August 2010 - Test - lists.nanog.org

Looking for suggestions for an internet content filtering appliance
by Frank Bulk - iName.com 23 Aug '10

23 Aug '10

We offer an optional internet content filtering service to our residential and business customers using M86's appliance (http://www.m86security.com/products/web_security/m86-web-filtering-reportin g-suite.asp). I've been in conversation with them since Q1 regards IPv6 support, but the update I received today was that IPv6 support won't be available until middle to late next year. That's not ideal, because the local college is a significant user and they started with IPv6 this summer. College students can easily bypass content filtering by using the IPv6 version of the site (i.e. http://www.playboy.com.sixxs.org) Wondering if anyone can point me to a similar appliance. I know that Barracuda has such an appliance but it has one limitation I don't like, and that Fortinet and Ironport have more expensive products. It must be able to operate in pass-by/SPAN mode, not inline, and handle traffic rates up to 1 Gbps. We currently move 400+ Mbps "by" it and internet usage only goes up. Thanks in advance for any suggestions you have. Kind regards, Frank

5 5

Re: PacketShader
by William Pitcock 23 Aug '10

23 Aug '10

Vyatta's commercial products (the bundles with OS+Hardware) come with adequate support in my experience. William (Sorry for topposting. The android email experience is depressingly lacking.) Andrew Kirch <trelane(a)trelane.net> wrote: > On 8/23/2010 1:17 PM, Joel Jaeggli wrote: >> What it really comes down to is packets per watt or packets per dollar, >> if it's cheaper to do it this way then people will, if not BFD. > >I disagree here. Core routing isn't purchased based on cost, it's >purchased based on support. People have not adopted Vayetta, or >Mikrotik or many of the other small routing platforms which are in fact >MUCH cheaper than the bridge or the tree (cisco or juniper), and the >reason is simply support. > >If my router breaks beyond my ability to fix it I have a certified >engineer (of some value or other) at my site with parts to fix it within >4 hours. This is why people go with Cisco and Juniper. It's also a >mechanism of CYA. Would we rather tell our boss that the company has >responded and dropped the replacement part in the mail, or that a >technician from the router supplier is on their way and will be here >very shortly, and ooh, by the way, you did recommend redundant hardware >when the piece that broke was purchased, and it was available at a discount. > >Andrew >

1 0

BCP38 exceptions for RFC1918 space
by Florian Weimer 23 Aug '10

23 Aug '10

What's the current consensus on exempting private network space from source address validation? Is it recommended? Discouraged? (One argument in favor of exceptions is that it makes PMTUD work if transfer networks use private address space.)

12 18

Re: Other NOGs around the world?
by MARLON BORBA 23 Aug '10

23 Aug '10

Brazil's GTER (portuguese acronym for Network Operation and Engineering Workgroup). Exclusively in Brazilian Portuguese. http://gter.nic.br Next national meeting scheduled for November 25-27. Abraços, Marlon Borba, CISSP, APC DataCenter Associate Técnico Judiciário · Segurança da Informação IPv6 Evangelist · Moreq-Jus Evangelist Comissão Local de Resposta a Incidentes - CLRI TRF 3 Região (11) 3012-2030 (VoIP) -- Você já elaborou seu PLANO DE CONTINUIDADE DE NEGÓCIOS? -- >>> Pierre-Yves Maunier 22/08/10 20:15 >>> 2010/8/22 Rogelio > What other "network operator groups" are there around the world (besides > NANOG)? [...]

2 1

Other NOGs around the world?
by Rogelio 22 Aug '10

22 Aug '10

What other "network operator groups" are there around the world (besides NANOG)? (I'd like to follow them to see what types of issues they see in their countries)

18 17

diffrence between two bgp router router:
by piotr.1234＠interia.pl 22 Aug '10

22 Aug '10

Hi I try to compare two routers to new DC: Juniper mx240/480 with card "R" and Foundry NetIron XMR 8/16000. There is big diffrence in price. I don't know Foundry router's so it's hard to me to compare this two routers. Someone has expierence with both ? configuration Foundry: NI-XMR-16-AC NI-XMR-10Gx4 NI-XMR-1Gx20-SFP and Juniper: MX240BASE-AC-HIGH DPCE-R-4XGE-XFP DPCE-R-40GE-SFP thx for help Piotr ---------------------------------------------------------------------- Teraz w PZU, kupując AC, otrzymujesz 10% zniżki na OC http://linkint.pl/f27de

1 0

Calculating Cost
by Kasper Adel 22 Aug '10

22 Aug '10

Hello everyone, How would you calculate the cost of a network outage, specifically if its related to a software bug or a misconfiguration. Suppose that this could have been avoided by testing in a lab before deployment, how can i calculate that too? Unicast replies are welcomed. Cheerio, Kim

2 1

iPad apps tested at cable companies
by Rogelio 22 Aug '10

22 Aug '10

A lot of cable operators I'm working seem to be doing a lot with the iPad (particularly apps that control TV programming). Is anyone else seeing a lot of this? (Wish I could find a URL of what I was looking at, but can't find anything)

2 1

IPv6 PMTUD and OS-X
by Franck Martin 21 Aug '10

21 Aug '10

I'm trying to debug a pesky PMTUD issue with IPv6 on Mac OS-X 10.6. It happens only from home, on wireless, when connected to a mac aiport that does an automatic tunnel (teredo) to IPv6 backbone. There are IPv6 web site that I cannot browse until I lower the MTU to 1400. My Linux desktop in similar config works fine... With tracepath6, I see one end of the tunnel tells me MTU should be 1280, that's using linux tools. On mac, tracepath6 does not seem to exist, and I don't know what tool to use... I have seen scamper, but no binary... I have used wireshark (on mac) to detect the PTB packet, but don't see it either... I have not compared with my linux box... I'm doing this testing on the side, slowly because it is fun to try to understand what's wrong here... and I wonder if others have had similar issues... May be not fully on topic, but to bring it back to topic see this presentation: http://www.ripe.net/ripe/meetings/ripe-60/presentations/Stasiewicz-Measurem… Which states the PMTUD failure rate on IPv6 is about 1.9%

3 4

BGP Update Report
by cidr-report＠potaroo.net 20 Aug '10

20 Aug '10

BGP Update Report Interval: 12-Aug-10 -to- 19-Aug-10 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS3303 26875 2.2% 144.5 -- SWISSCOM Swisscom (Switzerland) Ltd 2 - AS3464 26141 2.2% 2010.8 -- ASC-NET - Alabama Supercomputer Network 3 - AS7552 22624 1.9% 28.1 -- VIETEL-AS-AP Vietel Corporation 4 - AS21332 21803 1.8% 427.5 -- NTC-AS JSC "NTC" (New Telephone Company) 5 - AS7018 17719 1.5% 5.4 -- ATT-INTERNET4 - AT&T WorldNet Services 6 - AS5416 16956 1.4% 144.9 -- BATELCO-BH 7 - AS5536 14238 1.2% 135.6 -- Internet-Egypt 8 - AS45464 12413 1.0% 326.7 -- NEXTWEB-AS-AP Room 201, TGU Bldg 9 - AS3816 11661 1.0% 28.0 -- COLOMBIA TELECOMUNICACIONES S.A. ESP 10 - AS11351 11526 0.9% 36.2 -- RR-NYSREGION-ASN-01 - Road Runner HoldCo LLC 11 - AS32528 10734 0.9% 2683.5 -- ABBOTT Abbot Labs 12 - AS35931 10633 0.9% 3544.3 -- ARCHIPELAGO - ARCHIPELAGO HOLDINGS INC 13 - AS8452 10213 0.8% 15.2 -- TEDATA TEDATA 14 - AS10474 10205 0.8% 275.8 -- NETACTIVE 15 - AS6503 10190 0.8% 9.6 -- Axtel, S.A.B. de C. V. 16 - AS8151 9378 0.8% 18.1 -- Uninet S.A. de C.V. 17 - AS31204 8006 0.7% 307.9 -- SUNCOMMUNICATIONS-AS JV "Sun Communications" Autonomous System 18 - AS21017 7945 0.7% 794.5 -- VSI-AS VSI AS 19 - AS5800 7078 0.6% 37.9 -- DNIC-ASBLK-05800-06055 - DoD Network Information Center 20 - AS17894 5987 0.5% 285.1 -- APMI-AS-AP AyalaPort Makati, Inc. / Data Center Operator TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS35931 10633 0.9% 3544.3 -- ARCHIPELAGO - ARCHIPELAGO HOLDINGS INC 2 - AS32528 10734 0.9% 2683.5 -- ABBOTT Abbot Labs 3 - AS3464 26141 2.2% 2010.8 -- ASC-NET - Alabama Supercomputer Network 4 - AS3 1788 0.1% 181.0 -- PREDATOR-AS LTD Predatori 5 - AS2472 3361 0.3% 1680.5 -- FR-DOM-GUYANE Guyane Francaise 6 - AS53532 1528 0.1% 1528.0 -- KINGMETALS - King Architectural Metals 7 - AS48565 1390 0.1% 1390.0 -- POCZTAPOLSKA-AS Poczta Polska Spolka Akcyjna 8 - AS21184 3806 0.3% 1268.7 -- FARPOST Farpost Int. 9 - AS11196 1127 0.1% 1127.0 -- NESTLE-USA - Nestle USA 10 - AS26615 993 0.1% 993.0 -- Tim Celular S.A. 11 - AS47144 822 0.1% 822.0 -- WELLNET-AS LLC "WellNet" 12 - AS53083 802 0.1% 802.0 -- 13 - AS21017 7945 0.7% 794.5 -- VSI-AS VSI AS 14 - AS11613 786 0.1% 786.0 -- U-SAVE - U-Save Auto Rental of America, Inc. 15 - AS50010 1353 0.1% 676.5 -- NAWRAS-AS Omani Qatari Telecommunications Company SAOC 16 - AS16861 458 0.0% 458.0 -- REVELEX - Revelex.com 17 - AS9556 1714 0.1% 428.5 -- ADAM-AS-AP Adam Internet Pty Ltd 18 - AS21332 21803 1.8% 427.5 -- NTC-AS JSC "NTC" (New Telephone Company) 19 - AS26383 2986 0.2% 426.6 -- CHILITECH - CHILITECH INTERNET SOLUTIONS, INC. 20 - AS45936 345 0.0% 345.0 -- AE-MANILA-AS-AP Affinity Express TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 129.66.128.0/17 13061 1.0% AS3464 -- ASC-NET - Alabama Supercomputer Network 2 - 129.66.0.0/17 13058 1.0% AS3464 -- ASC-NET - Alabama Supercomputer Network 3 - 196.2.16.0/24 10063 0.8% AS10474 -- NETACTIVE 4 - 63.211.68.0/22 6107 0.5% AS35931 -- ARCHIPELAGO - ARCHIPELAGO HOLDINGS INC 5 - 190.65.228.0/22 5588 0.4% AS3816 -- COLOMBIA TELECOMUNICACIONES S.A. ESP 6 - 130.36.34.0/24 5355 0.4% AS32528 -- ABBOTT Abbot Labs 7 - 130.36.35.0/24 5352 0.4% AS32528 -- ABBOTT Abbot Labs 8 - 148.204.141.0/24 5100 0.4% AS8151 -- Uninet S.A. de C.V. 9 - 216.126.136.0/22 4768 0.4% AS6316 -- AS-PAETEC-NET - PaeTec Communications, Inc. 10 - 198.140.43.0/24 4519 0.3% AS35931 -- ARCHIPELAGO - ARCHIPELAGO HOLDINGS INC 11 - 84.255.152.0/24 4066 0.3% AS5416 -- BATELCO-BH 12 - 84.255.146.0/24 4061 0.3% AS5416 -- BATELCO-BH 13 - 84.255.145.0/24 4060 0.3% AS5416 -- BATELCO-BH 14 - 84.255.147.0/24 4057 0.3% AS5416 -- BATELCO-BH 15 - 95.32.128.0/18 3954 0.3% AS21017 -- VSI-AS VSI AS 16 - 95.32.192.0/18 3951 0.3% AS21017 -- VSI-AS VSI AS 17 - 203.28.157.0/24 3419 0.3% AS4802 -- ASN-IINET iiNet Limited 18 - 93.81.204.0/23 3050 0.2% AS8402 -- CORBINA-AS Corbina Telecom 19 - 206.184.16.0/24 3036 0.2% AS174 -- COGENT Cogent/PSI 20 - 202.92.235.0/24 2211 0.2% AS9498 -- BBIL-AP BHARTI Airtel Ltd. Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0