110.105.0/24 AS8513 SKYVISION SkyVision Network Services 196.201.248.0/24 AS30991 SAHANNET Sahannet AS Network 196.201.249.0/24 AS30991 SAHANNET Sahannet AS Network 196.201.250.0/24 AS30991 SAHANNET Sahannet AS Network 196.201.251.0/24 AS30991 SAHANNET Sahannet AS Network 196.201.253.0/24 AS30991 SAHANNET Sahannet AS Network 196.201.255.0/24 AS30991 SAHANNET Sahannet AS Network 196.202.224.0/21 AS8818 TELE Greenland Autonomous System 198.1.2.0/24 AS4761 INDOSAT-INP-AP INDOSAT Internet Network Provider 198.23.26.0/24 AS33052 VZUNET - Verizon Data Services LLC 198.51.100.0/24 AS16953 ASCENT-MEDIA-GROUP-LLC - Ascent Media Group, LLC 198.73.210.0/24 AS21570 ACI-1 - Accelerated Connections Inc. 198.74.38.0/24 AS16966 SBCIDC-LSAN03 - AT&T Internet Services 198.74.39.0/24 AS16966 SBCIDC-LSAN03 - AT&T Internet Services 198.74.40.0/24 AS16966 SBCIDC-LSAN03 - AT&T Internet Services 198.97.72.0/21 AS27064 DNIC-ASBLK-27032-27159 - DoD Network Information Center 198.97.96.0/19 AS27064 DNIC-ASBLK-27032-27159 - DoD Network Information Center 198.97.240.0/20 AS27064 DNIC-ASBLK-27032-27159 - DoD Network Information Center 198.99.241.0/24 AS11797 AC-NIELSEN-AS AC NIELSEN 198.135.236.0/24 AS4358 XNET - XNet Information Systems, Inc. 198.161.87.0/24 AS6539 GT-BELL - Bell Canada 198.163.214.0/24 AS21804 ACCESS-SK - Access Communications Co-operative Limited 198.167.0.0/16 AS7456 INTERHOP - Interhop Network SERVICES Inc. 198.168.0.0/16 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 198.169.0.0/16 AS803 SASKTEL - Saskatchewan Telecommunications 198.180.198.0/24 AS23715 SEOUL-INTGW-GXS-AP Global Exchange Services 198.182.235.0/24 AS3356 LEVEL3 Level 3 Communications 199.10.0.0/16 AS27064 DNIC-ASBLK-27032-27159 - DoD Network Information Center 199.16.32.0/19 AS6389 BELLSOUTH-NET-BLK - BellSouth.net Inc. 199.26.183.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 199.121.0.0/16 AS27064 DNIC-ASBLK-27032-27159 - DoD Network Information Center 199.123.16.0/20 AS27064 DNIC-ASBLK-27032-27159 - DoD Network Information Center 199.185.130.0/23 AS19662 UNISERVE-ONLINE - Uniserve On Line 199.202.0.0/16 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 199.202.216.0/21 AS577 BACOM - Bell Canada 199.233.92.0/24 AS26896 D102-ITC - Data 102, LLC 199.245.188.0/24 AS16582 NEXTLEVELINTERNET - NEXTLEVEL INTERNET, INC. 199.246.116.0/24 AS813 UUNET-CANADA - MCI Communications Services, Inc. d/b/a Verizon Business 199.248.230.0/24 AS16582 NEXTLEVELINTERNET - NEXTLEVEL INTERNET, INC. 200.1.112.0/24 AS29754 GO2TEL GO2TEL.COM INC. 200.108.176.0/20 AS14551 UUNET-SA - MCI Communications Services, Inc. d/b/a Verizon Business 202.9.55.0/24 AS2764 AAPT AAPT Limited 202.9.57.0/24 AS2764 AAPT AAPT Limited 202.38.63.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 202.58.113.0/24 AS19161 202.61.75.0/24 AS9927 PHILCOMNET-PH A Multihomed ISP Company 202.66.128.0/18 AS9584 GENESIS-AP Diyixian.com Limited 202.66.160.0/19 AS9584 GENESIS-AP Diyixian.com Limited 202.66.160.0/20 AS9584 GENESIS-AP Diyixian.com Limited 202.66.176.0/20 AS9584 GENESIS-AP Diyixian.com Limited 202.66.184.0/24 AS9584 GENESIS-AP Diyixian.com Limited 202.66.186.0/24 AS9584 GENESIS-AP Diyixian.com Limited 202.66.188.0/24 AS9584 GENESIS-AP Diyixian.com Limited 202.66.189.0/24 AS9584 GENESIS-AP Diyixian.com Limited 202.66.190.0/24 AS9584 GENESIS-AP Diyixian.com Limited 202.73.144.0/20 AS4788 TMNET-AS-AP TM Net, Internet Service Provider 202.80.192.0/20 AS2706 PI-HK Pacnet Internet (Hong Kong) Limited 202.86.252.0/22 AS4748 RESOLINK-AS-AP Resources Link Network Limited 202.86.252.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.253.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.254.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.255.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.94.1.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.133.37.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 202.133.70.0/24 AS38616 WORLDCALL-AS-KHI Worldcall Telecom Limited 202.133.73.0/24 AS38616 WORLDCALL-AS-KHI Worldcall Telecom Limited 202.136.254.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.136.255.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.150.227.0/24 AS17727 NAPINFO-AS-AP PT. NAP Info Lintas Nusa 202.174.70.0/24 AS21175 WIS Wind International Services SA 202.174.125.0/24 AS9498 BBIL-AP BHARTI Airtel Ltd. 202.176.1.0/24 AS9942 COMINDICO-AP SOUL Converged Communications Australia 202.179.130.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 202.179.131.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 202.179.133.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 202.179.134.0/24 AS23966 LDN-AS-PK LINKdotNET Telecom Limited 202.179.144.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 202.179.149.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 202.179.150.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 202.181.32.0/24 AS4645 ASN-HKNET-AP HKNet Co. Ltd 203.12.45.0/24 AS4854 NETSPACE-AS-AP Netspace Online Systems 203.62.0.0/17 AS7575 AARNET-AS-AP Australian Academic and Reasearch Network (AARNet) 203.78.48.0/20 AS9299 IPG-AS-AP Philippine Long Distance Telephone Company 203.80.136.0/21 AS4759 EVOSERVE-AS-AP EvoServe is a content and online access Internet provider company 203.112.111.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.113.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.114.0/24 AS4802 ASN-IINET iiNet Limited 203.112.116.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.117.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.118.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.119.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.120.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.121.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.127.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.128.128.0/24 AS23849 CNNIC-NET263-AP Beijing Capital-online science development Co.,Ltd. 203.142.219.0/24 AS45149 204.9.216.0/23 AS6389 BELLSOUTH-NET-BLK - BellSouth.net Inc. 204.9.218.0/23 AS6389 BELLSOUTH-NET-BLK - BellSouth.net Inc. 204.10.232.0/21 AS33150 204.19.14.0/23 AS577 BACOM - Bell Canada 204.28.104.0/21 AS25973 MZIMA - Mzima Networks, Inc. 204.89.214.0/24 AS4323 TWTC - tw telecom holdings, inc. 204.197.0.0/16 AS3356 LEVEL3 Level 3 Communications 204.209.114.0/24 AS13768 PEER1 - Peer 1 Network Inc. 205.150.0.0/15 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 205.189.134.0/24 AS11814 CYBERSURF - Cybersurf Inc. 205.210.145.0/24 AS11814 CYBERSURF - Cybersurf Inc. 206.180.240.0/20 AS12083 KNOLOGY-NET - Knology Holdings 206.197.184.0/24 AS23304 DATOTEL-STL-AS - Datotel LLC, a NetLabs LLC Company 207.174.131.0/24 AS26116 INDRA - Indra's Net Inc. 207.174.132.0/23 AS26116 INDRA - Indra's Net Inc. 207.174.152.0/23 AS26116 INDRA - Indra's Net Inc. 207.174.154.0/24 AS26116 INDRA - Indra's Net Inc. 207.174.155.0/24 AS26116 INDRA - Indra's Net Inc. 207.174.188.0/24 AS26116 INDRA - Indra's Net Inc. 207.174.189.0/24 AS26116 INDRA - Indra's Net Inc. 207.174.190.0/24 AS26116 INDRA - Indra's Net Inc. 207.174.191.0/24 AS26116 INDRA - Indra's Net Inc. 207.174.200.0/24 AS22658 EARTHNET - Earthnet, Inc. 207.174.248.0/21 AS6653 PRIVATEI - privateI, LLC 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc. 208.73.4.0/22 AS27630 PREMIER - Premier Innovations, LLC 208.78.164.0/24 AS16565 208.78.165.0/24 AS16565 208.78.167.0/24 AS16565 208.92.196.0/22 AS10929 NETELLIGENT - Netelligent Hosting Services Inc. 208.92.199.0/24 AS26198 3MENATWORK - 3Men@Work Integrated Networks, Inc. 209.54.123.0/24 AS6062 NETPLEX - NETPLEX 209.105.224.0/19 AS20074 209.165.239.0/24 AS209 ASN-QWEST - Qwest Communications Company, LLC 209.213.0.0/20 AS33005 ELTOPIA - Eltopia.com, LLC 209.213.1.0/24 AS7849 CROCKERCOM - CROCKER COMMUNICATIONS 209.213.4.0/24 AS7849 CROCKERCOM - CROCKER COMMUNICATIONS 210.5.128.0/20 AS4837 CHINA169-BACKBONE CNCGROUP China169 Backbone 210.56.150.0/23 AS38138 INTECH-TRANSIT-BD InTech Online Limited, INTERNET SERVICE LIMITED 210.247.224.0/19 AS7496 WEBCENTRAL-AS WebCentral 216.21.196.0/24 AS12251 INVISION - Invision.com, Inc. 216.21.201.0/24 AS12251 INVISION - Invision.com, Inc. 216.21.202.0/24 AS12251 INVISION - Invision.com, Inc. 216.21.206.0/23 AS12251 INVISION - Invision.com, Inc. 216.58.192.0/24 AS22702 X5SOLUTIONS - X5 Solutions, Inc. 216.58.197.0/24 AS22702 X5SOLUTIONS - X5 Solutions, Inc. 216.58.200.0/24 AS18530 ISOMEDIA-1 - Isomedia Inc. 216.172.198.0/24 AS22773 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. 216.172.199.0/24 AS22773 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. 216.250.112.0/20 AS7296 ALCHEMYNET - Alchemy Communications, Inc. 216.250.116.0/24 AS36066 UNI-MARKETING-ALLIANCE - Webhost4life.com Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Experience with the Dell PowerConnect 8024F - compare to the Cisco Nexus 5010
by Steven Fischer 18 Jun '10

18 Jun '10

Does anyone have any experience with the Dell PowerConnect 8024F 10-gig switch that they'd be willing to share? How does it perform? How reliable is it? My experiences with the Dell switches have been less than favorable to this point, but I am willing to concede that some of that may be colored by my Cisco bias. Would you trust this Dell switch in a high-performance computing environment, where the ability to move data for sustained durations at rates close to line speed is paramount, along with high-reliability/high-availability? Any feedback is welcomed. -- To him who is able to keep you from falling and to present you before his glorious presence without fault and with great joy

4 4

DC rectifier
by Ric Moseley 18 Jun '10

18 Jun '10

Anyone have any recommendations on a DC rectifier shelf? Been looking at Valere but the lead time is 4-6 weeks (which is too long). Thanks. Ric.

1 0

Root Zone DNSSEC Deployment Technical Status Update
by Joe Abley 18 Jun '10

18 Jun '10

Root Zone DNSSEC Deployment Technical Status Update 2010-06-18 This is the ninth of a series of technical status updates intended to inform a technical audience on progress in signing the root zone of the DNS. RESOURCES Details of the project, including documentation published to date, can be found at <http://www.root-dnssec.org/>. We'd like to hear from you. If you have feedback for us, please send it to rootsign(a)icann.org. KSK CEREMONY 1 COMPLETE The first KSK ceremony for the root zone was completed this week in Culpeper, VA, USA. The Ceremony Administrator was Mehmet Akcin. The first production KSK has now been generated. This is the key that is scheduled to be put into service on 2010-07-15. The first production Key Signing Request (KSR) generated by VeriSign has now been processed by ICANN using the root zone KSK, and the resulting Signed Key Response (KSR) has been accepted by VeriSign. This SKR contains signatures for Q3 2010, for use between 2010-07-01 and 2010-09-30. Audit materials relating to the first ceremony will be published as soon as is practical, and in particular before 2010-07-15. The KSK and SKR generated during this ceremony will not be approved for production until the KSK key pair has been successfully transported to ICANN's west-coast ceremony facility in El Segundo, CA, USA, and placed in secure storage. KSK CEREMONY 2 SCHEDULED The second KSK ceremony for the root zone is scheduled to take place in El Segundo, CA, USA on 2010-07-12. Replication of key materials onto west-coast HSMs, enrolment of west-coast crypto officers and processing of the Q4 2010 KSR (for production use between 2010-10-01 and 2010-12-31) will take place during this ceremony. PLANNED DEPLOYMENT SCHEDULE Already completed: 2010-01-27: L starts to serve DURZ 2010-02-10: A starts to serve DURZ 2010-03-03: M, I start to serve DURZ 2010-03-24: D, K, E start to serve DURZ 2010-04-14: B, H, C, G, F start to serve DURZ 2010-05-05: J starts to serve DURZ 2010-06-16: First Key Signing Key (KSK) Ceremony To come: 2010-07-12: Second Key Signing Key (KSK) Ceremony 2010-07-15: Distribution of validatable, production, signed root zone; publication of root zone trust anchor (Please note that this schedule is tentative and subject to change based on testing results or other unforeseen factors.)

1 0

Weekly Routing Table Report
by Routing Analysis Role Account 18 Jun '10

18 Jun '10

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.apnic.net. If you have any comments please contact Philip Smith <pfs(a)cisco.com>. Routing Table Report 04:00 +10GMT Sat 19 Jun, 2010 Report Website: http://thyme.apnic.net Detailed Analysis: http://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 322870 Prefixes after maximum aggregation: 148946 Deaggregation factor: 2.17 Unique aggregates announced to Internet: 158175 Total ASes present in the Internet Routing Table: 34178 Prefixes per ASN: 9.45 Origin-only ASes present in the Internet Routing Table: 29680 Origin ASes announcing only one prefix: 14399 Transit ASes present in the Internet Routing Table: 4498 Transit-only ASes present in the Internet Routing Table: 104 Average AS path length visible in the Internet Routing Table: 3.6 Max AS path length visible: 25 Max AS path prepend of ASN (41664) 21 Prefixes from unregistered ASNs in the Routing Table: 266 Unregistered ASNs in the Routing Table: 114 Number of 32-bit ASNs allocated by the RIRs: 631 Prefixes from 32-bit ASNs in the Routing Table: 722 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 156 Number of addresses announced to Internet: 2247247968 Equivalent to 133 /8s, 242 /16s and 72 /24s Percentage of available address space announced: 60.6 Percentage of allocated address space announced: 65.4 Percentage of available address space allocated: 92.8 Percentage of address space in use by end-sites: 83.3 Total number of prefixes smaller than registry allocations: 154420 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 77483 Total APNIC prefixes after maximum aggregation: 26911 APNIC Deaggregation factor: 2.88 Prefixes being announced from the APNIC address blocks: 74300 Unique aggregates announced from the APNIC address blocks: 33095 APNIC Region origin ASes present in the Internet Routing Table: 4075 APNIC Prefixes per ASN: 18.23 APNIC Region origin ASes announcing only one prefix: 1119 APNIC Region transit ASes present in the Internet Routing Table: 639 Average APNIC Region AS path length visible: 3.6 Max APNIC Region AS path length visible: 15 Number of APNIC addresses announced to Internet: 523634976 Equivalent to 31 /8s, 54 /16s and 9 /24s Percentage of available APNIC address space announced: 78.0 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079 55296-56319, 131072-132095 APNIC Address Blocks 1/8, 14/8, 27/8, 43/8, 58/8, 59/8, 60/8, 61/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 134278 Total ARIN prefixes after maximum aggregation: 69110 ARIN Deaggregation factor: 1.94 Prefixes being announced from the ARIN address blocks: 107051 Unique aggregates announced from the ARIN address blocks: 41720 ARIN Region origin ASes present in the Internet Routing Table: 13734 ARIN Prefixes per ASN: 7.79 ARIN Region origin ASes announcing only one prefix: 5267 ARIN Region transit ASes present in the Internet Routing Table: 1340 Average ARIN Region AS path length visible: 3.4 Max ARIN Region AS path length visible: 22 Number of ARIN addresses announced to Internet: 728209056 Equivalent to 43 /8s, 103 /16s and 150 /24s Percentage of available ARIN address space announced: 62.0 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 393216-394239 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 54/8, 55/8, 56/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 107/8, 108/8, 173/8, 174/8, 184/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 74245 Total RIPE prefixes after maximum aggregation: 43253 RIPE Deaggregation factor: 1.72 Prefixes being announced from the RIPE address blocks: 67494 Unique aggregates announced from the RIPE address blocks: 44391 RIPE Region origin ASes present in the Internet Routing Table: 14528 RIPE Prefixes per ASN: 4.65 RIPE Region origin ASes announcing only one prefix: 7502 RIPE Region transit ASes present in the Internet Routing Table: 2164 Average RIPE Region AS path length visible: 3.9 Max RIPE Region AS path length visible: 25 Number of RIPE addresses announced to Internet: 432216992 Equivalent to 25 /8s, 195 /16s and 27 /24s Percentage of available RIPE address space announced: 75.8 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 196608-197631 RIPE Address Blocks 2/8, 25/8, 31/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 176/8, 178/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 28758 Total LACNIC prefixes after maximum aggregation: 6858 LACNIC Deaggregation factor: 4.19 Prefixes being announced from the LACNIC address blocks: 27214 Unique aggregates announced from the LACNIC address blocks: 14180 LACNIC Region origin ASes present in the Internet Routing Table: 1296 LACNIC Prefixes per ASN: 21.00 LACNIC Region origin ASes announcing only one prefix: 402 LACNIC Region transit ASes present in the Internet Routing Table: 227 Average LACNIC Region AS path length visible: 3.9 Max LACNIC Region AS path length visible: 24 Number of LACNIC addresses announced to Internet: 74639360 Equivalent to 4 /8s, 114 /16s and 232 /24s Percentage of available LACNIC address space announced: 55.6 LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 262144-263167 plus ERX transfers LACNIC Address Blocks 177/8, 181/8, 186/8, 187/8, 189/8, 190/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 7166 Total AfriNIC prefixes after maximum aggregation: 1816 AfriNIC Deaggregation factor: 3.95 Prefixes being announced from the AfriNIC address blocks: 5505 Unique aggregates announced from the AfriNIC address blocks: 1731 AfriNIC Region origin ASes present in the Internet Routing Table: 370 AfriNIC Prefixes per ASN: 14.88 AfriNIC Region origin ASes announcing only one prefix: 109 AfriNIC Region transit ASes present in the Internet Routing Table: 82 Average AfriNIC Region AS path length visible: 3.7 Max AfriNIC Region AS path length visible: 15 Number of AfriNIC addresses announced to Internet: 18911488 Equivalent to 1 /8s, 32 /16s and 145 /24s Percentage of available AfriNIC address space announced: 56.4 AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4766 1847 8407 482 Korea Telecom (KIX) 7545 1330 232 107 TPG Internet Pty Ltd 17488 1319 140 127 Hathway IP Over Cable Interne 4755 1310 294 154 TATA Communications formerly 17974 1011 270 50 PT TELEKOMUNIKASI INDONESIA 9583 995 73 490 Sify Limited 4134 983 21291 407 CHINANET-BACKBONE 24560 919 306 169 Bharti Airtel Ltd., Telemedia 4808 837 1572 215 CNCGROUP IP network: China169 9829 793 680 39 BSNL National Internet Backbo Complete listing at http://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3911 3733 287 bellsouth.net, inc. 4323 3368 1114 395 Time Warner Telecom 1785 1793 698 129 PaeTec Communications, Inc. 20115 1553 1514 658 Charter Communications 7018 1513 5737 961 AT&T WorldNet Services 2386 1286 569 910 AT&T Data Communications Serv 6478 1284 260 84 AT&T Worldnet Services 3356 1181 10894 407 Level 3 Communications, LLC 22773 1166 2605 65 Cox Communications, Inc. 11492 1159 208 65 Cable One Complete listing at http://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 35805 641 56 6 United Telecom of Georgia 3292 453 2026 393 TDC Tele Danmark 30890 444 111 206 Evolva Telecom 702 411 1869 327 UUNET - Commercial IP service 8551 400 353 46 Bezeq International 8866 400 117 18 Bulgarian Telecommunication C 3301 372 1422 327 TeliaNet Sweden 3320 370 7313 321 Deutsche Telekom AG 34984 360 89 185 BILISIM TELEKOM 9198 352 202 13 Kazakhtelecom Data Network Ad Complete listing at http://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 1520 2965 244 UniNet S.A. de C.V. 10620 1059 237 152 TVCABLE BOGOTA 28573 945 767 92 NET Servicos de Comunicao S.A 7303 720 383 102 Telecom Argentina Stet-France 6503 666 174 210 AVANTEL, S.A. 22047 546 310 15 VTR PUNTO NET S.A. 3816 482 212 77 Empresa Nacional de Telecomun 7738 477 922 30 Telecomunicacoes da Bahia S.A 14420 464 32 68 ANDINATEL S.A. 14117 450 31 14 Telefonica del Sur S.A. Complete listing at http://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 8452 1163 445 10 TEDATA 24863 720 147 39 LINKdotNET AS number 36992 640 278 186 Etisalat MISR 3741 269 852 230 The Internet Solution 33776 219 12 11 Starcomms Nigeria Limited 2018 211 244 61 Tertiary Education Network 6713 195 186 16 Itissalat Al-MAGHRIB 24835 188 78 10 RAYA Telecom - Egypt 29571 176 19 10 Ci Telecom Autonomous system 29975 133 506 14 Vodacom Complete listing at http://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3911 3733 287 bellsouth.net, inc. 4323 3368 1114 395 Time Warner Telecom 4766 1847 8407 482 Korea Telecom (KIX) 1785 1793 698 129 PaeTec Communications, Inc. 20115 1553 1514 658 Charter Communications 8151 1520 2965 244 UniNet S.A. de C.V. 7018 1513 5737 961 AT&T WorldNet Services 7545 1330 232 107 TPG Internet Pty Ltd 17488 1319 140 127 Hathway IP Over Cable Interne 4755 1310 294 154 TATA Communications formerly Complete listing at http://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 4323 3368 2973 Time Warner Telecom 1785 1793 1664 PaeTec Communications, Inc. 4766 1847 1365 Korea Telecom (KIX) 8151 1520 1276 UniNet S.A. de C.V. 7545 1330 1223 TPG Internet Pty Ltd 6478 1284 1200 AT&T Worldnet Services 17488 1319 1192 Hathway IP Over Cable Interne 4755 1310 1156 TATA Communications formerly 8452 1163 1153 TEDATA 22773 1166 1101 Cox Communications, Inc. Complete listing at http://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 16927 UNALLOCATED 12.0.252.0/23 7018 AT&T WorldNet Servic 15132 UNALLOCATED 12.9.150.0/24 7018 AT&T WorldNet Servic 32567 UNALLOCATED 12.14.170.0/24 7018 AT&T WorldNet Servic 13746 UNALLOCATED 12.24.56.0/24 7018 AT&T WorldNet Servic 32567 UNALLOCATED 12.25.107.0/24 7018 AT&T WorldNet Servic 26973 UNALLOCATED 12.39.152.0/24 7018 AT&T WorldNet Servic 26973 UNALLOCATED 12.39.154.0/23 7018 AT&T WorldNet Servic 26973 UNALLOCATED 12.39.155.0/24 7018 AT&T WorldNet Servic 26973 UNALLOCATED 12.39.159.0/24 7018 AT&T WorldNet Servic 25639 UNALLOCATED 12.41.169.0/24 7018 AT&T WorldNet Servic Complete listing at http://thyme.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 31.0.0.0/16 12654 RIPE NCC RIS Project 31.1.0.0/21 12654 RIPE NCC RIS Project 31.1.24.0/24 12654 RIPE NCC RIS Project 41.222.79.0/24 36938 >>UNKNOWN<< 41.223.92.0/22 36936 >>UNKNOWN<< 41.223.188.0/24 22351 Intelsat 41.223.189.0/24 6453 Teleglobe Inc. 41.223.196.0/24 36990 Alkan Telecom Ltd 41.223.197.0/24 36990 Alkan Telecom Ltd 41.223.198.0/24 36990 Alkan Telecom Ltd Complete listing at http://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:20 /9:10 /10:25 /11:68 /12:194 /13:403 /14:703 /15:1283 /16:11117 /17:5327 /18:9044 /19:18356 /20:22585 /21:22805 /22:29734 /23:29309 /24:168896 /25:950 /26:1238 /27:617 /28:118 /29:47 /30:13 /31:0 /32:8 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 6389 2506 3911 bellsouth.net, inc. 4323 1852 3368 Time Warner Telecom 4766 1482 1847 Korea Telecom (KIX) 1785 1256 1793 PaeTec Communications, Inc. 11492 1071 1159 Cable One 17488 1066 1319 Hathway IP Over Cable Interne 8452 1051 1163 TEDATA 18566 1040 1059 Covad Communications 10620 975 1059 TVCABLE BOGOTA 7018 914 1513 AT&T WorldNet Services Complete listing at http://thyme.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:2 4:13 8:285 12:2003 13:7 14:1 15:23 16:3 17:8 20:21 24:1429 27:114 31:1 32:49 33:12 38:681 40:98 41:2437 44:3 47:18 52:9 55:9 56:2 57:25 58:747 59:502 60:458 61:1072 62:1070 63:1971 64:3651 65:2356 66:4259 67:1824 68:1114 69:2883 70:704 71:237 72:1836 73:2 74:2102 75:250 76:308 77:928 78:631 79:417 80:995 81:795 82:487 83:431 84:698 85:1047 86:461 87:692 88:341 89:1578 90:93 91:2818 92:472 93:1064 94:1414 95:612 96:284 97:323 98:580 99:28 108:32 109:528 110:345 111:518 112:265 113:302 114:421 115:548 116:1053 117:639 118:477 119:935 120:147 121:738 122:1449 123:927 124:1114 125:1308 128:226 129:214 130:195 131:553 132:244 133:17 134:196 135:45 136:235 137:162 138:264 139:104 140:510 141:137 142:348 143:392 144:476 145:50 146:442 147:168 148:662 149:300 150:152 151:166 152:295 153:168 154:2 155:328 156:156 157:325 158:107 159:375 160:316 161:181 162:255 163:171 164:408 165:342 166:465 167:404 168:786 169:164 170:703 171:57 172:2 173:840 174:613 175:93 176:1 178:187 180:487 182:119 183:225 184:62 186:469 187:356 188:1081 189:780 190:3777 192:5749 193:4700 194:3357 195:2774 196:1167 198:3586 199:3456 200:5356 201:1546 202:7976 203:8287 204:4076 205:2328 206:2520 207:3070 208:3873 209:3422 210:2505 211:1262 212:1748 213:1682 214:661 215:69 216:4667 217:1432 218:494 219:378 220:1138 221:413 222:311 223:1 End of report

1 0

DNSsec from domailcontrol.com
by MKS 18 Jun '10

18 Jun '10

Hi We (a small ISP in the middle of nowhere) are having problems resolving DNSsec records from godaddy. This commands works just fine # dig @ns52.domaincontrol.com loomus.com but this doesn't # dig @ns52.domaincontrol.com +dnssec loomus.com We don't receive the reply to the query. and no, this isn't a packet size issue, the reply for the second command is 124bytes, and the host isn't behind a firewall. So the same commands work just fine outside our network, and we are only having problems with nsxx.domailcontrol.com As far as I can see, when enabling +dnssec the EDNS option is activated and this is added in the dns querty "OPT UDPsize=4096 OK" I have also tried # dig @ns52.domaincontrol.com +dnssec +bufsize=512 loomus.com without any success. Does someone have any brilliant suggestions? Please contact me on or off list Regards MKS

2 1

Sending ARP request to unicast MAC instead of broadcast MAC address?
by Chris Woodfield 18 Jun '10

18 Jun '10

OK, this sounds Really Wacky (or, Really Hacky if you're into puns) but there's a reason for it, I swear... Will typical OSS UNIX kernels (Linux, BSD, MacOS X, etc) reply to a crafted ARP request that, instead of having FF:FF:FF:FF:FF:FF as its destination MAC address, is instead sent to the already-known unicast MAC address of the host? Next, what would be your utility of choice for crafting such a packet? Or is this something one would need to code up by hand in a lower-level language? Thanks, -C

5 5

Customer Interface Reporting / Portal
by Serge Vautour 17 Jun '10

17 Jun '10

Hello, What are people using to provide customer interface usage reports to customers? There seems to be lots of RRD based tools that can gather the data and store it for long term viewing. We use ZenOSS for internal purposes for example. How do we go about providing each customer access to their data in a secure way? A portal type access. Is anyone aware of a tool that includes a front end that can partition the data on a per customer basis? Each customer would have their own login ID and only see their data? How do we link the data to that customer? Some customer ID on the interface description? Thanks, Serge

3 2

AT&T's blue network SMS<->SMTP off the air
by John Todd 17 Jun '10

17 Jun '10

To those of you who may rely upon AT&T to deliver your email-to-SMS messages for monitoring: some of you may be currently out of luck. I would just send this to the "outages(a)puck.nether.net" list, but it does seem to be a meta-network failure in that for better or worse many of us use SMS as a method to monitor outages, so this perhaps moves it up a notch in the importance hierarchy enough to warrant a NANOG post. I am experiencing failures on my email transmissions to my older "blue" (aka: Cingular) AT&T devices at the moment, for both incoming and outgoing. Many of you may be using older "blue" cards in your NOC phones, SMS gateway devices, or perhaps even your personal mobile devices for those of you who still live in the dark ages of phones that aren't [2.5,3,4,x]G capable. I am unable to diagnose the problems fully, but at least some (if not all) of the SMS-to-email gateway failures are due to mmode.com's MX hosts (in the "airdata.com" zone) being unreachable due to absence of functioning authoritative resolvers for that zone, and possibly other failures as well. This appears to be causing "550 Access Denied" messages being returned to my mobile devices that are sending to email addresses, and mail spooling on my Internet SMTP hosts that are trying to send to the "NPAxxxyyyy(a)mmode.com" addresses for SMTP-to-SMS relay. There is a rumor that this is NOT related to the deactivation of the "downloads" components of the blue network on the 15th, but I suspect that someone just decided to pull the plug on everything. Reading to the end of the thread below, there is someone who states AT&T claims it will be back online by the evening of the 17th at the surprisingly accurate time of 9:55 PM (timezone unstated.) More speculation: http://forums.wireless.att.com/t5/mMode/URGENT-mmode-down-again-Their-mta01… I don't know if this is causing problems with anyone using TAP interfaces, or with any of AT&T's other SMTP<->SMS gateway services like @txt.att.net. SMS, and mobile devices in general, are a single point of failure for contacting on-call staff for various problems - perhaps it's time to insist that everyone carries two mobile devices, on different frequency and technology platforms, with different carriers, and split messages to both due to the anecdotally increasing failure rates of mobile networks. Conspiracy theories of how collusive unreliability would increase ARPU across the board for all carriers would be interesting to hear... but not in this forum, I suspect. :-) JT

2 1

help
by T Kawasaki 17 Jun '10

17 Jun '10

________________________________ From: "nanog-request(a)nanog.org" <nanog-request(a)nanog.org> To: nanog(a)nanog.org Sent: Thu, June 17, 2010 8:00:02 AM Subject: NANOG Digest, Vol 29, Issue 51 Send NANOG mailing list submissions to nanog(a)nanog.org To subscribe or unsubscribe via the World Wide Web, visit https://mailman.nanog.org/mailman/listinfo/nanog or, via email, send a message with subject or body 'help' to nanog-request(a)nanog.org You can reach the person managing the list at nanog-owner(a)nanog.org When replying, please edit your Subject line so it is more specific than "Re: Contents of NANOG digest..." Today's Topics: 1. Re: Todd Underwood was a little late (Jon Lewis) 2. Re: Todd Underwood was a little late (Mark Andrews) 3. Re: Todd Underwood was a little late (Roy) 4. Re: Todd Underwood was a little late (Garrett Skjelstad) 5. AT&T's blue network SMS<->SMTP off the air (John Todd) 6. AAAA being added for i.root-servers.net (Lindqvist Kurt Erik) ---------------------------------------------------------------------- Message: 1 Date: Wed, 16 Jun 2010 22:43:11 -0400 (EDT) From: Jon Lewis <jlewis(a)lewis.org> Subject: Re: Todd Underwood was a little late To: Mark Andrews <marka(a)isc.org> Cc: nanog(a)nanog.org Message-ID: <Pine.LNX.4.61.1006162237180.5148(a)soloth.lewis.org> Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed On Thu, 17 Jun 2010, Mark Andrews wrote: > Why was this traffic hitting your DNS server in the first place? It should > have been rejected by the ingress filters preventing spoofing of the local > network. When I ran a smaller simpler network, I did have input filters on our transit providers rejecting packets from our IP space. With a larger network, multiple IP blocks, numerous multihomed customers, some of which use IP's we've assigned them, it gets a little more complicated to do. I could reject at our border, packets sourced from our IP ranges with exceptions for any of the IP blocks we've assigned to multihomed customers. The ACLs wouldn't be that long, or that hard to maintain. Is this common practice? ---------------------------------------------------------------------- Jon Lewis | I route Senior Network Engineer | therefore you are Atlantic Net | _________ http://www.lewis.org/~jlewis/pgp for PGP public key_________ ------------------------------ Message: 2 Date: Thu, 17 Jun 2010 13:27:09 +1000 From: Mark Andrews <marka(a)isc.org> Subject: Re: Todd Underwood was a little late To: Jon Lewis <jlewis(a)lewis.org> Cc: nanog(a)nanog.org Message-ID: <201006170327.o5H3R9fA072599(a)drugs.dv.isc.org> In message <Pine.LNX.4.61.1006162237180.5148(a)soloth.lewis.org>, Jon Lewis write s: > On Thu, 17 Jun 2010, Mark Andrews wrote: > > > Why was this traffic hitting your DNS server in the first place? It should > > have been rejected by the ingress filters preventing spoofing of the local > > network. > > When I ran a smaller simpler network, I did have input filters on our > transit providers rejecting packets from our IP space. With a larger > network, multiple IP blocks, numerous multihomed customers, some of which > use IP's we've assigned them, it gets a little more complicated to do. One can never do a perfect job but one can stop a large percentage of the crap. You should know the multi-homed customers and their address ranges so they become exceptions. You also run filters on internal routers. There are internal ingress/egress points as well as interconnects. > I could reject at our border, packets sourced from our IP ranges with > exceptions for any of the IP blocks we've assigned to multihomed > customers. The ACLs wouldn't be that long, or that hard to maintain. Is > this common practice? > > ---------------------------------------------------------------------- > Jon Lewis | I route > Senior Network Engineer | therefore you are > Atlantic Net | > _________ http://www.lewis.org/~jlewis/pgp for PGP public key_________ -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: marka(a)isc.org ------------------------------ Message: 3 Date: Wed, 16 Jun 2010 21:38:42 -0700 From: Roy <r.engehausen(a)gmail.com> Subject: Re: Todd Underwood was a little late Cc: nanog(a)nanog.org Message-ID: <4C19A6D2.6030603(a)gmail.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed On 6/16/2010 7:43 PM, Jon Lewis wrote: > On Thu, 17 Jun 2010, Mark Andrews wrote: > >> Why was this traffic hitting your DNS server in the first place? It >> should >> have been rejected by the ingress filters preventing spoofing of the >> local >> network. > > When I ran a smaller simpler network, I did have input filters on our > transit providers rejecting packets from our IP space. With a larger > network, multiple IP blocks, numerous multihomed customers, some of > which use IP's we've assigned them, it gets a little more complicated > to do. > > I could reject at our border, packets sourced from our IP ranges with > exceptions for any of the IP blocks we've assigned to multihomed > customers. The ACLs wouldn't be that long, or that hard to maintain. > Is this common practice? > > - Sounds like a good use of URPF. ------------------------------ Message: 4 Date: Wed, 16 Jun 2010 22:07:10 -0700 From: Garrett Skjelstad <garrett(a)skjelstad.org> Subject: Re: Todd Underwood was a little late To: Roy <r.engehausen(a)gmail.com> Cc: nanog(a)nanog.org Message-ID: <AANLkTim-6WCFwrPNyBwXV1P7CwWReCa6DauH-rHvvo_a(a)mail.gmail.com> Content-Type: text/plain; charset=ISO-8859-1 RFC 2827 anyone? On Wed, Jun 16, 2010 at 9:38 PM, Roy <r.engehausen(a)gmail.com> wrote: > On 6/16/2010 7:43 PM, Jon Lewis wrote: > >> On Thu, 17 Jun 2010, Mark Andrews wrote: >> >> Why was this traffic hitting your DNS server in the first place? It >>> should >>> have been rejected by the ingress filters preventing spoofing of the >>> local >>> network. >>> >> >> When I ran a smaller simpler network, I did have input filters on our >> transit providers rejecting packets from our IP space. With a larger >> network, multiple IP blocks, numerous multihomed customers, some of which >> use IP's we've assigned them, it gets a little more complicated to do. >> >> I could reject at our border, packets sourced from our IP ranges with >> exceptions for any of the IP blocks we've assigned to multihomed customers. >> The ACLs wouldn't be that long, or that hard to maintain. Is this common >> practice? >> >> - >> > > Sounds like a good use of URPF. > > > ------------------------------ Message: 5 Date: Wed, 16 Jun 2010 23:26:30 -0700 From: John Todd <jtodd(a)loligo.com> Subject: AT&T's blue network SMS<->SMTP off the air To: nanog(a)nanog.org Message-ID: <7A699AC1-EF4E-4731-8D81-FAEDC3CE1C01(a)loligo.com> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes To those of you who may rely upon AT&T to deliver your email-to-SMS messages for monitoring: some of you may be currently out of luck. I would just send this to the "outages(a)puck.nether.net" list, but it does seem to be a meta-network failure in that for better or worse many of us use SMS as a method to monitor outages, so this perhaps moves it up a notch in the importance hierarchy enough to warrant a NANOG post. I am experiencing failures on my email transmissions to my older "blue" (aka: Cingular) AT&T devices at the moment, for both incoming and outgoing. Many of you may be using older "blue" cards in your NOC phones, SMS gateway devices, or perhaps even your personal mobile devices for those of you who still live in the dark ages of phones that aren't [2.5,3,4,x]G capable. I am unable to diagnose the problems fully, but at least some (if not all) of the SMS-to-email gateway failures are due to mmode.com's MX hosts (in the "airdata.com" zone) being unreachable due to absence of functioning authoritative resolvers for that zone, and possibly other failures as well. This appears to be causing "550 Access Denied" messages being returned to my mobile devices that are sending to email addresses, and mail spooling on my Internet SMTP hosts that are trying to send to the "NPAxxxyyyy(a)mmode.com" addresses for SMTP-to-SMS relay. There is a rumor that this is NOT related to the deactivation of the "downloads" components of the blue network on the 15th, but I suspect that someone just decided to pull the plug on everything. Reading to the end of the thread below, there is someone who states AT&T claims it will be back online by the evening of the 17th at the surprisingly accurate time of 9:55 PM (timezone unstated.) More speculation: http://forums.wireless.att.com/t5/mMode/URGENT-mmode-down-again-Their-mta01… I don't know if this is causing problems with anyone using TAP interfaces, or with any of AT&T's other SMTP<->SMS gateway services like @txt.att.net. SMS, and mobile devices in general, are a single point of failure for contacting on-call staff for various problems - perhaps it's time to insist that everyone carries two mobile devices, on different frequency and technology platforms, with different carriers, and split messages to both due to the anecdotally increasing failure rates of mobile networks. Conspiracy theories of how collusive unreliability would increase ARPU across the board for all carriers would be interesting to hear... but not in this forum, I suspect. :-) JT ------------------------------ Message: 6 Date: Thu, 17 Jun 2010 10:31:57 +0200 From: Lindqvist Kurt Erik <kurtis(a)kurtis.pp.se> Subject: AAAA being added for i.root-servers.net To: NANOG list <nanog(a)nanog.org> Message-ID: <E85117CB-7A03-488E-A8DB-A8764A5C3CD1(a)kurtis.pp.se> Content-Type: text/plain; charset="iso-8859-1" All, This is to inform you that, we (Netnod/Autonomica, operators of i.root-servers.net) have been notified by IANA that on our request an AAAA record will be added to the root-zone with serial number 2010061700. Best regards, - kurtis - --- Kurt Erik Lindqvist, CEO kurtis(a)netnod.se, Direct: +46-8-562 860 11, Switch: +46-8-562 860 00 Please note our new address: Franz?ngatan 5 | SE-112 51 Stockholm | Sweden

1 0